[Openstack-security] OSSN required?

Nathan Kinder nkinder at redhat.com
Fri Jan 31 03:44:16 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/30/2014 07:34 PM, Kurt Seifried wrote:
> On 01/30/2014 06:37 PM, Bryan D. Payne wrote:
>> For me, if it is still supported today then we should issue the 
>> OSSA. -bryan
> 
> 
> My understanding is that it requires a code change to fix so to me 
> that sounds like an OSSN.
> 
> In my mind at least OSSN=code change, OSSA=config/docs change. Is
> that correct?

You have it reversed.  That said, an issue described in an OSSN might
still trigger a code change, though there is usually a workaround that
the OSSN recommends.

> 
> 
> 
> _______________________________________________ Openstack-security
> mailing list Openstack-security at lists.openstack.org 
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJS6xwIAAoJEJa+6E7Ri+EVfN4H/i9mxYM5bB+dycJYUEo3KPtV
Ah3feaZoLCWIZm0LAW7/Pv5TY2dkIG4NgBWYAypO7YKhupzFZBXux5FQxrnBEEFc
i0xChTG9whDDmERkZn26O6kms4owSqpygH8GBU8WR1mydsPozrrW5G1Yhs2mnIp8
HYcpJ8DHCN+RcaWlOevI5HO5nCa2AZGfT6yp0Vdg3AmB4up+aJ3gpNeBWpPIYhkP
QZkWMekU7q5NYVgWHp1taTHk3okS1JKg7Jvi8VFj6g+jvnlKkMEuAo3TpDTchC/b
62j/smcyCYuHRiLGKQlvY6bwZ8ylrxPLK75xjUufLr+3LtIRLhq35ijpWSdu3lE=
=XYqR
-----END PGP SIGNATURE-----




More information about the Openstack-security mailing list