[openstack-dev] [all] [stable] No longer doing stable point releases

Jeremy Stanley fungi at yuggoth.org
Fri May 29 16:24:34 UTC 2015


On 2015-05-29 17:50:01 +0200 (+0200), Ihar Hrachyshka wrote:
[...]
> if we attempt to fix a security issue that has a backwards
> incompatible fix, then we are forced in introducing a new
> configuration option to opt-in the new secure world.
[...]

To my knowledge that's how we've handled these in the past anyway,
accompanied by publication of a security note (not advisory)
suggesting the steps necessary to enable the breaking change when
opting into the bug fix.
-- 
Jeremy Stanley



More information about the OpenStack-dev mailing list