Comment 56 for bug 1872735

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: EC2 and/or credential endpoints are not protected from a scoped context

Yes, and sorry about the tight disclosure timeline. OpenStack's VMT process recommends 3-5 "business days" between downstream stakeholder notification and publication, but with final RCs for Ussuri due on Thursday we wanted to avoid releasing with known vulnerabilities which have fixes ready. As it is, we chose Wednesday instead of Tuesday because we realized last weekend was a major holiday for much of the World.