Comment 20 for bug 1341954

Revision history for this message
Thierry Carrez (ttx) wrote :

So... this could easily be considered a vulnerability in suds rather than in OpenStack, in which case it would not be OSSA territory. In particular, if most distros consider it a vulnerability in suds, we can workaround the issue in master (and even backport the fix) to care for vulnerable suds, but would not issue an OSSA about it. We could issue an OSSN about it though.