To reiterate Matt's comment #80, "no one has said they know how to demonstrate a vulnerability in nova for this." If someone steps up to fix the underlying bug, I doubt there will be any objection, but the OpenStack Vulnerability Management Team won't issue any official advisory statement without documented impact.
To reiterate Matt's comment #80, "no one has said they know how to demonstrate a vulnerability in nova for this." If someone steps up to fix the underlying bug, I doubt there will be any objection, but the OpenStack Vulnerability Management Team won't issue any official advisory statement without documented impact.