Comment 21 for bug 1606500

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: Heat: template source URL allows network port scan

If we do an embargoed disclosure, then we could submit the patch around next week or the week after (most openstacker are still recovering from the summit I guess).

Though this doesn't seems like a critical bug and it could probably skip the embargoed disclosure part. In that case we should at least wait for the CVE assignment before making it public so that we can fast-track the advisory.

Though?