Thank for the impact description review, I've requested a CVE with it.
Can you please also attach the backport to stable/liberty branch ? (the last patch doesn't apply with "git am")
Since Ironic doesn't have the tag yet, I would prefer if you did the disclosure. (this step: https://security.openstack.org/vmt-process.html#embargoed-disclosure ) You can reuse the following template: https://security.openstack.org/vmt-process.html#downstream-stakeholders-notification-email-private-issues
So the next step is to get someone to approve the proposed patch.
Thank for the impact description review, I've requested a CVE with it.
Can you please also attach the backport to stable/liberty branch ? (the last patch doesn't apply with "git am")
Since Ironic doesn't have the tag yet, I would prefer if you did the disclosure. (this step: https:/ /security. openstack. org/vmt- process. html#embargoed- disclosure ) /security. openstack. org/vmt- process. html#downstream -stakeholders- notification- email-private- issues
You can reuse the following template: https:/
So the next step is to get someone to approve the proposed patch.