Comment 59 for bug 2030976

I still haven't requested a CVE assignment for this because it's not yet clear to me what the end state is supposed to look like. Currently the fixed oslo.messaging versions are still not used in upper constraints, indicating there will either be further changes to oslo.messaging or to all services the fix is currently causing regressions in.

What's the current plan for a path forward here?