Comment 7 for bug 1354208

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Catalog replacement allows reading config

I suppose whether we release an advisory depends on whether or not anyone does the work to propose backportable fixes to supported releases. I agree that if we do patch/work around this in stable for safety reasons, then an OSSA is warranted. In the meantime hopefully someone is making sure it's properly ripped out of master so we don't have to carry a workaround past Icehouse.