Comment 20 for bug 1855080

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Credentials API allows listing and retrieving of all users credentials

Just to get confirmation, this bug was only introduced as of Stein, right? It's not present in Rocky or earlier?

Gage, assuming the above is true, and if nobody has any other concerns about your proposed impact description in comment #17, you can probably go ahead and request a CVE assignment for this so we can proceed with the advisory, since the fix has already merged to master and it looks like stable backports are in the process of getting proposed.