Comment 8 for bug 2058138

Thanks. Let's work on this in public in that case. Please get fixes for master and stable/2024.1 pushed to Gerrit and reviewing/merging those prioritized so we can have a new RC and not release with this. Separately, we'll need backported fixes at least as far as stable/zed (backports to unmaintained/.* branches are optional at your discretion). Once the necessary backports are proposed I can put together a security advisory for this.