Comment 4 for bug 1919357

It looks like the last of the backports for https://review.opendev.org/q/Ia5130d411706bf7e1c983156158011a3bc6d5cd6 will merge soon, is there a security note draft somewhere? I would say given the pace at which we assign OSSN IDs, just go ahead and write it in https://wiki.openstack.org/w/index.php?title=OSSN/OSSN-0089&action=edit and we can announce it as OSSN-0089 once it's in good shape.