On 11/6/26 1:05 PM, Adam D. Barratt wrote:
Control: tags -1 + moreinfo
On Tue, 2026-10-13 at 11:58 +0200, Thomas Goirand wrote:
I would like to address the security issue OSSN-0112 / GHSA-cjq3-
6hm7-q33w.
The Github announce is here:
https://github.com/gnocchixyz/gnocchi/security/advisories/GHSA-cjq3-6hm7-q33w
+ - OSSN-0112_Enforce-update-resource-policy-metric-creation.patch
+ - CVE-2018-11774_OSSN-0112_Enforce-update-resource-policy-metric-c....patch
CVE-2018-11774 appears to be associated with Apache VCL. Why is it
mentioned in the changelog here?
Regards,
Adam
Hi Adam,
Thanks for the reject, FYI, I have re-uploaded with the corrected
debian/changelog.
Cheers,
Thomas Goirand (zigo)
