Hello Chris,

> Could you please update the SRU test case to include testing this?
Testing should ensure the user-visible behaviour is fixed (ie: that the
daemon perf counters are exposed) rather than an implementation detail.

We are already testing this. Our functional tests include fetching the
perf counters (specifically, we test this for the ceph-mon charm, I can
give out more details if needed).

> We should certainly notify security that a new parser library is being
used; they will need to be able to track any CVEs it receives. This
might require packaging changes, I'm not sure what process they will
request.

OK, I understand. However, this isn't really a "new" library in the
sense that Boost.JSON is a part of the Ubuntu packages starting on noble
(which is, coincidentally, why this patch isn't needed on those
versions).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2100625

Title:
  [SRU] ceph 17.2.9

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/2100625/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to