)]}'
{"ossa/OSSA-2026-044.yaml":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"75a4981f4bfc51b741d22869834578f1c09dd99b","unresolved":true,"context_lines":[{"line_number":16,"context_line":"  an Authorization header containing the operator\u0027s credentials to"},{"line_number":17,"context_line":"  that host."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"  The fix adds a [deploy]/image_server_auth_hosts option allowing"},{"line_number":20,"context_line":"  operators to restrict the hosts to which credentials are sent, along"},{"line_number":21,"context_line":"  with a [deploy]/image_server_auth_permit_unknown_hosts option."},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"affected-products:"},{"line_number":24,"context_line":"  - product: ironic"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"90f55f47_3e23846b","line":21,"range":{"start_line":19,"start_character":0,"end_line":21,"end_character":64},"updated":"2026-10-07 21:07:09.000000000","message":"From the commit message to the fix:\n\n```\nAdds a new [deploy]image_server_auth_permit_unknown_hosts boolean\noption (default True). When True and image_server_auth_hosts is\nnot configured, credentials are sent to all hosts preserving\nexisting behavior.`\n```\n\nMy understanding is that these patches don\u0027t fix the issue outright and will require operator tweaks. An OSSN is the perfect vehicle for this.","commit_id":"08551771c9588354d5961c32c82f8040d1029703"}]}