)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"40e296306fa3cc22b58f0e843d7316330fb0990b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"50fae936_27aa4a43","updated":"2026-10-22 15:07:04.000000000","message":"Reads well, links are accurate, renders correctly into html.","commit_id":"7d5ddffb7eb955866d1caea84be01b793103b47a"}],"ossa/OSSA-2026-048.yaml":[{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"307c8e986de771f5e9dc2919732a14fe3835f2ae","unresolved":true,"context_lines":[{"line_number":13,"context_line":""},{"line_number":14,"context_line":"  However, if a user instead calls the more generic Node update API by"},{"line_number":15,"context_line":"  sending an HTTP PATCH to ``/v1/nodes/{ident}``, and includes"},{"line_number":16,"context_line":"  ``maintenance`` or ``maintenance_reason`` in the dictinoary, they can"},{"line_number":17,"context_line":"  instead trigger the ``baremetal:node:update`` policy. This may lead to"},{"line_number":18,"context_line":"  users unexpectedly having access to change the maintenance setting on"},{"line_number":19,"context_line":"  a node."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"d82c250e_5c64cb7a","line":16,"updated":"2026-10-22 14:41:47.000000000","message":"spell","commit_id":"cf0fb3b8e01be56ed7e65e1298bc5c146a809d0e"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"b6fac153c91fc7e63f557964a9a662792a32bf9f","unresolved":false,"context_lines":[{"line_number":13,"context_line":""},{"line_number":14,"context_line":"  However, if a user instead calls the more generic Node update API by"},{"line_number":15,"context_line":"  sending an HTTP PATCH to ``/v1/nodes/{ident}``, and includes"},{"line_number":16,"context_line":"  ``maintenance`` or ``maintenance_reason`` in the dictinoary, they can"},{"line_number":17,"context_line":"  instead trigger the ``baremetal:node:update`` policy. This may lead to"},{"line_number":18,"context_line":"  users unexpectedly having access to change the maintenance setting on"},{"line_number":19,"context_line":"  a node."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"b6d7a85d_42c45ea7","line":16,"in_reply_to":"d82c250e_5c64cb7a","updated":"2026-10-22 14:58:20.000000000","message":"Done","commit_id":"cf0fb3b8e01be56ed7e65e1298bc5c146a809d0e"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"709fe913991a330f337238601ebe7df439284cb0","unresolved":false,"context_lines":[{"line_number":30,"context_line":"    version: \u0027\u003e\u003d17.0.0 \u003c\u003d29.1.1, \u003e30.0.0 \u003c\u003d32.1.1, \u003e33.0.0 \u003c\u003d35.1.1, \u003e36.0.0 \u003c\u003d39.0.1\u0027"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"vulnerabilities:"},{"line_number":33,"context_line":"  - cve-id: CVE-2026-90458"},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"reporters:"},{"line_number":36,"context_line":"  - name: Tuomo Tanskanen, Metal3.io Security Team"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"d553118c_3cbfaa23","line":33,"updated":"2026-10-22 14:20:18.000000000","message":"Looks like you copy-pasted the CVE ID from OSSA-2026-047, should be CVE-2026-89419 instead as far as I can tell (seems correct in the commit message).","commit_id":"cf0fb3b8e01be56ed7e65e1298bc5c146a809d0e"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"709fe913991a330f337238601ebe7df439284cb0","unresolved":false,"context_lines":[{"line_number":44,"context_line":""},{"line_number":45,"context_line":"issues:"},{"line_number":46,"context_line":"  links:"},{"line_number":47,"context_line":"    - https://launchpad.net/bugs/2166507"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"reviews:"},{"line_number":50,"context_line":"  2027.1/indri (development):"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"ff5348e6_3fb452cf","line":47,"updated":"2026-10-22 14:20:18.000000000","message":"Wrong bug link here too (again from 047 seems like), the patches say 2166510 instead.","commit_id":"cf0fb3b8e01be56ed7e65e1298bc5c146a809d0e"}]}