)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"751cefa3c177519920073cc7e421a0a591b97369","unresolved":false,"context_lines":[{"line_number":7,"context_line":"OSSA-2024-004; Ironic CVE-2024-47211"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"This is the documentation for OSSA-2024-004, CVE-2024-47211, a"},{"line_number":10,"context_line":"vulnerability in Ironic."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Change-Id: Icf24aeae9e2bc9f92ddcce6129f7fde2f2516063"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"250bd811_92103489","line":10,"updated":"2024-10-03 15:06:22.000000000","message":"Should add a Closes-Bug in here so the LP bug will at least get a notification when this change merges.","commit_id":"601c1ca6d56516b95062f5c6648b0cd10f071f77"}],"ossa/OSSA-2024-004.yaml":[{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"751cefa3c177519920073cc7e421a0a591b97369","unresolved":false,"context_lines":[{"line_number":42,"context_line":"  links:"},{"line_number":43,"context_line":"    - https://launchpad.net/bugs/2076289"},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"reviews:"},{"line_number":46,"context_line":"  2024.2/dalmatian(ironic):"},{"line_number":47,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/931294"},{"line_number":48,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"fda26083_1eee91b0","line":45,"updated":"2024-10-03 15:06:22.000000000","message":"We should also include the master branch (Epoxy cycle) change link.","commit_id":"601c1ca6d56516b95062f5c6648b0cd10f071f77"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"751cefa3c177519920073cc7e421a0a591b97369","unresolved":false,"context_lines":[{"line_number":81,"context_line":""},{"line_number":82,"context_line":"notes:"},{"line_number":83,"context_line":"  - No other Ironic-adjacent projects, including Ironic-Python-Agent, require"},{"line_number":84,"context_line":"    patching to resolve this vulnerability."},{"line_number":85,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":2,"id":"89fb00f4_186a78fe","line":84,"updated":"2024-10-03 15:06:22.000000000","message":"We normally include a note stating that the patches for unmaintained (and in this case bugfix too) branches are provided on a best effort basis and that there will be no point releases, like you did in https://security.openstack.org/ossa/OSSA-2024-003.html#notes for example.","commit_id":"601c1ca6d56516b95062f5c6648b0cd10f071f77"}]}