)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"c321a09141b57c7ed59c1be3056ea2b3ff803667","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"208ffbbd_29e23481","updated":"2026-10-21 17:41:10.000000000","message":"Looks like we have a few of these pending.  Minor thing noted inline, but otherwise the HTML builds correctly and the note reads well.  Only changes will be the date and possibly the note number (not sure how close the others are to merging).","commit_id":"248d917a75d5a9e9aff30b957db2fc26955706e0"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"bff8e9fcb754c6319bcc5d0dff86453b583cdfd8","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"470863cc_cda4023e","updated":"2026-10-21 17:53:39.000000000","message":"Thank you for review Rosmaita, made changes as per suggestion!!","commit_id":"248d917a75d5a9e9aff30b957db2fc26955706e0"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"fe79e5e912abd8ecdf9c4c94696facfcf239c0aa","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"4cc82059_8001b5e7","updated":"2026-10-22 06:12:42.000000000","message":"Hi Jay, Thank you for review, made changes as per suggestion.","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"1b8a4f8bee39db3099f705fb68c1a33b5fcd8c6b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"45855cd4_8403354e","updated":"2026-10-21 19:54:47.000000000","message":"I think this is ready to go as soon as the fix is available.","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"4c7f744e85eecee298b25277ea2467bd928b090d","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":2,"id":"3b589249_a672e3d4","updated":"2026-10-21 21:57:16.000000000","message":"This is OK to publish, but there is room for improvement.","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"fe79e5e912abd8ecdf9c4c94696facfcf239c0aa","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"78521188_efbbdf63","in_reply_to":"3b589249_a672e3d4","updated":"2026-10-22 06:12:42.000000000","message":"Done","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"2a63397603e208f1278068da7742ea8a5003b55c","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"1f36b7e1_ff455486","updated":"2026-10-22 13:29:26.000000000","message":"This looks ready to go.  Please update to ossn-0111 and today\u0027s date.","commit_id":"5683b11c682a99cae2d5d8cddce22a79aba27843"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"4e1e2fb7f0a5c8f1903c6fe18d29aeaa3cc2c190","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"34a19464_b8b4fdb2","updated":"2026-10-22 13:46:43.000000000","message":"Revision LGTM.","commit_id":"74f223c8c2060f61ca98c1f9dc9a19956d95ea03"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"90708cc42528966f2e59b56d0ea09b0cab90833e","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":4,"id":"b45e740a_f5eba6ea","updated":"2026-10-22 13:47:49.000000000","message":"Thanks for doing this! We\u0027ll get it announced.","commit_id":"74f223c8c2060f61ca98c1f9dc9a19956d95ea03"}],"security-notes/OSSN-0115.yaml":[{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"c321a09141b57c7ed59c1be3056ea2b3ff803667","unresolved":true,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":"  The LUKS passphrase itself is not logged."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"  If the passphrase is correct, the logged master-key candidate can decrypt"},{"line_number":33,"context_line":"  the LUKSv1 image. Anyone with access to the logs and a copy of the"},{"line_number":34,"context_line":"  encrypted image may therefore recover its plaintext contents."},{"line_number":35,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"70d046be_4325b899","line":32,"range":{"start_line":32,"start_character":2,"end_line":32,"end_character":31},"updated":"2026-10-21 17:41:10.000000000","message":"Maybe say \"When the passphrase passed to the LUKS inspector is correct, the master-key candidate generated by the inspector (and logged) can decrypt the LUKSv1 image.\"","commit_id":"248d917a75d5a9e9aff30b957db2fc26955706e0"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"bff8e9fcb754c6319bcc5d0dff86453b583cdfd8","unresolved":false,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":"  The LUKS passphrase itself is not logged."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"  If the passphrase is correct, the logged master-key candidate can decrypt"},{"line_number":33,"context_line":"  the LUKSv1 image. Anyone with access to the logs and a copy of the"},{"line_number":34,"context_line":"  encrypted image may therefore recover its plaintext contents."},{"line_number":35,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"8357e604_a6e1c451","line":32,"range":{"start_line":32,"start_character":2,"end_line":32,"end_character":31},"in_reply_to":"70d046be_4325b899","updated":"2026-10-21 17:53:39.000000000","message":"Done","commit_id":"248d917a75d5a9e9aff30b957db2fc26955706e0"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"4c7f744e85eecee298b25277ea2467bd928b090d","unresolved":true,"context_lines":[{"line_number":37,"context_line":"  This issue is classified as B3 in the OpenStack Vulnerability Management"},{"line_number":38,"context_line":"  Team report taxonomy because exploitation requires DEBUG logging to be"},{"line_number":39,"context_line":"  enabled and requires access to retained logs, in addition to access to the"},{"line_number":40,"context_line":"  encrypted image."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"recommended-actions: |"},{"line_number":43,"context_line":"  Upgrade to a release containing the fix."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"b73daa33_b148e068","line":40,"updated":"2026-10-21 21:57:16.000000000","message":"I think we could omit this paragraph entirely.","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"fe79e5e912abd8ecdf9c4c94696facfcf239c0aa","unresolved":false,"context_lines":[{"line_number":37,"context_line":"  This issue is classified as B3 in the OpenStack Vulnerability Management"},{"line_number":38,"context_line":"  Team report taxonomy because exploitation requires DEBUG logging to be"},{"line_number":39,"context_line":"  enabled and requires access to retained logs, in addition to access to the"},{"line_number":40,"context_line":"  encrypted image."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"recommended-actions: |"},{"line_number":43,"context_line":"  Upgrade to a release containing the fix."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"925eb3fa_b5981f7e","line":40,"in_reply_to":"b73daa33_b148e068","updated":"2026-10-22 06:12:42.000000000","message":"Done","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"4c7f744e85eecee298b25277ea2467bd928b090d","unresolved":true,"context_lines":[{"line_number":43,"context_line":"  Upgrade to a release containing the fix."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"  If upgrading is not immediately possible, disable DEBUG logging for"},{"line_number":46,"context_line":"  ``oslo_utils.imageutils._luks`` until upgraded."},{"line_number":47,"context_line":""},{"line_number":48,"context_line":"  Restrict access to logs, log archives, centralized logging systems, and"},{"line_number":49,"context_line":"  backups."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"5e71b9b2_31323b96","line":46,"updated":"2026-10-21 21:57:16.000000000","message":"There\u0027s a way to do this in logconfig that operators can access, yeah? If so, it\u0027d be nice to be specific here so operators have a workaround that doesn\u0027t require backporting oslo.utils patches to their cloud.","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"fe79e5e912abd8ecdf9c4c94696facfcf239c0aa","unresolved":false,"context_lines":[{"line_number":43,"context_line":"  Upgrade to a release containing the fix."},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"  If upgrading is not immediately possible, disable DEBUG logging for"},{"line_number":46,"context_line":"  ``oslo_utils.imageutils._luks`` until upgraded."},{"line_number":47,"context_line":""},{"line_number":48,"context_line":"  Restrict access to logs, log archives, centralized logging systems, and"},{"line_number":49,"context_line":"  backups."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"c0feddc1_1e8c1481","line":46,"in_reply_to":"5e71b9b2_31323b96","updated":"2026-10-22 06:12:42.000000000","message":"Done","commit_id":"22de961e1cf32fafa9bcdb983421d6717b394cf7"}]}