)]}'
{"security-notes/OSSN-0082":[{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"528817ae004a4acf44a6d0d0418118326bb2c32c","unresolved":false,"context_lines":[{"line_number":27,"context_line":""},{"line_number":28,"context_line":"### Recommended Actions ###"},{"line_number":29,"context_line":"Operators should update the dnsmasq service using the affected nodes operating"},{"line_number":30,"context_line":"systems packaging tools to a version greater then 2.78."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"### Contacts / References ###"},{"line_number":33,"context_line":"Author: Luke Hinds \u003clhinds@redhat.com\u003e"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"7f515b1d_e0397e3f","line":30,"updated":"2017-10-03 17:27:59.000000000","message":"(note I was commenting on the text, not disagreeing with Brian... his comment didn\u0027t display for me until I had submitted mine)","commit_id":"3bbe67ac556b34d004f2885d483cdef92d226a05"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"74788662f25f14dcc06e1855fcea2ac3ba9478ac","unresolved":false,"context_lines":[{"line_number":27,"context_line":""},{"line_number":28,"context_line":"### Recommended Actions ###"},{"line_number":29,"context_line":"Operators should update the dnsmasq service using the affected nodes operating"},{"line_number":30,"context_line":"systems packaging tools to a version greater then 2.78."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"### Contacts / References ###"},{"line_number":33,"context_line":"Author: Luke Hinds \u003clhinds@redhat.com\u003e"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"7f515b1d_7b74239d","line":30,"updated":"2017-10-03 17:49:58.000000000","message":"It\u0027s probably a style question for OSSN in general when talking about fixes in dependencies. I tend to agree that something like \"version 2.78 and later, or a distribution packaged version carrying backports for these vulnerabilities\" would cover it, if perhaps somewhat wordily.","commit_id":"3bbe67ac556b34d004f2885d483cdef92d226a05"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"a4e08bb60f903799cf2bb0f3c26930ec2c0752b4","unresolved":false,"context_lines":[{"line_number":27,"context_line":""},{"line_number":28,"context_line":"### Recommended Actions ###"},{"line_number":29,"context_line":"Operators should update the dnsmasq service using the affected nodes operating"},{"line_number":30,"context_line":"systems packaging tools to a version greater then 2.78."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"### Contacts / References ###"},{"line_number":33,"context_line":"Author: Luke Hinds \u003clhinds@redhat.com\u003e"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"7f515b1d_e0f4de89","line":30,"updated":"2017-10-03 17:26:25.000000000","message":"Technically incorrect: they should upgrade to 2.78 or later. 2.78 is the _fixed_ version, not the affected version (the rest of the OSSN states it correctly).","commit_id":"3bbe67ac556b34d004f2885d483cdef92d226a05"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"cd5421a5fd19be09b8f2f2ad0d0e3738861350a8","unresolved":false,"context_lines":[{"line_number":27,"context_line":""},{"line_number":28,"context_line":"### Recommended Actions ###"},{"line_number":29,"context_line":"Operators should update the dnsmasq service using the affected nodes operating"},{"line_number":30,"context_line":"systems packaging tools to a version greater then 2.78."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"### Contacts / References ###"},{"line_number":33,"context_line":"Author: Luke Hinds \u003clhinds@redhat.com\u003e"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"7f515b1d_c061e2d5","line":30,"range":{"start_line":30,"start_character":45,"end_line":30,"end_character":49},"updated":"2017-10-03 17:07:11.000000000","message":"s/than\n\nAlso, should be \"greater than or equal to 2.78\"\n\nBut the only problem is that the distros have back-ported these fixes to older versions, so strictly going to 2.78 isn\u0027t necessarily required, users should really just refer to recommendations from their distro suppliers, right?","commit_id":"3bbe67ac556b34d004f2885d483cdef92d226a05"},{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"012d11cc577c2dcb8d463a56207d468396a09cea","unresolved":false,"context_lines":[{"line_number":27,"context_line":""},{"line_number":28,"context_line":"### Recommended Actions ###"},{"line_number":29,"context_line":"Operators should update the dnsmasq service using the affected nodes operating"},{"line_number":30,"context_line":"systems packaging tools to a version greater then 2.78."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"### Contacts / References ###"},{"line_number":33,"context_line":"Author: Luke Hinds \u003clhinds@redhat.com\u003e"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"7f515b1d_409df208","line":30,"in_reply_to":"7f515b1d_e0397e3f","updated":"2017-10-03 17:35:42.000000000","message":"I actually like \"version 2.78 or greater\" better.\n\nStill an open question on my first comment since I\u0027m running a version of 2.75 that has all the fixes straight from my distro\u0027s repo.","commit_id":"3bbe67ac556b34d004f2885d483cdef92d226a05"}]}