On 11/6/26 1:05 PM, Adam D. Barratt wrote:
Control: tags -1 + moreinfo
On Tue, 2026-10-13 at 11:58 +0200, Thomas Goirand wrote:
I would like to address the security issue OSSN-0112 / GHSA-cjq3-
6hm7-q33w.
The Github announce is here:
https://github.com/gnocchixyz/gnocchi/security/advisories/GHSA-cjq3-6hm7-q33w
+ - OSSN-0112_Enforce-update-resource-policy-metric-creation.patch
+ - CVE-2018-11774_OSSN-0112_Enforce-update-resource-policy-metric-c....patch
CVE-2018-11774 appears to be associated with Apache VCL. Why is it
mentioned in the changelog here?
Regards,
Adam
Hi,
I'm sorry for this, my mistake. I have re-uploaded Gnocchi as
4.6.5-1+deb13u2, though probably it'd be better if you reject both
4.6.5-1+deb13u1 and 4.6.5-1+deb13u2, so I can re-upload 4.6.5-1+deb13u1
cleanly. Let me know which way you choose.
Cheers,
Thomas Goirand (zigo)
