Based on above comment and other related issue (bug 1549483 and bug 1555590), I'd like to handle image-location issues as class B2 type of bug according to VMT taxonomy ( http://security.openstack.org/vmt-process.html#incident-report-taxonomy ).
I'm switching the OSSA task status to opinion until a Security Note (OSSN) is defined. However if a backportable fix can be implemented, then we can revert that decision and issue an advisory.
Based on above comment and other related issue (bug 1549483 and bug 1555590), I'd like to handle image-location issues as class B2 type of bug according to VMT taxonomy ( http:// security. openstack. org/vmt- process. html#incident- report- taxonomy ).
I'm switching the OSSA task status to opinion until a Security Note (OSSN) is defined.
However if a backportable fix can be implemented, then we can revert that decision and issue an advisory.