To be clear, we'll need to know the review links for each patch so we can incorporate them into the public advisory. The sequence on Tuesday will be:
1. Switch bug from Private Security to Public Security
2. Push updated commits for openstack/nova into Gerrit for final review/approval
3. Confirm that preliminary CI jobs are succeeding and approve changes
4. Push commit to openstack/ossa with advisory including links to fixes in review
5. Distribute advisory to appropriate public mailing lists
6. Confirm fixes have merged and submit stable point release requests
To be clear, we'll need to know the review links for each patch so we can incorporate them into the public advisory. The sequence on Tuesday will be:
1. Switch bug from Private Security to Public Security
2. Push updated commits for openstack/nova into Gerrit for final review/approval
3. Confirm that preliminary CI jobs are succeeding and approve changes
4. Push commit to openstack/ossa with advisory including links to fixes in review
5. Distribute advisory to appropriate public mailing lists
6. Confirm fixes have merged and submit stable point release requests