| *** bauzas4 is now known as bauzas | 02:08 | |
| cardoe | Except the metadata of those packages say those CVEs are fixed. So that’s in the metadata of the vulnerability | 02:29 |
|---|---|---|
| opendevreview | Merged openstack/governance master: Appoint PTLs to Glance/Skyline/Masakari for 2027.1 https://review.opendev.org/c/openstack/governance/+/1002415 | 05:11 |
| *** bauzas0 is now known as bauzas | 07:43 | |
| fungi | well, in the case of debian the packages don't encode a list of fixed cve identifiers directly, they're usually mentioned in freeform prose within the package's changelog, but there is a separate external database that debian maintains which mentions what package versions include backported fixes corresponding to specific cve ids | 13:39 |
| fungi | (external as in out on the web) | 13:39 |
| fungi | if someone isn't using a curated distribution and backports security fixes in their own deployment manually then they should of course indicate that to their security scanner | 13:40 |
| fungi | if they're installing from source, our git repositories contain git notes which indicate the change urls of every commit, and since our security advisories link to the change urls as well, a local tool could actually check to see if the fixes are present in the history of the local checkout | 13:42 |
| fungi | i doubt there's any actual implementation of such a tool, but it would be relatively trivial to write | 13:43 |
| abhishekk | is etherpad down? | 13:54 |
| fungi | checking... | 13:55 |
| fungi | reachable for me in a browser | 13:56 |
| fungi | what behavior are you seeing? | 13:56 |
| fungi | timeout? http protocol error? something else? | 13:56 |
| abhishekk | timeout | 13:57 |
| abhishekk | back to normal now, thank you and sorry for the shout | 13:57 |
| fungi | i wonder if part of the internet briefly had no route to rackspace's dfw region | 13:58 |
| abhishekk | stcuk at loading, might be affecting only me, able to browse other sites though | 13:59 |
| fungi | i only checked the top-level page but digging deeper | 14:00 |
| fungi | i can load an arbitrary pad, is there one in particular you're having trouble with so i can test it directly? | 14:01 |
| fungi | the server itself has barely any load at all, and the database for it is local to the server so it's not going to be network problems between the server and a trove instance or anything | 14:03 |
| abhishekk | https://etherpad.opendev.org/p/2027.1-ptg-glance-planning | 14:03 |
| fungi | that loaded content for me in under a second | 14:03 |
| TheJulia | fungi: I bet so since I had interactions with gerrit randomly fail in my browser ~10m ago | 14:04 |
| abhishekk | ack, it almost take couple of minutes for me | 14:04 |
| fungi | TheJulia: gerrit is in vexxhost ca-ymq-1 region, etherpad is in rackspace classic dfw, so completely different networks in different countries, but still both in north america i guess | 14:05 |
| TheJulia | oh, then likely a huge issue hit somewhere and surely a post will appear on some mailing list shortly with details | 14:06 |
| fungi | abhishekk: keep in mind that etherpad is essentially a heavy javascript application which once loaded makes tons of rest api calls back to the server, so you might see whether your browser's javascript console is indicating any errors | 14:06 |
| abhishekk | fungi: ack, thanks for the details | 14:07 |
| fungi | my expectation is that you'll see evidence of rest api calls failing to get responses or something along those lines | 14:08 |
| fungi | also the server is dual-stack, if something is going sideways with your ipv6 routing for example, it might be that the slowness is the application or browser eventually falling back to connecting over ipv4 | 14:08 |
| abhishekk | ack | 14:16 |
| cardoe | gouthamr: https://review.opendev.org/c/openstack/neutron/+/1003430 is neutron's change to document their core review status | 15:00 |
| fungi | nice! | 15:04 |
| clarkb | looks like abhishek_'s connection to irc is having trouble too | 15:39 |
| clarkb | and oftc is run independently of opendev | 15:39 |
| abhishek_ | hmm, seems frequent disruptions, might be local network having some issues | 15:40 |
| opendevreview | Merged openstack/security-doc master: Trivial: Remove redundant OSSN txt, move others https://review.opendev.org/c/openstack/security-doc/+/1002704 | 15:40 |
| opendevreview | Merged openstack/security-doc master: Split out OSSN index page headers https://review.opendev.org/c/openstack/security-doc/+/1002699 | 15:51 |
| opendevreview | Merged openstack/security-doc master: Updated from openstack-manuals https://review.opendev.org/c/openstack/security-doc/+/1000684 | 15:51 |
| TheJulia | From my vantage point, it looks like there is v6 routing instability | 17:48 |
| clarkb | I'm seeing dns resolution problems for some parts of the internet too (not sure if their end or general internet problems) | 18:17 |
| fungi | maybe the aipocalypse has finally progressed to the next stage | 18:18 |
| opendevreview | Merged openstack/security-doc master: Backfill publication dates for OSSNs; publish them https://review.opendev.org/c/openstack/security-doc/+/1002707 | 18:40 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!