On Friday, 17 April 2020 10:53:05 PM AEST Shengjing Zhu wrote:
> So I checked upstream, the first version that includes the new
> golang-github-hashicorp-go-gcp-common-dev is v1.4.0
> via https://github.com/hashicorp/vault/pull/8371

Thanks for checking. Unfortunately I can not isolate the fix and packaging of 
the latest Vault version is not an option as requires an upgrade of Etcd...


> Given it's fixed in upstream, and vault is only in experimental, can
> we downgrade the severity?

Sure... :(


> The new version of golang-google-api is needed for fixing
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954532

Interesting, thanks.

-- 
All the best,
 Dmitry Smirnov.

---

Without doubt you are not sane.
        -- Tage Danielsson

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to