Mailing List Archive: OpenStack: Announce

Subject

Author

Replies

Last Post

[all][elections][ptl] Project Team Lead Election Conclusion and Results

by ianyrchoi at gmail | Sep 8, 2021, 4:56 AM | 0 replies →

ianyrchoi at gmail

Sep 8, 2021, 4:56 AM →

[OSSA-2021-005] Neutron: Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085)

by fungi at yuggoth | Aug 31, 2021, 8:00 AM | 0 replies →

fungi at yuggoth

Aug 31, 2021, 8:00 AM →

[OSSA-2021-004] Neutron: Linuxbridge ARP filter bypass on Netfilter platforms (CVE-2021-38598)

by fungi at yuggoth | Aug 17, 2021, 8:05 AM | 0 replies →

fungi at yuggoth

Aug 17, 2021, 8:05 AM →

[OSSA-2021-003] Keystone: Account name and UUID oracles in account locking (CVE-2021-38155)

by fungi at yuggoth | Aug 10, 2021, 7:50 AM | 0 replies →

fungi at yuggoth

Aug 10, 2021, 7:50 AM →

[OSSA-2021-002] Nova: Open Redirect in noVNC proxy (CVE-2021-3654)

by fungi at yuggoth | Jul 29, 2021, 10:28 AM | 0 replies →

fungi at yuggoth

Jul 29, 2021, 10:28 AM →

[OSSA-2021-001] Neutron: Anti-spoofing bypass for Open vSwitch networks (CVE-2021-20267)

by fungi at yuggoth | Jul 12, 2021, 12:10 PM | 0 replies →

fungi at yuggoth

Jul 12, 2021, 12:10 PM →

OpenStack Wallaby is officially released!

by hberaud at redhat | Apr 14, 2021, 8:27 AM | 0 replies →

hberaud at redhat

Apr 14, 2021, 8:27 AM →

[OSSN-0089] Missing configuration option in Secure Live Migration guide leads to unencrypted traffic

by josephine.seifert at secustack | Apr 13, 2021, 6:26 AM | 0 replies →

josephine.seifert at secustack

Apr 13, 2021, 6:26 AM →

[OSSN-0088] Some of the Glance metadef APIs likely to leak resources

by akekane at redhat | Mar 9, 2021, 7:17 AM | 0 replies →

akekane at redhat

Mar 9, 2021, 7:17 AM →

[OSSN-0087] Ceph user credential leakage to consumers of OpenStack Manila

by gouthampravi at gmail | Dec 16, 2020, 5:38 PM | 0 replies →

gouthampravi at gmail

Dec 16, 2020, 5:38 PM →

[OSSA-2020-008] horizon: Open redirect in workflow forms (CVE-2020-29565)

by gagehugo at gmail | Dec 7, 2020, 3:28 PM | 0 replies →

gagehugo at gmail

Dec 7, 2020, 3:28 PM →

[OSSA-2020-007] Blazar: Remote code execution in blazar-dashboard (CVE-2020-26943)

by pierre at stackhpc | Oct 16, 2020, 9:55 AM | 0 replies →

pierre at stackhpc

Oct 16, 2020, 9:55 AM →

OpenStack Victoria is officially released!

by sean.mcginnis at gmx | Oct 14, 2020, 7:29 AM | 0 replies →

sean.mcginnis at gmx

Oct 14, 2020, 7:29 AM →

[all][elections][tc] Technical Committee Election Results

by fungi at yuggoth | Oct 13, 2020, 5:30 PM | 0 replies →

fungi at yuggoth

Oct 13, 2020, 5:30 PM →

[all][elections][ptl] Project Team Lead Election Conclusion and Results

by fungi at yuggoth | Oct 13, 2020, 5:30 PM | 0 replies →

fungi at yuggoth

Oct 13, 2020, 5:30 PM →

[OSSA-2020-006] Nova: Live migration fails to update persistent domain XML (CVE-2020-17376)

by fungi at yuggoth | Aug 25, 2020, 9:23 AM | 0 replies →

fungi at yuggoth

Aug 25, 2020, 9:23 AM →

[OSSN-0086] erratum: Dell EMC ScaleIO/VxFlex OS Backend Credentials Exposure

by rosmaita.fossdev at gmail | Jun 18, 2020, 2:19 PM | 0 replies →

rosmaita.fossdev at gmail

Jun 18, 2020, 2:19 PM →

[OSSN-0086] Dell EMC ScaleIO/VxFlex OS Backend Credentials Exposure

by rosmaita.fossdev at gmail | Jun 3, 2020, 9:03 AM | 0 replies →

rosmaita.fossdev at gmail

Jun 3, 2020, 9:03 AM →

OpenStack Ussuri is officially released!

by sean.mcginnis at gmx | May 13, 2020, 7:38 AM | 0 replies →

sean.mcginnis at gmx

May 13, 2020, 7:38 AM →

[OSSA-2020-005] Keystone: OAuth1 request token authorize silently ignores roles parameter (CVE ...

by gagehugo at gmail | May 6, 2020, 12:53 PM | 1 replies →

gagehugo at gmail

May 7, 2020, 2:00 PM →

[OSSA-2020-004] Keystone: Keystone credential endpoints allow owner modification and are not ...

by gagehugo at gmail | May 6, 2020, 12:48 PM | 1 replies →

gagehugo at gmail

May 7, 2020, 2:00 PM →

[OSSA-2020-003] Keystone: Keystone does not check signature TTL of the EC2 credential auth method (C ...

by gagehugo at gmail | May 6, 2020, 12:41 PM | 1 replies →

gagehugo at gmail

May 7, 2020, 1:59 PM →

[OSSA-2020-002] Manila: Unprivileged users can retrieve, use and manipulate share networks (CVE-2020 ...

by gouthampravi at gmail | Mar 11, 2020, 2:31 PM | 0 replies →

gouthampravi at gmail

Mar 11, 2020, 2:31 PM →

[OSSA-2020-001] Nova can leak consoleauth token into log files (CVE-2015-9543)

by fungi at yuggoth | Feb 19, 2020, 9:09 AM | 0 replies →

fungi at yuggoth

Feb 19, 2020, 9:09 AM →

[OSSA-2019-006] Credentials API allows listing and retrieving of all users credentials (CVE-2019-196 ...

by gagehugo at gmail | Dec 11, 2019, 8:32 AM | 0 replies →

gagehugo at gmail

Dec 11, 2019, 8:32 AM →