OpenStack Security Advice, guiding users around common insecure configurations and vulnerabilities in 3rd party libraries and applications often used with OpenStack.
OpenStack Security Notes exist to guide users and implementers of OpenStack through various security 'pain-points'. Security Notes do not directly address vulnerabilities in OpenStack. OSNs provide guidance to ensure secure use of OpenStack and will often provide work arounds or advice for 3rd party libraries and services used in conjunction with OpenStack.
This project is maintained by the OpenStack Security Group: https:/
Project information
- Licence:
- Creative Commons - No Rights Reserved
View full history Series and milestones
trunk series is the current focus of development.
All bugs Latest bugs reported
-
Bug #2084081: Payload of "rebuild_instance" notification contains an auth_token
Reported -
Bug #2030976: oslo notifications sending sensitive tokens
Reported -
Bug #2084122: CVE-2024-3651 the 'kjd/idna' library
Reported -
Bug #2048114: Unsafe Environment Handling in MuranoPL
Reported -
Bug #2048785: Trunk parent port (tpt port) vlan_mode is wrong in ovs
Reported
More contributors Top contributors
- Jeremy Stanley 14 points