OpenStack Security Notes

1 → 20 of 20 results First • Previous • Next • Last
Low
New
#1745555 MySQLdb escaping example incorrect
OpenStack Security Notes 6
Undecided
New
#1546507 Regular user in non-default non-recommended configuration can delete any image file
OpenStack Security Notes 42
Undecided
New
#1555590 Image location can be used to capture user tokens
OpenStack Security Notes 12
Undecided
New
#1708580 ovsfw ignores port_ranges under some conditions
OpenStack Security Notes 260
Undecided
New
#1732294 Probable DOS in linuxbridge
OpenStack Security Notes 12
Undecided
New
#1739646 Instance type with disk set to 0 can cause DoS
OpenStack Security Notes 26
Undecided
New
#1761538 Cookie hash value displayed in rabbitmq logs
OpenStack Security Notes 8
Undecided
New
#1776755 Advice on spectre/meltdown and how to mitigate performance impacts
OpenStack Security Notes 4
Undecided
New
#1793029 adding 0.0.0.0/0 address pair to a port bypasses all other vm security groups
OpenStack Security Notes 20
Undecided
In Progress
#1823200 Improper handling of ScaleIO backend credentials
OpenStack Security Notes 26
Undecided
New
#1837339 CIDR's of the form 12.34.56.78/0 should be an error
OpenStack Security Notes 12
Undecided
Incomplete
#1838473 non-IP ethertypes are permitted with iptables_hybrid firewall driver
OpenStack Security Notes 10
Undecided
New
#1875630 issue OSSN when glance no longer requires an md5 implementation
OpenStack Security Notes 6
Undecided
In Progress
#1919357 "Secure live migration with QEMU-native TLS in nova"-guide misses essential config option
OpenStack Security Notes 10
Undecided
In Progress
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
OpenStack Security Notes 268
Undecided
New
#2030976 oslo notifications sending sensitive tokens
OpenStack Security Notes 14
Undecided
Incomplete
#2048785 Trunk parent port (tpt port) vlan_mode is wrong in ovs
OpenStack Security Notes 260
Undecided
New
#2049762 Service tokens seems to be incorrectly implemented in kolla-ansible
OpenStack Security Notes 276
Undecided
New
#2084081 Payload of "rebuild_instance" notification contains an auth_token
OpenStack Security Notes 10
Undecided
New
#2084122 CVE-2024-3651 the 'kjd/idna' library
OpenStack Security Notes 14
1 → 20 of 20 results First • Previous • Next • Last
Bug supervisor:
Luke Hinds