Bugs : OpenStack Security Notes

Low

New

#1745555 MySQLdb escaping example incorrect

OpenStack Security Notes 6

Undecided

New

#1546507 Regular user in non-default non-recommended configuration can delete any image file

OpenStack Security Notes 42

Undecided

New

#1555590 Image location can be used to capture user tokens

OpenStack Security Notes 12

Undecided

New

#1708580 ovsfw ignores port_ranges under some conditions

OpenStack Security Notes 260

Undecided

New

#1732294 Probable DOS in linuxbridge

OpenStack Security Notes 12

Undecided

New

#1739646 Instance type with disk set to 0 can cause DoS

OpenStack Security Notes 26

Undecided

New

#1761538 Cookie hash value displayed in rabbitmq logs

OpenStack Security Notes 8

Undecided

New

#1776755 Advice on spectre/meltdown and how to mitigate performance impacts

OpenStack Security Notes 4

Undecided

New

#1793029 adding 0.0.0.0/0 address pair to a port bypasses all other vm security groups

OpenStack Security Notes 18

Undecided

In Progress

#1823200 Improper handling of ScaleIO backend credentials

OpenStack Security Notes 26

Undecided

New

#1837339 CIDR's of the form 12.34.56.78/0 should be an error

OpenStack Security Notes 12

Undecided

Incomplete

#1838473 non-IP ethertypes are permitted with iptables_hybrid firewall driver

OpenStack Security Notes 10

Undecided

New

#1875630 issue OSSN when glance no longer requires an md5 implementation

OpenStack Security Notes 6

Undecided

In Progress

#1919357 "Secure live migration with QEMU-native TLS in nova"-guide misses essential config option

OpenStack Security Notes 10

Undecided

In Progress

#1990157 OSSN-0090: Malicious image data modification can happen when using COW

OpenStack Security Notes 268

Undecided

Incomplete

#2048785 Trunk parent port (tpt port) vlan_mode is wrong in ovs

OpenStack Security Notes 260

Undecided

New

#2049762 Service tokens seems to be incorrectly implemented in kolla-ansible

OpenStack Security Notes 276