f291579bfb
This adds OSSN-0011, which covers an issue related to invalid security group references in CFN templates being improperly evaluated by Heat. This results in unintended network access being allowed. Related-Bug: 1291091 Change-Id: I88ee23aadc74020f150332a619796ebd77ef9698 |
||
---|---|---|
notes | ||
templates | ||
.gitreview | ||
README.md |
README.md
OpenStack Security Notes (OSSN)
The OpenStack Security Group (OSSG) publishes Security Notes to advise users of security related issues. Security notes are similar to advisories; they address vulnerabilities in 3rd party tools typically used within OpenStack deployments and provide guidance on common configuration mistakes that can result in an insecure operating environment.
Repository Layout
This repository contains published Security Notes and templates that should be used when creating new Security Notes.
notes - contains Security Notes in e-mail format (see the templates)
templates - contains e-mail and wiki format templates
Useful Links
A list of published Security Notes is available here:
https://wiki.openstack.org/wiki/Security_Notes
The process used to create new Security Notes is available here:
https://wiki.openstack.org/wiki/Security/Security_Note_Process