openstack/security-doc
Code Issues Proposed changes
Files
6ab85e60b1b7657ffb0e2a6a33dda02f26a5d97b
security-doc/security-notes
History
Eric Brown 488c0b49fb Revise OSSN-033 to note fix for HTTPSConnection 
Later versions of Python have HTTPSConnection fixed. So OSSN-0033
should be clarified to only apply to Python earlier than 2.7.9 and
3.4.3.

Change-Id: Ib50d85dec5789749bb32ecd6d58b98dcd2670b6c
2017-03-08 10:09:04 -08:00
..
OSSN-0001
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0002
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0003
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0004
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0005
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0006
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0007
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0008
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0009
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0010
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0011
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0012
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0013
Fixing some trivial spelling mistakes
2016-11-30 20:35:37 +00:00
OSSN-0014
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0015
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0016
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0017
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0018
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0019
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0020
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0021
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0022
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0023
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0024
Fixing some trivial spelling mistakes
2016-11-30 20:35:37 +00:00
OSSN-0025
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0026
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0027
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0028
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0029
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0030
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0031
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0032
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0033
Revise OSSN-033 to note fix for HTTPSConnection
2017-03-08 10:09:04 -08:00
OSSN-0034
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0035
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0036
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0037
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0038
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0039
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0042
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0043
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0044
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0045
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0046
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0047
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0048
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0049
Fixing some trivial spelling mistakes
2016-11-30 20:35:37 +00:00
OSSN-0052
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0053
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0054
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0055
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0056
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0057
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0058
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0059
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0060
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0061
Fixing some trivial spelling mistakes
2016-11-30 20:35:37 +00:00
OSSN-0062
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00
OSSN-0063
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0064
Added Authors to Security Notes
2016-07-11 10:51:07 +00:00
OSSN-0066
Fixing some trivial spelling mistakes
2016-11-30 20:35:37 +00:00
OSSN-0068
Adding OSSN-0068
2016-07-13 21:47:55 +09:00
OSSN-0069
Updated OSSN-0069
2016-09-07 16:43:47 +00:00
OSSN-0070
OSSN-0070: bandit version < 1.1.0 have possible XSS
2016-08-30 02:39:37 +00:00
OSSN-0073
Updated OSSN-0073
2016-09-08 18:14:30 +00:00
OSSN-0077
Adding Security Note OSSN-0077
2016-11-11 19:52:25 +01:00
README.md
Migrate OSSNs to the security-doc repo
2014-08-11 12:59:28 -07:00
template.txt
Removing an extra space after fullstop
2016-12-05 01:32:42 +00:00

README.md

OpenStack Security Notes (OSSN)

The OpenStack Security Group (OSSG) publishes Security Notes to advise users of security related issues. Security notes are similar to advisories; they address vulnerabilities in 3rd party tools typically used within OpenStack deployments and provide guidance on common configuration mistakes that can result in an insecure operating environment.

Repository Layout

This repository contains published Security Notes and templates that should be used when creating new Security Notes.

notes - contains Security Notes in e-mail format (see the templates)
templates - contains e-mail and wiki format templates

Useful Links

A list of published Security Notes is available here:

https://wiki.openstack.org/wiki/Security_Notes

The process used to create new Security Notes is available here:

https://wiki.openstack.org/wiki/Security/Security_Note_Process