openstack-announce  

Messages by Thread

• [openstack-announce] [OSSA-2024-005] Neutron: Authorization bypassed when setting tags on Neutron networks (CVE-2024-53916) Jay Faulkner
• [openstack-announce] [OSSA-2024-004]: OpenStack Ironic fails to verify checksums of supplied image_source URLs when configured to convert images to raw for streaming Jay Faulkner
• [openstack-announce] OpenStack 2024.2 Dalmatian is officially released! Elõd Illés
• [openstack-announce] [all][elections][tc][ptl] 2025.1 Epoxy: Technical Committee & PTL Election Conclusion & Results Ian Y. Choi
• [openstack-announce] [OSSA-2024-003] OpenStack Ironic: Unvalidated image data passed to qemu-img (CVE-2024-44082) Brian Rosmaita
• [openstack-announce] [OSSA-2024-002] OpenStack Nova: Incomplete file access fix and regression for QCOW2 backing files and VMDK flat descriptors (CVE-2024-40767) Jeremy Stanley
• [openstack-announce] [OSSA-2024-001] OpenStack Cinder, Glance, Nova: Arbitrary file access through custom QCOW2 external data (CVE-2024-32498) Jeremy Stanley
• [openstack-announce] [all][elections][tc] 2024.2 Dalmatian Technical Committee Election Results Ian Y. Choi
• [openstack-announce] OpenStack 2024.1 Caracal is officially released! Elõd Illés
• [openstack-announce] [all][elections][ptl] 2024.2 Dalmatian: PTL Election Conclusion & Results Ian Y. Choi
• [openstack-announce] OSSN-0093: Unresolved Vulnerability in OpenStack Murano Jeremy Stanley
  • [openstack-announce] OSSN-0093: [Murano] Unsafe Environment Handling in MuranoPL Jeremy Stanley
• [openstack-announce] OpenStack 2023.2 Bobcat is officially released! Herve Beraud
• [openstack-announce] [OSSA-2023-003] cinder, glance_store, nova, os-brick: Unauthorized volume access through deleted volume attachments (CVE-2023-2088) Jeremy Stanley
• Re: [openstack-announce] [ptl][tc][winstackers] Final call for Winstackers PTL and maintainers Ghanshyam Mann
• [openstack-announce] [all][tc][vitrage] Final call for Vitrage project maintainers Ghanshyam Mann
• [openstack-announce] OpenStack 2023.1 Antelope is officially released! Elõd Illés
• [openstack-announce] [all][elections][tc][ptl] 2023.2 Bobcat: Technical Committee & PTL Election Conclusion & Results Ian Y. Choi
• [openstack-announce] [OSSA-2023-002] Cinder, Glance, Nova: Arbitrary file access through custom VMDK flat descriptor (CVE-2022-47951) Jeremy Stanley
• [openstack-announce] [OSSA-2023-001] Swift: Arbitrary file access through custom S3 XML entities (CVE-2022-47950) Jeremy Stanley
• [openstack-announce] [OSSN-0091] BMC emulators developed in OpenStack community do not preserve passwords on VMs Jay Faulkner
• [openstack-announce] [0SSN-0090] Best practices when configuring Glance with COW backends Brian Rosmaita
• [openstack-announce] OpenStack Zed is officially released! Előd Illés
• Re: [openstack-announce] [all][elections][tc][ptl] Antelope: Technical Committee & PTL Election Conclusion & Results Ian Y. Choi
• [openstack-announce] OpenStack Yoga is officially released! Előd Illés
• [openstack-announce] [all][elections][ptl] Project Team Lead Zed Election Conclusion and Results Ghanshyam Mann
• [openstack-announce] [all][elections][tc] Technical Committee Election Results Ghanshyam Mann
  • [openstack-announce] [all][elections][tc] Technical Committee Election Results Tony Breeds
• [openstack-announce] OpenStack Xena is officially released! Herve Beraud
• [openstack-announce] [OSSA-2021-002] Nova: Open Redirect in noVNC proxy (CVE-2021-3654) Jeremy Stanley
• [openstack-announce] [OSSA-2021-006] Neutron: Routes middleware memory leak for nonexistent controllers (CVE-2021-40797) Jeremy Stanley
• [openstack-announce] [all][elections][ptl] Project Team Lead Election Conclusion and Results Ian Y. Choi
• [openstack-announce] [OSSA-2021-005] Neutron: Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085) Jeremy Stanley
• [openstack-announce] [OSSA-2021-004] Neutron: Linuxbridge ARP filter bypass on Netfilter platforms (CVE-2021-38598) Jeremy Stanley
• [openstack-announce] [OSSA-2021-003] Keystone: Account name and UUID oracles in account locking (CVE-2021-38155) Jeremy Stanley
• [openstack-announce] [OSSA-2021-002] Nova: Open Redirect in noVNC proxy (CVE-2021-3654) Jeremy Stanley
• [openstack-announce] [OSSA-2021-001] Neutron: Anti-spoofing bypass for Open vSwitch networks (CVE-2021-20267) Jeremy Stanley
• [openstack-announce] OpenStack Wallaby is officially released! Herve Beraud
• [openstack-announce] [OSSN-0089] Missing configuration option in Secure Live Migration guide leads to unencrypted traffic Josephine Seifert
• [openstack-announce] [OSSN-0088] Some of the Glance metadef APIs likely to leak resources Abhishek Kekane
• [openstack-announce] [OSSN-0087] Ceph user credential leakage to consumers of OpenStack Manila gouthampravi
• [openstack-announce] [OSSA-2020-008] horizon: Open redirect in workflow forms (CVE-2020-29565) Gage Hugo
• [openstack-announce] [OSSA-2020-007] Blazar: Remote code execution in blazar-dashboard (CVE-2020-26943) Pierre Riteau
• [openstack-announce] OpenStack Victoria is officially released! Sean McGinnis
• [openstack-announce] [all][elections][ptl] Project Team Lead Election Conclusion and Results Jeremy Stanley
  • [openstack-announce] [all][elections][ptl] Project Team Lead Election Conclusion and Results Tony Breeds
• [openstack-announce] [all][elections][tc] Technical Committee Election Results Jeremy Stanley
• [openstack-announce] [OSSA-2020-006] Nova: Live migration fails to update persistent domain XML (CVE-2020-17376) Jeremy Stanley
• [openstack-announce] [OSSN-0086] erratum: Dell EMC ScaleIO/VxFlex OS Backend Credentials Exposure Brian Rosmaita
• [openstack-announce] [OSSN-0086] Dell EMC ScaleIO/VxFlex OS Backend Credentials Exposure Brian Rosmaita
• [openstack-announce] OpenStack Ussuri is officially released! Sean McGinnis
• [openstack-announce] [OSSA-2020-003] Keystone: Keystone does not check signature TTL of the EC2 credential auth method (CVE PENDING) Gage Hugo
  • Re: [openstack-announce] [OSSA-2020-003] Keystone: Keystone does not check signature TTL of the EC2 credential auth method (CVE PENDING) Gage Hugo
• [openstack-announce] [OSSA-2020-005] Keystone: OAuth1 request token authorize silently ignores roles parameter (CVE PENDING) Gage Hugo
  • Re: [openstack-announce] [OSSA-2020-005] Keystone: OAuth1 request token authorize silently ignores roles parameter (CVE PENDING) Gage Hugo
• [openstack-announce] [OSSA-2020-004] Keystone: Keystone credential endpoints allow owner modification and are not protected from a scoped context (CVE PENDING) Gage Hugo
  • Re: [openstack-announce] [OSSA-2020-004] Keystone: Keystone credential endpoints allow owner modification and are not protected from a scoped context (CVE PENDING) Gage Hugo
• [openstack-announce] [OSSA-2020-002] Manila: Unprivileged users can retrieve, use and manipulate share networks (CVE-2020-9543) Goutham Pacha Ravi
• [openstack-announce] [OSSA-2020-001] Nova can leak consoleauth token into log files (CVE-2015-9543) Jeremy Stanley
• [openstack-announce] [OSSA-2019-006] Credentials API allows listing and retrieving of all users credentials (CVE-2019-19687) Gage Hugo
• [openstack-announce] [OSSN-0085] Cinder configuration option can leak secret key from Ceph backend Brian Rosmaita
• [openstack-announce] OpenStack Train is officially released! Sean McGinnis
• [openstack-announce] [OSSA-2019-005] Octavia Amphora-Agent not requiring Client-Certificate (CVE-2019-17134) Daniel 'f0o' Preussker
• [openstack-announce] [all][elections][ptl] Combined Project Team Lead and Technical Committee Election Conclusion and Results Jeremy Stanley
• [openstack-announce] [OSSA-2019-004] Ageing time of 0 disables linuxbridge MAC learning (CVE-2019-15753) Jeremy Stanley
• [openstack-announce] [OSSA-2019-003] Nova Server Resource Faults Leak External Exception Details (CVE-2019-14433) Jeremy Stanley
• [openstack-announce] OpenStack Stein is officially released! Sean McGinnis
• [openstack-announce] [OSSA-2019-002] Unable to install new flows on compute nodes when having broken security group rules (CVE-2019-10876) Gage Hugo
• [openstack-announce] [OSSA-2019-001] Unsupported dport option prevents applying security groups in OpenStack Neutron (CVE-2019-9735) Jeremy Stanley
• [openstack-announce] OpenStack Rocky is officially released! Sean McGinnis
• [openstack-announce] [all][elections] Project Team Lead Election Conclusion and Results Tony Breeds
• [openstack-announce] [OSSA-2018-002] GET /v3/OS-FEDERATION/projects leaks project information (CVE-2018-14432) Matthew Thode
• [openstack-announce] [OSSA-2018-001] Raw underlying encrypted volume access (CVE-2017-18191) Tristan Cacqueray
• [openstack-announce] OpenStack Queens is officially released! Sean McGinnis
• [openstack-announce] [OSSA 2017-005.1] Nova Filter Scheduler bypass through rebuild action (CVE-2017-16239) ERRATA Tristan Cacqueray
• [openstack-announce] [OSSA-2017-005] Nova Filter Scheduler bypass through rebuild action (CVE-2017-16239) Tristan Cacqueray
• [openstack-announce] OpenStack Pike is officially released! Thierry Carrez
• [openstack-announce] [OSSA-2017-004] federated user gets wrong role (CVE-2017-2673) Tristan Cacqueray
• [openstack-announce] [all][elections] Technical Committee Election Results Tristan Cacqueray
• [openstack-announce] [OSSA-2017-003] XSS in Horizon federation mappings UI (CVE-2017-7400) Tristan Cacqueray
• [openstack-announce] [OSSA-2017-002] Nova logs sensitive context from notification exceptions (CVE-2017-7214) Jeremy Stanley
• [openstack-announce] OpenStack Ocata is officially released! Doug Hellmann
• [openstack-announce] Project Team Lead Election Conclusion and Results knel...@openstack.org
• [openstack-announce] [OSSA-2017-001] CatchErrors leaks sensitive values in oslo.middleware (CVE-2017-2592) Jeremy Stanley
• [openstack-announce] [new][openstackclient] python-openstackclient 3.4.1 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-openstack_extras 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][tripleo] python-tripleoclient 5.5.0 release (ocata) no-reply
• [openstack-announce] [new][openstackclient] python-openstackclient 3.4.0 release (ocata) no-reply
• [openstack-announce] [new][watcher] python-watcherclient 0.26.0 release (ocata) no-reply
  • [openstack-announce] [new][watcher] python-watcherclient 0.26.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-watcher 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-octavia 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-vswitch 6.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-zaqar 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-sahara 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-swift 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-trove 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-oslo 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-openstacklib 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-tempest 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-ec2api 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-heat 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-ovn 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-ironic 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-keystone 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-cinder 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-nova 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-aodh 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-neutron 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-murano 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-manila 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-magnum 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-gnocchi 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-mistral 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-ceilometer 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-barbican 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-designate 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-horizon 10.0.0 release (ocata) no-reply
• [openstack-announce] [new][puppet] puppet-glance 10.0.0 release (ocata) no-reply
• [openstack-announce] Subscribe to release-announces to get future OpenStack release announcements ! Thierry Carrez
• [openstack-announce] [new][swift] swift 2.11.0 release (ocata) no-reply
• [openstack-announce] [OSSA 2016-013] Network information disclosure through Heat template source URL (CVE-2016-9185) Tristan Cacqueray
• [openstack-announce] [new][trove] python-troveclient 2.6.0 release (ocata) no-reply
• [openstack-announce] [new][tripleo] tripleo-validations 5.2.0 release (ocata) no-reply
• [openstack-announce] [new][tripleo] tripleo-common 5.5.0 release (ocata) no-reply
• [openstack-announce] [new][heat] python-heatclient 1.6.0 release (ocata) no-reply
• [openstack-announce] [new][watcher] python-watcher 0.32.0 release (ocata) no-reply
• [openstack-announce] [new][watcher] watcher-dashboard 0.6.0 release (ocata) no-reply
• [openstack-announce] [new][openstackclient] cliff 2.3.0 release (ocata) no-reply
• [openstack-announce] [new][tripleo] puppet-tripleo 5.4.0 release (newton) Tony Breeds
• [openstack-announce] [new][cinder] cinder 7.0.3 release (liberty) no-reply
• [openstack-announce] [new][tripleo] tripleo-heat-templates 5.1.0 release (newton) no-reply
• [openstack-announce] [new][tripleo] instack-undercloud 5.1.0 release (newton) no-reply
• [openstack-announce] [new][tripleo] tripleo-common 5.4.0 release (newton) no-reply
• [openstack-announce] [new][tripleo] python-tripleoclient 5.4.0 release (newton) no-reply
• [openstack-announce] [new][tripleo] tripleo-puppet-elements 5.1.0 release (newton) no-reply
• [openstack-announce] [new][tripleo] tripleo-image-elements 5.1.0 release (newton) no-reply
• [openstack-announce] [new][cinder] cinder 9.1.0 release (newton) no-reply
• [openstack-announce] [new][swift] python-swiftclient 3.2.0 release (ocata) doug
• [openstack-announce] [new][neutron] networking-sfc 3.0.0 release no-reply
• [openstack-announce] [new][telemetry] gnocchi 3.0.2 release no-reply
• [openstack-announce] [new][monasca] monasca-statsd 1.2.1 release (newton) no-reply
• [openstack-announce] [new][neutron] networking-odl 3.0.0 release no-reply
• [openstack-announce] [new][telemetry] ceilometermiddleware 0.5.1 release (newton) no-reply
• [openstack-announce] [new][ironic] python-ironicclient 1.8.0 release (ocata) no-reply
• [openstack-announce] [new][sahara] python-saharaclient 1.0.0 release (ocata) no-reply
• [openstack-announce] [new][telemetry] ceilometermiddleware 1.0.0 release (ocata) no-reply
• [openstack-announce] [new][monasca] monasca-statsd 1.3.0 release (ocata) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible 12.2.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-security 12.2.7 release no-reply
• [openstack-announce] [new][puppet] puppet-ceilometer 9.4.1 release (newton) no-reply
• [openstack-announce] [new][puppet] puppet-horizon 9.4.1 release (newton) no-reply
• [openstack-announce] [new][puppet] puppet-swift 9.4.3 release (newton) no-reply
• [openstack-announce] [new][puppet] puppet-gnocchi 9.4.1 release (newton) no-reply
• [openstack-announce] [new][puppet] puppet-aodh 9.4.1 release (newton) no-reply
• [openstack-announce] [new][puppet] puppet-neutron 9.4.1 release (newton) no-reply
• [openstack-announce] [new][puppet] puppet-ironic 9.4.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-plugins 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_neutron 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_sahara 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_nova 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-rabbitmq_server 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_magnum 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_horizon 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_aodh 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_gnocchi 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_glance 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_rally 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-security 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-memcached_server 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_swift 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-galera_server 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_heat 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-rsyslog_server 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_cinder 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_ceilometer 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-ironic 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-haproxy_server 14.0.1 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_keystone 14.0.1 release (newton) no-reply
• [openstack-announce] [new][nova] nova 14.0.2 release (newton) no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_aodh 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_keystone 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_swift 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_heat 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-rsyslog_server 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-ironic 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_ceilometer 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_nova 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-plugins 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_glance 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_neutron 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_cinder 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-galera_server 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-rabbitmq_server 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-os_horizon 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-security 13.3.7 release no-reply
• [openstack-announce] [new][openstackansible] openstack-ansible-memcached_server 13.3.7 release no-reply
• [openstack-announce] [new][neutron] neutron 9.1.0 release (newton) no-reply

• Earlier messages