“Cinder Core security contacts” team

Related bugs


1 → 27 of 27 results First • Previous • Next • Last
High
Fix Committed
#1823200 Improper handling of ScaleIO backend credentials
Cinder stein 26
High
Fix Committed
#1823200 Improper handling of ScaleIO backend credentials
Cinder train 26
High
Fix Committed
#1823200 Improper handling of ScaleIO backend credentials
Cinder ussuri 26
Medium
Fix Committed
#1449062 [OSSA 2016-012] qemu-img calls need to be restricted by ulimit (CVE-2015-5162)
python-oslo.concurrency (Ubuntu Wily) 282
Medium
Fix Committed
#1449062 [OSSA 2016-012] qemu-img calls need to be restricted by ulimit (CVE-2015-5162)
Ubuntu Cloud Archive liberty 282
Medium
Fix Committed
#1449062 [OSSA 2016-012] qemu-img calls need to be restricted by ulimit (CVE-2015-5162)
Ubuntu Cloud Archive mitaka 282
Medium
Triaged
#1989008 Lax rulesets leading to privilege escalation vulnerabilities
OpenStack Compute (nova) 16
Low
In Progress
#1649634 Insecure Randomness for AES Passphrase Generation
Cinder 10
Low
Fix Committed
#1849624 ceph backend, secret key leak
Cinder 8
Undecided
New
#1341954 suds client subject to cache poisoning by local attacker
gantt 262
Undecided
Fix Committed
#1361360 Eventlet green threads not released back to the pool leading to choking of new requests
Glance icehouse 76
Undecided
Fix Committed
#1361360 Eventlet green threads not released back to the pool leading to choking of new requests
neutron juno 76
Undecided
New
#1644554 Cinder throws detailed iSCSI information in case of failure
Cinder 10
Undecided
New
#1656030 cinder drivers using ETree for xml parsing
Cinder 8
Undecided
New
#1661333 Cinder Brocade driver does not do certificate validation
Cinder 12
Undecided
New
#1687018 One can request to put a volume next to any tenant's instance via InstanceLocalityFilter
Cinder 10
Undecided
Incomplete
#1644554 Cinder throws detailed iSCSI information in case of failure
OpenStack Compute (nova) 10
Undecided
Incomplete
#1700501 Insecure rootwrap usage
OpenStack Compute (nova) 26
Undecided
New
#1700501 Insecure rootwrap usage
Cinder 26
Undecided
In Progress
#1823200 Improper handling of ScaleIO backend credentials
OpenStack Security Notes 26
Undecided
Triaged
#1989008 Lax rulesets leading to privilege escalation vulnerabilities
oslo.privsep 16
Undecided
New
#1989008 Lax rulesets leading to privilege escalation vulnerabilities
os-brick 16
Undecided
In Progress
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
os-brick 294
Undecided
New
#2008705 image_utils: xen server image handling issue
Cinder 10
Undecided
Fix Committed
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
OpenStack Compute (nova) xena 294
Undecided
Fix Committed
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
OpenStack Compute (nova) wallaby 294
Undecided
In Progress
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
kolla-ansible 294
1 → 27 of 27 results First • Previous • Next • Last