
This adds all previously published security notes to the repo. I also provided some helpful documentation in the README and provided e-mail and wiki format templates to aid in writing new security notes.
27 lines
1.0 KiB
Plaintext
27 lines
1.0 KiB
Plaintext
Title (single sentence)
|
|
---
|
|
|
|
### Summary ###
|
|
A few sentences describing the issue at a high level.
|
|
|
|
### Affected Services / Software ###
|
|
A comma separated list of affected services and OpenStack releases.
|
|
|
|
### Discussion ###
|
|
A detailed discussion of the problem. This should have enough detail that the
|
|
person reading can determine if their deployment is affected, when the problem
|
|
was introduced, and what types of attacks/problems that an affected deployment
|
|
would be exposed to.
|
|
|
|
### Recommended Actions ###
|
|
A detailed description of what can be done to remediate the problem (if
|
|
possible). If the recommendation involves configuration changes, example
|
|
snippets of configuration files should be included here.
|
|
|
|
### Contacts / References ###
|
|
This OSSN : <link to launchpad OSSN bug>
|
|
Original LaunchPad Bug : <link to launchpad bug for affected project/service>
|
|
OpenStack Security ML : openstack-security@lists.openstack.org
|
|
OpenStack Security Group : https://launchpad.net/~openstack-ossg
|
|
CVE: <CVE number if one was filed>
|