automation-and-virtualized-infrastructure-manager
OpenStack
- Main Wiki page: https://wiki.openstack.org/wiki/Main_Page
- Security Notes: https://wiki.openstack.org/wiki/Security_Notes
- Security wiki: https://wiki.openstack.org/wiki/Security
- Security info:https://security.openstack.org/
OpenStack CVE list
CVEs fixed in Openstack
| CVE | Description | Fixed in Arno | Fixed in Brahmaputra |
|---|---|---|---|
| CVE-2015-7546 | |||
| CVE-2015-8234 | |||
| CVE-2015-8466 | |||
| CVE-2015-7713 |
Openstack Security Guide
Glance
- List of bugs: https://bugs.launchpad.net/glance/+bugs
Glance Image Signing and Verification
https://blueprints.launchpad.net/glance/+spec/image-signing-and-verification-support
OpenStack currently does not support the following feature:
- Signing and signature validation of bootable images
- Validation of uploaded signed images
Deploying authentication will protect image integrity by verifying that an image has not been modified after the upload by the user. This feature improves the enterprise-ready posture of OpenStack. For further info read here.
automation-and-virtualized-infrastructure-manager.txt · Last modified: 2016/02/10 12:59 by Sona Sarmadi
Except where otherwise noted, content on this wiki is licensed under the following license: Creative Commons Attribution 4.0 International License
