<div dir="ltr">Hello everyone,<div><br></div><div>Due to a hectic October, this newsletter will have the updates for the month.  The SIG meetings for the 07th, 21st, and 28th in November will be cancelled as well due to Summit/PTG & Holidays.</div><div><br></div><div>Have a Happy Halloween!</div><div><br></div><div><div id="gmail-magicdomid293" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><span class="gmail-" style="margin:0px;padding:1px 0px">#Date: 31 Oct 2019</span></div><div id="gmail-magicdomid294" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Security SIG Meeting Info: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="http://eavesdrop.openstack.org/#Security_SIG_meeting" style="margin:0px;padding:0px;white-space:pre-wrap">http://eavesdrop.openstack.org/#Security_SIG_meeting</a></span></li></ul></div><div id="gmail-magicdomid295" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Weekly on Thursday at 1500 UTC in #openstack-meeting</span></li></ul></div><div id="gmail-magicdomid296" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Agenda: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://etherpad.openstack.org/p/security-agenda" style="margin:0px;padding:0px;white-space:pre-wrap">https://etherpad.openstack.org/p/security-agenda</a></span></li></ul></div><div id="gmail-magicdomid297" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://security.openstack.org/" style="margin:0px;padding:0px;white-space:pre-wrap">https://security.openstack.org/</a></span></li></ul></div><div id="gmail-magicdomid298" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://wiki.openstack.org/wiki/Security-SIG" style="margin:0px;padding:0px;white-space:pre-wrap">https://wiki.openstack.org/wiki/Security-SIG</a></span></li></ul></div><div id="gmail-magicdomid39" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><br style="margin:0px;padding:0px"></div><div id="gmail-magicdomid299" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><span class="gmail-" style="margin:0px;padding:1px 0px">#Meeting Notes (October)</span></div><div id="gmail-magicdomid300" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">fungi volunteers to be nova spec liaison for ussuri image encryption spec in nova: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="http://eavesdrop.openstack.org/meetings/image_encryption/2019/image_encryption.2019-10-21-13.00.log.html" style="margin:0px;padding:0px;white-space:pre-wrap">http://eavesdrop.openstack.org/meetings/image_encryption/2019/image_encryption.2019-10-21-13.00.log.html</a></span></li></ul></div><div id="gmail-magicdomid301" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">The Security SIG won't be meeting on the following dates in November due to the Summit/PTG & Holidays</span></li></ul></div><div id="gmail-magicdomid302" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Nov 07th, Nov 21st, Nov 28th</span></li></ul></div><div id="gmail-magicdomid44" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><br style="margin:0px;padding:0px"></div><div id="gmail-magicdomid303" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><span class="gmail-" style="margin:0px;padding:1px 0px">#VMT Reports</span></div><div id="gmail-magicdomid304" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">A full list of publicly marked security issues can be found here: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://bugs.launchpad.net/ossa/" style="margin:0px;padding:0px;white-space:pre-wrap">https://bugs.launchpad.net/ossa/</a></span></li></ul></div><div id="gmail-magicdomid305" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">OSSA-2019-005 was released this month: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://security.openstack.org/ossa/OSSA-2019-005.html" style="margin:0px;padding:0px;white-space:pre-wrap">https://security.openstack.org/ossa/OSSA-2019-005.html</a></span></li></ul></div><div id="gmail-magicdomid306" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">ceph backend, secret key leak: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://bugs.launchpad.net/cinder/+bug/1849624" style="margin:0px;padding:0px;white-space:pre-wrap">https://bugs.launchpad.net/cinder/+bug/1849624</a></span></li></ul></div><div id="gmail-magicdomid307" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-indent1" style="margin:0px 0px 0px 1.5em;padding:0px;list-style-type:none"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">CSV Injection Possible in Compute Usage History: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://bugs.launchpad.net/horizon/+bug/1842749" style="margin:0px;padding:0px;white-space:pre-wrap">https://bugs.launchpad.net/horizon/+bug/1842749</a></span></li></ul></div></div></div>