[Openstack-security] OSSN required?

Jeremy Stanley fungi at yuggoth.org
Fri Jan 31 15:49:13 UTC 2014


On 2014-01-30 20:34:46 -0700 (-0700), Kurt Seifried wrote:
[...]
> In my mind at least OSSN=code change, OSSA=config/docs change. Is
> that correct?

A->advisory, N->note. The VMT should issue advisories when the
OpenStack project fixes security vulnerabilities in its software and
then distributes patches or releases new versions incorporating
those fixes. The OSSG may issue notes when there are new
recommendations for configuration or potential pitfalls of which
users should be made aware.
-- 
Jeremy Stanley




More information about the Openstack-security mailing list