Apologies for the lack of a newsletter last week, back to regularly scheduled programming

#Week of: 01 Aug 2019

• Security SIG Meeting Info: http://eavesdrop.openstack.org/#Security_SIG_meeting

• Weekly on Thursday at 1500 UTC in #openstack-meeting

• Agenda: https://etherpad.openstack.org/p/security-agenda

• https://security.openstack.org/

• https://wiki.openstack.org/wiki/Security-SIG

#Meeting Notes

• Summary: http://eavesdrop.openstack.org/meetings/security/2019/security.2019-08-01-15.00.html

• Security Guide Docs Update

• The first set of changes have been made

• https://review.opendev.org/#/q/project:openstack/security-doc

• Decided to link directly to the keystone federation setup page instead of maintaining an out-of-date copy

• Currently looking to update the various checklists for each service

• Nova/Cinder Policy

• Currently checking out inconsistencies between the documentation of generating policy files for both nova and cinder

• https://review.opendev.org/#/c/673349/

# VMT Reports

• A full list of publicly marked security issues can be found here: https://bugs.launchpad.net/ossa/

• IFLA_BR_AGEING_TIME of 0 causes flooding across bridges: https://bugs.launchpad.net/os-vif/+bug/1837252