Hello everyone,

Due to a hectic October, this newsletter will have the updates for the month. The SIG meetings for the 07th, 21st, and 28th in November will be cancelled as well due to Summit/PTG & Holidays.

Have a Happy Halloween!

#Date: 31 Oct 2019

Security SIG Meeting Info: http://eavesdrop.openstack.org/#Security_SIG_meeting

Weekly on Thursday at 1500 UTC in #openstack-meeting

Agenda: https://etherpad.openstack.org/p/security-agenda

https://security.openstack.org/

https://wiki.openstack.org/wiki/Security-SIG

#Meeting Notes (October)

fungi volunteers to be nova spec liaison for ussuri image encryption spec in nova: http://eavesdrop.openstack.org/meetings/image_encryption/2019/image_encryption.2019-10-21-13.00.log.html

The Security SIG won't be meeting on the following dates in November due to the Summit/PTG & Holidays

Nov 07th, Nov 21st, Nov 28th

#VMT Reports

A full list of publicly marked security issues can be found here: https://bugs.launchpad.net/ossa/

OSSA-2019-005 was released this month: https://security.openstack.org/ossa/OSSA-2019-005.html

ceph backend, secret key leak: https://bugs.launchpad.net/cinder/+bug/1849624

CSV Injection Possible in Compute Usage History: https://bugs.launchpad.net/horizon/+bug/1842749