“Glance Core security contacts” team

Subscribed bugs


1 → 37 of 37 results First • Previous • Next • Last
Critical
Fix Committed
#1065187 [OSSA-2012-017] Non-admin users can cause public glance images to be deleted
Glance essex 266
Critical
Fix Committed
#1398830 [OSSA 2015-003] Glance image leak when in saving state (CVE-2014-9623)
Glance juno 296
Critical
Confirmed
#1546507 Regular user in non-default non-recommended configuration can delete any image file
Glance 42
Critical
Confirmed
#1546507 Regular user in non-default non-recommended configuration can delete any image file
Glance liberty 42
Critical
Confirmed
#1546507 Regular user in non-default non-recommended configuration can delete any image file
Glance ocata 42
Critical
Confirmed
#1546507 Regular user in non-default non-recommended configuration can delete any image file
Glance newton 42
Critical
Confirmed
#1546507 Regular user in non-default non-recommended configuration can delete any image file
Glance mitaka 42
Critical
New
#1933269 Project admin gets treated as Global Admin with Secure RBAC
Glance 10
Critical
New
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
Glance 268
Critical
New
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
Glance zed 268
High
Fix Committed
#1098962 [OSSA 2013-002] glance image-download can display backend Swift password
Glance essex 270
High
Fix Committed
#1135541 [OSSA 2013-007] v1 api returns location as header for cached images
Glance essex 268
High
Triaged
#1479385 Cause conflicts within glance public metadefs
Glance 22
High
Confirmed
#1549483 Normal user can replace active image data if show_multiple_locations has been set to true
Glance 14
High
Confirmed
#1555590 Image location can be used to capture user tokens
Glance 12
Wishlist
In Progress
#1522524 User can delete deactivated images
Glance 260
Undecided
Fix Committed
#1361360 Eventlet green threads not released back to the pool leading to choking of new requests
Glance icehouse 76
Undecided
Fix Committed
#1361360 Eventlet green threads not released back to the pool leading to choking of new requests
neutron juno 76
Undecided
Incomplete
#1417304 Upload/Import image continues consuming glance host cpu/memory/network/disk resources even after the image is deleted
Glance 16
Undecided
Fix Committed
#1525915 [OSSA 2016-006] Normal user can change image status if show_multiple_locations has been set to true (CVE-2016-0757)
Glance liberty 10
Undecided
New
#1545717 glance v2 api: standard user can create public metadefs
Glance 14
Undecided
New
#1545732 glance v2 api: standard user can update other user's public metadefs
Glance 12
Undecided
New
#1549855 [FG-VD-16-011] Openstack Logging DoS Vulnerability Notification
Glance 12
Undecided
New
#1554288 [FG-VD-16-015] Openstack Glance Authenticated User DoS Vulnerability Notification
Glance 8
Undecided
New
#1555590 Image location can be used to capture user tokens
OpenStack Security Notes 12
Undecided
New
#1546507 Regular user in non-default non-recommended configuration can delete any image file
OpenStack Security Notes 42
Undecided
New
#1916922 [OSSN-0088] Glance leaks resource types across namespaces
Glance 10
Undecided
New
#1916926 [OSSN-0088] Glance leaks namespace existence to unauthorized users
Glance 10
Undecided
New
#1933269 Project admin gets treated as Global Admin with Secure RBAC
Glance wallaby 10
Undecided
New
#1933269 Project admin gets treated as Global Admin with Secure RBAC
Glance xena 10
Undecided
In Progress
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
OpenStack Security Notes 268
Undecided
New
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
Glance wallaby 268
Undecided
New
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
Glance yoga 268
Undecided
New
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
Glance xena 268
Undecided
In Progress
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
os-brick 294
Undecided
Fix Committed
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
OpenStack Compute (nova) xena 294
Undecided
Fix Committed
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
OpenStack Compute (nova) wallaby 294
1 → 37 of 37 results First • Previous • Next • Last