| opendevreview | Goutham Pacha Ravi proposed openstack/security-doc master: OSSN-0102: Neutron sub-resource parent ownership https://review.opendev.org/c/openstack/security-doc/+/996209 | 06:37 |
|---|---|---|
| opendevreview | Goutham Pacha Ravi proposed openstack/security-doc master: WIP: OSSN-0103: Glance legacy Tasks import SSRF https://review.opendev.org/c/openstack/security-doc/+/996210 | 06:47 |
| fungi | https://bugs.launchpad.net/skyline-apiserver/+bug/2156497 is now public | 15:44 |
| JayF | Would folks think it's valuable for OpenStack to issue an OSSN for the recent KVM vuln? I don't think we'd have much to add over Vexxhost, but we could help with reach? RE: https://vexxhost.com/blog/cve-2026-53359-openstack-kvm-x86-compute-isolation/ | 16:12 |
| fungi | recent kvm vulns, particularly "januscape" (x86_64) and "itscape" (aarch64) | 16:15 |
| gouthamr | ^ makes sense to me to bundle things up, would be nice to get someone on #openstack-nova to co-author or review this though | 16:34 |
| *** opendevstatus_ is now known as opendevstatus__ | 16:38 | |
| *** opendevstatus__ is now known as opendevstatus | 16:38 | |
| *** opendevstatus is now known as Guest12850 | 16:38 | |
| gouthamr | i've a few OSSNs getting prepped; should we prioritize the yaml conversion? we wouldn't stop adding to the wiki until the web publishing actually happens.. | 16:41 |
| gouthamr | or should we schedule this thing; like maybe, at M-3, OSSNs will stop being plaintext files/wiki updates and the website will go live | 16:41 |
| JayF | Sop | 16:46 |
| JayF | sarhiri: ^^ gouthamr has some thoughts about the migration | 16:47 |
| fungi | from the looks of it, we could adapt new ossn articles easily after the bulk conversion merges, without needing to constantly update the patch series | 16:59 |
| fungi | i'm hoping i can start reviewing that work this week, but available time will depend on how long it takes me to catch up from vacation and what else comes up | 17:00 |
| gouthamr | i agree, will probably help sarhiri if we start commenting on gerrit changes :) | 17:00 |
| gouthamr | i'll look soon too.. | 17:01 |
| gouthamr | so, sarhiri: you may have already anticipated that we're going to keep writing OSSNs.. so you may see new things show up as you work through this | 17:01 |
| JayF | yeah I think that's an OK result. If we get a full chain of patches building and have a couple of stragglers, that'd be the best state OSSN building has ever been in lol | 17:02 |
| gouthamr | ++ | 17:02 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!