#ossa

0 stories this week · 4 this month · 11 in 6 months · mostly security

Stories per day · 30 days

11 stories, newest first · one card per story

OSSA-2026-050 names CVE-2026-115642 and lists several Keystonemiddleware releases, but the posted description is cut off.

OSSA-2026-049 assigns CVE-2026-115638 and lists Ironic lines from 16.2.0 through builds before 39.0.1.

OSSA-2026-048 lists Ironic from 17.0.0 through 39.0.1; the posted description is cut off.

The notice lists Cinder 9.0.0 before 26.3.1 and the exact releases 27.0.0, 28.0.0, and 29.0.0.

oss-securityOct 9, 2026high

OpenStack Mistral has four authorization and privilege flaws in OSSA-2026-044.

oss-securityOct 7, 2026high

OpenStack Zaqar WebSocket project substitution flaw permits cross-project queue access across multiple releases, fixed in 22.0.3 and 23.0.1.

oss-securitySep 24, 2026high

OpenStack Zaqar advisory CVE-2026-97404: an empty URL-Signature header can bypass authentication.

OpenStack Swift tempurl bug CVE-2026-97149 can leak information across containers.

oss-securitySep 22, 2026high

OpenStack Octavia advisory warns HAProxy config injection can lead to remote code execution.

OpenStack Blazar's V2 lease API has authorization flaws CVE-2026-93852 and CVE-2026-93854.

oss-securitySep 21, 2026high

OpenStack Octavia advisory warns HAProxy configuration injection can lead to remote code execution.

Stories tagged #ossa