openstack.org Security Communication

Registered by Lloyd Dewolf

Openstack.org needs a Security landing page with how to report security issues, and describing how these reported issues are handled.

Thierry Carrez (ttx) did a fantastic job over the last months moving this glacier, and he has a sold draft at http://etherpad.openstack.org/8hWNQwkWf9 which I'll Export, attach, and then review for a copy edit.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Undefined
Drafter:
None
Direction:
Needs approval
Assignee:
None
Definition:
Obsolete
Series goal:
None
Implementation:
Started
Milestone target:
None
Started by
Tom Fifield
Completed by
Tom Fifield

Related branches

Sprints

Whiteboard

Oh my, blueprints still don't allow attachments :(
https://answers.launchpad.net/launchpad/+question/88181

Maybe this should just have been a bug report... actually let's use this blueprint to iterate and evolve the security communication.

http://www.openstack.org/projects/openstack-security/ is the current home for this.

2013-04-17 focus for this cycle (Havana) will be on vulnerability patching infrastructure. It doesn't look like security.openstack.org will happen this release.
https://etherpad.openstack.org/HavanaVulnerabilityManagement

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.