)]}'
{"security-notes/OSSN-0001":[{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"af3000d37d15c1e363cb637d122b0244b3b6b887","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Selecting LXC as Nova Virtualization Driver can lead to data compromise"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary### "},{"line_number":5,"context_line":"LXC does not provide the same level of separation as hypervisors when chosen as"},{"line_number":6,"context_line":"the Nova \u0027virtualization driver\u0027. Attempting to use LXC as a drop in"},{"line_number":7,"context_line":"replacement for a hypervisor can result in data exposure between tenants."}],"source_content_type":"application/octet-stream","patch_set":2,"id":"baada198_d0403934","line":4,"updated":"2014-08-11 15:35:25.000000000","message":"nit: remove this whitespace","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"4327c478a22145663b0d6e0a2408fa10e2e59b9a","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Selecting LXC as Nova Virtualization Driver can lead to data compromise"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary### "},{"line_number":5,"context_line":"LXC does not provide the same level of separation as hypervisors when chosen as"},{"line_number":6,"context_line":"the Nova \u0027virtualization driver\u0027. Attempting to use LXC as a drop in"},{"line_number":7,"context_line":"replacement for a hypervisor can result in data exposure between tenants."}],"source_content_type":"application/octet-stream","patch_set":2,"id":"baada198_b14e606c","line":4,"in_reply_to":"baada198_d0403934","updated":"2014-08-11 20:01:51.000000000","message":"Done","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"}],"security-notes/OSSN-0008":[{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"af3000d37d15c1e363cb637d122b0244b3b6b887","unresolved":false,"context_lines":[{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Affected Services / Software ###"},{"line_number":12,"context_line":"Horizon, Nova, noVNC proxy, SPICE console, Grizzly, Havana"},{"line_number":13,"context_line":" "},{"line_number":14,"context_line":"### Discussion ###"},{"line_number":15,"context_line":"Currently with a single user token, no restrictions are enforced on the"},{"line_number":16,"context_line":"number or frequency of noVNC or SPICE console sessions that may be"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"baada198_506c29cf","line":13,"updated":"2014-08-11 15:35:25.000000000","message":"nit: remove this whitespace","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"4327c478a22145663b0d6e0a2408fa10e2e59b9a","unresolved":false,"context_lines":[{"line_number":10,"context_line":""},{"line_number":11,"context_line":"### Affected Services / Software ###"},{"line_number":12,"context_line":"Horizon, Nova, noVNC proxy, SPICE console, Grizzly, Havana"},{"line_number":13,"context_line":" "},{"line_number":14,"context_line":"### Discussion ###"},{"line_number":15,"context_line":"Currently with a single user token, no restrictions are enforced on the"},{"line_number":16,"context_line":"number or frequency of noVNC or SPICE console sessions that may be"}],"source_content_type":"application/octet-stream","patch_set":2,"id":"baada198_d151140e","line":13,"in_reply_to":"baada198_506c29cf","updated":"2014-08-11 20:01:51.000000000","message":"Done","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"}],"security-notes/README.md":[{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"af3000d37d15c1e363cb637d122b0244b3b6b887","unresolved":false,"context_lines":[{"line_number":5,"context_line":"of security related issues. Security notes are similar to advisories; they"},{"line_number":6,"context_line":"address vulnerabilities in 3rd party tools typically used within OpenStack"},{"line_number":7,"context_line":"deployments and provide guidance on common configuration mistakes that can"},{"line_number":8,"context_line":"result in an insecure operating environment. "},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Repository Layout"},{"line_number":11,"context_line":"-----------------"}],"source_content_type":"text/x-gfm","patch_set":2,"id":"baada198_b0b3c54c","line":8,"updated":"2014-08-11 15:35:25.000000000","message":"nit: remove this whitespace","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"4327c478a22145663b0d6e0a2408fa10e2e59b9a","unresolved":false,"context_lines":[{"line_number":5,"context_line":"of security related issues. Security notes are similar to advisories; they"},{"line_number":6,"context_line":"address vulnerabilities in 3rd party tools typically used within OpenStack"},{"line_number":7,"context_line":"deployments and provide guidance on common configuration mistakes that can"},{"line_number":8,"context_line":"result in an insecure operating environment. "},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Repository Layout"},{"line_number":11,"context_line":"-----------------"}],"source_content_type":"text/x-gfm","patch_set":2,"id":"baada198_113f0cb6","line":8,"in_reply_to":"baada198_b0b3c54c","updated":"2014-08-11 20:01:51.000000000","message":"Done","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"}],"security-notes/template.txt":[{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"af3000d37d15c1e363cb637d122b0244b3b6b887","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"### Affected Services / Software ###"},{"line_number":8,"context_line":"A comma separated list of affected services and OpenStack releases."},{"line_number":9,"context_line":" "},{"line_number":10,"context_line":"### Discussion ###"},{"line_number":11,"context_line":"A detailed discussion of the problem.  This should have enough detail"},{"line_number":12,"context_line":"that the person reading can determine if their deployment is affected,"}],"source_content_type":"text/plain","patch_set":2,"id":"baada198_104f116b","line":9,"updated":"2014-08-11 15:35:25.000000000","message":"nit: remove this whitespace","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"4327c478a22145663b0d6e0a2408fa10e2e59b9a","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"### Affected Services / Software ###"},{"line_number":8,"context_line":"A comma separated list of affected services and OpenStack releases."},{"line_number":9,"context_line":" "},{"line_number":10,"context_line":"### Discussion ###"},{"line_number":11,"context_line":"A detailed discussion of the problem.  This should have enough detail"},{"line_number":12,"context_line":"that the person reading can determine if their deployment is affected,"}],"source_content_type":"text/plain","patch_set":2,"id":"baada198_51450442","line":9,"in_reply_to":"baada198_104f116b","updated":"2014-08-11 20:01:51.000000000","message":"Done","commit_id":"f2231f16a6e35d7e43d556b2c35d5aa4f1894ba3"}]}