@stackflag.bsky.socialCVE-2026-93858 - mistral
The Mistral workflow service in OpenStack (up to version 23.0.0) can be tricked into running any local command that a user supplies as a proxy setting. This means an authenticatedβ¦
Too many irrelevant or confusing CVEs? Use stackflag.com
@openinfra.orgThe @OpenStack.org community has officially announced OpenStack 2026.2 Hibiscus, advancing confidential computing and security while expanding infrastructure support for high-performance AI workloads across the open source ecosystem.
@openstack.orgOpenStack 2026.2 Hibiscus advances confidential computing and security while expanding support for high-performance AI workloads.
Thank you to the almost 600 contributors who helped build this release!
@newsen.bsky.socialOpenStack Hibiscus Paves the Way for Enhanced AI Infrastructure and Security #None #AI_Infrastructure #OpenStack #Hibiscus
@akyriako.bsky.socialo7k: a k9s-style TUI for OpenStack. Still an early-beta but already covering keystone, cinder, glance, swift, nova, neutron, designate, heat and octavia. Any provider can extend it for their very own OpenStack-based cloud via plugins
#openstack #openstacktui #openstackcli #golang #k9s #privatecloud
@midnattssol.bsky.socialWhat if OpenStack had its own 'k9s' ? π
#openstack #openstacktui #openstackcli #golang #cloudcomputing #privatecloud #tui
@hugovalters.bsky.socialCVE-2026-93854: OpenStack Blazar before 17.0.1 lets any authenticated user update or delete leases they do not own due to a broken authorization lookup. No CVSS or patch yet. Restrict Blazar API access now. https://www.valtersit.com/cve/CVE-2026-93854/ #CVE #infosec #OpenStack
@stackflag.bsky.socialCVE-2026-97404 - zaqar
The Zaqar messaging service in OpenStack (versions before 22.0.2) can be tricked into accepting an empty URL-Signature header. This lets anyone who knows a projectβs identifier read,β¦
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-94572 - octavia
The Octavia component that creates load balancers can accept special characters in TLS settings without checking them. An attacker who controls a TLSβenabled load balancer couldβ¦
Too many irrelevant or confusing CVEs? Use stackflag.com
@akyriako.bsky.socialππ‘ππ π’π ππ©ππ§πππππ€ π‘ππ π’ππ¬ π¨π°π§ 'π€9π¬'?
Thatβs the idea behind o7k (pronounced o-sju-k πΈπͺ), a fast, keyboard-driven terminal UI that makes exploring and operating your cloud resources feel natural.
Check it out here: github.com/akyriako/o7k
@sergiocuellar.bsky.socialQuantum computers are set to challenge OpenStack's encryption methods. Shor's algorithm poses a threat to RSA and ECDSA algorithms used by OpenStack. A systematic analysis uncovered hardcoded algorithm choices across the ecosystem. Plans are in place to make OpenStack quantum-ready. #OpenStack
@openinfra.orgTomorrow, the #OpenInfraSummit Asia kicks off alongside our friends at the Cloud Native and PyTorch Communities!
This week, the community will collaborate across #OpenStack, #Kubernetes, #PyTorch, and #KataContainers, bringing the entire tech stack together under one roof.
@openstack.orgModernizing translation pipelines for global open source projects does not require massive GPU clusters.
Discover how the OpenStack internationalization team combined Weblate, @Zuul, and CPU-based AI to scale accessibility on September 9.
More OpenStack sessions: buff.ly/P5YE18o
@openstack.orgMoving GitLab's control plane into an OpenStack cloud creates greater digital sovereignty.
Youssef EL BOUKHARI breaks down the architecture, while highlighting trade-offs between control, complexity, and operational responsibility.