Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions blog/2026-01-22-introducing-docs-blog.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,8 @@ of the reference implementation and also had a vast collection of links and tech
content, a lot of which was related to the reference implementation. For newcomers,
it was somewhat hard to distill the various aspects and goals of SCS though.

<!-- truncate -->

With the end of the funded project, we split the activities into different organizations
with distinct goals:

Expand Down
2 changes: 2 additions & 0 deletions blog/2026-01-23-cve-2026-22797.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,8 @@ public.
Instead, we have taken the time to sort out the publication place in the the new Docs
blog space, as described by the previous blog post.

<!-- truncate -->

## The vulnerability

Keystone is the central Identity and Access Management component in OpenStack.
Expand Down
2 changes: 2 additions & 0 deletions blog/2026-02-17-cve-2026-24708.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,8 @@ on the backing image file without an explicit format specifier, opening up the
possibility to overwrite files on the host system by writing a malicious QCOW header
to a root or ephemeral disk.

<!-- truncate -->

This vulnerability has been assigned [CVE-2026-24708](https://nvd.nist.gov/vuln/detail/CVE-2026-24708).

## Impact on the SCS software ecosystem
Expand Down
2 changes: 2 additions & 0 deletions blog/2026-04-08-cve-2026-33551.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,8 @@ giving AppCreds that are _restricted_ or that have limited roles the
ability to create EC2 credentials with the full privileges of the user
who created the AppCred.

<!-- truncate -->

This issue was reported by Maxence Bornecque from Orange Cyberdefense CERT
Vulnerability Intelligence Watch Team and has been assigned
[CVE-2026-33551](https://nvd.nist.gov/vuln/detail/CVE-2026-33551).
Expand Down
2 changes: 2 additions & 0 deletions blog/2026-05-10-kernel-root-exploits.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ particular, normal users must not achieve the system administrator (root)
privileges. Where the kernel fails to ensure this, we have a "local root"
vulnerability, a Local Privilege Escalation (LPE).

<!-- truncate -->

The Linux kernel is a large and a complex beast. On one hand it has sophisticated
mechanisms to get really good performance out of increasingly complex hardware.
On the other hand, it comes with a huge variety of device drivers. From time to
Expand Down
2 changes: 2 additions & 0 deletions blog/2026-05-28-keystone.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,8 @@ policies are enforced. These vulnerabilities allow authenticated attackers to
bypass security boundaries, impersonate users, and potentially escalate
privileges to cloud administrator.

<!-- truncate -->

The core issues are:

- **RBAC Policy Bypass (CVE-2026-42999):** An attacker can inject RBAC policy
Expand Down
2 changes: 2 additions & 0 deletions blog/2026-06-16-cve-2026-46448.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,8 @@ mapped. While the assigned quota is still observed, the vulnerability may cause
exhaustion of resources and confusion of the scheduler (placement) state and
thus may result in a Denial of Service for certain resource types.

<!-- truncate -->

This issue was reported by Erichen, Institute of Computing Technology, Chinese
Academy of Sciences and was subsequently analyzed and handled by Goutham Pacha Ravi,
Dan Smith and Sylvain Bauza. It was assigned CVE-2026-46448.
Expand Down
11 changes: 0 additions & 11 deletions docs.package.json
Original file line number Diff line number Diff line change
Expand Up @@ -53,17 +53,6 @@
"target": "docs/04-operating-scs/01-guides",
"label": "openstack-health-monitor"
},
{
"repo": "SovereignCloudStack/scs-health-monitor",
"source": [
"docs/overview.md",
"docs/Workflow.md",
"docs/Testflow.md",
"docs/ObservabilityStack/SetupObservabilityStack.md"
],
"target": "docs/04-operating-scs/components",
"label": "scs-health-monitor"
},
{
"repo": "SovereignCloudStack/central-api",
"source": "docs/*.md",
Expand Down
19 changes: 16 additions & 3 deletions docusaurus.config.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,12 @@ const config = {
url: 'https://docs.scs.community',
baseUrl: '/',
onBrokenLinks: 'warn',
onBrokenMarkdownLinks: 'warn',
favicon: 'img/favicon.png',
markdown: {
mermaid: true
mermaid: true,
hooks: {
onBrokenMarkdownLinks: 'warn'
}
},
organizationName: 'SovereignCloudStack', // Usually your GitHub org/user name.
projectName: 'docs', // Usually your repo name.
Expand Down Expand Up @@ -120,7 +122,18 @@ const config = {
id: 'standards',
path: 'standards',
routeBasePath: 'standards',
sidebarPath: require.resolve('./sidebarsStandards.js')
sidebarPath: require.resolve('./sidebarsStandards.js'),
// The vendored standards content (see getDocs.js) ships a README.md
// that Docusaurus would render at `/standards/` — the same route as our
// own standards/index.md. Skip it; index.md is the page we want there.
// Repeats Docusaurus' default excludes, which this option replaces.
exclude: [
'README.md',
'**/_*.{js,jsx,ts,tsx,md,mdx}',
'**/_*/**',
'**/*.test.{js,jsx,ts,tsx}',
'**/__tests__/**'
]
}
],
'./src/plugins/docusaurus-plugin-matomo-analytics/index.js',
Expand Down
Loading
Loading