Issue Multiple "expired" flows consume memory resources of CONFIG DS which leads to Controller shutdown. The following issue was discovered and reported by Vaibhav Hemant Dixit. Summary Multiple "expi

This email is a notification of a vulnerability discovered in OpenDayLights AAA module. The current status of the vulnerability is open / public, so no embargo is currently active. opendaylight-adviso

For the five recently disclosed vulnerabilities: * CVE-2017-1000359 * CVE-2017-1000360 * CVE-2017-1000357 * CVE-2017-1000358 * CVE-2017-1000361 There are known and documented mitigations described her

Five recent security advisories around OpenDaylight have been added here:https://wiki.opendaylight.org/view/Security_Advisories Two of them (CVE-2017-1000359, CVE-2017-1000360) were patched in Boron-S

Hi All OpenDaylight Lithium GA has now been released, including patches for several security vulnerabilities: [Moderate] CVE-2015-3414 CVE-2015-3416 AAA: SQLite memory corruption leading to DoS and po

Hi All OpenDaylight Helium SR3 has now been released, including patches for two security vulnerabilities: [Important] CVE-2015-1778 OpenDaylight: authentication bypass [Moderate] CVE-2015-1611 CVE-201

It was found that the defense4all framework's "dump" method allows a user to request that report data is exported to a file on the server's filesystem. The user can specify any path, and the server wi