Comment 53 for bug 1873290

sorry, hit `post ` too fast
so from the comments I think the code logic is changed from Pike
which means, actually the code before Pike should not be affected
that's the reason why only a test case is added but no real code updated
guess that's the reason ..

so it means it will not affect keystone which is prior to Pike
while the CVE says all keystone prior to 15.0.0..