OpenStack Security Advisory

  1. Bug #1757482
  2. Comment #18

Comment 18 for bug 1757482

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (stable/pike)

Reviewed: https://review.openstack.org/584325
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=988eceac27a9ad91775376b3b3fedf84963663a5
Submitter: Zuul
Branch: stable/pike

commit 988eceac27a9ad91775376b3b3fedf84963663a5
Author: Miguel Lavalle <email address hidden>
Date: Thu Jun 14 09:21:09 2018 -0500

    Disallow router interface out of subnet IP range

    Currently, a non privileged tenant can add a router interface to a
    shared / external network's subnet with an IP address outside the
    subnet's allocation pool, creating a security risk. This patch prevents
    tenants who are not the subnet's owner or admin from assigning a router
    interface an IP address outside the subnet's allocation pool.

    Change-Id: I32e76a83443dd8e7d79b396499747f29b4762e92
    Closes-Bug: #1757482
    (cherry picked from commit 54aa6e81cb17b33ce4d5d469cc11dec2869c762d)