OpenStack Security Advisory

  1. Bug #1813007
  2. Comment #0

Comment 0 for bug 1813007

Revision history for this message
Diko Parvanov (dparv) wrote : Unable to install new flows on compute nodes when having broken security group rules

It appears that we have found that neutron-openvswitch-agent appears to have a bug where a security group that has two different port ranges that overlap tied to the same parent security group will cause neutron to not be able to configure networks on the compute nodes where those security groups are present.
Those are the broken security rules: https://pastebin.canonical.com/p/wSy8RSXt85/
Here is the log when we discovered the issue: https://pastebin.canonical.com/p/wvFKjNWydr/