OpenStack Security Advisory

  1. Bug #1988026
  2. Comment #19

Comment 19 for bug 1988026

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (stable/yoga)

Reviewed: https://review.opendev.org/c/openstack/neutron/+/858469
Committed: https://opendev.org/openstack/neutron/commit/fd7fb0e9d8c602380f54975367d935ab69e10c05
Submitter: "Zuul (22348)"
Branch: stable/yoga

commit fd7fb0e9d8c602380f54975367d935ab69e10c05
Author: Brian Haley <email address hidden>
Date: Thu Sep 1 21:13:44 2022 -0400

    Do not allow a tenant to create a default SG for another one

    The attempt to list security groups for a project, or any
    random string, can create a default SG for it. Only allow if
    privileges support it.

    Closes-bug: #1988026

    Change-Id: Ieef7011f48cd2188d4254ff16d90a6465bbabfe3
    (cherry picked from commit 01fc2b9195f999df4d810df4ee63f77ecbc81f7e)