OpenStack Security Advisory

  1. Bug #1988026
  2. Comment #7

Comment 7 for bug 1988026

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.opendev.org/c/openstack/neutron/+/855580
Committed: https://opendev.org/openstack/neutron/commit/01fc2b9195f999df4d810df4ee63f77ecbc81f7e
Submitter: "Zuul (22348)"
Branch: master

commit 01fc2b9195f999df4d810df4ee63f77ecbc81f7e
Author: Brian Haley <email address hidden>
Date: Thu Sep 1 21:13:44 2022 -0400

    Do not allow a tenant to create a default SG for another one

    The attempt to list security groups for a project, or any
    random string, can create a default SG for it. Only allow if
    privileges support it.

    Closes-bug: #1988026

    Change-Id: Ieef7011f48cd2188d4254ff16d90a6465bbabfe3