Reviewed: https://review.opendev.org/c/openstack/neutron/+/806862 Committed: https://opendev.org/openstack/neutron/commit/e291dca5d97fc986fc7d85b8ea256a483d815277 Submitter: "Zuul (22348)" Branch: stable/rocky
commit e291dca5d97fc986fc7d85b8ea256a483d815277 Author: Slawek Kaplonski <[email protected]> Date: Mon Aug 23 13:01:37 2021 +0200 Remove dhcp_extra_opt value after first newline character Passing newline to the dnsmasq may cause security issues, especially that in case of Neutron that dhcp options' values are controlled by cloud users. This patch removes everything what is after first newline character in the dhcp_extra_opt's values before passing them to dnsmasq. Conflicts: neutron/tests/unit/agent/linux/test_dhcp.py Closes-Bug: #1939733 Change-Id: Ifeaf258f0b5ea86f25620ac4116d618980a7272e (cherry picked from commit df891f0593d234e01f27d7c0376d9702e178ecfb) ** Changed in: cloud-archive/rocky Status: New => Fix Committed ** Changed in: cloud-archive/queens Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1939733 Title: [OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085) To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1939733/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
