Reviewed:  https://review.opendev.org/c/openstack/neutron/+/824641
Committed: 
https://opendev.org/openstack/neutron/commit/ef97019c92e96d0bb17785daaf570b04c68be500
Submitter: "Zuul (22348)"
Branch:    master

commit ef97019c92e96d0bb17785daaf570b04c68be500
Author: Slawek Kaplonski <[email protected]>
Date:   Thu Jan 13 20:35:53 2022 +0100

    Add upgrade check for extra DHCP options
    
    Some time ago with patches [1] and [2] we trimmed extra_dhcp_opt name
    and value to first newline character before using them in the dnsmasq
    and later added API validator to not allow such names and/or values with
    newline character in it at all.
    This patch adds upgrade check to warn users if they have old entries
    with newline characters in the database already.
    
    Related-Bug: #1939733
    
    [1] https://review.opendev.org/c/openstack/neutron/+/806746
    [2] https://review.opendev.org/c/openstack/neutron-lib/+/811708
    
    Change-Id: I9a45d918b5a90f8fc50a9ec43b2a67cf582eb369

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1939733

Title:
  [OSSA-2021-005] Arbitrary dnsmasq reconfiguration via extra_dhcp_opts
  (CVE-2021-40085)

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1939733/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to