neutron

  1. Bug #1757482
  2. Comment #15

Comment 15 for bug 1757482

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (stable/queens)

Reviewed: https://review.openstack.org/584324
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=8287d7f546e4ffe7a2ac32df50d6b465484f81cc
Submitter: Zuul
Branch: stable/queens

commit 8287d7f546e4ffe7a2ac32df50d6b465484f81cc
Author: Miguel Lavalle <email address hidden>
Date: Thu Jun 14 09:21:09 2018 -0500

    Disallow router interface out of subnet IP range

    Currently, a non privileged tenant can add a router interface to a
    shared / external network's subnet with an IP address outside the
    subnet's allocation pool, creating a security risk. This patch prevents
    tenants who are not the subnet's owner or admin from assigning a router
    interface an IP address outside the subnet's allocation pool.

    Change-Id: I32e76a83443dd8e7d79b396499747f29b4762e92
    Closes-Bug: #1757482
    (cherry picked from commit 54aa6e81cb17b33ce4d5d469cc11dec2869c762d)