OpenStack Security Advisory

  1. Bug #1502933
  2. Comment #21

Comment 21 for bug 1502933

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: ICMPv6 anti-spoofing rules are too permissive

Just to be clear, the ICMPv6 source address spoof isn't addressed by bug 1558658 patch (I39dc0e23fc118ede19ef2d986b29fc5a8e48ff78).

Since both issues abuse the same fundamental flaw, it seems like a good opportunity to bundle both fix in a single advisory.

However, because we need different patch, this will likely requires 2 different CVE numbers...

Does it makes sense ?