Comment 12 for bug 1558658

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Security Groups do not prevent MAC and/or IPv4 spoofing in DHCP requests

In the past we've considered some bugs only impacting shared tenant networks to be impractical vulnerabilities given the warnings in the security guide about shared network deployment models (though I'm failing to find specific precedent bugs to cite at the moment). That said, if the proposed patch fixes this and can be backported quickly to supported stable branches (mitaka, liberty, kilo) without an adverse behavior change then we could follow embargo process. I'm just wary, as the related IPv6 bug has been public for months with no movement.