neutron/fix-newline-chars-in-dhcp-extra-options-bf86d30371556d63.yaml at 63bac0fb435d66ab3d1e1775435a5b6ab6752c6e - neutron - OpenDev: Free Software Needs Free Tools

openstack/neutron

Slawek Kaplonski 757d8c6e32 Remove dhcp_extra_opt value after first newline character

Passing newline to the dnsmasq may cause security issues, especially
that in case of Neutron that dhcp options' values are controlled by
cloud users.
This patch removes everything what is after first newline character
in the dhcp_extra_opt's values before passing them to dnsmasq.

Closes-Bug: #1939733
Change-Id: Ifeaf258f0b5ea86f25620ac4116d618980a7272e
(cherry picked from commit df891f0593)

2021-09-01 08:06:29 +00:00

7 lines

241 B

YAML

Raw Blame History

 ---
 security:
   - |
     Fix `bug 1939733 <https://bugs.launchpad.net/neutron/+bug/1939733>`_ by
     dropping from the dhcp extra option values everything what is after first
     newline (``\n``) character before passing them to the dnsmasq.