Debian Patches

Status for neutron/2:21.0.0-7+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
Remove-xenapi-from-neutron-ml2-config-opts.patch Remove xenapi from neutron ml2 config opts This patch just remove xenapi from setup.cfg
as it has been already removed in [1].
.
[1] https://review.opendev.org/c/openstack/neutron/+/787736

diff --git a/setup.cfg b/setup.cfg
index d72492d..19d9d8c 100644		 Michal Arbet <michal.arbet@ultimum.io> yes 2022-10-19
Load_the_required_configuration_options_in_the_UT_classes.patch Load the required configuration options in the UT classes Some test classes are not loading the required configuration options
during the setup process. That prevents from launching thoses tests
or classes individually. This patch solves this issue by importing the
required options in the "setUp" test class method.

===================================================================		 Rodolfo Alonso Hernandez <ralonsoh@redhat.com> yes upstream upstream, https://review.opendev.org/c/openstack/neutron/+/861869 2022-10-19
fix-path-of-healthcheck_disable.patch Fix path of healthcheck_disable Thomas Goirand <zigo@debian.org> no 2022-11-14
Load_the_required_configuration_options_in_the_UT_classes_2.patch Load the required configuration options in the UT classes
Some test classes are not loading the required configuration options
during the setup process. That prevents from launching thoses tests
or classes individually. This patch solves this issue by importing the
required options in the "setUp" test class method.

This is breaking python 3.11 on Debian, not possible to test
in the gate at the moment.		 Brian Haley <haleyb.dev@gmail.com> no 2022-11-14
CVE-2026-55707-stable-2025.1.patch Prevent cross-project subnet onboard on shared networks Non-admin callers with visibility to a shared or RBAC network
could onboard subnets owned by another project into their own
subnetpool via ``onboard_network_subnets()``. This allowed the
caller to alter the address-scope and L3 routing state of the
network owner's routers.
.
Add a project ownership check that rejects non-admin requests
when the caller's ``project_id`` does not match the network's
``project_id``.

===================================================================		 Rodolfo Alonso Hernandez <ralonsoh@redhat.com> yes debian upstream upstream, https://review.opendev.org/c/openstack/neutron/+/999133 2026-07-31
OSSN-0102-Fix_PF_GET_PUT_parent_floating_IP_validation.patch OSSN-0102 Fix PF GET/PUT parent floating IP validation Verify the port-forwarding floating IP id matches the
child floating IP id so we satisfy the policy requirements
for GET and PUT operations.

===================================================================		 Brian Haley <haleyb.dev@gmail.com> yes debian upstream upstream, https://review.opendev.org/c/openstack/neutron/+/991778 2026-07-28
OSSN-0102_Fix_cross-project_access_to_router_conntrack_helpers.patch OSSN-0102: Fix cross-project access to router conntrack helpers Singleton conntrack helper API operations (GET/PUT/DELETE on
/routers/{router_id}/conntrack_helpers/{id}) authorized the request
against the URL ``router_id`` but loaded the helper by child ID only.
A project member with access to one router could therefore operate on
another tenant's helper by reusing its UUID in the path.
.
Validate that the loaded helper's ``router_id`` matches the URL
``router_id`` before returning, updating, or deleting it, following
the same pattern used for floating IP port forwarding sub-resources.

===================================================================		 Rodolfo Alonso Hernandez <ralonsoh@redhat.com> yes debian upstream upstream, https://review.opendev.org/c/openstack/neutron/+/990127 2026-07-28

All known versions for source package 'neutron'

Links