The upstream stable/yoga branch reached end of maintenance on 2024-02-05 and the stable/zed backport for the neutron fix merged 2024-03-29, so this report would have been eligible for a security advisory at that time. Sorry this seems to have slipped through the cracks.
Now that we're 16 months late, is there a desire from the Neutron team to see an advisory published about this defect, or is the severity not significant enough to bother? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058138 Title: [SRU] Neutron OVSHybridIptablesFirewallDriver and IptablesFirewallDriver don't enforce Remote address groups To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/2058138/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs