[GHSA-r3jh-qhgj-gvr8] Denial of service in neutron

[bottarocarlo]

Updates

• Affected products

Comments
I am adding a fixed version of a package to GitHub's vulnerability database that previously lacked a neutron entry. ref https://vulert.com/vuln-db/CVE-2023-3637

[shelbyc]

Hi @bottarocarlo, unfortunately, there is no version 22.0.3 of Neutron according to the following links:

• openstack/neutron@22.0.2...22.0.3
• https://pypi.org/project/neutron/#history

The next version of Neutron appears to be 22.1.0 but I'm unable to find a commit that mentions closing https://bugzilla.redhat.com/show_bug.cgi?id=2222270 :

• openstack/neutron@22.0.2...22.1.0

Are you able to find any commits or release notes that mention fixing bug 2222270 or CVE-2023-3637?

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.