Open Stack

On 05/15/2015 12:38 PM, George Shuklin wrote:
> Just to let everyone know: broken antispoofing is not an 'security
> issue' and the fix is not planned to be backported to Juno/kilo.
>
> https://bugs.launchpad.net/bugs/1274034
>
> What can I say? All hail devstack! Who care about production?

George, I can understand you are frustrated with this issue and feel 
strongly about it. However, I don't think notes like this are all that 
productive.

Would a more productive action be to tell the operator community a bit 
about the vulnerability and suggest appropriate remedies to take?

Best,
-jay