Open Stack

> One special case with this backport is that it is a security impact
> fix and OSSN was issued [1].
> The fix was already shipped, so when we revert the patch we also need
> to consider operators who
> already apply this fix and we need another solution for them.

OSSN-0020 doesn't mention this backport, it has other proposed solutions.

> What do you think about disabling the fix if contrack is not available.

This should be done in master first. But what would it do when tool it
not available?


Cheers,
Alan