{"id":"CVE-2017-1002201","aliases":["DEBIAN-CVE-2017-1002201","DLA-1986-1","DLA-2864-1","EUVD-2019-0713","GHSA-r53w-g4xm-3gc6","SNYK-RUBY-HAML-20362","SUSE-SU-2019:2932-1","SUSE-SU-2019:3270-1","SUSE-SU-2020:0640-1","UBUNTU-CVE-2017-1002201"],"status":"published","title":"Haml vulnerable to cross-site scripting","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01452,"percentile":0.73557,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2019-10-15T17:35:57Z","modified":"2026-10-20T10:48:01Z","fixes":[{"ecosystem":"RubyGems","package":"haml","fixed_in":["5.0.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"ruby-haml","fixed_in":["5.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby-haml","fixed_in":["5.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ruby-haml","fixed_in":["5.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"ruby-haml","fixed_in":["4.0.5-2+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"ruby-haml","fixed_in":["4.0.7-1+deb9u1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-haml","fixed_in":["4.0.6-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-haml","fixed_in":["4.0.6-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-haml","fixed_in":["4.0.6-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ruby-haml","fixed_in":["4.0.5-2+deb8u1build0.14.04.1~esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.5-2+deb8u1"}]}],"versions":["4.0.5-2"]},{"source":"osv","ecosystem":"Debian:9","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-1+deb9u1"}]}],"versions":["4.0.7-1"]},{"source":"osv","ecosystem":"RubyGems","package":"haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.5.0","1.5.1","1.5.2","1.7.0","1.7.1","1.7.2","1.8.0","1.8.1","1.8.2","2.0.0","2.0.1","2.0.10","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.2.0","2.2.1","2.2.10","2.2.11","2.2.12","2.2.13","2.2.14","2.2.15","2.2.16","2.2.17","2.2.18","2.2.19","2.2.2","2.2.20","2.2.21","2.2.22","2.2.23","2.2.24","2.2.3","2.2.4","2.2.5","2.2.6","2.2.8","2.2.9","3.0.0","3.0.0.beta.1","3.0.0.beta.2","3.0.0.beta.3","3.0.0.rc.1","3.0.0.rc.2","3.0.0.rc.3","3.0.0.rc.4","3.0.0.rc.5","3.0.1","3.0.10","3.0.11","3.0.12","3.0.13","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.2","3.0.21","3.0.22","3.0.23","3.0.24","3.0.25","3.0.3","3.0.4","3.0.5","3.0.6","3.0.7","3.0.9","3.1.0","3.1.0.alpha.10","3.1.0.alpha.12","3.1.0.alpha.14","3.1.0.alpha.141","3.1.0.alpha.144","3.1.0.alpha.145","3.1.0.alpha.147","3.1.0.alpha.17","3.1.0.alpha.18","3.1.0.alpha.19","3.1.0.alpha.2","3.1.0.alpha.22","3.1.0.alpha.23","3.1.0.alpha.26","3.1.0.alpha.27","3.1.0.alpha.28","3.1.0.alpha.30","3.1.0.alpha.33","3.1.0.alpha.36","3.1.0.alpha.37","3.1.0.alpha.5","3.1.0.alpha.9","3.1.1","3.1.2","3.1.3","3.1.4","3.1.5","3.1.5.beta.1","3.1.5.rc.1","3.1.6","3.1.6.rc.1","3.1.7","3.1.8","3.2.0.alpha.10","3.2.0.alpha.13","3.2.0.alpha.14","3.2.0.alpha.2","3.2.0.alpha.3","3.2.0.alpha.4","3.2.0.alpha.5","3.2.0.alpha.8","3.2.0.beta.1","3.2.0.beta.2","3.2.0.beta.3","3.2.0.rc.1","3.2.0.rc.2","3.2.0.rc.3","3.2.0.rc.4","4.0.0","4.0.0.rc.1","4.0.1","4.0.1.rc.1","4.0.2","4.0.3","4.0.4","4.0.5","4.0.6","4.0.7","4.1.0.alpha.2","4.1.0.beta.1","5.0.0.beta.2"]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"caasp-openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1560518045.ad7dc6d-1.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1573109906.0f62e9503-9.57.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1573038068.1e32b3205-9.62.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0+git.1547500033.d0fb2bf2-4.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"galera-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3.25-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.25-13.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"mariadb-connector-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-1.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-dashboard-theme-SUSE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.2-5.9.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1515995585.81ed236-12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2~dev21-7.35.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2~dev21-7.35.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.11~dev13-4.37.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.11~dev13-4.37.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"patterns-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20170124-4.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-oslo.messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.1-3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-3.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579279939.ee7da88-3.39.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575037115.0326803-3.41.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573597788.15b7984-3.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-extensions-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1534266307.db1ec28-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-extensions-nsx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1567529036.a41a037-3.6.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846045.ab9e3ea-3.20.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571777596.14dce6a-3.15.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-input-model","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1582147997.b9ed134-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845225.006843d-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573147067.09e3ea0-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572452293.e65d714-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572527728.9b34bdf-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-monasca-transform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845965.97714fb-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581024906.fbf0be3-3.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573050365.ff6fa06-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846125.584d988-3.38.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575642049.1f321d0-3.23.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-osconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581015942.2d21e63-3.42.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579261264.7dd213a-3.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.31-4.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-3.23.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1560033670.e3b5a52-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3~dev5-3.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-ironic-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-keystone-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5~dev5-3.15.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev72-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-vsphere","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1~dev133-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-4.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1569436425.8b9c49f-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-sahara-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-trove-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-cinderlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.2+git.1571845893.27f0b7b-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-congressclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-designateclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-networking-cisco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1~dev65-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-osc-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.rootwrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-taskflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-14.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-horizon-hpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-14.28.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev2-12.25.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-13.26.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579279939.ee7da88-3.39.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575037115.0326803-3.41.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573597788.15b7984-3.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-extensions-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1534266307.db1ec28-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-extensions-nsx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1567529036.a41a037-3.6.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846045.ab9e3ea-3.20.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571777596.14dce6a-3.15.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-input-model","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1582147997.b9ed134-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845225.006843d-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573147067.09e3ea0-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572452293.e65d714-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572527728.9b34bdf-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-monasca-transform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845965.97714fb-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581024906.fbf0be3-3.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573050365.ff6fa06-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846125.584d988-3.38.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575642049.1f321d0-3.23.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-osconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581015942.2d21e63-3.42.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579261264.7dd213a-3.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.31-4.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-3.23.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-dashboard-theme-SUSE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2+git.1573629528.6b21fa5-7.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1560033670.e3b5a52-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3~dev5-3.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-ironic-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-keystone-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5~dev5-3.15.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev72-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-vsphere","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1~dev133-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-4.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1569436425.8b9c49f-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-sahara-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-trove-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-cinderlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.2+git.1571845893.27f0b7b-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-congressclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-designateclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-freezegun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.9-1.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-networking-cisco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1~dev65-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-osc-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.rootwrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-taskflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-14.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-14.28.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev2-12.25.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-13.26.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1582968668.1a55c77c5-3.35.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-ha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1574286229.e0364c3-3.29.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1582911795.5081ef1da-4.34.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0+git.1575896697.a01a3a08-3.15.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.31-4.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-3.23.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-dashboard-theme-SUSE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2+git.1573629528.6b21fa5-7.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1560033670.e3b5a52-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3~dev5-3.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-ironic-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-keystone-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5~dev5-3.15.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev72-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-vsphere","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1~dev133-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-4.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1569436425.8b9c49f-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-sahara-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-trove-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-congressclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-designateclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-freezegun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.9-1.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-networking-cisco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1~dev65-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-osc-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.rootwrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-taskflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-crowbar-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.5-2+deb8u1build0.14.04.1~esm1"}]}],"versions":["4.0.3-3","4.0.5-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.6-1","4.0.7-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ruby-haml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.7-1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"haml","product":"haml"},{"vendor":"http://haml.info/","product":"haml"}],"references":[{"url":"https://github.com/haml/haml/commit/18576ae6e9bdcb4303fdbe6b3199869d289d67c2","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://snyk.io/vuln/SNYK-RUBY-HAML-20362","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202007-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00028.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1002201","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/haml/CVE-2017-1002201.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r53w-g4xm-3gc6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-1002201","tags":["advisory"]},{"url":"https://github.com/haml/haml","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192932-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1155089","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1002201","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193270-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1075812","tags":["report"]},{"url":"https://bugzilla.suse.com/1123053","tags":["report"]},{"url":"https://bugzilla.suse.com/1126088","tags":["report"]},{"url":"https://bugzilla.suse.com/1126428","tags":["report"]},{"url":"https://bugzilla.suse.com/1129729","tags":["report"]},{"url":"https://bugzilla.suse.com/1132666","tags":["report"]},{"url":"https://bugzilla.suse.com/1136035","tags":["report"]},{"url":"https://bugzilla.suse.com/1143215","tags":["report"]},{"url":"https://bugzilla.suse.com/1152916","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2628","tags":["web"]},{"url":"https://bugzilla.suse.com/SOC-10092","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10133","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10717","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10947","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200640-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1077717","tags":["report"]},{"url":"https://bugzilla.suse.com/1117080","tags":["report"]},{"url":"https://bugzilla.suse.com/1117840","tags":["report"]},{"url":"https://bugzilla.suse.com/1123191","tags":["report"]},{"url":"https://bugzilla.suse.com/1148158","tags":["report"]},{"url":"https://bugzilla.suse.com/1152007","tags":["report"]},{"url":"https://bugzilla.suse.com/1154235","tags":["report"]},{"url":"https://bugzilla.suse.com/1155942","tags":["report"]},{"url":"https://bugzilla.suse.com/1156305","tags":["report"]},{"url":"https://bugzilla.suse.com/1156669","tags":["report"]},{"url":"https://bugzilla.suse.com/1156914","tags":["report"]},{"url":"https://bugzilla.suse.com/1157028","tags":["report"]},{"url":"https://bugzilla.suse.com/1157206","tags":["report"]},{"url":"https://bugzilla.suse.com/1157482","tags":["report"]},{"url":"https://bugzilla.suse.com/1158675","tags":["report"]},{"url":"https://bugzilla.suse.com/1160048","tags":["report"]},{"url":"https://bugzilla.suse.com/1160878","tags":["report"]},{"url":"https://bugzilla.suse.com/1160883","tags":["report"]},{"url":"https://bugzilla.suse.com/1160895","tags":["report"]},{"url":"https://bugzilla.suse.com/1160912","tags":["report"]},{"url":"https://bugzilla.suse.com/1161351","tags":["report"]},{"url":"https://bugzilla.suse.com/1161517","tags":["report"]},{"url":"https://bugzilla.suse.com/1162388","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7595","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-1002201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1002201","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-1002201","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-15T17:35:57Z","modified":"2024-08-05T22:08:11.499Z","updated_at":"2026-11-02T14:33:19.848632Z"}],"euvd":[{"id":"EUVD-2019-0713","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-15T17:35:57Z","modified":"2024-08-05T22:08:11Z","updated_at":"2026-11-03T02:23:02.73611Z"}],"ghsa":[{"id":"GHSA-r53w-g4xm-3gc6","title":"Haml vulnerable to cross-site scripting","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like `\u003c \u003e \" '` must be escaped properly. In this case, the `'` character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-21T21:59:13Z","modified":"2023-08-25T21:32:08Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:00.680009Z"}],"nvd":[{"id":"CVE-2017-1002201","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-15T18:15:10.56Z","modified":"2026-06-17T00:59:23.007Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:20.074898Z"}],"osv":[{"id":"CVE-2017-1002201","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-15T18:15:10.56Z","modified":"2026-10-20T10:48:01.838195808Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-1002201","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-15T18:15:10.56Z","modified":"2026-09-01T20:03:41.365551337Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"GHSA-r53w-g4xm-3gc6","title":"Haml vulnerable to cross-site scripting","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like `\u003c \u003e \" '` must be escaped properly. In this case, the `'` character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-21T21:59:13Z","modified":"2026-09-10T03:48:26.747985965Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:55.480549Z"},{"id":"UBUNTU-CVE-2017-1002201","description":"In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like \u003c \u003e \" ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.","status":"published","published":"2019-10-15T18:15:00Z","modified":"2025-10-24T04:46:43Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1986-1","title":"ruby-haml - security update","status":"published","published":"2019-11-09T00:00:00Z","modified":"2026-03-09T01:20:34.688501Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2864-1","title":"ruby-haml - security update","status":"published","published":"2021-12-29T00:00:00Z","modified":"2026-03-09T01:20:48.593105Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"SUSE-SU-2019:2932-1","title":"Security update for rubygem-haml","description":"This update for rubygem-haml fixes the following issue:\n\n- CVE-2017-1002201: Fixed an insufficient character escape that could have led to arbitrary code execution (bsc#1155089).\n","status":"published","published":"2019-11-08T09:53:22Z","modified":"2026-02-04T04:09:49.517637Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3270-1","title":"Security update for caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, crowbar-ui, etcd, flannel, galera-3, mariadb, mariadb-connector-c, openstack-dashboard-theme-SUSE, openstack-heat-templates, openstack-neutron, openstack-nova, openstack-quickstart, patterns-cloud, python-oslo.messaging, python-oslo.utils, python-pysaml2","description":"This update for caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, crowbar-ui, etcd, flannel, galera-3, mariadb, mariadb-connector-c, openstack-dashboard-theme-SUSE, openstack-heat-templates, openstack-neutron, openstack-nova, openstack-quickstart, patterns-cloud, python-oslo.messaging, python-oslo.utils, python-pysaml2 fixes the following issues:\n\nSecurity fix for mariadb:\n\n- MariaDB was update to version 10.2.25 (bsc#1136035)\n- CVE-2019-2628: Fixed a remote denial of service by an privileged attacker (bsc#1136035).\n- CVE-2019-2627: Fixed another remote denial of service by an privileged attacker (bsc#1136035).\n- CVE-2019-2614: Fixed a potential remote denial of service by an privileged attacker (bsc#1136035).\n\n- adjust mysql-systemd-helper ('shutdown protected MySQL' section)\n so it checks both ping response and the pid in a process list\n as it can take some time till the process is terminated.\n Otherwise it can lead to 'found left-over process' situation\n when regular mariadb is started [bsc#1143215]\n- update suse_skipped_tests.list\n\n- remove client_ed25519.so plugin because it's shipped in\n mariadb-connector-c package (libmariadb_plugins)\n- update suse_skipped_tests.list\n\n- update to 10.2.25 GA\n * Fixes for the following security vulnerabilities:\n * 10.2.23: none\n * 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614\n * 10.2.25: none\n * release notes and changelog:\n https://mariadb.com/kb/en/library/mariadb-10223-release-notes\n https://mariadb.com/kb/en/library/mariadb-10223-changelog\n https://mariadb.com/kb/en/library/mariadb-10224-release-notes\n https://mariadb.com/kb/en/library/mariadb-10224-changelog\n https://mariadb.com/kb/en/library/mariadb-10225-release-notes\n https://mariadb.com/kb/en/library/mariadb-10225-changelog\n- remove mariadb-10.2.22-fix_path.patch that was applied upstream\n in mariadb 10.2.23 \n- remove caching_sha2_password.so because it's shipped in\n mariadb-connector-c package (libmariadb_plugins)\n- remove xtrabackup scripts as it was replaced by mariabackup (we\n already removed xtrabackup requires in the first phase)\n- fix reading options for multiple instances if my${INSTANCE}.cnf\n is used. Also remove 'umask 077' from mysql-systemd-helper that\n causes that new datadirs are created with wrong permissions. Set\n correct permissions for files created by us (mysql_upgrade_info,\n .run-mysql_upgrade) [bsc#1132666]\n- fix build comment to not refer to openSUSE\n- tracker bug [bsc#1136035]\n\n\n- Update to version 1.0+git.1560518045.ad7dc6d:\n * Patching node before bootstraping\n\n- Update to version 4.0+git.1573109906.0f62e9503:\n * Ignore CVE-2017-1002201 in CI builds (bsc#1155089)\n\n- Update to version 4.0+git.1573038068.1e32b3205:\n * Make sure the input file with ssh key exists (SOC-10133)\n * mysql: fix WSREP sync race (SOC-10717)\n * mysql: stop service for mysql_install_db (SOC-10717)\n\n- Update to version 4.0+git.1571404877.8edf9dd5c:\n * Do not use obsoleted --endpoint-type option with CLI\n * [4.0] Configurable timeout for Galera pre-sync\n\n- Switch to stable/7-8 branch\n\n- Update to 25.3.25:\n * A new Galera configuration parameter cert.optimistic_pa was added. If the\n parameter value is set to true, full parallelization in applying write\n sets is allowed as determined by certification algorithm. If set to false,\n no more parallelism is allowed in applying than seen on the master.\n * Support for ECDH OpenSSL engines on CentOS 6 (galera#520)\n * Fixed compilation on Debian testing and unstable (galera#516, galera#528)\n\n- Add unescape_IPv6_bind_ip.patch\n * https://github.com/dciabrin/galera-1/commit/0f6f8aeeb09809280c956514cfd5844b8acad4f9\n\n- remove galera-3-25.3.23-scons_fixes.patch (merged upstream)\n- update to 25.3.24:\n * A support for new certification key type was added to allow\n more relaxed certification rules for foreign key references (galera#491).\n * New status variables were added to display the number of open transactions\n and referenced client connections inside Galera provider (galera#492).\n * GCache was sometimes cleared unnecessarily on startup if the recovered\n state had smaller sequence number than the highest found from GCache.\n Now only entries with sequence number higher than recovery point will be\n cleared (galera#498).\n * Non-primary configuration is saved into grastate.dat only when if the\n node is in closing state (galera#499).\n * Exception from GComm was not always handled properly resulting in\n Galera to remain in half closed state. This was fixed by propagating the\n error condition appropriately to upper layers (galera#500).\n * A new status variable displaying the total weight of the cluster nodes\n was added (galera#501).\n * The value of pc.weight did not reflect the actual effective value after\n setting it via wsrep_provider_options. This was fixed by making sure that\n the new value is taken into use before returning the control back to\n caller (galera#505, MDEV-11959)\n * Use of ECHD algorithms with old OpenSSL versions was enabled (galera#511).\n * Default port value is now used by garbd if the port is not explicitly\n given in cluster address (MDEV-15531).\n * Correct error handling for posix_fallocate().\n * Failed causal reads are retried during configuration changes.\n\n- New upstream version 3.1.2 [bsc#1136035]\n * CONC-383: client plugins can't be loaded due to missing prefix\n * Fixed version setting in GnuTLS by moving 'NORMAL' at the end\n of priority string\n * CONC-386: Added support for pem files which contain certificate\n and private key.\n * Replication/Binlog API: The main mechanism used in replication\n is the binary log. \n * CONC-395: Dashes and underscores are not interchangeable in\n options in my.cnf\n * CONC-384: Incorrect packet when a connection attribute name or\n value is equal to or greater than 251\n * CONC-388: field-\u003edef_length is always set to 0\n * Getter should get and the setter should set\n CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS\n * Disable LOAD DATA LOCAL INFILE support by default and auto-enable\n it for the duration of one query, if the query string starts with\n the word 'load'. In all other cases the application should enable\n LOAD DATA LOCAL INFILE support explicitly.\n * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)\n and added CR_NOT_IMPLEMENTED error message if a option is unknown\n or not supported.\n * mingw fix: use lowercase names for include files\n * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher\n suites with cipher suites from other TLS protocols\n * CONC-312: Added new caching_sha2_password authentication plugin\n for authentication with MySQL 8.0\n- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and\n private_library.patch\n- pack caching_sha2_password.so and client_ed25519.so\n- move libmariadb.pc from /usr/lib/pkgconfig to\n /usr/lib64/pkgconfig for x86_64 [bsc#1126088] \n\n- Switch to new GitHub repo\n\n- Add trigger for openstack-horizon-plugin-murano-ui\n- Update to version 0.0.0+git.1515995585.81ed236:\n * Migrate templates job to Zuul v3\n\n- add 0001-set_db_attribute-differs-between-vsctl-and-native.patch (bsc#1152916)\n part of lp#1630920\n\n- add copytruncate to openstack-neutron.logrotate (bsc#1126428)\n\n- Add 0001-When-converting-sg-rules-to-iptables-do-not-emit-dpo.patch (bsc#1129729)\n\n- Add back the HA related patches that we removed to debug(SOC-10092)\n Add 0001-Keep-HA-ports-info-for-HA-router-during-entire-lifecycle.patch\n backported from https://review.opendev.org/#/c/659644/1\n Add 0001-Async-notify-neutron-server-for-HA-states.patch\n backported from https://review.opendev.org/#/c/658507/1\n Add 0001-Change-duplicate-OVS-bridge-datapath-ids.patch\n backported from https://review.opendev.org/#/c/649192/3\n Add 0001-Choose-random-value-for-HA-routes-vr_id.patch\n backported from https://review.opendev.org/#/c/651988/2\n\n- add copytruncate to openstack-nova.logrorate (bsc#1126428)\n\n- Update to version 2016.2+git.1492839294.d76879d:\n * Setup monasca-agent\n\n- Update to version 2016.2+git.1492611783.2908851:\n * Adding support for monasca\n\n- Update to version 2016.2+git.1490964440.09a9673:\n * Move aliases inside Keystone vhost configuration\n\n- Update to version 2016.2+git.1486720712.bea5be9:\n * Use qemu instead of lxc as virt_type fallback\n * Check for net/subnet/router existance before creating it\n * Use get_or_*() functions for Heat\n\n- skip magnum service image for non-x86_64\n\n- add 0001-Suppress-excessive-debug-logs-when-consume-rabbit (bsc#1123053):\n- Add adjust-to-setuptools-8-plus.patch (SOC-10947): this\n patch fixes oslo.utils breakage caused by the more recent\n python-setuptools version introduced by (bsc#1075812).\n\n- Revert change on using license macro from previous commit.\n","status":"published","published":"2019-12-11T11:31:09Z","modified":"2026-02-04T04:16:06.869151Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0640-1","title":"Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-pumavenv-openstack-swift","description":"This update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-puma, venv-openstack-swift fixes the following issues:\nSecurity issues fixed:\n\nThe update of rubygem-crowbar-client, rubygem-puma fixes the following security issues:\n- CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080).\n- CVE-2019-16770: Fixed a denial-of-service vulnerability that was exploitable by clients sending extraneous keepalive requests (bsc#1158675).\n\nThe update of mariadb to 10.2.29 fixes several security issues:\n- CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).\n- CVE-2019-18901: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).\n- CVE-2017-1002201: Fixed an issue where special characters did not escpae properly (bsc#1155089)\n- CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2758, CVE-2019-2805, CVE-2019-2938, CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service (bsc#1156669)\n\nNon-security issues fixed:\n\nChanges in ardana-cinder:\n- Update to version 8.0+git.1579279939.ee7da88:\n * Add option to flatten snapshots when using SES (SOC-11054)\n\n- Update to version 8.0+git.1571846011.1a2f62b:\n * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-cobbler:\n- Update to version 8.0+git.1575037115.0326803:\n * Set root device on SLES autoyast templates (SOC-7365)\n\nChanges in ardana-designate:\n- Update to version 8.0+git.1573597788.15b7984:\n * Update gerrit location (SOC-9140)\n\nChanges in ardana-extensions-example:\n- Switch to new Gerrit Server\n\n- Update to version 8.0+git.1534266307.db1ec28:\n * SCPL-409 Fix .gitreview for stable/pike\n\nChanges in ardana-extensions-nsx:\n- Update to version 8.0+git.1567529036.a41a037:\n * Update policy json templates for vmware-nsx (SOC-10254)\n\n- Switch to new Gerrit Server\n\nChanges in ardana-glance:\n- Update to version 8.0+git.1571846045.ab9e3ea:\n * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-heat:\n- Update to version 8.0+git.1571777596.14dce6a:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-input-model:\n- Update to version 8.0+git.1582147997.b9ed134:\n * Enable port security extension neutron (SOC-11027)\n\n- Update to version 8.0+git.1573658751.38e822a:\n * Move manila share to controller (SOC-10938)\n\nChanges in ardana-ironic:\n- Update to version 8.0+git.1571845225.006843d:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-keystone:\n- Update to version 8.0+git.1573147067.09e3ea0:\n * enable debug and insecure_debug on demand (SOC-10934)\n\nChanges in ardana-logging:\n- Update to version 8.0+git.1572452293.e65d714:\n * use correct Keystone v3 params bsc#1117840 (SOC-9753)\n\nChanges in ardana-monasca:\n- Update to version 8.0+git.1572527728.9b34bdf:\n * use correct Keystone v3 params bsc#1117840 (SOC-9753)\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-monasca-transform:\n- Update to version 8.0+git.1571845965.97714fb:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-mq:\n- Update to version 8.0+git.1581024906.fbf0be3:\n * Ensure HA queue sync wait fails (SOC-11083)\n * Fix HA policy setting comments (SOC-10317, SOC-11082)\n\n- Update to version 8.0+git.1580853688.4e72fc1:\n * Set HA policy accordingly (SOC-10317, SOC-11082)\n\n- Update to version 8.0+git.1579014733.a855e3a:\n * Change the HA policy mirror (SOC-10317)\n\nChanges in ardana-neutron:\n- Update to version 8.0+git.1573050365.ff6fa06:\n * Kill dhclient before restarting neutron-openvswitch-agent (SOC-9230)\n\n- Update to version 8.0+git.1571846086.19cb7eb:\n * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-nova:\n- Update to version 8.0+git.1571846125.584d988:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-octavia:\n- Update to version 8.0+git.1575642049.1f321d0:\n * Change event_streamer_driver to noop (bsc#1154235)\n\nChanges in ardana-osconfig:\n- Update to version 8.0+git.1581015942.2d21e63:\n * Adjust 'fs.inotify.max_user_instances' to align with crowbar (bsc#1161351)\n\n- Update to version 8.0+git.1580469528.0ac2a8b:\n * Start OVS services before wicked service at boot (SOC-11067)\n\nChanges in ardana-tempest:\n- Update to version 8.0+git.1579261264.7dd213a:\n * Create network resources needed by some heat tests (SOC-7028)\n\n- Update to version 8.0+git.1573571182.8fa9823:\n * Restrore designate test (SOC-9753)\n\n- Update to version 8.0+git.1571846164.6279bc0:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in crowbar-core:\n- Update to version 5.0+git.1582968668.1a55c77c5:\n * Ignore CVE-2020-7595 in CI (bsc#1161517)\n\n- Update to version 5.0+git.1582543433.f71d39544:\n * Fix deployment queue display (SOC-10741)\n\n- Update to version 5.0+git.1580209640.80f2ba3d9:\n * network: start OVS before wickedd (SOC-11067)\n\n- Update to version 5.0+git.1579705862.220974047:\n * dns: add checks to designate migration (SOC-11047)\n\n- Update to version 5.0+git.1579271614.eac1c490c:\n * upgrade: Add the upgrade menu entry (SOC-11053)\n * upgrade: Fix upgrade link (SOC-11053)\n\n- Update to version 5.0+git.1578989446.a2d23b7e1:\n * Do not log an error for a case that is correct (trivial)\n\n- Update to version 5.0+git.1578472131.b88a31055:\n * apache2: Restart after enabling SSL flag (SOC-11029)\n\n- Update to version 5.0+git.1578295229.96952deab:\n * Avoid nil crash when provisioner attributes are not set (bsc#1160048)\n\n- Update to version 5.0+git.1578063264.d0223905b:\n * Ignore CVE-2019-16770 (SOC-10999)\n\n- Update to version 5.0+git.1576053049.a2f4c9820:\n * upgrade: Remove DRBD specific code from the preparation parts (SOC-10985)\n\n- Update to version 5.0+git.1575020613.fc167f4dc:\n * List XEN nodes when failing precheck (trivial)\n\n- Update to version 5.0+git.1574763025.0a6957f37:\n * Disable installation repository (bsc#1152007)\n * Disable automatic repo services (bsc#1152007)\n * Designate: Don't add the admin node to the public network (SOC-10658)\n\n- Update to version 5.0+git.1574715523.ee8e58f4b:\n * upgrade: Check the result after commiting proposal (noref)\n * upgrade: Do not try to disable services that might not exist (noref)\n\n- Update to version 5.0+git.1574667034.76644f658:\n * [upgrade] Remove existing upgrade directories from nodes (SOC-10956)\n\n- Update to version 5.0+git.1574348992.88de970a6:\n * [upgrade] Wait for keystone to be ready after start (bsc#1157206)\n\n- Update to version 5.0+git.1574270784.294f0e830:\n * upgrade: Ignore Cloud repository during repocheck (bsc#1152007)\n\n- Update to version 5.0+git.1574165163.52870c62e:\n * [upgrade] Call finalize_nodes_upgrade at the very end (bsc#1155942)\n\n- Update to version 5.0+git.1574103089.1fbb5a51d:\n * Ignore CVE-2019-13117 in CI builds (bsc#1157028)\n * upgrade: Make the time before next upgrade configurable (SOC-10955)\n * upgrade: Make sure cinder-volume is really stopped (bsc#1156305)\n\n- Update to version 5.0+git.1573110008.449237f0d:\n * Allow pacemaker remotes for upgrade (SOC-10133)\n * upgrade: Precheck for unsaved proposals (SOC-10912)\n\n- Update to version 5.0+git.1572880575.4a6efa3a1:\n * upgrade: Add a precheck for XEN compute nodes presence (SOC-10495)\n * upgrade: Reload repo config in repochecks (SOC-10718)\n\n- Update to version 5.0+git.1572097431.519baa552:\n * Ignore CVE-2017-1002201 in CI builds (bsc#1155089)\n\n- Update to version 5.0+git.1571210032.8648ab99c:\n * Revert 'Use block-migration when needed' (SOC-10133)\n\nChanges in crowbar-ha:\n- Update to version 5.0+git.1574286229.e0364c3:\n * Drop g-haproxy location before group deletion (bsc#1156914)\n\nChanges in crowbar-openstack:\n- Update to version 5.0+git.1582911795.5081ef1da:\n * designate: Mark as user managed (SOC-10233)\n * Designate: make sure dns-server is active on a non-admin node (SOC-10636)\n\n- Update to version 5.0+git.1580549331.ba1e1a0a3:\n * [5.0] ec2-api: run keystone_register on cluster founder only (SOC-11079)\n\n- Update to version 5.0+git.1579182968.f54cfa8f5:\n * tempest: tempest run filters as templates (SOC-11052)\n\n- Update to version 5.0+git.1578515319.fdab3a0b2:\n * Install openstack client for neutron recipes (SOC-11039)\n\n- Update to version 5.0+git.1576764142.8efe58655:\n * Do not read data from barclamp that has not been saved (SOC-11028)\n\n- Update to version 5.0+git.1576666547.b7a0b8814:\n * Revert 'Octavia: Hide UI until complete (SOC-10550)'\n\n- Update to version 5.0+git.1576250115.67b80cbca:\n * [5.0] tempest: Update default image on schema (SOC-11023)\n\n- Update to version 5.0+git.1576078873.ecc798ffe:\n * neutron: Revert remove .openrc creation from neutron cookbooks (SOC-10378)\n * keystone: Add OS_INTERFACE env var to .openrc (SOC-11006)\n\n- Update to version 5.0+git.1574927541.694ac3863:\n * designate: move keystone resource lookup to convergence (SOC-10887)\n\n- Update to version 5.0+git.1574769056.07a7c373e:\n * designate: declare all mdns servers as master on pool config (SOC-10952)\n * designate: add support for SSL (SOC-10877)\n * designate: change default configuration (SOC-10899)\n\n- Update to version 5.0+git.1574421761.ace345683:\n * Add tempest filter for designate (SOC-10288)\n\n- Update to version 5.0+git.1574359417.113b616b2:\n * horizon: install lbaas horizon dashboard (SOC-10883)\n\n- Update to version 5.0+git.1572937880.ffb86e88b:\n * Make sure the input file with ssh key exists (SOC-10133)\n\n- Update to version 5.0+git.1571764038.ad48726d6:\n * mysql: fix WSREP sync race (SOC-10717)\n * mysql: stop service for mysql_install_db (SOC-10717)\n * Do not use obsoleted --endpoint-type option with CLI\n\n- Update to version 5.0+git.1571323259.7402ef5eb:\n * [5.0] Tempest: blacklist test_volume_boot_pattern (SOC-10874)\n\n- Update to version 5.0+git.1571241534.f4af21325:\n * rabbitmq: fix migration 200 (SOC-10623)\n * Fix Cloud 8 no-op migrations (SOC-10623)\n * neutron-lbaas: remove loadbalancer/pool limit\n * [5.0] Configurable timeout for Galera pre-sync\n\n- Update to version 5.0+git.1571138324.edb9e8b56:\n * horizon: tighten check for existence of monasca while deploying grafana\n * monasca: improve detection if monasca-server is available\n * monasca: install agent before run setup monitors in server\n * Monasca: Handle node reinstall (jsc#SOC-10440, bsc#1148158 )\n\n- Update to version 5.0+git.1570618886.06022a6ef:\n * glance: Set barbican auth endpoint (bsc#1123191, SOC-10844)\n * tempest: Add barbican run_filters from ardana (SOC-10844)\n * Fix nova tempest tests (SOC-9298, SOC-10844)\n\n- Update to version 5.0+git.1570505588.4bdc5aa6f:\n * No rndc key if no public DNS server (SOC-10835)\n\nChanges in crowbar-ui:\n- Update to version 1.2.0+git.1575896697.a01a3a08:\n * upgrade: Added missing error title\n * travis: Stop testing against nodejs4\n\n- Update to version 1.2.0+git.1572871359.50fc6087:\n * Add title for XEN compute nodes precheck (SOC-10495)\n\nChanges in keepalived:\n- update to 2.0.19\n- new BR pkgconfig(libnftnl) to fix nftables support\n- add nftables to the BR\n- added patch\n * linux-4.15.patch\n- add buildrequires for file-devel\n - used in the checker to verify scripts\n- enable json stats and config dump support\n new BR: pkgconfig(json-c)\n- enable http regexp support: new BR pcre2-devel\n- disable dbus instance creation support as it is marked as\n dangerous\n- Add BFD build option to keepalived.spec rpm file\n Issue #1114 identified that the keepalived.spec file was not being\n generated to build BFD support even if keepalived had been\n configured to support it.\n- full changelog\n https://keepalived.org/changelog.html\n\nChanges in mariadb:\n- update to 10.2.31 GA [bsc#1162388]\n * Fixes for the following security vulnerabilities:\n * 10.2.31: CVE-2020-2574\n * 10.2.30: none\n * release notes and changelog:\n https://mariadb.com/kb/en/library/mariadb-10231-release-notes\n https://mariadb.com/kb/en/library/mariadb-10231-changelog\n https://mariadb.com/kb/en/library/mariadb-10230-release-notes\n https://mariadb.com/kb/en/library/mariadb-10230-changelog\n- refresh mariadb-10.1.12-deharcode-libdir.patch\n- remove mariadb-10.2.29-bufferoverflowstrncat.patch (upstreamed)\n- pack pam_user_map.so module in the /%{_lib}/security directory\n and user_map.conf configuration file in the /etc/security directory\n\n- fix race condition with mysql_upgrade_info status file by moving\n it to the location owned by root (/var/lib/misc) CVE-2019-18901\n [bsc#1160895]\n- move .run-mysql_upgrade file from $datadir/.run-mysql_upgrade\n to /var/lib/misc/.mariadb_run_upgrade so the mysql user can't\n use it for a symlink attack [bsc#1160912]\n\n- on BTRFS systems /var/lib/mysql is created as a subvolume with \n 755 permissions during the system installaion. Fix it to 700 as \n mysql_install_db doesn't do it [bsc#1077717]\n- add important options to mariadb.service and mariadb@.service\n (ProtectSystem, ProtectHome and UMask) [bsc#1160878]\n- mysql-systemd-helper: use systemd-tmpfiles instead of shell \n script operations for a cleaner and safer creating of /run/mysql\n [bsc#1160883]\n\n- update to 10.2.29 GA\n * Fixes for the following security vulnerabilities:\n * 10.2.29: none\n * 10.2.28: CVE-2019-2974, CVE-2019-2938\n * 10.2.27: none\n * 10.2.26: CVE-2019-2805, CVE-2019-2740, CVE-2019-2739,\n CVE-2019-2737, CVE-2019-2758\n * release notes and changelog:\n https://mariadb.com/kb/en/library/mariadb-10229-release-notes\n https://mariadb.com/kb/en/library/mariadb-10229-changelog\n https://mariadb.com/kb/en/library/mariadb-10228-release-notes\n https://mariadb.com/kb/en/library/mariadb-10228-changelog\n https://mariadb.com/kb/en/library/mariadb-10227-release-notes\n https://mariadb.com/kb/en/library/mariadb-10227-changelog\n https://mariadb.com/kb/en/library/mariadb-10226-release-notes\n https://mariadb.com/kb/en/library/mariadb-10226-changelog\n- refresh\n mariadb-10.0.15-logrotate-su.patch\n mariadb-10.2.4-logrotate.patch\n- add mariadb-10.2.29-bufferoverflowstrncat.patch to fix 'Statement\n might be overflowing a buffer in strncat' error\n- tracker bug [bsc#1156669]\n- add main.gis_notembedded to the skipped tests (fails when latin1\n is not set)\n\nChanges in openstack-cinder:\n- Update to version cinder-11.2.3.dev23:\n * Fix handling of 'cinder\\_encryption\\_key\\_id' image metadata\n\n- Update to version cinder-11.2.3.dev21:\n * Add retry to LVM deactivation\n\n- Update to version cinder-11.2.3.dev19:\n * Fix ceph: only close rbd image after snapshot iteration is finished\n\n- Update to version cinder-11.2.3.dev17:\n * Exclude disabled API versions from listing\n\nChanges in openstack-cinder:\n- Update to version cinder-11.2.3.dev23:\n * Fix handling of 'cinder\\_encryption\\_key\\_id' image metadata\n\n- Update to version cinder-11.2.3.dev21:\n * Add retry to LVM deactivation\n\n- Update to version cinder-11.2.3.dev19:\n * Fix ceph: only close rbd image after snapshot iteration is finished\n\n- Update to version cinder-11.2.3.dev17:\n * Exclude disabled API versions from listing\n\nChanges in openstack-dashboard:\n- Update to version horizon-12.0.5.dev2:\n * Use python 2.7 as the default interpreter in tox\n * OpenDev Migration Patch\n 12.0.4\n\nChanges in openstack-dashboard-theme-SUSE:\n- Update to version 2017.2+git.1573629528.6b21fa5:\n * SCRD-7984 fixed help links\n\nChanges in openstack-heat:\n- Update to version heat-9.0.8.dev22:\n * Do deepcopy when copying templates\n\n- Update to version heat-9.0.8.dev21:\n * Set stack.thread\\_group\\_mgr for cancel\\_update\n * Eliminate client race condition in convergence delete\n * Delete snapshots using contemporary resources\n\n- Update to version heat-9.0.8.dev15:\n * Unskip StackSnapshotRestoreTest\n\n- Update to version heat-9.0.8.dev14:\n * Fix translate tenants in flavor\n\nChanges in openstack-heat:\n- Update to version heat-9.0.8.dev22:\n * Do deepcopy when copying templates\n\n- Update to version heat-9.0.8.dev21:\n * Set stack.thread\\_group\\_mgr for cancel\\_update\n * Eliminate client race condition in convergence delete\n * Delete snapshots using contemporary resources\n\n- Update to version heat-9.0.8.dev15:\n * Unskip StackSnapshotRestoreTest\n\n- Update to version heat-9.0.8.dev14:\n * Fix translate tenants in flavor\n\nChanges in openstack-heat-templates:\n- Update to version 0.0.0+git.1560033670.e3b5a52:\n * Add example for running Zun container\n * OpenDev Migration Patch\n * Replace openstack.org git:// URLs with https://\n * Remove docs, deprecated hooks, tests\n * Update the bugs link to storyboard\n * Use octavia resources for autoscaling example\n * Fix the incorrect cirros default password\n\nChanges in openstack-horizon-plugin-designate-ui:\n- Update to version designate-dashboard-5.0.3.dev2:\n * Fix list zones updated at same time\n * OpenDev Migration Patch\n 5.0.2\n\nChanges in openstack-horizon-plugin-neutron-lbaas-ui:\n- Add _1481_project_ng_loadbalancersv2_panel.pyc file to package (SOC-10883)\nThe .pyc file needs to be removed when the package is uninstalled,\notherwise the panel will remain enabled in the dashboard and cause\nerrors.\n\nChanges in openstack-ironic:\n- Update to version ironic-9.1.8.dev8:\n * Place upper bound on python-dracclient version\n\nChanges in openstack-ironic:\n- Update to version ironic-9.1.8.dev8:\n * Place upper bound on python-dracclient version\n\nChanges in openstack-keystone:\n- Update to version keystone-12.0.4.dev5:\n * Import LDAP job into project\n\nChanges in openstack-keystone:\n- Update to version keystone-12.0.4.dev5:\n * Import LDAP job into project\n\nChanges in openstack-monasca-agent:\n- Added dependency:\n * fdupes\n * pwdutils and shadow-utils for useradd/groupadd\n\n- added 0001-add-X.509-certificate-check-plugin.patch\n\nChanges in openstack-neutron:\n- Update to version neutron-11.0.9.dev60:\n * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-11.0.9.dev58:\n * don't clear skb mark when ovs is hw-offload enabled\n\n- Update to version neutron-11.0.9.dev57:\n * doc: add known limitation about attaching SR-IOV ports\n\n- Update to version neutron-11.0.9.dev56:\n * raise priority of dead vlan drop\n\n- Update to version neutron-11.0.9.dev54:\n * [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled\n\n- Update to version neutron-11.0.9.dev52:\n * Initialize phys bridges before setup\\_rpc\n\nChanges in openstack-neutron:\n- Update neutron-ha-tool to latest version:\n * Add DHCP agent evacuation (SOC-11046)\n\n- Update to version neutron-11.0.9.dev60:\n * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-11.0.9.dev58:\n * don't clear skb mark when ovs is hw-offload enabled\n\n- neutron: Remove stop action from ovs-cleanup (bsc#1157482)\n backport of https://review.opendev.org/#/c/695867/\n\n- Update to version neutron-11.0.9.dev57:\n * doc: add known limitation about attaching SR-IOV ports\n\n- Update to version neutron-11.0.9.dev56:\n * raise priority of dead vlan drop\n\n- Update to version neutron-11.0.9.dev54:\n * [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled\n\n- Update to version neutron-11.0.9.dev52:\n * Initialize phys bridges before setup\\_rpc\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-7.3.1.dev72:\n * Refactor static path code\n\n- Update to version group-based-policy-7.3.1.dev71:\n * Support named ip protocols for SecurityGroupRules\n\n- Update to version group-based-policy-7.3.1.dev70:\n * Allow both FIP and SNAT on a single port\n\n- Update to version group-based-policy-7.3.1.dev69:\n * Fix active-active AAP RPC query\n\n- Update to version group-based-policy-7.3.1.dev67:\n * [AIM] Add extra provided/consumed contracts to network extension\n\n- Update to version group-based-policy-7.3.1.dev66:\n * Active active AAP feature\n\n- Update to version group-based-policy-7.3.1.dev64:\n * Support cache option for legacy GBP driver\n\n- Update to version group-based-policy-7.3.1.dev63:\n * Fix host ID length in VM names table\n\n- Update to version group-based-policy-7.3.1.dev62:\n * Update\\_proj\\_descr in apic when project description is updated in os\n\n- Update to version group-based-policy-7.3.1.dev61:\n * Send port notifications when host\\_route is getting updated\n * Provide a control knob to use the internal EP interface\n\n- Update to version group-based-policy-7.3.1.dev57:\n * Fix pep8 failures seen on submitted patches\n\nChanges in openstack-neutron-vsphere:\n- Update to version networking-vsphere-2.0.1.dev133:\n * Update to use Agent model from neutron.db.models\n * Fix neutron-dvs-agent startup errors\n * OpenDev Migration Patch\n- Remove 0001-fix-dvs-agent-config.patch as changes\n had been backported to stable/pike\n - See https://review.opendev.org/#/c/682482\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev49:\n * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-16.1.9.dev48:\n * Avoid redundant initialize\\_connection on source post live migration\n * Error out interrupted builds\n * Skip checking of target\\_dev for vhostuser\n * Functional reproduce for bug 1833581\n * Prevent init\\_host test to interfere with other tests\n * Add functional test for resize crash compute restart revert\n * Move restart\\_compute\\_service to a common place\n * lxc: make use of filter python3 compatible\n * cleanup evacuated instances not on hypervisor\n * Delete resource providers for all nodes when deleting compute service\n\n- Update to version nova-16.1.9.dev30:\n * Explicitly fail if trying to attach SR-IOV port\n * Stabilize unshelve notification sample tests\n\n- Update to version nova-16.1.9.dev26:\n * Fix listing deleted servers with a marker\n * Add functional regression test for bug 1849409\n\n- Update to version nova-16.1.9.dev22:\n * Hook resource\\_tracker to remove stale node information\n\n- Update to version nova-16.1.9.dev20:\n * Workaround missing RequestSpec.instance\\_group.uuid\n * Add regression recreate test for bug 1830747\n\n- Update to version nova-16.1.9.dev16:\n * Changing scheduler sync event from INFO to DEBUG\n\n- Update to version nova-16.1.9.dev14:\n * Only nil az during shelve offload\n * Delete instance\\_id\\_mappings record in instance\\_destroy\n\n- Update to version nova-16.1.9.dev11:\n * Revert 'openstack server create' to 'nova boot' in nova docs\n * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-16.1.9.dev8:\n * Functional reproduce for bug 1852207\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev49:\n * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-16.1.9.dev48:\n * Avoid redundant initialize\\_connection on source post live migration\n * Error out interrupted builds\n * Skip checking of target\\_dev for vhostuser\n * Functional reproduce for bug 1833581\n * Prevent init\\_host test to interfere with other tests\n * Add functional test for resize crash compute restart revert\n * Move restart\\_compute\\_service to a common place\n * lxc: make use of filter python3 compatible\n * cleanup evacuated instances not on hypervisor\n * Delete resource providers for all nodes when deleting compute service\n\n- Update to version nova-16.1.9.dev30:\n * Explicitly fail if trying to attach SR-IOV port\n * Stabilize unshelve notification sample tests\n\n- Update to version nova-16.1.9.dev26:\n * Fix listing deleted servers with a marker\n * Add functional regression test for bug 1849409\n\n- Update to version nova-16.1.9.dev22:\n * Hook resource\\_tracker to remove stale node information\n\n- Update to version nova-16.1.9.dev20:\n * Workaround missing RequestSpec.instance\\_group.uuid\n * Add regression recreate test for bug 1830747\n\n- Update to version nova-16.1.9.dev16:\n * Changing scheduler sync event from INFO to DEBUG\n\n- Update to version nova-16.1.9.dev14:\n * Only nil az during shelve offload\n * Delete instance\\_id\\_mappings record in instance\\_destroy\n\n- Update to version nova-16.1.9.dev11:\n * Revert 'openstack server create' to 'nova boot' in nova docs\n * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-16.1.9.dev8:\n * Functional reproduce for bug 1852207\n\nChanges in openstack-octavia:\n- Update to version octavia-1.0.6.dev3:\n * Fix urgent amphora two-way auth security bug\n\nChanges in openstack-octavia-amphora-image:\n- Update image to 0.1.2 to include udated keepalived 2.0.19\n\n- Update image to 0.1.1 to include latest changes\n\n- Add keepalived service\nChanges in openstack-resource-agents:\n- Update to version 1.0+git.1569436425.8b9c49f:\n * Add a configurable delay to Nova Evacuate calls\n * OpenDev Migration Patch\n * NovaEvacuate: fix a syntax error\n * NovaEvacuate: Support the new split-out IHA fence agents with backwards compatibility\n * NovaEvacuate: Correctly handle stopped hypervisors\n * neutron-ha-tool: do not replicate dhcp\n * NovaCompute: Support parsing host option from /etc/nova/nova.conf.d\n * NovaCompute: Use variable to avoid calling crudini a second time\n * NovaEvacuate: Allow debug logging to be turned on easily\n\nChanges in openstack-sahara:\n- Update to version sahara-7.0.5.dev4:\n * Run sahara-scenario using Python 3\n * Enforce python 2 for documentation build\n * Fix requirements(bandit)\n * OpenDev Migration Patch\n 7.0.4\n\nChanges in openstack-sahara:\n- Update to version sahara-7.0.5.dev4:\n * Run sahara-scenario using Python 3\n * Enforce python 2 for documentation build\n * Fix requirements (bandit)\n * OpenDev Migration Patch\n 7.0.4\n\nChanges in openstack-trove:\n- Update to version trove-8.0.2.dev2:\n * Add local bindep.txt\n * OpenDev Migration Patch\n 8.0.1\n\nChanges in openstack-trove:\n- Update to version trove-8.0.2.dev2:\n * Add local bindep.txt\n * OpenDev Migration Patch\n 8.0.1\n\nChanges in python-cinderlm:\n- Update to version 0.0.2+git.1571845893.27f0b7b:\n * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in python-congressclient:\n- update to version 1.8.1\n - Update .gitreview for stable/pike\n - Update UPPER_CONSTRAINTS_FILE for stable/pike\n - import zuul job settings from project-config\n - Updated from global requirements\n\nChanges in python-designateclient:\n- update to version 2.7.1\n - Update .gitreview for stable/pike\n - Updated from global requirements\n - import zuul job settings from project-config\n - Update UPPER_CONSTRAINTS_FILE for stable/pike\n - server-get/update show wrong values about 'id' and 'update_at'\n\nChanges in python-ironic-lib:\n- update to version 2.10.2\n - Replace openstack.org git:// URLs with https://\n - Make search for config drive partition case insensitive\n - Revert 'Use dd conv=sparse when writing images to nodes'\n - Check GPT table with sgdisk insread of partprobe\n - Avoid tox_install.sh for constraints support\n - Fix GPT bug with whole disk images\n - import zuul job settings from project-config\n\nChanges in python-networking-cisco:\n- Update to version networking-cisco-6.1.1.dev65:\n * Nexus: Add CA Bundle path to https doc\n * Improve Nexus Ironic related doc and logs\n * Upgrade release notes to include Tripleo/puppet\n * Fix socket not closed errors in unit test logs\n * Add release note about adding support for Rocky OpenStack\n * Update publish-openstack-python-branch-tarball job\n * Remove MultiConfigParser from SAF application\n * More fixes for networking\\_cisco rocky support\n * Remove MultiConfigParser from the device manger config loader\n * Ensure CFG agent is started after neutron config is written\n * Removed older version of python added 3.5\n * Begin process of supporting neutron Rocky\n * Typo in tar command in doc install guide\n * Add cisco providernet extension to Nexus doc\n * Add missing policy to fix stable/queens unit tests\n * Pin stestr version (1.1.0) for Mitaka\n * Fix places in ucsm network driver using .ucsm instead of .ucsms\n * Fix doc build under python3\n * Fix mitaka bug with NeutronWorker missing parameter\n * Eliminate 30 sec delay for Nexus replay thread\n * Fix foreign key constraint violation while creating primary key with subnet\\_id\n * Put upper constraint on ncclient version to prevent breakages\n * Improvements to the networking-cisco zuul jobs\n * Remove deprecated host/interface map config\n * Include device manager configuration file when starting config agent\n * Fix pep8 and other tox environments locally\n * Add rocky to CI\n * Add bandit to tox and resolve Nexus SA errors\n * Deprecate old ML2 Nexus/UCSM documentation file\n * Secure Nexus https certificates by default\n- Add tempest_plugin subpackage\n\nChanges in python-osc-lib:\n- update to version 1.7.1\n - import zuul job settings from project-config\n - Update UPPER_CONSTRAINTS_FILE for stable/pike\n - Updated from global requirements\n - Update .gitreview for stable/pike\n - Avoid tox_install.sh for constraints support\n\nChanges iython-oslo.context:\n- update to version 2.17.2\n - Fix sphinx-docs job for stable branch\n - import zuul job settings from project-config\n\nChanges in python-oslo.rootwrap:\n- update to version 5.9.3\n - Avoid tox_install.sh for constraints support\n - Follow the new PTI for document build\n - import zuul job settings from project-config\n\nChanges in python-oslo.serialization:\n- update to version 2.20.3\n - import zuul job settings from project-config\n - Fix sphinx-docs job for stable branch\n\nChanges in python-oslo.service:\n- update to version 1.25.2\n - import zuul job settings from project-config\n - Fix sphinx-docs job for stable branch\n\nChanges in python-stevedore:\n- update to version 1.25.2\n - move doc requirements to doc/requirements.txt\n - Use stable branch for upper-constraints\n - remove duplicate sphinx dependency\n - Avoid tox_install.sh for constraints support\n - import zuul job settings from project-config\n\nChanges in python-taskflow:\n- update to version 2.14.2\n - don't let tox_install.sh error if there is nothing to do\n - import zuul job settings from project-config\n - Updated from global requirements\n - Use doc/requirements.txt\n\nChanges in rubygem-crowbar-client:\n- Update to 3.9.1\n - Fix repocheck table output (SOC-10718)\n - Enable restricted commands for Cloud8 (bsc#1117080, CVE-2018-17954)\n\nChanges in rubygem-puma:\n- Add CVE-2019-16770.patch (bsc#1158675, SOC-10999, CVE-2019-16770)\n This patch fixes a DoS vulnerability a malicious client could use to\n block a large amount of threads.\n\nChanges in venv-openstack-swift:\n- Fix lower version numver after inheriting the version from main\n component (SCRD-8523)\n\n- Revert: 'Inherit version number of venv from main component\n (SCRD-8523)' as zypper reports the new version number as older\n than what is released\n\n- Inherit version number of venv from main component (SCRD-8523)\n\n","status":"published","published":"2020-03-11T11:30:47Z","modified":"2026-03-23T04:48:26.004495Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}