{"id":"CVE-2019-16770","aliases":["DEBIAN-CVE-2019-16770","DLA-3023-1","EUVD-2019-0786","GHSA-7xx3-m584-x994","SUSE-SU-2020:0081-1","SUSE-SU-2020:0311-1","SUSE-SU-2020:0640-1","SUSE-SU-2020:0642-1","SUSE-SU-2020:2060-1","SUSE-SU-2020:3036-1","SUSE-SU-2020:3147-1","SUSE-SU-2020:3160-1","UBUNTU-CVE-2019-16770","openSUSE-SU-2020:1993-1","openSUSE-SU-2020:2000-1","openSUSE-SU-2024:10589-1","openSUSE-SU-2024:11342-1","openSUSE-SU-2024:11343-1","openSUSE-SU-2024:11830-1","openSUSE-SU-2024:11847-1","openSUSE-SU-2024:12592-1","openSUSE-SU-2024:12900-1","openSUSE-SU-2024:13166-1","openSUSE-SU-2024:13720-1","openSUSE-SU-2024:13721-1","openSUSE-SU-2025:15123-1","openSUSE-SU-2026:10357-1"],"status":"published","title":"Potential DOS attack in Puma","description":"In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02014,"percentile":0.81041,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2019-12-05T19:26:37Z","modified":"2026-10-20T10:52:27Z","fixes":[{"ecosystem":"RubyGems","package":"puma","fixed_in":["3.12.2","4.3.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"puma","fixed_in":["3.12.0-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"puma","fixed_in":["3.12.0-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"puma","fixed_in":["3.12.0-4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.2"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.3.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.0-4"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-1+deb9u2"}]}],"versions":["3.6.0-1","3.6.0-1+deb9u1"],"bundled":3},{"source":"osv","ecosystem":"RubyGems","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.2"}]}],"versions":["0.8.0","0.8.1","0.8.2","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","1.0.0","1.1.0","1.1.1","1.2.0","1.2.1","1.2.2","1.3.0","1.3.1","1.4.0","1.5.0","1.6.0","1.6.1","1.6.2","1.6.3","2.0.0","2.0.0.b1","2.0.0.b2","2.0.0.b3","2.0.0.b4","2.0.0.b5","2.0.0.b6","2.0.0.b7","2.0.1","2.1.0","2.1.1","2.10.0","2.10.1","2.10.2","2.11.0","2.11.1","2.11.2","2.11.3","2.12.0","2.12.1","2.12.2","2.12.3","2.13.0","2.13.1","2.13.2","2.13.3","2.13.4","2.14.0","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.4.1","2.5.0","2.5.1","2.6.0","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","3.0.0","3.0.0.rc1","3.0.1","3.0.2","3.1.0","3.1.1","3.10.0","3.11.0","3.11.1","3.11.2","3.11.3","3.11.4","3.12.0","3.12.1","3.2.0","3.3.0","3.4.0","3.5.0","3.5.1","3.5.2","3.6.0","3.6.1","3.6.2","3.7.0","3.7.1","3.8.0","3.8.1","3.8.2","3.9.0","3.9.1"]},{"source":"osv","ecosystem":"RubyGems","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.3.1"}]}],"versions":["4.0.0","4.0.1","4.1.0","4.1.1","4.2.0","4.2.1","4.3.0"]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1574788924.e4a6aeb0c-9.60.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1574869671.9c7bade2d-9.65.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-horizon-plugin-monasca-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5~dev3-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-monasca-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1~dev18-12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-monasca-log-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3~dev3-5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2~dev21-7.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2~dev21-7.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1578392992.fabfd186c-9.63.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1579171175.d53ab6363-9.68.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-neutron-fwaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev5-4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-neutron-fwaas-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev5-4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-crowbar-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-7.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579279939.ee7da88-3.39.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575037115.0326803-3.41.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573597788.15b7984-3.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-extensions-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1534266307.db1ec28-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-extensions-nsx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1567529036.a41a037-3.6.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846045.ab9e3ea-3.20.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571777596.14dce6a-3.15.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-input-model","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1582147997.b9ed134-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845225.006843d-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573147067.09e3ea0-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572452293.e65d714-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572527728.9b34bdf-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-monasca-transform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845965.97714fb-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581024906.fbf0be3-3.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573050365.ff6fa06-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846125.584d988-3.38.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575642049.1f321d0-3.23.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-osconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581015942.2d21e63-3.42.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579261264.7dd213a-3.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.31-4.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-3.23.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1560033670.e3b5a52-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3~dev5-3.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-ironic-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-keystone-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5~dev5-3.15.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev72-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-vsphere","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1~dev133-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-4.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1569436425.8b9c49f-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-sahara-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-trove-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-cinderlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.2+git.1571845893.27f0b7b-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-congressclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-designateclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-networking-cisco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1~dev65-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-osc-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.rootwrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-taskflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-14.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-horizon-hpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-14.28.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev2-12.25.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-13.26.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579279939.ee7da88-3.39.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575037115.0326803-3.41.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573597788.15b7984-3.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-extensions-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1534266307.db1ec28-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-extensions-nsx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1567529036.a41a037-3.6.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846045.ab9e3ea-3.20.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571777596.14dce6a-3.15.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-input-model","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1582147997.b9ed134-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845225.006843d-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573147067.09e3ea0-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572452293.e65d714-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1572527728.9b34bdf-3.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-monasca-transform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571845965.97714fb-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581024906.fbf0be3-3.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1573050365.ff6fa06-3.36.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1571846125.584d988-3.38.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1575642049.1f321d0-3.23.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-osconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1581015942.2d21e63-3.42.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1579261264.7dd213a-3.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.31-4.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-3.23.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-dashboard-theme-SUSE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2+git.1573629528.6b21fa5-7.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1560033670.e3b5a52-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3~dev5-3.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-ironic-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-keystone-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5~dev5-3.15.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev72-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-vsphere","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1~dev133-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-4.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1569436425.8b9c49f-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-sahara-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-trove-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-cinderlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.2+git.1571845893.27f0b7b-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-congressclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-designateclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-freezegun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.9-1.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-networking-cisco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1~dev65-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-osc-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.rootwrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-taskflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-14.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.21.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-14.28.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev2-12.25.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.20.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.18.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-13.26.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-11.24.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.23.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.16.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.22.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1582968668.1a55c77c5-3.35.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-ha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1574286229.e0364c3-3.29.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1582911795.5081ef1da-4.34.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0+git.1575896697.a01a3a08-3.15.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.31-4.17.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev2-3.23.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-dashboard-theme-SUSE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2+git.1573629528.6b21fa5-7.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1560033670.e3b5a52-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3~dev5-3.14.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-ironic-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-3.24.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-keystone-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-5.30.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5~dev5-3.15.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev60-3.27.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev72-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-vsphere","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1~dev133-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev49-3.32.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-4.21.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+git.1569436425.8b9c49f-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-sahara-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-trove-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-3.12.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-congressclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-designateclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-3.3.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-freezegun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.9-1.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-networking-cisco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1~dev65-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-osc-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.rootwrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.3-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-taskflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-crowbar-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-3.9.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-3.3.3"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1581611758.f694f7d-3.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1579256229.c8b4b38-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1574950066.a3c4be4-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1578936438.b9a9b95-3.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1575562864.8ed5e10-3.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-input-model","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1580403439.d425462-3.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1579273481.4b8c46f-3.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1581024903.8e74867-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1580304673.6c668eb-3.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1576074489.62de7e2-3.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-osconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1580235830.0dca223-3.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1578932816.e299c08-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-tls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1575296665.3fdfe45-3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.6.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.2~dev21-3.10.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.9~dev11-3.16.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev1-3.12.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-dashboard-theme-SUSE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.2+git.1555335229.5c8dec9-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev23-3.13.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.3~dev31-3.13.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-horizon-plugin-ironic-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1~dev14-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1~dev8-11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-horizon-plugin-octavia-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2~dev1-1.3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.4~dev22-3.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3~dev6-3.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev36-3.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-3.10.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1~dev13-3.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.7~dev48-3.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-fwaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.3~dev4-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1~dev491-3.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-vpnaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.2~dev6-3.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.4~dev63-3.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2~dev8-3.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-7.6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.1~dev10-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-keystoneclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.1~dev5-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-keystonemiddleware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2~dev3-14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"supportutils-plugin-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1574431436.987b47d-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.9~dev11-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev23-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.3~dev31-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev1-4.14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.4~dev22-4.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev36-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev15-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1~dev10-3.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2~dev3-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.7~dev48-6.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.4~dev63-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2~dev8-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-2.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1582892022.cbd70e833-3.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-ha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1574286261.6fd1a34-3.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1580922461.67fb3c087-3.19.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+git.1575896697.a01a3a08-17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"keepalived","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.6.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.2~dev21-3.10.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.9~dev11-3.16.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev1-3.12.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-dashboard-theme-SUSE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.2+git.1555335229.5c8dec9-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev23-3.13.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.3~dev31-3.13.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-horizon-plugin-designate-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev8-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-horizon-plugin-ironic-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1~dev14-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-horizon-plugin-neutron-lbaas-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1~dev8-11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-horizon-plugin-octavia-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2~dev1-1.3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.4~dev22-3.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3~dev6-3.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev36-3.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-3.10.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-monasca-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1~dev13-3.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.7~dev48-3.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-fwaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.3~dev4-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1~dev491-3.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-vpnaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.2~dev6-3.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.4~dev63-3.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2~dev8-3.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-octavia-amphora-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-7.6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.1~dev10-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-keystoneclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.1~dev5-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-keystonemiddleware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2~dev3-14.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-crowbar-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.1-3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"supportutils-plugin-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1574431436.987b47d-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-4.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.34.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.34.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.34.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.34.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.18.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-3.18.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-lp152.2.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-lp151.2.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.13-1.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-puma-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.10-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-puma-5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.5-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby3.2-rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby3.2-rubygem-puma-5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.5-1.7"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-puma-5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.8-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3-1.3"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3-1.5"}]}],"bundled":4}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"puma","product":"puma"}],"references":[{"url":"https://github.com/puma/puma/security/advisories/GHSA-7xx3-m584-x994","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory","advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00034.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16770","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7xx3-m584-x994","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2019-16770.yml","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-16770","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200081-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1157028","tags":["report"]},{"url":"https://bugzilla.suse.com/1157482","tags":["report"]},{"url":"https://bugzilla.suse.com/1158675","tags":["report"]},{"url":"https://bugzilla.suse.com/917802","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16770","tags":["web"]},{"url":"https://bugzilla.suse.com/SOC-10131","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10133","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10883","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10999","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200311-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1117080","tags":["report"]},{"url":"https://bugzilla.suse.com/1160048","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17954","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200640-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1077717","tags":["report"]},{"url":"https://bugzilla.suse.com/1117840","tags":["report"]},{"url":"https://bugzilla.suse.com/1123191","tags":["report"]},{"url":"https://bugzilla.suse.com/1148158","tags":["report"]},{"url":"https://bugzilla.suse.com/1152007","tags":["report"]},{"url":"https://bugzilla.suse.com/1154235","tags":["report"]},{"url":"https://bugzilla.suse.com/1155089","tags":["report"]},{"url":"https://bugzilla.suse.com/1155942","tags":["report"]},{"url":"https://bugzilla.suse.com/1156305","tags":["report"]},{"url":"https://bugzilla.suse.com/1156669","tags":["report"]},{"url":"https://bugzilla.suse.com/1156914","tags":["report"]},{"url":"https://bugzilla.suse.com/1157206","tags":["report"]},{"url":"https://bugzilla.suse.com/1160878","tags":["report"]},{"url":"https://bugzilla.suse.com/1160883","tags":["report"]},{"url":"https://bugzilla.suse.com/1160895","tags":["report"]},{"url":"https://bugzilla.suse.com/1160912","tags":["report"]},{"url":"https://bugzilla.suse.com/1161351","tags":["report"]},{"url":"https://bugzilla.suse.com/1161517","tags":["report"]},{"url":"https://bugzilla.suse.com/1162388","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1002201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7595","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200642-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1158581","tags":["report"]},{"url":"https://bugzilla.suse.com/1161721","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202060-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1165402","tags":["report"]},{"url":"https://bugzilla.suse.com/1172175","tags":["report"]},{"url":"https://bugzilla.suse.com/1172176","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-5247","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203036-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1165548","tags":["report"]},{"url":"https://bugzilla.suse.com/1168554","tags":["report"]},{"url":"https://bugzilla.suse.com/1172177","tags":["report"]},{"url":"https://bugzilla.suse.com/1172182","tags":["report"]},{"url":"https://bugzilla.suse.com/1172184","tags":["report"]},{"url":"https://bugzilla.suse.com/1172186","tags":["report"]},{"url":"https://bugzilla.suse.com/1173351","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-5249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-5267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8185","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203147-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203160-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-16770","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16770","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2W26GJJ7QXIADWB6ZCQWC2BUZD2ALYVT/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7MCDUWQEXA3XGI7X2XPATA7YTNVDYTSF/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24790","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4HTCFDLUCKJZXX35RHXSTQHMCPIT5GOW/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45614","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-16770","title":"Potential DOS attack in Puma","description":"In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.","status":"published","published":"2019-12-05T19:35:14Z","modified":"2024-08-05T01:24:48.578Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:32:23.189113Z"}],"euvd":[{"id":"EUVD-2019-0786","description":"In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.","status":"published","published":"2019-12-05T19:35:14Z","modified":"2024-08-05T01:24:48Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T02:40:31.903592Z"}],"ghsa":[{"id":"GHSA-7xx3-m584-x994","title":"A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack","description":"## Keepalive thread overload/DoS\n\n### Impact\n\nA poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack.\n\nIf more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough.\n\n### Patches\n\nThis vulnerability is patched in Puma 4.3.1 and 3.12.2.\n\n### Workarounds\n\nReverse proxies in front of Puma could be configured to always allow less than X keepalive connections to a Puma cluster or process, where X is the number of threads configured in Puma's thread pool.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue at [puma](github.com/puma/puma).","status":"published","published":"2019-12-05T19:26:37Z","modified":"2023-05-04T19:53:00Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:36:52.310293Z"}],"nvd":[{"id":"CVE-2019-16770","description":"In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.","status":"published","published":"2019-12-05T20:15:10.093Z","modified":"2026-06-17T02:22:45.997Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:05:38.993437Z"}],"osv":[{"id":"CVE-2019-16770","description":"In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.","status":"published","published":"2019-12-05T20:15:10.093Z","modified":"2026-10-20T10:52:27.54005452Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-16770","description":"In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.","status":"published","published":"2019-12-05T20:15:10.093Z","modified":"2026-09-21T07:02:28.640083727Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"GHSA-7xx3-m584-x994","title":"A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack","description":"## Keepalive thread overload/DoS\n\n### Impact\n\nA poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack.\n\nIf more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough.\n\n### Patches\n\nThis vulnerability is patched in Puma 4.3.1 and 3.12.2.\n\n### Workarounds\n\nReverse proxies in front of Puma could be configured to always allow less than X keepalive connections to a Puma cluster or process, where X is the number of threads configured in Puma's thread pool.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue at [puma](github.com/puma/puma).","status":"published","published":"2019-12-05T19:26:37Z","modified":"2026-07-08T06:00:11.133080946Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:41.732368Z"},{"id":"UBUNTU-CVE-2019-16770","description":"In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.","status":"withdrawn","published":"2019-12-05T20:15:00Z","modified":"2025-07-16T07:39:45.109493Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"DLA-3023-1","title":"puma - security update","status":"published","published":"2022-05-26T00:00:00Z","modified":"2026-03-09T01:19:30.478804Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2020:1993-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.6.5:\n- Solved potential bug of SCC repository URLs changing over time. RMT\n  now self heals by removing the previous invalid repository and\n  creating the correct one.\n- Add web server settings to /etc/rmt.conf:\n  Now it's possible to configure the minimum and maximum threads count as well\n  the number of web server workers to be booted through /etc/rmt.conf.\n- Instead of using an MD5 of URLs for custom repository friendly_ids,\n  RMT now builds an ID from the name.\n- Fix RMT file caching based on timestamps:\n  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a\n  repository server and if the response had a 304 (Not Modified), it would copy\n  a file from the local cache instead of downloading. However, if the local file\n  timestamp accidentally changed to a date newer than the one on the repository\n  server, RMT would have an outdated file, which caused some errors.\n  Now, RMT makes HEAD requests to the repositories servers and inspect the\n  'Last-Modified' header to decide whether to download a file or copy it from\n  cache, by comparing the equalness of timestamps.\n- Fixed an issue where relative paths supplied to `rmt-cli import repos`\n  caused the command to fail.\n- Friendlier IDs for custom repositories:\n  In an effort to simplify the handling of SCC and custom repositories,\n  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID\n  as before. For custom repositories, it can either be user provided\n  or RMT generated (MD5 of the provided URL).\n  Benefits:\n  * `rmt-cli mirror repositories` now works for custom repositories.\n  * Custom repository IDs can be the same across RMT instances.\n  * No more confusing 'SCC ID' vs 'ID' in `rmt-cli` output.\n  Deprecation Warnings:\n  * RMT now uses a different ID for custom repositories than before.\n    RMT still supports that old ID, but it's recommended to start\n    using the new ID to ensure future compatibility.\n- Updated rails and puma dependencies for security fixes.\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-11-21T11:23:05Z","modified":"2026-02-04T04:06:02.22454Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2000-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\n- Version 2.6.5\n- Solved potential bug of SCC repository URLs changing over time. RMT\n  now self heals by removing the previous invalid repository and\n  creating the correct one.\n\n- Version 2.6.4\n- Add web server settings to /etc/rmt.conf:\n  Now it's possible to configure the minimum and maximum threads count as well\n  the number of web server workers to be booted through /etc/rmt.conf.\n\n- Version 2.6.3\n- Instead of using an MD5 of URLs for custom repository friendly_ids,\n  RMT now builds an ID from the name.\n\n- Version 2.6.2\n- Fix RMT file caching based on timestamps:\n  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a\n  repository server and if the response had a 304 (Not Modified), it would copy\n  a file from the local cache instead of downloading. However, if the local file\n  timestamp accidentally changed to a date newer than the one on the repository\n  server, RMT would have an outdated file, which caused some errors.\n  Now, RMT makes HEAD requests to the repositories servers and inspect the\n  'Last-Modified' header to decide whether to download a file or copy it from\n  cache, by comparing the equalness of timestamps.\n  \n\n- Version 2.6.1\n- Fixed an issue where relative paths supplied to `rmt-cli import repos`\n  caused the command to fail.\n\n- Version 2.6.0\n- Friendlier IDs for custom repositories:\n  In an effort to simplify the handling of SCC and custom repositories,\n  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID\n  as before. For custom repositories, it can either be user provided\n  or RMT generated (MD5 of the provided URL).\n  Benefits:\n  * `rmt-cli mirror repositories` now works for custom repositories.\n  * Custom repository IDs can be the same across RMT instances.\n  * No more confusing 'SCC ID' vs 'ID' in `rmt-cli` output.\n  Deprecation Warnings:\n  * RMT now uses a different ID for custom repositories than before.\n    RMT still supports that old ID, but it's recommended to start\n    using the new ID to ensure future compatibility.\n\n- Version 2.5.20\n- Updated rails from 6.0.3.2 to 6.0.3.3:\n  - actionview (CVE-2020-15169)\n\n- Version 2.5.19\n- RMT now has the ability to remove local systems with the command\n  `rmt-cli systems remove`.\n\n- Version 2.5.18\n- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1\n  whenever an error occurs during mirroring\n- Improved message logging for `rtm-cli mirror`. Instead of logging an error\n  when it occurs, the command summarize all errors at the end of execution. Now\n  log messages have colors to better identify failure/success.\n\n- Version 2.5.17\n- RMT no longer provides the installer updates repository to systems via its\n  zypper service. This repository is used during the installation process, as\n  it provides an up-to-date installation experience, but it has no use on an\n  already installed system.\n\n- Version 2.5.16\n- Updated RMT's rails and puma dependencies.\n  - puma (CVE-2020-11076, CVE-2020-11077, CVE-2020-5249, CVE-2020-5247\n    CVE-2019-16770)\n  - actionpack (CVE-2020-8185, CVE-2020-8164, CVE-2020-8166)\n  - actionview (CVE-2020-8167, CVE-2020-5267, CVE-2019-5418, CVE-2019-5419)\n  - activesupport (CVE-2020-8165)\n  - railties (CVE-2019-5420)\n\n- Version 2.5.15\n- RMT now checks if repositories are fully mirrored during the\n  activation process. Previously, RMT only checked if the repositories\n  were enabled to be mirrored, but not that they were actually mirrored.\n  In this case, RMTs were not able to provide the repository data which\n  systems assumed it had.\n\n- Version 2.5.14\n- Enable 'Installer-Updates' repositories by default\n\n- Fixed deprecation warning when thor encountered an error. Also,\n  instead of returning 0 for thor errors, rmt-cli will return 1\n  instead.\n\n- Version 2.5.13\n- Added `rmt-cli repos clean` command to remove locally mirrored files\n  of repositories which are not marked to be mirrored.\n- Previously, RMT didn't track deduplicated files in its database. Now,\n  to accommodate `rmt-cli repos clean`, RMT will track all mirrored\n  files.\n\n- Move the nginx reload to the configuration package which contain\n  nginx config files, don't reload nginx unconditionally from main\n  package.\n\n- Version 2.5.12\n- Update rack to version 2.2.3 (CVE-2020-8184: bsc#1173351)\n- Update Rails to version 5.2.4.3:\n  - actionpack (CVE-2020-8164: bsc#1172177)\n  - actionpack (CVE-2020-8166: bsc#1172182)\n  - activesupport (CVE-2020-8165: bsc#1172186)\n  - actionview (CVE-2020-8167: bsc#1172184)\n\n- Version 2.5.11\n- rmt-server-pubcloud:\n  - SLES11 EOL\n  - Extension activation verification based on the available subscriptions\n  - Added a manual instance verification script\n\n- Version 2.5.10\n- Support rmt-server to run with Ruby 2.7 (Factory/Tumbleweed):\n  - Bump gem 'config' version from 1.7.2 to 2.2.1 to fix incompatibility Ruby\n    2.7 OpenStruct class;\n  - Bump gem 'typhoeus' version from 1.3.1 to 1.4.0 in order to also bump gem\n    'ethon' version, which caused a 'rb_safe_level' warning on Ruby 2.7;\n  - Fix 'last arg as keyword arg' Ruby 2.7 warning on source code;\n  - Disable 'deprecated' warnings from Ruby 2.7; Rails 5.1 generates a lot of\n    warnings with Ruby 2.7, mainly due to 'capturing the given block with\n    Proc.new', which is deprecated;\n  - Improve RPM spec to consider only the distribution default Ruby version\n    configured in OBS;\n  - Improve RPM spec to remove Ruby 2.7 warnings regarding 'bundler.\n\n- Move nginx/vhosts.d directory to correct sub-package. They\n  are needed together with nginx, not rmt-server.\n- Fix dependencies especially for containerized usage:\n  - mariadb and nginx are not hard requires, could run on another host\n- Fix generic dependencies:\n  - systemd ordering was missing\n  - shadow is required for pre-install\n\n- Version 2.5.9\n- rmt-server-pubcloud: enforce strict authentication\n\n- Version 2.5.8\n- Use repomd_parser gem to remove repository metadata parsing code.\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-11-23T09:30:24Z","modified":"2026-02-04T02:41:28.780194Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10589-1","title":"rmt-server-2.6.13-1.1 on GA media","description":"These are all security issues fixed in the rmt-server-2.6.13-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:28:48.695963Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11342-1","title":"ruby2.7-rubygem-puma-5.4.0-1.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-puma-5.4.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:28:25.093179Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11343-1","title":"ruby2.7-rubygem-puma-4-4.3.8-1.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-puma-4-4.3.8-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:10:49.159957Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11830-1","title":"ruby3.1-rubygem-puma-4-4.3.10-1.1 on GA media","description":"These are all security issues fixed in the ruby3.1-rubygem-puma-4-4.3.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:07:14.87837Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:11847-1","title":"ruby3.1-rubygem-puma-5.6.2-1.1 on GA media","description":"These are all security issues fixed in the ruby3.1-rubygem-puma-5.6.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:12:47.958966Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12592-1","title":"ruby3.1-rubygem-puma-5-5.6.5-1.1 on GA media","description":"These are all security issues fixed in the ruby3.1-rubygem-puma-5-5.6.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:28:46.589421Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12900-1","title":"ruby3.2-rubygem-puma-6.0.0-2.1 on GA media","description":"These are all security issues fixed in the ruby3.2-rubygem-puma-6.0.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:09:31.990602Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13166-1","title":"ruby3.2-rubygem-puma-5-5.6.5-1.7 on GA media","description":"These are all security issues fixed in the ruby3.2-rubygem-puma-5-5.6.5-1.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:59.915068Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13720-1","title":"ruby3.3-rubygem-puma-6.4.2-1.1 on GA media","description":"These are all security issues fixed in the ruby3.3-rubygem-puma-6.4.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:10:49.529663Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13721-1","title":"ruby3.3-rubygem-puma-5-5.6.8-1.1 on GA media","description":"These are all security issues fixed in the ruby3.3-rubygem-puma-5-5.6.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:39:28.538005Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2025:15123-1","title":"ruby3.4-rubygem-puma-6.4.3-1.3 on GA media","description":"These are all security issues fixed in the ruby3.4-rubygem-puma-6.4.3-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-17T00:00:00Z","modified":"2026-02-04T03:37:51.450825Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:10357-1","title":"ruby4.0-rubygem-puma-6.4.3-1.5 on GA media","description":"These are all security issues fixed in the ruby4.0-rubygem-puma-6.4.3-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-13T00:00:00Z","modified":"2026-03-14T08:44:10.499349Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"SUSE-SU-2020:0081-1","title":"Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client","description":"This update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client contains the following fixes:\n\nSecurity issue fixed for rubygem-puma:\n\n- CVE-2019-16770: Fixed a potential denial of service  in Puma's reactor (bsc#1158675, jsc#SOC-10999)\n\nSecurity issue fixed for rubygem-rest-client:\n\n- CVE-2015-3448: Fixed a plain text local password disclosure. (bsc#917802)\n\nUpdates for crowbar-core:\n- Update to version 4.0+git.1574788924.e4a6aeb0c:\n  * Allow pacemaker remotes for upgrade (SOC-10133)\n\n- Update to version 4.0+git.1574713660.972029d1a:\n  * Ignore CVE-2019-13117 in CI builds (bsc#1157028)\n\nUpdates for crowbar-openstack:\n- Update to version 4.0+git.1574869671.9c7bade2d:\n  * tempest: configure Kibana version (SOC-10131)\n\n- Update to version 4.0+git.1574764112.c260c70e5:\n  * horizon: install lbaas horizon dashboard (SOC-10883)\n\nUpdates for openstack-horizon-plugin-monasca-ui:\n- Refresh allow-raw-grafana-links.patch\n- update to version 1.5.5~dev3\n  * Replace openstack.org git:// URLs with https://\n  * Fix the partial missing metrics in Create Alarm Definition flow\n  * import zuul job settings from project-config\n  * Fix incorrect splitting of dimension in ProxyView\n  * Fix Alarm status Panel on Overview page\n  * Change IntegerField to ChoiceField for notification period\n  * Imported Translations from Zanata\n  * Display unique metric names for alarm\n  * Fix Alarm Details section in Alarm History view\n  * Fix validators for creating and editing notifications\n  * Center the text for the button Deterministic\n  * Adding title to Filter Alarms pop-up\n  * Fix misleading validation error\n  * Fix nit found in monasca-ui\n  * Fix Breadcrumbs\n  * Fix description for name field\n  * Fixing 'Create Alarm Definition' for IE11\n  * Imported Translations from Zanata\n\nUpdates to openstack-monasca-api:\n- added fix-metric-name-offset.patch (SOC-10131)\n- removed 0001-Fix-InfluxDB-repository-list_dimension_values-to-sup.patch\n  (merged upstream)\n- update to version 1.7.1~dev18\n  * Replace openstack.org git:// URLs with https://\n  * import zuul job settings from project-config\n  * Upgrade Apache Storm to 1.0.6\n  * Zuul: Remove project name\n\nUpdates to openstack-monasca-log-api:\n- added fix-tempest-region.patch (SOC-10131)\n- update to version 1.4.3~dev3\n  * Replace openstack.org git:// URLs with https://\n  * import zuul job settings from project-config\n  * Avoid tox\\_install.sh for constraints support\n\nUpdates to openstack-neutron:\n- neutron: Remove stop action from ovs-cleanup (bsc#1157482)\n  backport of https://review.opendev.org/#/c/695867/\n  ","status":"published","published":"2020-01-13T09:38:16Z","modified":"2026-02-04T04:25:40.499069Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0311-1","title":"Security update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client","description":"This update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client  contains the following fixes:\n\nSecurity fixes for rubygem-crowbar-client:\n\n- CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080)\n\nChanges in crowbar-core:\n- Update to version 4.0+git.1578392992.fabfd186c:\n  * Avoid nil crash when provisioner attributes are not set (bsc#1160048)\n\n- Update to version 4.0+git.1578294389.acc7385d5:\n  * Adding CVE-2019-16770 to the ignore list, regarding SOC-10999.\n\nChanges in crowbar-openstack:\n- Update to version 4.0+git.1579171175.d53ab6363:\n  * tempest: tempest run filters as templates (SOC-11052)\n  * Add tempest filters based on services (SOC-9801)\n\nChanges in openstack-neutron-fwaas:\n- Remove the patch that was deleting the tempest entry point and enable tempest tests.\n","status":"published","published":"2020-02-03T17:18:32Z","modified":"2026-02-04T03:38:17.003196Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0640-1","title":"Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-pumavenv-openstack-swift","description":"This update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-puma, venv-openstack-swift fixes the following issues:\nSecurity issues fixed:\n\nThe update of rubygem-crowbar-client, rubygem-puma fixes the following security issues:\n- CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080).\n- CVE-2019-16770: Fixed a denial-of-service vulnerability that was exploitable by clients sending extraneous keepalive requests (bsc#1158675).\n\nThe update of mariadb to 10.2.29 fixes several security issues:\n- CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).\n- CVE-2019-18901: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).\n- CVE-2017-1002201: Fixed an issue where special characters did not escpae properly (bsc#1155089)\n- CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2758, CVE-2019-2805, CVE-2019-2938, CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service (bsc#1156669)\n\nNon-security issues fixed:\n\nChanges in ardana-cinder:\n- Update to version 8.0+git.1579279939.ee7da88:\n  * Add option to flatten snapshots when using SES (SOC-11054)\n\n- Update to version 8.0+git.1571846011.1a2f62b:\n  * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-cobbler:\n- Update to version 8.0+git.1575037115.0326803:\n  * Set root device on SLES autoyast templates (SOC-7365)\n\nChanges in ardana-designate:\n- Update to version 8.0+git.1573597788.15b7984:\n  * Update gerrit location (SOC-9140)\n\nChanges in ardana-extensions-example:\n- Switch to new Gerrit Server\n\n- Update to version 8.0+git.1534266307.db1ec28:\n  * SCPL-409 Fix .gitreview for stable/pike\n\nChanges in ardana-extensions-nsx:\n- Update to version 8.0+git.1567529036.a41a037:\n  * Update policy json templates for vmware-nsx (SOC-10254)\n\n- Switch to new Gerrit Server\n\nChanges in ardana-glance:\n- Update to version 8.0+git.1571846045.ab9e3ea:\n  * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-heat:\n- Update to version 8.0+git.1571777596.14dce6a:\n  * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-input-model:\n- Update to version 8.0+git.1582147997.b9ed134:\n  * Enable port security extension neutron (SOC-11027)\n\n- Update to version 8.0+git.1573658751.38e822a:\n  * Move manila share to controller (SOC-10938)\n\nChanges in ardana-ironic:\n- Update to version 8.0+git.1571845225.006843d:\n  * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-keystone:\n- Update to version 8.0+git.1573147067.09e3ea0:\n  * enable debug and insecure_debug on demand (SOC-10934)\n\nChanges in ardana-logging:\n- Update to version 8.0+git.1572452293.e65d714:\n  * use correct Keystone v3 params bsc#1117840 (SOC-9753)\n\nChanges in ardana-monasca:\n- Update to version 8.0+git.1572527728.9b34bdf:\n  * use correct Keystone v3 params bsc#1117840 (SOC-9753)\n  * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-monasca-transform:\n- Update to version 8.0+git.1571845965.97714fb:\n  * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-mq:\n- Update to version 8.0+git.1581024906.fbf0be3:\n  * Ensure HA queue sync wait fails (SOC-11083)\n  * Fix HA policy setting comments (SOC-10317, SOC-11082)\n\n- Update to version 8.0+git.1580853688.4e72fc1:\n  * Set HA policy accordingly (SOC-10317, SOC-11082)\n\n- Update to version 8.0+git.1579014733.a855e3a:\n  * Change the HA policy mirror (SOC-10317)\n\nChanges in ardana-neutron:\n- Update to version 8.0+git.1573050365.ff6fa06:\n  * Kill dhclient before restarting neutron-openvswitch-agent (SOC-9230)\n\n- Update to version 8.0+git.1571846086.19cb7eb:\n  * SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)\n\nChanges in ardana-nova:\n- Update to version 8.0+git.1571846125.584d988:\n  * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in ardana-octavia:\n- Update to version 8.0+git.1575642049.1f321d0:\n  * Change event_streamer_driver to noop (bsc#1154235)\n\nChanges in ardana-osconfig:\n- Update to version 8.0+git.1581015942.2d21e63:\n  * Adjust 'fs.inotify.max_user_instances' to align with crowbar (bsc#1161351)\n\n- Update to version 8.0+git.1580469528.0ac2a8b:\n  * Start OVS services before wicked service at boot (SOC-11067)\n\nChanges in ardana-tempest:\n- Update to version 8.0+git.1579261264.7dd213a:\n  * Create network resources needed by some heat tests (SOC-7028)\n\n- Update to version 8.0+git.1573571182.8fa9823:\n  * Restrore designate test (SOC-9753)\n\n- Update to version 8.0+git.1571846164.6279bc0:\n  * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in crowbar-core:\n- Update to version 5.0+git.1582968668.1a55c77c5:\n  * Ignore CVE-2020-7595 in CI (bsc#1161517)\n\n- Update to version 5.0+git.1582543433.f71d39544:\n  * Fix deployment queue display (SOC-10741)\n\n- Update to version 5.0+git.1580209640.80f2ba3d9:\n  * network: start OVS before wickedd (SOC-11067)\n\n- Update to version 5.0+git.1579705862.220974047:\n  * dns: add checks to designate migration (SOC-11047)\n\n- Update to version 5.0+git.1579271614.eac1c490c:\n  * upgrade: Add the upgrade menu entry (SOC-11053)\n  * upgrade: Fix upgrade link (SOC-11053)\n\n- Update to version 5.0+git.1578989446.a2d23b7e1:\n  * Do not log an error for a case that is correct (trivial)\n\n- Update to version 5.0+git.1578472131.b88a31055:\n  * apache2: Restart after enabling SSL flag (SOC-11029)\n\n- Update to version 5.0+git.1578295229.96952deab:\n  * Avoid nil crash when provisioner attributes are not set (bsc#1160048)\n\n- Update to version 5.0+git.1578063264.d0223905b:\n  * Ignore CVE-2019-16770 (SOC-10999)\n\n- Update to version 5.0+git.1576053049.a2f4c9820:\n  * upgrade: Remove DRBD specific code from the preparation parts (SOC-10985)\n\n- Update to version 5.0+git.1575020613.fc167f4dc:\n  * List XEN nodes when failing precheck (trivial)\n\n- Update to version 5.0+git.1574763025.0a6957f37:\n  * Disable installation repository (bsc#1152007)\n  * Disable automatic repo services (bsc#1152007)\n  * Designate: Don't add the admin node to the public network (SOC-10658)\n\n- Update to version 5.0+git.1574715523.ee8e58f4b:\n  * upgrade: Check the result after commiting proposal (noref)\n  * upgrade: Do not try to disable services that might not exist (noref)\n\n- Update to version 5.0+git.1574667034.76644f658:\n  * [upgrade] Remove existing upgrade directories from nodes (SOC-10956)\n\n- Update to version 5.0+git.1574348992.88de970a6:\n  * [upgrade] Wait for keystone to be ready after start (bsc#1157206)\n\n- Update to version 5.0+git.1574270784.294f0e830:\n  * upgrade: Ignore Cloud repository during repocheck (bsc#1152007)\n\n- Update to version 5.0+git.1574165163.52870c62e:\n  * [upgrade] Call finalize_nodes_upgrade at the very end (bsc#1155942)\n\n- Update to version 5.0+git.1574103089.1fbb5a51d:\n  * Ignore CVE-2019-13117 in CI builds (bsc#1157028)\n  * upgrade: Make the time before next upgrade configurable (SOC-10955)\n  * upgrade: Make sure cinder-volume is really stopped (bsc#1156305)\n\n- Update to version 5.0+git.1573110008.449237f0d:\n  * Allow pacemaker remotes for upgrade (SOC-10133)\n  * upgrade: Precheck for unsaved proposals (SOC-10912)\n\n- Update to version 5.0+git.1572880575.4a6efa3a1:\n  * upgrade: Add a precheck for XEN compute nodes presence (SOC-10495)\n  * upgrade: Reload repo config in repochecks (SOC-10718)\n\n- Update to version 5.0+git.1572097431.519baa552:\n  * Ignore CVE-2017-1002201 in CI builds (bsc#1155089)\n\n- Update to version 5.0+git.1571210032.8648ab99c:\n  * Revert 'Use block-migration when needed' (SOC-10133)\n\nChanges in crowbar-ha:\n- Update to version 5.0+git.1574286229.e0364c3:\n  * Drop g-haproxy location before group deletion (bsc#1156914)\n\nChanges in crowbar-openstack:\n- Update to version 5.0+git.1582911795.5081ef1da:\n  * designate: Mark as user managed (SOC-10233)\n  * Designate: make sure dns-server is active on a non-admin node (SOC-10636)\n\n- Update to version 5.0+git.1580549331.ba1e1a0a3:\n  * [5.0] ec2-api: run keystone_register on cluster founder only (SOC-11079)\n\n- Update to version 5.0+git.1579182968.f54cfa8f5:\n  * tempest: tempest run filters as templates (SOC-11052)\n\n- Update to version 5.0+git.1578515319.fdab3a0b2:\n  * Install openstack client for neutron recipes (SOC-11039)\n\n- Update to version 5.0+git.1576764142.8efe58655:\n  * Do not read data from barclamp that has not been saved (SOC-11028)\n\n- Update to version 5.0+git.1576666547.b7a0b8814:\n  * Revert 'Octavia: Hide UI until complete (SOC-10550)'\n\n- Update to version 5.0+git.1576250115.67b80cbca:\n  * [5.0] tempest: Update default image on schema (SOC-11023)\n\n- Update to version 5.0+git.1576078873.ecc798ffe:\n  * neutron: Revert remove .openrc creation from neutron cookbooks (SOC-10378)\n  * keystone: Add OS_INTERFACE env var to .openrc (SOC-11006)\n\n- Update to version 5.0+git.1574927541.694ac3863:\n  * designate: move keystone resource lookup to convergence (SOC-10887)\n\n- Update to version 5.0+git.1574769056.07a7c373e:\n  * designate: declare all mdns servers as master on pool config (SOC-10952)\n  * designate: add support for SSL (SOC-10877)\n  * designate: change default configuration (SOC-10899)\n\n- Update to version 5.0+git.1574421761.ace345683:\n  * Add tempest filter for designate (SOC-10288)\n\n- Update to version 5.0+git.1574359417.113b616b2:\n  * horizon: install lbaas horizon dashboard (SOC-10883)\n\n- Update to version 5.0+git.1572937880.ffb86e88b:\n  * Make sure the input file with ssh key exists (SOC-10133)\n\n- Update to version 5.0+git.1571764038.ad48726d6:\n  * mysql: fix WSREP sync race (SOC-10717)\n  * mysql: stop service for mysql_install_db (SOC-10717)\n  * Do not use obsoleted --endpoint-type option with CLI\n\n- Update to version 5.0+git.1571323259.7402ef5eb:\n  * [5.0] Tempest: blacklist test_volume_boot_pattern (SOC-10874)\n\n- Update to version 5.0+git.1571241534.f4af21325:\n  * rabbitmq: fix migration 200 (SOC-10623)\n  * Fix Cloud 8 no-op migrations (SOC-10623)\n  * neutron-lbaas: remove loadbalancer/pool limit\n  * [5.0] Configurable timeout for Galera pre-sync\n\n- Update to version 5.0+git.1571138324.edb9e8b56:\n  * horizon: tighten check for existence of monasca while deploying grafana\n  * monasca: improve detection if monasca-server is available\n  * monasca: install agent before run setup monitors in server\n  * Monasca: Handle node reinstall (jsc#SOC-10440, bsc#1148158 )\n\n- Update to version 5.0+git.1570618886.06022a6ef:\n  * glance: Set barbican auth endpoint (bsc#1123191, SOC-10844)\n  * tempest: Add barbican run_filters from ardana (SOC-10844)\n  * Fix nova tempest tests (SOC-9298, SOC-10844)\n\n- Update to version 5.0+git.1570505588.4bdc5aa6f:\n  * No rndc key if no public DNS server (SOC-10835)\n\nChanges in crowbar-ui:\n- Update to version 1.2.0+git.1575896697.a01a3a08:\n  * upgrade: Added missing error title\n  * travis: Stop testing against nodejs4\n\n- Update to version 1.2.0+git.1572871359.50fc6087:\n  * Add title for XEN compute nodes precheck (SOC-10495)\n\nChanges in keepalived:\n- update to 2.0.19\n- new BR pkgconfig(libnftnl) to fix nftables support\n- add nftables to the BR\n- added patch\n  * linux-4.15.patch\n- add buildrequires for file-devel\n  - used in the checker to verify scripts\n- enable json stats and config dump support\n  new BR: pkgconfig(json-c)\n- enable http regexp support: new BR pcre2-devel\n- disable dbus instance creation support as it is marked as\n  dangerous\n- Add BFD build option to keepalived.spec rpm file\n  Issue #1114 identified that the keepalived.spec file was not being\n  generated to build BFD support even if keepalived had been\n  configured to support it.\n- full changelog\n  https://keepalived.org/changelog.html\n\nChanges in mariadb:\n- update to 10.2.31 GA [bsc#1162388]\n  * Fixes for the following security vulnerabilities:\n    * 10.2.31: CVE-2020-2574\n    * 10.2.30: none\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10231-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10231-changelog\n    https://mariadb.com/kb/en/library/mariadb-10230-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10230-changelog\n- refresh mariadb-10.1.12-deharcode-libdir.patch\n- remove mariadb-10.2.29-bufferoverflowstrncat.patch (upstreamed)\n- pack pam_user_map.so module in the /%{_lib}/security directory\n  and user_map.conf configuration file in the /etc/security directory\n\n- fix race condition with mysql_upgrade_info status file by moving\n  it to the location owned by root (/var/lib/misc) CVE-2019-18901\n  [bsc#1160895]\n- move .run-mysql_upgrade file from $datadir/.run-mysql_upgrade\n  to /var/lib/misc/.mariadb_run_upgrade so the mysql user can't\n  use it for a symlink attack [bsc#1160912]\n\n- on BTRFS systems /var/lib/mysql is created as a subvolume with \n  755 permissions during the system installaion. Fix it to 700 as \n  mysql_install_db doesn't do it [bsc#1077717]\n- add important options to mariadb.service and mariadb@.service\n  (ProtectSystem, ProtectHome and UMask) [bsc#1160878]\n- mysql-systemd-helper: use systemd-tmpfiles instead of shell \n  script operations for a cleaner and safer creating of /run/mysql\n  [bsc#1160883]\n\n- update to 10.2.29 GA\n  * Fixes for the following security vulnerabilities:\n    * 10.2.29: none\n    * 10.2.28: CVE-2019-2974, CVE-2019-2938\n    * 10.2.27: none\n    * 10.2.26: CVE-2019-2805, CVE-2019-2740, CVE-2019-2739,\n               CVE-2019-2737, CVE-2019-2758\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10229-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10229-changelog\n    https://mariadb.com/kb/en/library/mariadb-10228-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10228-changelog\n    https://mariadb.com/kb/en/library/mariadb-10227-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10227-changelog\n    https://mariadb.com/kb/en/library/mariadb-10226-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10226-changelog\n- refresh\n  mariadb-10.0.15-logrotate-su.patch\n  mariadb-10.2.4-logrotate.patch\n- add mariadb-10.2.29-bufferoverflowstrncat.patch to fix 'Statement\n  might be overflowing a buffer in strncat' error\n- tracker bug [bsc#1156669]\n- add main.gis_notembedded to the skipped tests (fails when latin1\n  is not set)\n\nChanges in openstack-cinder:\n- Update to version cinder-11.2.3.dev23:\n  * Fix handling of 'cinder\\_encryption\\_key\\_id' image metadata\n\n- Update to version cinder-11.2.3.dev21:\n  * Add retry to LVM deactivation\n\n- Update to version cinder-11.2.3.dev19:\n  * Fix ceph: only close rbd image after snapshot iteration is finished\n\n- Update to version cinder-11.2.3.dev17:\n  * Exclude disabled API versions from listing\n\nChanges in openstack-cinder:\n- Update to version cinder-11.2.3.dev23:\n  * Fix handling of 'cinder\\_encryption\\_key\\_id' image metadata\n\n- Update to version cinder-11.2.3.dev21:\n  * Add retry to LVM deactivation\n\n- Update to version cinder-11.2.3.dev19:\n  * Fix ceph: only close rbd image after snapshot iteration is finished\n\n- Update to version cinder-11.2.3.dev17:\n  * Exclude disabled API versions from listing\n\nChanges in openstack-dashboard:\n- Update to version horizon-12.0.5.dev2:\n  * Use python 2.7 as the default interpreter in tox\n  * OpenDev Migration Patch\n  12.0.4\n\nChanges in openstack-dashboard-theme-SUSE:\n- Update to version 2017.2+git.1573629528.6b21fa5:\n  * SCRD-7984 fixed help links\n\nChanges in openstack-heat:\n- Update to version heat-9.0.8.dev22:\n  * Do deepcopy when copying templates\n\n- Update to version heat-9.0.8.dev21:\n  * Set stack.thread\\_group\\_mgr for cancel\\_update\n  * Eliminate client race condition in convergence delete\n  * Delete snapshots using contemporary resources\n\n- Update to version heat-9.0.8.dev15:\n  * Unskip StackSnapshotRestoreTest\n\n- Update to version heat-9.0.8.dev14:\n  * Fix translate tenants in flavor\n\nChanges in openstack-heat:\n- Update to version heat-9.0.8.dev22:\n  * Do deepcopy when copying templates\n\n- Update to version heat-9.0.8.dev21:\n  * Set stack.thread\\_group\\_mgr for cancel\\_update\n  * Eliminate client race condition in convergence delete\n  * Delete snapshots using contemporary resources\n\n- Update to version heat-9.0.8.dev15:\n  * Unskip StackSnapshotRestoreTest\n\n- Update to version heat-9.0.8.dev14:\n  * Fix translate tenants in flavor\n\nChanges in openstack-heat-templates:\n- Update to version 0.0.0+git.1560033670.e3b5a52:\n  * Add example for running Zun container\n  * OpenDev Migration Patch\n  * Replace openstack.org git:// URLs with https://\n  * Remove docs, deprecated hooks, tests\n  * Update the bugs link to storyboard\n  * Use octavia resources for autoscaling example\n  * Fix the incorrect cirros default password\n\nChanges in openstack-horizon-plugin-designate-ui:\n- Update to version designate-dashboard-5.0.3.dev2:\n  * Fix list zones updated at same time\n  * OpenDev Migration Patch\n  5.0.2\n\nChanges in openstack-horizon-plugin-neutron-lbaas-ui:\n- Add _1481_project_ng_loadbalancersv2_panel.pyc file to package (SOC-10883)\nThe .pyc file needs to be removed when the package is uninstalled,\notherwise the panel will remain enabled in the dashboard and cause\nerrors.\n\nChanges in openstack-ironic:\n- Update to version ironic-9.1.8.dev8:\n  * Place upper bound on python-dracclient version\n\nChanges in openstack-ironic:\n- Update to version ironic-9.1.8.dev8:\n  * Place upper bound on python-dracclient version\n\nChanges in openstack-keystone:\n- Update to version keystone-12.0.4.dev5:\n  * Import LDAP job into project\n\nChanges in openstack-keystone:\n- Update to version keystone-12.0.4.dev5:\n  * Import LDAP job into project\n\nChanges in openstack-monasca-agent:\n- Added dependency:\n  * fdupes\n  * pwdutils and shadow-utils for useradd/groupadd\n\n- added 0001-add-X.509-certificate-check-plugin.patch\n\nChanges in openstack-neutron:\n- Update to version neutron-11.0.9.dev60:\n  * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-11.0.9.dev58:\n  * don't clear skb mark when ovs is hw-offload enabled\n\n- Update to version neutron-11.0.9.dev57:\n  * doc: add known limitation about attaching SR-IOV ports\n\n- Update to version neutron-11.0.9.dev56:\n  * raise priority of dead vlan drop\n\n- Update to version neutron-11.0.9.dev54:\n  * [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled\n\n- Update to version neutron-11.0.9.dev52:\n  * Initialize phys bridges before setup\\_rpc\n\nChanges in openstack-neutron:\n- Update neutron-ha-tool to latest version:\n  * Add DHCP agent evacuation (SOC-11046)\n\n- Update to version neutron-11.0.9.dev60:\n  * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-11.0.9.dev58:\n  * don't clear skb mark when ovs is hw-offload enabled\n\n- neutron: Remove stop action from ovs-cleanup (bsc#1157482)\n  backport of https://review.opendev.org/#/c/695867/\n\n- Update to version neutron-11.0.9.dev57:\n  * doc: add known limitation about attaching SR-IOV ports\n\n- Update to version neutron-11.0.9.dev56:\n  * raise priority of dead vlan drop\n\n- Update to version neutron-11.0.9.dev54:\n  * [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled\n\n- Update to version neutron-11.0.9.dev52:\n  * Initialize phys bridges before setup\\_rpc\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-7.3.1.dev72:\n  * Refactor static path code\n\n- Update to version group-based-policy-7.3.1.dev71:\n  * Support named ip protocols for SecurityGroupRules\n\n- Update to version group-based-policy-7.3.1.dev70:\n  * Allow both FIP and SNAT on a single port\n\n- Update to version group-based-policy-7.3.1.dev69:\n  * Fix active-active AAP RPC query\n\n- Update to version group-based-policy-7.3.1.dev67:\n  * [AIM] Add extra provided/consumed contracts to network extension\n\n- Update to version group-based-policy-7.3.1.dev66:\n  * Active active AAP feature\n\n- Update to version group-based-policy-7.3.1.dev64:\n  * Support cache option for legacy GBP driver\n\n- Update to version group-based-policy-7.3.1.dev63:\n  * Fix host ID length in VM names table\n\n- Update to version group-based-policy-7.3.1.dev62:\n  * Update\\_proj\\_descr in apic when project description is updated in os\n\n- Update to version group-based-policy-7.3.1.dev61:\n  * Send port notifications when host\\_route is getting updated\n  * Provide a control knob to use the internal EP interface\n\n- Update to version group-based-policy-7.3.1.dev57:\n  * Fix pep8 failures seen on submitted patches\n\nChanges in openstack-neutron-vsphere:\n- Update to version networking-vsphere-2.0.1.dev133:\n  * Update to use Agent model from neutron.db.models\n  * Fix neutron-dvs-agent startup errors\n  * OpenDev Migration Patch\n- Remove 0001-fix-dvs-agent-config.patch as changes\n  had been backported to stable/pike\n   - See https://review.opendev.org/#/c/682482\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev49:\n  * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-16.1.9.dev48:\n  * Avoid redundant initialize\\_connection on source post live migration\n  * Error out interrupted builds\n  * Skip checking of target\\_dev for vhostuser\n  * Functional reproduce for bug 1833581\n  * Prevent init\\_host test to interfere with other tests\n  * Add functional test for resize crash compute restart revert\n  * Move restart\\_compute\\_service to a common place\n  * lxc: make use of filter python3 compatible\n  * cleanup evacuated instances not on hypervisor\n  * Delete resource providers for all nodes when deleting compute service\n\n- Update to version nova-16.1.9.dev30:\n  * Explicitly fail if trying to attach SR-IOV port\n  * Stabilize unshelve notification sample tests\n\n- Update to version nova-16.1.9.dev26:\n  * Fix listing deleted servers with a marker\n  * Add functional regression test for bug 1849409\n\n- Update to version nova-16.1.9.dev22:\n  * Hook resource\\_tracker to remove stale node information\n\n- Update to version nova-16.1.9.dev20:\n  * Workaround missing RequestSpec.instance\\_group.uuid\n  * Add regression recreate test for bug 1830747\n\n- Update to version nova-16.1.9.dev16:\n  * Changing scheduler sync event from INFO to DEBUG\n\n- Update to version nova-16.1.9.dev14:\n  * Only nil az during shelve offload\n  * Delete instance\\_id\\_mappings record in instance\\_destroy\n\n- Update to version nova-16.1.9.dev11:\n  * Revert 'openstack server create' to 'nova boot' in nova docs\n  * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-16.1.9.dev8:\n  * Functional reproduce for bug 1852207\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev49:\n  * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-16.1.9.dev48:\n  * Avoid redundant initialize\\_connection on source post live migration\n  * Error out interrupted builds\n  * Skip checking of target\\_dev for vhostuser\n  * Functional reproduce for bug 1833581\n  * Prevent init\\_host test to interfere with other tests\n  * Add functional test for resize crash compute restart revert\n  * Move restart\\_compute\\_service to a common place\n  * lxc: make use of filter python3 compatible\n  * cleanup evacuated instances not on hypervisor\n  * Delete resource providers for all nodes when deleting compute service\n\n- Update to version nova-16.1.9.dev30:\n  * Explicitly fail if trying to attach SR-IOV port\n  * Stabilize unshelve notification sample tests\n\n- Update to version nova-16.1.9.dev26:\n  * Fix listing deleted servers with a marker\n  * Add functional regression test for bug 1849409\n\n- Update to version nova-16.1.9.dev22:\n  * Hook resource\\_tracker to remove stale node information\n\n- Update to version nova-16.1.9.dev20:\n  * Workaround missing RequestSpec.instance\\_group.uuid\n  * Add regression recreate test for bug 1830747\n\n- Update to version nova-16.1.9.dev16:\n  * Changing scheduler sync event from INFO to DEBUG\n\n- Update to version nova-16.1.9.dev14:\n  * Only nil az during shelve offload\n  * Delete instance\\_id\\_mappings record in instance\\_destroy\n\n- Update to version nova-16.1.9.dev11:\n  * Revert 'openstack server create' to 'nova boot' in nova docs\n  * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-16.1.9.dev8:\n  * Functional reproduce for bug 1852207\n\nChanges in openstack-octavia:\n- Update to version octavia-1.0.6.dev3:\n  * Fix urgent amphora two-way auth security bug\n\nChanges in openstack-octavia-amphora-image:\n- Update image to 0.1.2 to include udated keepalived 2.0.19\n\n- Update image to 0.1.1 to include latest changes\n\n- Add keepalived service\nChanges in openstack-resource-agents:\n- Update to version 1.0+git.1569436425.8b9c49f:\n  * Add a configurable delay to Nova Evacuate calls\n  * OpenDev Migration Patch\n  * NovaEvacuate: fix a syntax error\n  * NovaEvacuate: Support the new split-out IHA fence agents with backwards compatibility\n  * NovaEvacuate: Correctly handle stopped hypervisors\n  * neutron-ha-tool: do not replicate dhcp\n  * NovaCompute: Support parsing host option from /etc/nova/nova.conf.d\n  * NovaCompute: Use variable to avoid calling crudini a second time\n  * NovaEvacuate: Allow debug logging to be turned on easily\n\nChanges in openstack-sahara:\n- Update to version sahara-7.0.5.dev4:\n  * Run sahara-scenario using Python 3\n  * Enforce python 2 for documentation build\n  * Fix requirements(bandit)\n  * OpenDev Migration Patch\n  7.0.4\n\nChanges in openstack-sahara:\n- Update to version sahara-7.0.5.dev4:\n  * Run sahara-scenario using Python 3\n  * Enforce python 2 for documentation build\n  * Fix requirements (bandit)\n  * OpenDev Migration Patch\n  7.0.4\n\nChanges in openstack-trove:\n- Update to version trove-8.0.2.dev2:\n  * Add local bindep.txt\n  * OpenDev Migration Patch\n  8.0.1\n\nChanges in openstack-trove:\n- Update to version trove-8.0.2.dev2:\n  * Add local bindep.txt\n  * OpenDev Migration Patch\n  8.0.1\n\nChanges in python-cinderlm:\n- Update to version 0.0.2+git.1571845893.27f0b7b:\n  * SCRD-4764 remove V2.0 auth end points (SOC-9753)\n\nChanges in python-congressclient:\n- update to version 1.8.1\n  - Update .gitreview for stable/pike\n  - Update UPPER_CONSTRAINTS_FILE for stable/pike\n  - import zuul job settings from project-config\n  - Updated from global requirements\n\nChanges in python-designateclient:\n- update to version 2.7.1\n  - Update .gitreview for stable/pike\n  - Updated from global requirements\n  - import zuul job settings from project-config\n  - Update UPPER_CONSTRAINTS_FILE for stable/pike\n  - server-get/update show wrong values about 'id' and 'update_at'\n\nChanges in python-ironic-lib:\n- update to version 2.10.2\n  - Replace openstack.org git:// URLs with https://\n  - Make search for config drive partition case insensitive\n  - Revert 'Use dd conv=sparse when writing images to nodes'\n  - Check GPT table with sgdisk insread of partprobe\n  - Avoid tox_install.sh for constraints support\n  - Fix GPT bug with whole disk images\n  - import zuul job settings from project-config\n\nChanges in python-networking-cisco:\n- Update to version networking-cisco-6.1.1.dev65:\n  * Nexus: Add CA Bundle path to https doc\n  * Improve Nexus Ironic related doc and logs\n  * Upgrade release notes to include Tripleo/puppet\n  * Fix socket not closed errors in unit test logs\n  * Add release note about adding support for Rocky OpenStack\n  * Update publish-openstack-python-branch-tarball job\n  * Remove MultiConfigParser from SAF application\n  * More fixes for networking\\_cisco rocky support\n  * Remove MultiConfigParser from the device manger config loader\n  * Ensure CFG agent is started after neutron config is written\n  * Removed older version of python added 3.5\n  * Begin process of supporting neutron Rocky\n  * Typo in tar command in doc install guide\n  * Add cisco providernet extension to Nexus doc\n  * Add missing policy to fix stable/queens unit tests\n  * Pin stestr version (1.1.0) for Mitaka\n  * Fix places in ucsm network driver using .ucsm instead of .ucsms\n  * Fix doc build under python3\n  * Fix mitaka bug with NeutronWorker missing parameter\n  * Eliminate 30 sec delay for Nexus replay thread\n  * Fix foreign key constraint violation while creating primary key with subnet\\_id\n  * Put upper constraint on ncclient version to prevent breakages\n  * Improvements to the networking-cisco zuul jobs\n  * Remove deprecated host/interface map config\n  * Include device manager configuration file when starting config agent\n  * Fix pep8 and other tox environments locally\n  * Add rocky to CI\n  * Add bandit to tox and resolve Nexus SA errors\n  * Deprecate old ML2 Nexus/UCSM documentation file\n  * Secure Nexus https certificates by default\n- Add tempest_plugin subpackage\n\nChanges in python-osc-lib:\n- update to version 1.7.1\n  - import zuul job settings from project-config\n  - Update UPPER_CONSTRAINTS_FILE for stable/pike\n  - Updated from global requirements\n  - Update .gitreview for stable/pike\n  - Avoid tox_install.sh for constraints support\n\nChanges iython-oslo.context:\n- update to version 2.17.2\n  - Fix sphinx-docs job for stable branch\n  - import zuul job settings from project-config\n\nChanges in python-oslo.rootwrap:\n- update to version 5.9.3\n  - Avoid tox_install.sh for constraints support\n  - Follow the new PTI for document build\n  - import zuul job settings from project-config\n\nChanges in python-oslo.serialization:\n- update to version 2.20.3\n  - import zuul job settings from project-config\n  - Fix sphinx-docs job for stable branch\n\nChanges in python-oslo.service:\n- update to version 1.25.2\n  - import zuul job settings from project-config\n  - Fix sphinx-docs job for stable branch\n\nChanges in python-stevedore:\n- update to version 1.25.2\n  - move doc requirements to doc/requirements.txt\n  - Use stable branch for upper-constraints\n  - remove duplicate sphinx dependency\n  - Avoid tox_install.sh for constraints support\n  - import zuul job settings from project-config\n\nChanges in python-taskflow:\n- update to version 2.14.2\n  - don't let tox_install.sh error if there is nothing to do\n  - import zuul job settings from project-config\n  - Updated from global requirements\n  - Use doc/requirements.txt\n\nChanges in rubygem-crowbar-client:\n- Update to 3.9.1\n  - Fix repocheck table output (SOC-10718)\n  - Enable restricted commands for Cloud8 (bsc#1117080, CVE-2018-17954)\n\nChanges in rubygem-puma:\n- Add CVE-2019-16770.patch (bsc#1158675, SOC-10999, CVE-2019-16770)\n  This patch fixes a DoS vulnerability a malicious client could use to\n  block a large amount of threads.\n\nChanges in venv-openstack-swift:\n- Fix lower version numver after inheriting the version from main\n  component (SCRD-8523)\n\n- Revert: 'Inherit version number of venv from main component\n  (SCRD-8523)' as zypper reports the new version number as older\n  than what is released\n\n- Inherit version number of venv from main component (SCRD-8523)\n\n","status":"published","published":"2020-03-11T11:30:47Z","modified":"2026-03-23T04:48:26.004495Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0642-1","title":"Security update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-db, ardana-horizon, ardana-input-model, ardana-monasca, ardana-mq, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-designate, openstack-heat, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-ironic-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-horizon-plugin-octavia-ui, openstack-ironic, openstack-ironic-python-agent, openstack-keystone, openstack-magnum, openstack-monasca-agent, openstack-neutron, openstack-neutron-fwaas, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-sahara, openstack-swift, python-amqp, python-ironic-lib, python-keystoneauth1, python-keystoneclient, python-keystonemiddleware, python-ovs, supportutils-plugin-suse-openstack-cloud, rubygem-crowbar-client, rubygem-puma, venv-openstack-horizon","description":"This update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-db, ardana-horizon, ardana-input-model, ardana-monasca, ardana-mq, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-designate, openstack-heat, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-ironic-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-horizon-plugin-octavia-ui, openstack-ironic, openstack-ironic-python-agent, openstack-keystone, openstack-magnum, openstack-monasca-agent, openstack-neutron, openstack-neutron-fwaas, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-sahara, openstack-swift, python-amqp, python-ironic-lib, python-keystoneauth1, python-keystoneclient, python-keystonemiddleware, python-ovs, supportutils-plugin-suse-openstack-cloud, rubygem-crowbar-client, rubygem-puma, venv-openstack-horizon fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-17954: Enabled restricted commands for Cloud 8 (bsc#1117080).\n- CVE-2019-16770: Fixed a DoS vulnerability a malicious client could use to block a large amount of threads (bsc#1158675).\n\nNon-security issues fixed:\n\nChanges in ardana-ansible:\n- Update to version 9.0+git.1581611758.f694f7d:\n  * Don't run deprecated-vhost-removal on localhost (SOC-11098)\n\n- Update to version 9.0+git.1580906085.40eb430:\n  * simplify glance image upload (SOC-11089)\n\n- Update to version 9.0+git.1580220034.3236aa5:\n  * Ensure rabbitmq-server started after packages updated (SOC-11070)\n\n- Update to version 9.0+git.1576060554.bdd84e6:\n  * Fix grep for image details on service-guest-image (SOC-11012)\n\nChanges in ardana-cinder:\n- Update to version 9.0+git.1579256229.c8b4b38:\n  * Add option to flatten snapshots when using SES (SOC-11054)\n\n- Update to version 9.0+git.1574694613.04a8b74:\n  * Ensure nfs-client installed for NetApp support (SOC-9005)\n\n- Update to version 9.0+git.1574359983.c198cc9:\n  * Add option for nfs_share configuration (SOC-9005)\n\nChanges in ardana-cobbler:\n- Update to version 9.0+git.1574950066.a3c4be4:\n  * Set root device on SLES autoyast templates (SOC-7365)\n\n- Update to version 9.0+git.1573845154.3545efd:\n  * Change install_recommended to true (SOC-9005)\n\nChanges in ardana-db:\n- Update to version 9.0+git.1578936438.b9a9b95:\n  * Switch to using override file in my.cnf.d (SOC-11043)\n\n- Update to version 9.0+git.1578595169.57c5911:\n  * account for pre-update nodes (SOC-11037)\n\nChanges in ardana-horizon:\n- Update to version 9.0+git.1575562864.8ed5e10:\n  * Generate policy for Octavia dashboard (SOC-10883)\n\n- Update to version 9.0+git.1575562860.2ce2851:\n  * Fix policy configuration generation (SOC-10883)\n\nChanges in ardana-input-model:\n- Update to version 9.0+git.1580403439.d425462:\n  * Enable port security extension neutron (SOC-11027)\n\n- Update to version 9.0+git.1574953363.60cf58f:\n  * octavia: use lbaasv2-proxy service plugin (SOC-10987)\n\nChanges in ardana-monasca:\n- Update to version 9.0+git.1579273481.4b8c46f:\n  * Leverage schema conversion script for upgrade (SOC-10277)\n\n- Update to version 9.0+git.1575919721.5c42222:\n  * align Monasca DB schema with upstream prior to upgrade (SOC-10277)\n\nChanges in ardana-mq:\n- Update to version 9.0+git.1581024903.8e74867:\n  * Ensure HA queue sync wait fails (SOC-11083)\n\n- Update to version 9.0+git.1580934283.230ff8b:\n  * Fix HA policy setting comments (SOC-10317, SOC-11082)\n\n- Update to version 9.0+git.1580746285.da922ce:\n  * Set HA policy accordingly (SOC-10317, SOC-11082)\n\n- Update to version 9.0+git.1575405552.d84f662:\n  * Change the HA policy mirror (SOC-10317)\n\nChanges in ardana-nova:\n- Update to version 9.0+git.1580304673.6c668eb:\n  * Set notification_format to unversioned in nova.conf (bsc#1161721)\n\n- Update to version 9.0+git.1575481165.9d3826f:\n  * Remove duplicate entries for alias configuration for GPU (SOC-10837)\n\n- Update to version 9.0+git.1573764498.ed4098d:\n  * Pass through gpu device info. (SOC-10837)\n\nChanges in ardana-octavia:\n- Update to version 9.0+git.1576074489.62de7e2:\n  * Add load-balancer roles (SOC-8743)\n\n- Update to version 9.0+git.1575366951.e0216b4:\n  * Add policy.json to match the neutron lbaasv2 policy (SOC-10987)\n\n- Update to version 9.0+git.1574358661.c976583:\n  * Change event_streamer_driver to noop (bsc#1154235)\n\nChanges in ardana-osconfig:\n- Update to version 9.0+git.1580235830.0dca223:\n  * Start OVS services before wicked service at boot (SOC-11067)\n\n- Update to version 9.0+git.1579790275.8afb314:\n  * Adjust 'fs.inotify.max_user_instances' to align with crowbar (bsc#1161351)\n\nChanges in ardana-tempest:\n- Update to version 9.0+git.1578932816.e299c08:\n  * Revert to using cirros image for heat tests (SOC-7028)\n\n- Update to version 9.0+git.1578413400.0614192:\n  * Create network resources needed by some heat tests (SOC-7028)\n\n- Update to version 9.0+git.1576611974.d17e4df:\n  * Enable octavia tempest plugin test cases (SOC-8743)\n\n- Update to version 9.0+git.1574955714.5bae846:\n  * Update lbaas tempest filter for octavia (SOC-10987)\n\nChanges in ardana-tls:\n- Update to version 9.0+git.1575296665.3fdfe45:\n  * Make sure VNC CA file contain our internal CAs (SOC-10968)\n\n- Update to version 9.0+git.1574280348.a306396:\n  * default the certificate validity to 5 years for the VNC cert (SOC-10973)\n\nChanges in crowbar-core:\n- Update to version 6.0+git.1582892022.cbd70e833:\n  * upgrade: Run DHCP evacuation (SOC-11046)\n\n- Update to version 6.0+git.1582200015.08264d8f9:\n  * Fix deployment queue display (SOC-10741)\n\n- Update to version 6.0+git.1580144807.7d068caf0:\n  * network: start OVS before wickedd (SOC-11067)\n\n- Update to version 6.0+git.1578997967.4591670f0:\n  * dns: add checks to designate migration (SOC-11047)\n\n- Update to version 6.0+git.1578935422.01edb0a9b:\n  * Do not log an error for a case that is correct (trivial)\n\n- Update to version 6.0+git.1578563578.68beda299:\n  * Upgrade neutron agent together with nova-compute package (SOC-11031)\n\n- Update to version 6.0+git.1578402096.90d9332d9:\n  * apache2: Restart after enabling SSL flag (SOC-11029)\n  * crowbar: add crowbar-pacemaker dependency (SOC-10986)\n\n- Update to version 6.0+git.1576756414.ca49a781d:\n  * bind9: Add legacy public.foo DNS entries (SOC-11006)\n\n- Update to version 6.0+git.1576662075.88de27567:\n  * upgrade: Make a check for SLES product version (SOC-3089)\n\n- Update to version 6.0+git.1576493114.5e9534f13:\n  * upgrade: Stop if nova-compute upgrade fails (SOC-10378)\n  * upgrade: Fix typo in log message (typo)\n\n- Update to version 6.0+git.1576149781.1ac02ef0d:\n  * upgrade: add missing exit to Monasca DB dump (trivial)\n\n- Update to version 6.0+git.1576072790.23b58b4a2:\n  * upgrade: Fix systemd unit listing (trivial)\n  * Make sure the crowbar migrations are OK (SOC-6849)\n\n- Update to version 6.0+git.1575980638.3cad5a333:\n  * Ignore CVE-2019-16770 (SOC-10999)\n  * upgrade: Make cluster health check at the start of services step (SOC-6849)\n  * upgrade: Remove DRBD specific code from the continuation parts (SOC-10985)\n\n- Update to version 6.0+git.1575628097.5a7475686:\n  * upgrade: Do not stop and reload nova services in normal mode (SOC-10995)\n\n- Update to version 6.0+git.1574763248.ad958e68c:\n  * Disable installation repository (bsc#1152007)\n  * Disable automatic repo services (bsc#1152007)\n\n- Update to version 6.0+git.1574431193.3f5c69937:\n  * [upgrade] Wait for keystone to be ready after start (bsc#1157206)\n\n- Update to version 6.0+git.1574363439.bc4d86c9b:\n  * upgrade: Make sure cinder-volume is really stopped (bsc#1156305)\n\n- Update to version 6.0+git.1574270808.e4344109b:\n  * upgrade: Ignore Cloud repository during repocheck (bsc#1152007)\n\n- Update to version 6.0+git.1574102328.13f0b12bf:\n  * Ignore CVE-2019-13117 in CI builds (bsc#1157028)\n\nChanges in crowbar-ha:\n- Update to version 6.0+git.1574286261.6fd1a34:\n  * Drop g-haproxy removal code (bsc#1156914)\n\nChanges in crowbar-openstack:\n- Update to version 6.0+git.1580922461.67fb3c087:\n  * Designate: make sure dns-server is active on a non-admin node (SOC-10636)\n  * Revert rabbitmq: sync startup definitions.json with recipe (SOC-11082)\n\n- Update to version 6.0+git.1580480133.d27bf75d0:\n  * ec2-api: run keystone_register on cluster founder only (SOC-11079)\n\n- Update to version 6.0+git.1580308069.558c6dd8a:\n  * rabbitmq: sync startup definitions.json with recipe (SOC-11077)\n\n- Update to version 6.0+git.1579097055.cf15ef22e:\n  * tempest: enable multiattach for NetApp + LVM (SCPM-97)\n  * tempest: tempest run filters as templates (SOC-11052)\n\n- Update to version 6.0+git.1578491103.ca03b990c:\n  * Install openstack client for neutron recipes (SOC-11039)\n\n- Update to version 6.0+git.1576859278.871ed9151:\n  * octavia: Add topology setting (SOC-10876)\n\n- Update to version 6.0+git.1576769055.cae3ecf9a:\n  * octavia: Add anti-affinity settings (SOC-11026)\n  * designate: Fix the migrations of ssl values (SOC-11030)\n  * octavia: Also delete unused amphora images (SOC-11024)\n  * octavia: Delete old amphora images (SOC-11024)\n  * octavia: Install amphora image always (SOC-11024)\n\n- Update to version 6.0+git.1576688912.0cfb42201:\n  * Do not read data from barclamp that has not been saved (SOC-11028)\n  * octavia: Add ssh key to health manager (SOC-11025)\n\n- Update to version 6.0+git.1576513513.8456a08f8:\n  * designate: Mark as user managed (SOC-10233)\n\n- Update to version 6.0+git.1576331976.c068cbe15:\n  * octavia: Update configuration parameters (SOC-10904)\n\n- Update to version 6.0+git.1576245850.2d50399b5:\n  * tempest: Update default image on schema (SOC-11023)\n\n- Update to version 6.0+git.1576145909.ec2c5f746:\n  * octavia: enable octavia tempest plugin test cases (SOC-8743)\n\n- Update to version 6.0+git.1576091112.c802654e0:\n  * keystone: Add OS_INTERFACE env var to .openrc (SOC-11006)\n  * horizon: add Octavia horizon dashboard (SOC-10833)\n\n- Update to version 6.0+git.1575917420.9a9d1b024:\n  * Add Crowbar UI options for mgmt net (SOC-10904)\n  * octavia: configure barbican auth (SOC-10989)\n  * octavia: fix deprecated config options (SOC-10990)\n\n- Update to version 6.0+git.1574850023.d4c2337fc:\n  * tempest: create lbaas-octavia filter (SOC-10965)\n  * octavia: switch to noop event streamer (SOC-10868)\n  * tempest: fix lbaasv2 tests with Octavia lbaasv2-proxy service plugin (SOC-10907)\n\n- Update to version 6.0+git.1574685608.1c9818d53:\n  * horizon: fix keystone node lookup (SOC-10978)\n\n- Update to version 6.0+git.1574428771.9bd63ba0d:\n  * designate: declare all mdns servers as master on pool config (SOC-10952)\n\n- Update to version 6.0+git.1574334452.15e0db044:\n  * designate: add support for SSL (SOC-10877)\n  * horizon: install lbaas horizon dashboard (SOC-10883)\n\n- Update to version 6.0+git.1574270038.651a48486:\n  * octavia: add SSL section to the UI (SOC-10906)\n\n- Update to version 6.0+git.1574094012.3c62b569f:\n  * octavia: Add memcached_servers for token caching (SOC-10905)\n\nChanges in crowbar-ui:\n- Update to version 1.3.0+git.1575896697.a01a3a08:\n  * upgrade: Added missing error title\n  * travis: Stop testing against nodejs4\n\nChanges in keepalived:\n- update to 2.0.19\n- new BR pkgconfig(libnftnl) to fix nftables support\n- add nftables to the BR\n- added patch\n  * linux-4.15.patch\n- add buildrequires for file-devel\n  - used in the checker to verify scripts\n- enable json stats and config dump support\n  new BR: pkgconfig(json-c)\n- enable http regexp support: new BR pcre2-devel\n- disable dbus instance creation support as it is marked as\n  dangerous\n- Add BFD build option to keepalived.spec rpm file\n  Issue #1114 identified that the keepalived.spec file was not being\n  generated to build BFD support even if keepalived had been\n  configured to support it.\n- full changelog\n  https://keepalived.org/changelog.html\n\nChanges in openstack-barbican:\n- Update to version barbican-7.0.1.dev24:\n  * Fix the barbicanclient installation not from source\n\n- Update to version barbican-7.0.1.dev23:\n  * Don't use branch matching\n  * Make broken fedora\\_latest job n-v\n\nChanges in openstack-barbican:\n- Update to version barbican-7.0.1.dev24:\n  * Fix the barbicanclient installation not from source\n\n- Update to version barbican-7.0.1.dev23:\n  * Don't use branch matching\n  * Make broken fedora\\_latest job n-v\n\nChanges in openstack-ceilometer:\n- Update to version ceilometer-11.0.2.dev21:\n  * Tell reno to ignore the kilo branch\n  * Run Grenade job under Python 2 for compatibility\n\n- Update to version ceilometer-11.0.2.dev19:\n  * [stable-only] Cap msgpack\n\n- Update to version ceilometer-11.0.2.dev18:\n  * Add note for loadbalancer resource type support\n\n- Update to version ceilometer-11.0.2.dev17:\n  * Fix samples with dots in sample name\n\n- Update to version ceilometer-11.0.2.dev15:\n  * Add loadbalancer resource type\n\nChanges in openstack-ceilometer:\n- Update to version ceilometer-11.0.2.dev21:\n  * Tell reno to ignore the kilo branch\n  * Run Grenade job under Python 2 for compatibility\n\n- Update to version ceilometer-11.0.2.dev19:\n  * [stable-only] Cap msgpack\n\n- Update to version ceilometer-11.0.2.dev18:\n  * Add note for loadbalancer resource type support\n\n- Update to version ceilometer-11.0.2.dev17:\n  * Fix samples with dots in sample name\n\n- Update to version ceilometer-11.0.2.dev15:\n  * Add loadbalancer resource type\n\nChanges in openstack-cinder:\n- Update to version cinder-13.0.9.dev11:\n  * Cinder backup export broken\n\n- Update to version cinder-13.0.9.dev10:\n  * Support Incremental Backup Completion In RBD\n\n- Update to version cinder-13.0.9.dev8:\n  * Fix: Create new cache entry when xtremio reaches snap limit\n  * Tell reno to ignore the kilo branch\n\n- Update to version cinder-13.0.9.dev5:\n  * Make volume soft delete more thorough\n\n- Update to version cinder-13.0.9.dev4:\n  * Cap sphinx for py2 to match global reqs\n  13.0.8\n\n- Update to version cinder-13.0.8.dev12:\n  * Add 'volume\\_attachment' to volume expected attributes\n  * Fix service\\_uuid migration for volumes with no host\n\n- Update to version cinder-13.0.8.dev9:\n  * Increase cpu limit for image conversion\n\nChanges in openstack-cinder:\n- Update to version cinder-13.0.9.dev11:\n  * Cinder backup export broken\n\n- Update to version cinder-13.0.9.dev10:\n  * Support Incremental Backup Completion In RBD\n\n- Update to version cinder-13.0.9.dev8:\n  * Fix: Create new cache entry when xtremio reaches snap limit\n  * Tell reno to ignore the kilo branch\n\n- Update to version cinder-13.0.9.dev5:\n  * Make volume soft delete more thorough\n\n- Update to version cinder-13.0.9.dev4:\n  * Cap sphinx for py2 to match global reqs\n  13.0.8\n\n- Update to version cinder-13.0.8.dev12:\n  * Add 'volume\\_attachment' to volume expected attributes\n  * Fix service\\_uuid migration for volumes with no host\n\n- Update to version cinder-13.0.8.dev9:\n  * Increase cpu limit for image conversion\n\nChanges in openstack-dashboard:\n- Update to version horizon-14.1.1.dev1:\n  14.1.0\n  * Ensure python versions\n\n- Update to version horizon-14.0.5.dev9:\n  * Fix typo in publicize\\_image policy name\n\n- Update to version horizon-14.0.5.dev8:\n  * Fix 'prev' link pagination for instances with identical timestamps\n\n- Update to version horizon-14.0.5.dev7:\n  * Fix deleting port from port details page\n  * Fix tenant floating\\_ip\\_allocation call in neutron rest api\n\n- Update to version horizon-14.0.5.dev3:\n  * Add 'prev' link to instance page list pagination\n\n- horizon: Obsolete python-django_openstack_auth (SOC-10228)\n  port of https://review.opendev.org/#/c/685224\n\n- Update to version horizon-14.0.5.dev2:\n  * Call Glance list with certain image ids\n\nChanges in openstack-dashboard-theme-SUSE:\n- Add trigger for openstack-horizon-plugin-octavia-ui (SOC-10883)\n\nChanges in openstack-designate:\n- Update to version designate-7.0.1.dev23:\n  * Use Tempest 'all' tox env\n\nChanges in openstack-designate:\n- Update to version designate-7.0.1.dev23:\n  * Use Tempest 'all' tox env\n\nChanges in openstack-heat:\n- Update to version openstack-heat-11.0.3.dev31:\n  * Update Fedora image ref for test jobs\n\n- Update to version openstack-heat-11.0.3.dev29:\n  * Docs: use extrefs to link to other projects' docs\n\n- Update to version openstack-heat-11.0.3.dev28:\n  * Use stable constraint for Tempest pinned stable branches\n\n- Update to version openstack-heat-11.0.3.dev27:\n  * Correct BRANCH\\_OVERRIDE for stable/rocky\n  * Correct availability\\_zone to be non-mandatory in heat\n\n- Update to version openstack-heat-11.0.3.dev24:\n  * Fix the wrong time unit for OS::Octavia::HealthMonitor\n\nChanges in openstack-heat:\n- Update to version openstack-heat-11.0.3.dev31:\n  * Update Fedora image ref for test jobs\n\n- Update to version openstack-heat-11.0.3.dev29:\n  * Docs: use extrefs to link to other projects' docs\n\n- Update to version openstack-heat-11.0.3.dev28:\n  * Use stable constraint for Tempest pinned stable branches\n\n- Update to version openstack-heat-11.0.3.dev27:\n  * Correct BRANCH\\_OVERRIDE for stable/rocky\n  * Correct availability\\_zone to be non-mandatory in heat\n\n- Update to version openstack-heat-11.0.3.dev24:\n  * Fix the wrong time unit for OS::Octavia::HealthMonitor\n\nChanges in openstack-horizon-plugin-designate-ui:\n- Update to version designate-dashboard-7.0.1.dev8:\n  * Fix list zones updated at same time\n\nChanges in openstack-horizon-plugin-ironic-ui:\n- Update to version ironic-ui-3.3.1.dev14:\n  * Fix horizon dependency\n  * OpenDev Migration Patch\n\nChanges in openstack-horizon-plugin-neutron-lbaas-ui:\n- Update to version neutron-lbaas-dashboard-5.0.1.dev8:\n  * Fix auth url for Barbican client\n\n- Add _1481_project_ng_loadbalancersv2_panel.pyc file to package (SOC-10883)\nThe .pyc file needs to be removed when the package is uninstalled,\notherwise the panel will remain enabled in the dashboard and cause\nerrors.\n\nChanges in openstack-ironic:\n- Update to version ironic-11.1.4.dev22:\n  * Change MTU logic to allow for lower MTUs automatically\n  * Do not ignore 'fields' query parameter when building next url\n  * Ensure pagination marker is always set\n\n- Update to version ironic-11.1.4.dev17:\n  * grub configuration should use user kernel and ramdisk\n\n- Update to version ironic-11.1.4.dev16:\n  * Change log level based on node status\n\nChanges in openstack-ironic:\n- Remove rootwrap.d/ironic-lib.filters. This file is included in\n  python-ironic-lib \u003e= 2.14.2.\n\n- Update to version ironic-11.1.4.dev22:\n  * Change MTU logic to allow for lower MTUs automatically\n  * Do not ignore 'fields' query parameter when building next url\n  * Ensure pagination marker is always set\n\n- Update to version ironic-11.1.4.dev17:\n  * grub configuration should use user kernel and ramdisk\n\n- Update to version ironic-11.1.4.dev16:\n  * Change log level based on node status\n\nChanges in openstack-ironic-python-agent:\n- Update to version ironic-python-agent-3.3.3.dev6:\n  * Fix tox.ini to correctly test lower-constraints\n\nChanges in openstack-keystone:\n- Update to version keystone-14.1.1.dev36:\n  * Tell reno to ignore the kilo branch\n\n- Update to version keystone-14.1.1.dev35:\n  * Always have username in CADF initiator\n\n- Update to version keystone-14.1.1.dev33:\n  * Fix role\\_assignments role.id filter\n  * Ensure bootstrap handles multiple roles with the same name\n\n- Update to version keystone-14.1.1.dev29:\n  * Add the missing packages when install keystone\n\nChanges in openstack-keystone:\n- Update to version keystone-14.1.1.dev36:\n  * Tell reno to ignore the kilo branch\n\n- Update to version keystone-14.1.1.dev35:\n  * Always have username in CADF initiator\n\n- Update to version keystone-14.1.1.dev33:\n  * Fix role\\_assignments role.id filter\n  * Ensure bootstrap handles multiple roles with the same name\n\n- Update to version keystone-14.1.1.dev29:\n  * Add the missing packages when install keystone\n\nChanges in openstack-magnum:\n- Update to version magnum-7.2.1.dev1:\n  * Remove buildimage jobs\n  7.2.0\n\n- Update to version magnum-7.1.1.dev38:\n  * k8s\\_fedora: Move rp\\_filter=1 for calico up\n  * k8s\\_fedora\\_atomic: Add PodSecurityPolicy\n  * k8s: Clear cni configuration\n  * fix: Deploy enable\\_service last (rocky only)\n\n- Update to version magnum-7.1.1.dev34:\n  * k8s\\_fedora: Label master nodes with kubectl\n  * k8s: stop introspecting instance name\n  * Fix proportional autoscaler image\n  * Using Fedora Atomic 29 as default image\n\nChanges in openstack-magnum:\n- Update to version magnum-7.2.1.dev1:\n  * Remove buildimage jobs\n  7.2.0\n\n- Update to version magnum-7.1.1.dev38:\n  * k8s\\_fedora: Move rp\\_filter=1 for calico up\n  * k8s\\_fedora\\_atomic: Add PodSecurityPolicy\n  * k8s: Clear cni configuration\n  * fix: Deploy enable\\_service last (rocky only)\n\n- Update to version magnum-7.1.1.dev34:\n  * k8s\\_fedora: Label master nodes with kubectl\n  * k8s: stop introspecting instance name\n  * Fix proportional autoscaler image\n  * Using Fedora Atomic 29 as default image\n\nChanges in openstack-monasca-agent:\n- update to version 2.8.1~dev13\n  - add X.509 certificate check plugin\n\n- update to version 2.8.1~dev12\n  - Update hacking version to 1.1.x\n  - OpenDev Migration Patch\n\nChanges in openstack-neutron:\n- Update to version neutron-13.0.7.dev48:\n  * Do not initialize snat-ns twice\n  * Fix bug: AttributeError arises while sorting with standard attributes\n\n- Update to version neutron-13.0.7.dev44:\n  * ovs agent: signal to plugin if tunnel refresh needed\n  * Mock check if ipv6 is enabled in L3 agent unit tests\n  * Fix resource schemas and releated \\`get\\_sorts\\` test cases\n  * Remove sleep command when retrieving OVS dp\n\n- Update to version neutron-13.0.7.dev36:\n  * Remove Floating IP DNS record upon associated port deletion\n  * Trigger router update only when gateway port IP changed\n  * Re-use existing ProcessLauncher from wsgi in RPC workers\n\n- Update to version neutron-13.0.7.dev30:\n  * Check SG members instead of ports to skip flow update\n  * Ensure driver error preventing trunk port deletion is logged\n  * [L3] Switch order of processing added and removed router ports\n\n- Update to version neutron-13.0.7.dev24:\n  * dhcp-agent: equalize port create\\_low/update/delete priority\n  * Catch OVSFWTagNotFound in update\\_port\\_filter\n  * [OVS] Handle added/removed ports in the same polling iteration\n  * DVR: Ignore DHCP port during DVR host query\n  * Improve 'OVSFirewallDriver.process\\_trusted\\_ports'\n  * List SG rules which belongs to tenant's SG\n  * Fix py3 compatibility\n\n- Update to version neutron-13.0.7.dev10:\n  * Define orm relationships after db classes\n  * Add retries to update trunk port\n\n- Update to version neutron-13.0.7.dev6:\n  * Allow to kill keepalived state change monitor process\n\n- Update to version neutron-13.0.7.dev4:\n  * Always set ovs bridge name in vif:binding-details\n\n- Update to version neutron-13.0.7.dev2:\n  * don't clear skb mark when ovs is hw-offload enabled\n\n- Update to version neutron-13.0.7.dev1:\n  * Use constraints for docs tox target and cap hacking\n  13.0.6\n\n- Update to version neutron-13.0.6.dev21:\n  * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-13.0.6.dev20:\n  * [OVS FW] Clean port rules if port not found in ovsdb\n  * Add more condition to check sg member exist\n\n- Update to version neutron-13.0.6.dev17:\n  * Fix race condition when getting cmdline\n\n- Update to version neutron-13.0.6.dev15:\n  * Run revision bump operations en masse\n\n- Update to version neutron-13.0.6.dev13:\n  * Add extra unit test for get\\_cmdline\\_from\\_pid function\n\n- Update to version neutron-13.0.6.dev11:\n  * Switch to use cast method in dhcp\\_ready\\_on\\_ports method\n\n- Update to version neutron-13.0.6.dev10:\n  * Handle OVSFWPortNotFound and OVSFWTagNotFound in ovs firewall\n\nChanges in openstack-neutron:\n- Update to version neutron-13.0.7.dev48:\n  * Do not initialize snat-ns twice\n  * Fix bug: AttributeError arises while sorting with standard attributes\n\n- Update to version neutron-13.0.7.dev44:\n  * ovs agent: signal to plugin if tunnel refresh needed\n  * Mock check if ipv6 is enabled in L3 agent unit tests\n  * Fix resource schemas and releated \\`get\\_sorts\\` test cases\n  * Remove sleep command when retrieving OVS dp\n\n- Update to version neutron-13.0.7.dev36:\n  * Remove Floating IP DNS record upon associated port deletion\n  * Trigger router update only when gateway port IP changed\n  * Re-use existing ProcessLauncher from wsgi in RPC workers\n\n- Update to version neutron-13.0.7.dev30:\n  * Check SG members instead of ports to skip flow update\n  * Ensure driver error preventing trunk port deletion is logged\n  * [L3] Switch order of processing added and removed router ports\n\n- Update to version neutron-13.0.7.dev24:\n  * dhcp-agent: equalize port create\\_low/update/delete priority\n  * Catch OVSFWTagNotFound in update\\_port\\_filter\n  * [OVS] Handle added/removed ports in the same polling iteration\n  * DVR: Ignore DHCP port during DVR host query\n  * Improve 'OVSFirewallDriver.process\\_trusted\\_ports'\n  * List SG rules which belongs to tenant's SG\n  * Fix py3 compatibility\n\n- Update neutron-ha-tool to latest version:\n  * Add DHCP agent evacuation (SOC-11046)\n\n- Update to version neutron-13.0.7.dev10:\n  * Define orm relationships after db classes\n  * Add retries to update trunk port\n\n- Update to version neutron-13.0.7.dev6:\n  * Allow to kill keepalived state change monitor process\n\n- Update to version neutron-13.0.7.dev4:\n  * Always set ovs bridge name in vif:binding-details\n\n- Update to version neutron-13.0.7.dev2:\n  * don't clear skb mark when ovs is hw-offload enabled\n\n- Update to version neutron-13.0.7.dev1:\n  * Use constraints for docs tox target and cap hacking\n  13.0.6\n\n- Update to version neutron-13.0.6.dev21:\n  * Set DB retry for quota\\_enforcement pecan\\_wsgi hook\n\n- Update to version neutron-13.0.6.dev20:\n  * [OVS FW] Clean port rules if port not found in ovsdb\n  * Add more condition to check sg member exist\n\n- Update to version neutron-13.0.6.dev17:\n  * Fix racondition when getting cmdline\n\n- Update to version neutron-13.0.6.dev15:\n  * Run revision bump operations en masse\n\n- neutron: Remove stop action from ovs-cleanup (bsc#1157482)\n  backport of https://review.opendev.org/#/c/695867/ \n\n- Update to version neutron-13.0.6.dev13:\n  * Add extra unit test for get\\_cmdline\\_from\\_pid function\n\n- Update to version neutron-13.0.6.dev11:\n  * Switch to use cast method in dhcp\\_ready\\_on\\_ports method\n\n- Update to version neutron-13.0.6.dev10:\n  * Handle OVSFWPortNotFound and OVSFWTagNotFound in ovs firewall\n\nChanges in openstack-neutron-fwaas:\n- Update to version neutron-fwaas-13.0.3.dev4:\n  * Fix sorting of filter rules in legacy\\_conntrack module\n\n- Update to version neutron-fwaas-13.0.3.dev3:\n  * Fix list\\_entries for netlink\\_lib when running on py3\n\nChanges in openstack-neutron-fwaas:\n- Update to version neutron-fwaas-13.0.3.dev4:\n  * Fix sorting of filter rules in legacy\\_conntrack module\n\n- Update to version neutron-fwaas-13.0.3.dev3:\n  * Fix list\\_entries for netlink\\_lib when running on py3\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-5.0.1.dev491:\n  * Refactor static path code\n\n- Update to version group-based-policy-5.0.1.dev490:\n  * Support named ip protocols for SecurityGroupRules\n\n- Update to version group-based-policy-5.0.1.dev488:\n  * Enable SVI networks with hosts running opflex agent\n\n- Update to version group-based-policy-5.0.1.dev486:\n  * Allow both FIP and SNAT on a single port\n\n- Update to version group-based-policy-5.0.1.dev485:\n  * Fix active-active AAP RPC query\n\n- Update to version group-based-policy-5.0.1.dev484:\n  * [AIM] Add extra provided/consumed contracts to network extension\n  * Active active AAP feature\n\n- Update to version group-based-policy-5.0.1.dev481:\n  * Support cache option for legacy GBP driver\n\n- Update to version group-based-policy-5.0.1.dev480:\n  * Fix host ID length in VM names table\n\n- Update to version group-based-policy-5.0.1.dev479:\n  * Update\\_proj\\_descr in apic when project description is updated in os\n\n- Update to version group-based-policy-5.0.1.dev477:\n  * Fix ambiguity in mapping to domain in port pair workflow\n\nChanges in openstack-neutron-vpnaas:\n- Update to version neutron-vpnaas-13.0.2.dev6:\n  * Add iptables command filter for functional test\n\n- Update to version neutron-vpnaas-13.0.2.dev5:\n  * Update UPPER\\_CONSTRAINTS\\_FILE for stable/rocky\n\nChanges in openstack-neutron-vpnaas:\n- Update to version neutron-vpnaas-13.0.2.dev6:\n  * Add iptables command filter for functional test\n\n- Update to version neutron-vpnaas-13.0.2.dev5:\n  * Update UPPER\\_CONSTRAINTS\\_FILE for stable/rocky\n\nChanges in openstack-nova:\n- Update to version nova-18.2.4.dev63:\n  * Mask the token used to allow access to consoles\n\n- Update to version nova-18.2.4.dev61:\n  * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-18.2.4.dev60:\n  * tox: Stop build \\*all\\* docs in 'docs'\n\n- Update to version nova-18.2.4.dev59:\n  * Block deleting compute services with in-progress migrations\n  * Cache security group driver\n  * Join migration\\_context and flavor in Migration.instance\n\n- Update to version nova-18.2.4.dev53:\n  * Improve metadata server performance with large security groups\n\n- Update to version nova-18.2.4.dev51:\n  * Add functional recreate revert resize test for bug 1852610\n  * Add functional recreate test for bug 1852610\n\n- Update to version nova-18.2.4.dev47:\n  * Zuul v3: use devstack-plugin-nfs-tempest-full\n\n- Update to version nova-18.2.4.dev46:\n  * Add BFV wrinkle to TestNovaManagePlacemenalAllocations\n  * Add --instance option to heal\\_allocations\n  * Add --dry-run option to heal\\_allocations CLI\n\n- Update to version nova-18.2.4.dev40:\n  * Add functional recreate test for bug 1829479 and bug 1817833\n\n- Update to version nova-18.2.4.dev38:\n  * Do not update root\\_device\\_name during guest config\n  * compute: Use long\\_rpc\\_timeout in reserve\\_block\\_device\\_name\n\n- Update to version nova-18.2.4.dev35:\n  * compute: Take an instance.uuid lock when rebooting\n\n- Update to version nova-18.2.4.dev33:\n  * Replace time.sleep(10) with service forced\\_down in tests\n\n- Update to version nova-18.2.4.dev31:\n  * Nova compute: add in log exception to help debug failures\n\n- Update to version nova-18.2.4.dev29:\n  * Fix false ERROR message at compute restart\n\n- Update to version nova-18.2.4.dev27:\n  * Fix listing deleted servers with a marker\n\n- Update to version nova-18.2.4.dev25:\n  * Add functional regression test for bug 1849409\n\n- Update to version nova-18.2.4.dev23:\n  * Don't delete compute node, when deleting service other than nova-compute\n\nChanges in openstack-nova:\n- Update to version nova-18.2.4.dev63:\n  * Mask the token used to allow access to consoles\n\n- Update to version nova-18.2.4.dev61:\n  * Use stable constraint for Tempest pinned stable branches\n\n- Update to version nova-18.2.4.dev60:\n  * tox: Stop build \\*all\\* docs in 'docs'\n\n- Update to version nova-18.2.4.dev59:\n  * Block deleting compute services with in-progress migrations\n  * Cache security group driver\n  * Join migration\\_context and flavor in Migration.instance\n\n- Update to version nova-18.2.4.dev53:\n  * Improve metadata server performance with large security groups\n\n- Update to version nova-18.2.4.dev51:\n  * Add functional recreate revert resize test for bug 1852610\n  * Add functional recreate test for bug 1852610\n\n- Update to version nova-18.2.4.dev47:\n  * Zuul v3: use devstack-plugin-nfs-tempest-full\n\n- Update to version nova-18.2.4.dev46:\n  * Add BFV wrinkle to TestNovaManagePlacementHealAllocations\n  * Add --instance option to heal\\_allocations\n  * Add --dry-run option to heal\\_allocations CLI\n\n- Update to version nova-18.2.4.dev40:\n  * Add functional recreate test for bug 1829479 and bug 1817833\n\n- Update to version nova-18.2.4.dev38:\n  * Do not update root\\_device\\_name during guest config\n  * compute: Use long\\_rpc\\_timeout in reserve\\_block\\_device\\_name\n\n- Update to version nova-18.2.4.dev35:\n  * compute: Take an instance.uuid lock when rebooting\n\n- Update to version nova-18.2.4.dev33:\n  * Replace time.sleep(10) with service forced\\_down in tests\n\n- Update to version nova-18.2.4.dev31:\n  * Nova compute: add in log exception to help debug failures\n\n- Update to version nova-18.2.4.dev29:\n  * Fix false ERROR message at compute restart\n\n- Update to version nova-18.2.4.dev27:\n  * Fix listing deleted servers with a marker\n\n- Update to version nova-18.2.4.dev25:\n  * Add functional regression test for bug 1849409\n\n- Update to version nova-18.2.4.dev23:\n  * Don't delete compute node, when deleting service other than nova-compute\n\nChanges in openstack-octavia:\n- Update to version octavia-3.2.2.dev8:\n  * Fix uncaught DB exception when trying to get a spare amphora\n\n- Update to version octavia-3.2.2.dev7:\n  * Fix house keeping graceful shutdown\n\n- Update to version octavia-3.2.2.dev5:\n  * Fix pep8 failures on stable/rocky branch\n\n- Update to version octavia-3.2.2.dev4:\n  * Use stable upper-constraints.txt in Amphora builds\n\n- Update to version octavia-3.2.2.dev3:\n  * Add listener and pool protocol validation\n\n- Update to version octavia-3.2.2.dev2* Cap hacking version to minor than 2\n  3.2.1\n\n- Update to version octavia-3.2.1.dev10:\n  * Accept oslopolicy-policy-generator path arguments\n\n- Add patch 0001-Accept-oslopolicy-policy-generator-path-arguments.patch\n  https://review.opendev.org/#/c/698433\n\n- Update to version octavia-3.2.1.dev9:\n  * Fix controller worker graceful shutdown\n\n- Update to version octavia-3.2.1.dev7:\n  * Fix a potential race condition with certs-ramfs\n\n- Update to version octavia-3.2.1.dev5:\n  * Fix issues with unavailable secrets\n\nChanges in openstack-octavia-amphora-image:\n- Updated updateBuildRequires.pl script for SP4 build\n\n- Update image to 0.1.2 to include latest changes\n\n- Add keepalived service\nChanges in openstack-sahara:\n- Update to version sahara-9.0.2.dev15:\n  * Run sahara-scenario using Python 3\n\nChanges in openstack-sahara:\n- Update to version sahara-9.0.2.dev15:\n  * Run sahara-scenario using Python 3\n\nChanges in openstack-swift:\n- Update to version swift-2.19.2.dev48:\n  2.19.2 (rocky stable backports)\n      * Sharding improvements\n        * The container-replicator now only attempts to fetch shard ranges if\n          the remote indicates that it has shard ranges. Further, it does so\n          with a timeout to prevent the process from hanging in certain cases.\n        * The container-replicator now correctly enqueues container-reconciler\n          work for sharded containers.\n      * S3 API improvements\n        * Fixed an issue where v4 signatures would not be validated against\n          the body of the request, allowing a replay attack if request headers\n          were captured by a malicious third party. Note that unsigned payloads\n          still function normally.\n        * CompleteMultipartUpload requests with a Content-MD5 now work.\n        * Fixed v1 listings that end with a non-ASCII object name.\n        * Multipart object segments are now actually deleted when the\n          multipart object is deleted via the S3 API.\n        * Fixed an issue that caused Delete Multiple Objects requests with\n          large bodies to 400. This was previously fixed in 2.20.0.\n        * Fixed an issue where non-ASCII Keystone EC2 credentials would not get\n          mapped to the correct account. This was previously fixed in 2.20.0.\n\nChanges in openstack-swift:\n- Update to version swift-2.19.2.dev48:\n  2.19.2 (rocky stable backports)\n      * Sharding improvements\n        * The container-replicator now only attempts to fetch shard ranges if\n          the remote indicates that it has shard ranges. Further, it does so\n          with a timeout to prevent the process from hanging in certain cases.\n        * The container-replicator now correctly enqueues container-reconciler\n          work for sharded containers.\n      * S3 API improvements\n        * Fixed an issue where v4 signatures would not be validated against\n          the body of the request, allowing a replay attack if request headers\n          were captured by a malicious third party. Note that unsigned payloads\n          still function normally.\n        * CompleteMultipartUpload requests with a Content-MD5 now work.\n        * Fixed v1 listings that end with a non-ASCII object name.\n        * Multipart object segments are now actually deleted when the\n          multipart object is deleted via the S3 API.\n        * Fixed an issue that caused Delete Multiple Objects requests with\n          large bodies to 400. This was previously fixed in 2.20.0.\n        * Fixed an issue where non-ASCII Keystone EC2 credentials would not get\n          mapped to the correct account. This was previously fixed in 0.0.\n\nChanges in python-amqp:\n- Added pyOpenSSL build dependency \n- Update to 2.4.2:\n  - Added support for the Cygwin platform\n  - Correct offset incrementation when parsing bitmaps.\n  - Consequent bitmaps are now parsed correctly.\n- Removed patches that are already included in 2.4.2\n  - 0001-Always-treat-SSLError-timeouts-as-socket-timeouts-24.patch\n- Better call of py.test\n- Add versions to dependencies\n- Remove python-sasl from build dependencies\n- Update to version 2.4.1\n  * To avoid breaking the API basic_consume() now returns the consumer tag\n    instead of a tuple when nowait is True.\n  * Fix crash in basic_publish when broker does not support connection.blocked\n    capability.\n  * read_frame() is now Python 3 compatible for large payloads.\n  * Support float read_timeout/write_timeout.\n  * Always treat SSLError timeouts as socket timeouts.\n  * Treat EWOULDBLOCK as timeout.\n- from 2.4.0\n  * Fix inconsistent frame_handler return value.\n    The function returned by frame_handler is meant to return True\n    once the complete message is received and the callback is called,\n    False otherwise.\n    This fixes the return value for messages with a body split across\n    multiple frames, and heartbeat frames.\n  * Don't default content_encoding to utf-8 for bytes.\n    This is not an acceptable default as the content may not be\n    valid utf-8, and even if it is, the producer likely does not\n    expect the message to be decoded by the consumer.\n  * Fix encoding of messages with multibyte characters.\n    Body length was previously calculated using string length,\n    which may be less than the length of the encoded body when\n    it contains multibyte sequences. This caused the body of\n    the frame to be truncated.\n  * Respect content_encoding when encoding messages.\n    Previously the content_encoding was ignored and messages\n    were always encoded as utf-8. This caused messages to be\n    incorrectly decoded if content_encoding is properly respected\n    when decoding.\n  * Fix AMQP protocol header for AMQP 0-9-1.\n    Previously it was set to a different value for unknown reasons.\n  * Add support for Python 3.7.\n    Change direct SSLSocket instantiation with wrap_socket.\n  * Add support for field type 'x' (byte array).\n  * If there is an exception raised on Connection.connect or\n    Connection.close, ensure that the underlying transport socket\n    is closed.  Adjust exception message on connection errors as well.\n  * TCP_USER_TIMEOUT has to be excluded from KNOWN_TCP_OPTS in BSD platforms.\n  * Handle negative acknowledgments.\n  * Added integration tests.\n  * Fix basic_consume() with no consumer_tag provided.\n  * Improved empty AMQPError string representation.\n  * Drain events before publish.\n    This is needed to capture out of memory messages for clients that only\n    publish. Otherwise on_blocked is never called.\n  * Don't revive channel when connection is closing.\n    When connection is closing don't raise error when Channel.Close\n    method is received.\n\nChanges in python-ironic-lib:\n- update to version 2.14.2\n  - Replace openstack.org git:// URLs with https://\n  - OpenDev Migration Patch\n  - Include partiton name and flags from parted output\n\nChanges in python-keystoneauth1:\n- switch to tracking stable/rocky tarball\n- disable renderspec\n- update to version 3.10.1.dev10\n  * Make tests pass in 2020\n  * OpenDev Migration Patch\n  * Revert 'Change log hashing to SHA256'\n  * import zuul job settings from project-config\n  * Change log hashing to SHA256\n  * Update UPPER\\_CONSTRAINTS\\_FILE for stable/rocky\n  * Update .gitreview ftable/rocky\n\nChanges in python-keystoneclient:\n- switch to tracking stable/rocky tarball\n- disable renderspec\n- update to version 3.17.0.dev5\n  * Make tests pass in 2020\n  * OpenDev Migration Patch\n  * import zuul job settings from project-config\n  * Update UPPER\\_CONSTRAINTS\\_FILE for stable/rocky\n  * Update .gitreview for stable/rocky\n\nChanges in python-keystonemiddleware:\n- Use version_unconverted for documentation build \n\n- Update to version keystonemiddleware-5.2.2.dev3:\n  * Make tests pass in 2022\n  * Make sure audit middleware use own context\n\nChanges in python-ovs:\n- add 0001-python-c-ext-Fix-memory-leak-in-Parser_finish.patch (bsc#1158581)\n\nChanges in supportutils-plugin-suse-openstack-cloud:\n- Update to version 9.0.1574431436.987b47d:\n  * Add services from SOC/HOS8\n  * Fix handling of ardana 'config' dir and conf files in /opt/stack/service\n  * Fix more failures of censoring passwords\n  * Include configs and logs for neutron HA\n\nChanges in rubygem-crowbar-client:\n- Update to 3.9.1\n  - Fix repocheck table output (SOC-10718)\n  - Enable restricted commands for Cloud8 (bsc#1117080, CVE-2018-17954)\n\nChanges in rubygem-puma:\n- Add CVE-2019-16770.patch (bsc#1158675, SOC-10999, CVE-2019-16770)\n  This patch fixes a DoS vulnerability a malicious client could use to\n  block a large amount of threads.\n\n\n\nChanges in venv-openstack-horizon:\n- replace neutron-lbaas dashboard with octavia dashboard (SOC-10883)\n\n\n\n","status":"published","published":"2020-03-11T11:33:59Z","modified":"2026-02-04T03:07:20.785545Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:2060-1","title":"Security update for rubygem-puma","description":"This update for rubygem-puma fixes the following issues:\n\n- Add patches for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965):\n- Add CVE-2020-11077.patch (bsc#1172175, CVE-2020-11077)\n- Add CVE-2020-11076.patch (bsc#1172176, CVE-2020-11076)\n- Add CVE-2020-5247.patch (bsc#1165402)\n  'Fixes a problem where we were not splitting newlines in headers\n  according to Rack spec'\n  The patch is reduced compared to the upstream version, which was\n  patching also the parts that are not implemented in our old Puma\n  version. This applies to unit test as well.\n- Add CVE-2019-16770.patch (bsc#1158675, SOC-10999, CVE-2019-16770)\n  This patch fixes a DoS vulnerability a malicious client could use to\n  block a large amount of threads.\n","status":"published","published":"2020-07-28T15:54:20Z","modified":"2026-02-04T04:31:49.921555Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3036-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.6.5:\n- Solved potential bug of SCC repository URLs changing over time. RMT\n  now self heals by removing the previous invalid repository and\n  creating the correct one.\n- Add web server settings to /etc/rmt.conf:\n  Now it's possible to configure the minimum and maximum threads count as well\n  the number of web server workers to be booted through /etc/rmt.conf.\n- Instead of using an MD5 of URLs for custom repository friendly_ids,\n  RMT now builds an ID from the name.\n- Fix RMT file caching based on timestamps:\n  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a\n  repository server and if the response had a 304 (Not Modified), it would copy\n  a file from the local cache instead of downloading. However, if the local file\n  timestamp accidentally changed to a date newer than the one on the repository\n  server, RMT would have an outdated file, which caused some errors.\n  Now, RMT makes HEAD requests to the repositories servers and inspect the\n  'Last-Modified' header to decide whether to download a file or copy it from\n  cache, by comparing the equalness of timestamps.\n- Fixed an issue where relative paths supplied to `rmt-cli import repos`\n  caused the command to fail.\n- Friendlier IDs for custom repositories:\n  In an effort to simplify the handling of SCC and custom repositories,\n  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID\n  as before. For custom repositories, it can either be user provided\n  or RMT generated (MD5 of the provided URL).\n  Benefits:\n  * `rmt-cli mirror repositories` now works for custom repositories.\n  * Custom repository IDs can be the same across RMT instances.\n  * No more confusing 'SCC ID' vs 'ID' in `rmt-cli` output.\n  Deprecation Warnings:\n  * RMT now uses a different ID for custom repositories than before.\n    RMT still supports that old ID, but it's recommended to start\n    using the new ID to ensure future compatibility.\n- Updated rails and puma dependencies for security fixes.\n","status":"published","published":"2020-10-26T11:11:15Z","modified":"2026-02-04T02:46:56.057405Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3147-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\n- Version 2.6.5\n- Solved potential bug of SCC repository URLs changing over time. RMT\n  now self heals by removing the previous invalid repository and\n  creating the correct one.\n\n- Version 2.6.4\n- Add web server settings to /etc/rmt.conf:\n  Now it's possible to configure the minimum and maximum threads count as well\n  the number of web server workers to be booted through /etc/rmt.conf.\n\n- Version 2.6.3\n- Instead of using an MD5 of URLs for custom repository friendly_ids,\n  RMT now builds an ID from the name.\n\n- Version 2.6.2\n- Fix RMT file caching based on timestamps:\n  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a\n  repository server and if the response had a 304 (Not Modified), it would copy\n  a file from the local cache instead of downloading. However, if the local file\n  timestamp accidentally changed to a date newer than the one on the repository\n  server, RMT would have an outdated file, which caused some errors.\n  Now, RMT makes HEAD requests to the repositories servers and inspect the\n  'Last-Modified' header to decide whether to download a file or copy it from\n  cache, by comparing the equalness of timestamps.\n  \n\n- Version 2.6.1\n- Fixed an issue where relative paths supplied to `rmt-cli import repos`\n  caused the command to fail.\n\n- Version 2.6.0\n- Friendlier IDs for custom repositories:\n  In an effort to simplify the handling of SCC and custom repositories,\n  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID\n  as before. For custom repositories, it can either be user provided\n  or RMT generated (MD5 of the provided URL).\n  Benefits:\n  * `rmt-cli mirror repositories` now works for custom repositories.\n  * Custom repository IDs can be the same across RMT instances.\n  * No more confusing 'SCC ID' vs 'ID' in `rmt-cli` output.\n  Deprecation Warnings:\n  * RMT now uses a different ID for custom repositories than before.\n    RMT still supports that old ID, but it's recommended to start\n    using the new ID to ensure future compatibility.\n\n- Version 2.5.20\n- Updated rails from 6.0.3.2 to 6.0.3.3:\n  - actionview (CVE-2020-15169)\n\n- Version 2.5.19\n- RMT now has the ability to remove local systems with the command\n  `rmt-cli systems remove`.\n\n- Version 2.5.18\n- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1\n  whenever an error occurrs during mirroring\n- Improved message logging for `rtm-cli mirror`. Instead of logging an error\n  when it occurs, the command summarize all errors at the end of execution. Now\n  log messages have colors to better identify failure/success.\n\n- Version 2.5.17\n- RMT no longer provides the installer updates repository to systems via its\n  zypper service. This repository is used during the installation process, as\n  it provides an up-to-date installation experience, but it has no use on an\n  already installed system.\n\n- Version 2.5.16\n- Updated RMT's rails and puma dependencies.\n  - puma (CVE-2020-11076, CVE-2020-11077, CVE-2020-5249, CVE-2020-5247\n    CVE-2019-16770)\n  - actionpack (CVE-2020-8185, CVE-2020-8164, CVE-2020-8166)\n  - actionview (CVE-2020-8167, CVE-2020-5267, CVE-2019-5418, CVE-2019-5419)\n  - activesupport (CVE-2020-8165)\n  - railties (CVE-2019-5420)\n\n- Version 2.5.15\n- RMT now checks if repositories are fully mirrored during the\n  activation process. Previously, RMT only checked if the repositories\n  were enabled to be mirrored, but not that they were actually mirrored.\n  In this case, RMTs were not able to provide the repository data which\n  systems assumed it had.\n\n- Version 2.5.14\n- Enable 'Installer-Updates' repositories by default\n\n- Fixed deprecation warning when thor encountered an error. Also,\n  instead of returning 0 for thor errors, rmt-cli will return 1\n  instead.\n\n- Version 2.5.13\n- Added `rmt-cli repos clean` command to remove locally mirrored files\n  of repositories which are not marked to be mirrored.\n- Previously, RMT didn't track deduplicated files in its database. Now,\n  to accommodate `rmt-cli repos clean`, RMT will track all mirrored\n  files.\n\n- Move the nginx reload to the configuration package which contain\n  nginx config files, don't reload nginx unconditionally from main\n  package.\n\n- Version 2.5.12\n- Update rack to version 2.2.3 (CVE-2020-8184: bsc#1173351)\n- Update Rails to version 5.2.4.3:\n  - actionpack (CVE-2020-8164: bsc#1172177)\n  - actionpack (CVE-2020-8166: bsc#1172182)\n  - activesupport (CVE-2020-8165: bsc#1172186)\n  - actionview (CVE-2020-8167: bsc#1172184)\n\n- Version 2.5.11\n- rmt-server-pubcloud:\n  - SLES11 EOL\n  - Extension activation verification based on the available subscriptions\n  - Added a manual instance verification script\n\n- Version 2.5.10\n- Support rmt-server to run with Ruby 2.7 (Factory/Tumbleweed):\n  - Bump gem 'config' version from 1.7.2 to 2.2.1 to fix incompatibility Ruby\n    2.7 OpenStruct class;\n  - Bump gem 'typhoeus' version from 1.3.1 to 1.4.0 in order to also bump gem\n    'ethon' version, which caused a 'rb_safe_level' warning on Ruby 2.7;\n  - Fix 'last arg as keyword arg' Ruby 2.7 warning on source code;\n  - Disable 'deprecated' warnings from Ruby 2.7; Rails 5.1 generates a lot of\n    warnings with Ruby 2.7, mainly due to 'capturing the given block with\n    Proc.new', which is deprecated;\n  - Improve RPM spec to consider only the distribution default Ruby version\n    configured in OBS;\n  - Improve RPM spec to remove Ruby 2.7 warnings regarding 'bundler.\n\n- Move nginx/vhosts.d directory to correct sub-package. They\n  are needed together with nginx, not rmt-server.\n- Fix dependencies especially for containerized usage:\n  - mariadb and nginx are not hard requires, could run on another host\n- Fix generic dependencies:\n  - systemd ordering was missing\n  - shadow is required for pre-install\n\n- Version 2.5.9\n- rmt-server-pubcloud: enforce strict authentication\n\n- Version 2.5.8\n- Use repomd_parser gem to remove repository metadata parsing code.\n","status":"published","published":"2020-11-04T10:02:46Z","modified":"2026-02-04T02:41:44.175135Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3160-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\n- Version 2.6.5\n- Solved potential bug of SCC repository URLs changing over time. RMT\n  now self heals by removing the previous invalid repository and\n  creating the correct one.\n\n- Version 2.6.4\n- Add web server settings to /etc/rmt.conf:\n  Now it's possible to configure the minimum and maximum threads count as well\n  the number of web server workers to be booted through /etc/rmt.conf.\n\n- Version 2.6.3\n- Instead of using an MD5 of URLs for custom repository friendly_ids,\n  RMT now builds an ID from the name.\n\n- Version 2.6.2\n- Fix RMT file caching based on timestamps:\n  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a\n  repository server and if the response had a 304 (Not Modified), it would copy\n  a file from the local cache instead of downloading. However, if the local file\n  timestamp accidentally changed to a date newer than the one on the repository\n  server, RMT would have an outdated file, which caused some errors.\n  Now, RMT makes HEAD requests to the repositories servers and inspect the\n  'Last-Modified' header to decide whether to download a file or copy it from\n  cache, by comparing the equalness of timestamps.\n  \n\n- Version 2.6.1\n- Fixed an issue where relative paths supplied to `rmt-cli import repos`\n  caused the command to fail.\n\n- Version 2.6.0\n- Friendlier IDs for custom repositories:\n  In an effort to simplify the handling of SCC and custom repositories,\n  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID\n  as before. For custom repositories, it can either be user provided\n  or RMT generated (MD5 of the provided URL).\n  Benefits:\n  * `rmt-cli mirror repositories` now works for custom repositories.\n  * Custom repository IDs can be the same across RMT instances.\n  * No more confusing 'SCC ID' vs 'ID' in `rmt-cli` output.\n  Deprecation Warnings:\n  * RMT now uses a different ID for custom repositories than before.\n    RMT still supports that old ID, but it's recommended to start\n    using the new ID to ensure future compatibility.\n\n- Version 2.5.20\n- Updated rails from 6.0.3.2 to 6.0.3.3:\n  - actionview (CVE-2020-15169)\n\n- Version 2.5.19\n- RMT now has the ability to remove local systems with the command\n  `rmt-cli systems remove`.\n\n- Version 2.5.18\n- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1\n  whenever an error occurs during mirroring\n- Improved message logging for `rtm-cli mirror`. Instead of logging an error\n  when it occurs, the command summarize all errors at the end of execution. Now\n  log messages have colors to better identify failure/success.\n\n- Version 2.5.17\n- RMT no longer provides the installer updates repository to systems via its\n  zypper service. This repository is used during the installation process, as\n  it provides an up-to-date installation experience, but it has no use on an\n  already installed system.\n\n- Version 2.5.16\n- Updated RMT's rails and puma dependencies.\n  - puma (CVE-2020-11076, CVE-2020-11077, CVE-2020-5249, CVE-2020-5247\n    CVE-2019-16770)\n  - actionpack (CVE-2020-8185, CVE-2020-8164, CVE-2020-8166)\n  - actionview (CVE-2020-8167, CVE-2020-5267, CVE-2019-5418, CVE-2019-5419)\n  - activesupport (CVE-2020-8165)\n  - railties (CVE-2019-5420)\n\n- Version 2.5.15\n- RMT now checks if repositories are fully mirrored during the\n  activation process. Previously, RMT only checked if the repositories\n  were enabled to be mirrored, but not that they were actually mirrored.\n  In this case, RMTs were not able to provide the repository data which\n  systems assumed it had.\n\n- Version 2.5.14\n- Enable 'Installer-Updates' repositories by default\n\n- Fixed deprecation warning when thor encountered an error. Also,\n  instead of returning 0 for thor errors, rmt-cli will return 1\n  instead.\n\n- Version 2.5.13\n- Added `rmt-cli repos clean` command to remove locally mirrored files\n  of repositories which are not marked to be mirrored.\n- Previously, RMT didn't track deduplicated files in its database. Now,\n  to accommodate `rmt-cli repos clean`, RMT will track all mirrored\n  files.\n\n- Move the nginx reload to the configuration package which contain\n  nginx config files, don't reload nginx unconditionally from main\n  package.\n\n- Version 2.5.12\n- Update rack to version 2.2.3 (CVE-2020-8184: bsc#1173351)\n- Update Rails to version 5.2.4.3:\n  - actionpack (CVE-2020-8164: bsc#1172177)\n  - actionpack (CVE-2020-8166: bsc#1172182)\n  - activesupport (CVE-2020-8165: bsc#1172186)\n  - actionview (CVE-2020-8167: bsc#1172184)\n\n- Version 2.5.11\n- rmt-server-pubcloud:\n  - SLES11 EOL\n  - Extension activation verification based on the available subscriptions\n  - Added a manual instance verification script\n\n- Version 2.5.10\n- Support rmt-server to run with Ruby 2.7 (Factory/Tumbleweed):\n  - Bump gem 'config' version from 1.7.2 to 2.2.1 to fix incompatibility Ruby\n    2.7 OpenStruct class;\n  - Bump gem 'typhoeus' version from 1.3.1 to 1.4.0 in order to also bump gem\n    'ethon' version, which caused a 'rb_safe_level' warning on Ruby 2.7;\n  - Fix 'last arg as keyword arg' Ruby 2.7 warning on source code;\n  - Disable 'deprecated' warnings from Ruby 2.7; Rails 5.1 generates a lot of\n    warnings with Ruby 2.7, mainly due to 'capturing the given block with\n    Proc.new', which is deprecated;\n  - Improve RPM spec to consider only the distribution default Ruby version\n    configured in OBS;\n  - Improve RPM spec to remove Ruby 2.7 warnings regarding 'bundler.\n\n- Move nginx/vhosts.d directory to correct sub-package. They\n  are needed together with nginx, not rmt-server.\n- Fix dependencies especially for containerized usage:\n  - mariadb and nginx are not hard requires, could run on another host\n- Fix generic dependencies:\n  - systemd ordering was missing\n  - shadow is required for pre-install\n\n- Version 2.5.9\n- rmt-server-pubcloud: enforce strict authentication\n\n- Version 2.5.8\n- Use repomd_parser gem to remove repository metadata parsing code.\n","status":"published","published":"2020-11-05T09:33:25Z","modified":"2026-02-04T04:11:11.152927Z","updated_at":"2026-11-02T15:53:48.11786Z"}]}}