{"id":"CVE-2019-8341","aliases":["BELL-CVE-2019-8341","DEBIAN-CVE-2019-8341","EUVD-2019-17731","GHSA-f6pv-j8mr-w6rr","SUSE-FU-2022:0444-1","SUSE-FU-2022:0445-1","SUSE-SU-2019:1156-1","SUSE-SU-2019:1554-1","SUSE-SU-2020:3096-1","SUSE-SU-2020:3897-1","UBUNTU-CVE-2019-8341","openSUSE-SU-2019:1395-1"],"status":"disputed","title":"** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...","description":"An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.43868,"percentile":0.98756,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-94"],"published":"2019-02-15T07:00:00Z","modified":"2026-10-24T10:30:51Z","exploits":[{"source":"exploitdb","id":"EDB-46386","title":"Jinja2 2.10 - 'from_string' Server Side Template Injection","type":"webapps","platform":"python","date":"2019-02-15","url":"https://www.exploit-db.com/exploits/46386"},{"source":"pocgithub","id":"adindrabkin/llama_facts","title":"adindrabkin/llama_facts","date":"2021-12-24","url":"https://github.com/adindrabkin/llama_facts"}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-1","3.1.2-1+deb12u1","3.1.2-1+deb12u2","3.1.2-1+deb12u3","3.1.3-1","3.1.3-1.1","3.1.3-2","3.1.5-1","3.1.5-2","3.1.6-1","3.1.6-2","3.1.6-3"]},{"source":"osv","ecosystem":"Debian:13","package":"jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.6-1","3.1.6-2","3.1.6-3"]},{"source":"osv","ecosystem":"Debian:14","package":"jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.6-1","3.1.6-2","3.1.6-3"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 12 SP2","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.1","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-22.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-19.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-19.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-19.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1600802664.7e480a2-3.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1605174486.a78ddce-3.19.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-osconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1601621747.a87e5a0-3.22.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1603378983.fc0bca9-3.19.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"influxdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8-4.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev20-3.28.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.4~dev4-3.19.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev2-3.3.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1605509190.64f020b6-3.9.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-horizon-plugin-gbp-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev3-3.3.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.4~dev6-3.19.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.2~dev57-4.30.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev135-3.31.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev5-3.19.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-vpnaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.2~dev6-3.9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev77-3.31.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-4.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23-3.15.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"release-notes-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20200917-3.24.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"spark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-5.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev20-3.24.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2~dev2-3.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.19.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.4~dev4-3.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev7-4.23.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev16-4.19.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev4-3.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-4.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.2~dev57-3.25.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1~dev10-3.19.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2~dev3-3.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev135-6.23.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev77-3.23.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3~dev7-4.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.21.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-2.16.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1606314264.bf9ada813-3.31.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1604573541.bb18c172d-3.28.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-3.20.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"influxdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8-4.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev20-3.28.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.4~dev4-3.19.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev2-3.3.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1605509190.64f020b6-3.9.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-horizon-plugin-gbp-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev3-3.3.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.4~dev6-3.19.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.2~dev57-4.30.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev135-3.31.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev5-3.19.4"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-vpnaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.2~dev6-3.9.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev77-3.31.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-4.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.4-3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23-3.15.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"release-notes-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20200917-3.24.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"spark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-5.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7-3","2.7.1-1","2.7.2-1","2.7.2-2","2.7.2-2ubuntu0.1~esm1","2.7.2-2ubuntu0.1~esm2","2.7.2-2ubuntu0.1~esm3","2.7.2-2ubuntu0.1~esm4","2.7.2-2ubuntu0.1~esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8-1","2.8-1ubuntu0.1","2.8-1ubuntu0.1+esm1","2.8-1ubuntu0.1+esm2","2.8-1ubuntu0.1+esm3","2.8-1ubuntu0.1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.9.6-1","2.10-1","2.10-1ubuntu0.18.04.1","2.10-1ubuntu0.18.04.1+esm1","2.10-1ubuntu0.18.04.1+esm2","2.10-1ubuntu0.18.04.1+esm3","2.10-1ubuntu0.18.04.1+esm4","2.10-1ubuntu0.18.04.1+esm5"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"python-Jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-lp150.2.3.1"}]}],"bundled":3}],"products":[{"vendor":"opensuse","product":"leap"},{"vendor":"pocoo","product":"jinja2"}],"references":[{"url":"https://github.com/JameelNabbo/Jinja2-Code-execution","tags":["x_refsource_MISC","x_transferred","Broken Link","package","report"]},{"url":"https://www.exploit-db.com/exploits/46386/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677653","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1125815","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8341"},{"url":"https://www.exploit-db.com/exploits/46386"},{"url":"https://github.com/advisories/GHSA-f6pv-j8mr-w6rr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-8341","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-8341","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2022-444/suse-fu-20220444-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000080","tags":["report"]},{"url":"https://bugzilla.suse.com/1000117","tags":["report"]},{"url":"https://bugzilla.suse.com/1000194","tags":["report"]},{"url":"https://bugzilla.suse.com/1000742","tags":["report"]},{"url":"https://bugzilla.suse.com/1002895","tags":["report"]},{"url":"https://bugzilla.suse.com/1003091","tags":["report"]},{"url":"https://bugzilla.suse.com/1005246","tags":["report"]},{"url":"https://bugzilla.suse.com/1010874","tags":["report"]},{"url":"https://bugzilla.suse.com/1010966","tags":["report"]},{"url":"https://bugzilla.suse.com/1011936","tags":["report"]},{"url":"https://bugzilla.suse.com/1015549","tags":["report"]},{"url":"https://bugzilla.suse.com/1027610","tags":["report"]},{"url":"https://bugzilla.suse.com/1027705","tags":["report"]},{"url":"https://bugzilla.suse.com/1029902","tags":["report"]},{"url":"https://bugzilla.suse.com/1030038","tags":["report"]},{"url":"https://bugzilla.suse.com/1032118","tags":["report"]},{"url":"https://bugzilla.suse.com/1032119","tags":["report"]},{"url":"https://bugzilla.suse.com/1035604","tags":["report"]},{"url":"https://bugzilla.suse.com/1039469","tags":["report"]},{"url":"https://bugzilla.suse.com/1040164","tags":["report"]},{"url":"https://bugzilla.suse.com/1040256","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1049186","tags":["report"]},{"url":"https://bugzilla.suse.com/1049304","tags":["report"]},{"url":"https://bugzilla.suse.com/1050653","tags":["report"]},{"url":"https://bugzilla.suse.com/1050665","tags":["report"]},{"url":"https://bugzilla.suse.com/1055478","tags":["report"]},{"url":"https://bugzilla.suse.com/1055542","tags":["report"]},{"url":"https://bugzilla.suse.com/1056951","tags":["report"]},{"url":"https://bugzilla.suse.com/1057496","tags":["report"]},{"url":"https://bugzilla.suse.com/1062237","tags":["report"]},{"url":"https://bugzilla.suse.com/1066873","tags":["report"]},{"url":"https://bugzilla.suse.com/1068790","tags":["report"]},{"url":"https://bugzilla.suse.com/1070737","tags":["report"]},{"url":"https://bugzilla.suse.com/1070738","tags":["report"]},{"url":"https://bugzilla.suse.com/1070853","tags":["report"]},{"url":"https://bugzilla.suse.com/1071941","tags":["report"]},{"url":"https://bugzilla.suse.com/1073310","tags":["report"]},{"url":"https://bugzilla.suse.com/1073845","tags":["report"]},{"url":"https://bugzilla.suse.com/1073879","tags":["report"]},{"url":"https://bugzilla.suse.com/1074247","tags":["report"]},{"url":"https://bugzilla.suse.com/1076519","tags":["report"]},{"url":"https://bugzilla.suse.com/1077096","tags":["report"]},{"url":"https://bugzilla.suse.com/1077230","tags":["report"]},{"url":"https://bugzilla.suse.com/1078329","tags":["report"]},{"url":"https://bugzilla.suse.com/1079761","tags":["report"]},{"url":"https://bugzilla.suse.com/1080301","tags":["report"]},{"url":"https://bugzilla.suse.com/1081005","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1081751","tags":["report"]},{"url":"https://bugzilla.suse.com/1082155","tags":["report"]},{"url":"https://bugzilla.suse.com/1082163","tags":["report"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://bugzilla.suse.com/1083826","tags":["report"]},{"url":"https://bugzilla.suse.com/1084117","tags":["report"]},{"url":"https://bugzilla.suse.com/1084157","tags":["report"]},{"url":"https://bugzilla.suse.com/1085276","tags":["report"]},{"url":"https://bugzilla.suse.com/1085529","tags":["report"]},{"url":"https://bugzilla.suse.com/1085661","tags":["report"]},{"url":"https://bugzilla.suse.com/1087104","tags":["report"]},{"url":"https://bugzilla.suse.com/1088573","tags":["report"]},{"url":"https://bugzilla.suse.com/1090427","tags":["report"]},{"url":"https://bugzilla.suse.com/1090953","tags":["report"]},{"url":"https://bugzilla.suse.com/1093518","tags":["report"]},{"url":"https://bugzilla.suse.com/1093917","tags":["report"]},{"url":"https://bugzilla.suse.com/1094788","tags":["report"]},{"url":"https://bugzilla.suse.com/1094814","tags":["report"]},{"url":"https://bugzilla.suse.com/1094883","tags":["report"]},{"url":"https://bugzilla.suse.com/1095267","tags":["report"]},{"url":"https://bugzilla.suse.com/1096738","tags":["report"]},{"url":"https://bugzilla.suse.com/1096937","tags":["report"]},{"url":"https://bugzilla.suse.com/1097531","tags":["report"]},{"url":"https://bugzilla.suse.com/1098535","tags":["report"]},{"url":"https://bugzilla.suse.com/1099308","tags":["report"]},{"url":"https://bugzilla.suse.com/1099569","tags":["report"]},{"url":"https://bugzilla.suse.com/1102868","tags":["report"]},{"url":"https://bugzilla.suse.com/1108508","tags":["report"]},{"url":"https://bugzilla.suse.com/1109882","tags":["report"]},{"url":"https://bugzilla.suse.com/1109998","tags":["report"]},{"url":"https://bugzilla.suse.com/1110435","tags":["report"]},{"url":"https://bugzilla.suse.com/1110869","tags":["report"]},{"url":"https://bugzilla.suse.com/1110871","tags":["report"]},{"url":"https://bugzilla.suse.com/1111493","tags":["report"]},{"url":"https://bugzilla.suse.com/1111622","tags":["report"]},{"url":"https://bugzilla.suse.com/1111657","tags":["report"]},{"url":"https://bugzilla.suse.com/1112357","tags":["report"]},{"url":"https://bugzilla.suse.com/1115769","tags":["report"]},{"url":"https://bugzilla.suse.com/1118611","tags":["report"]},{"url":"https://bugzilla.suse.com/1119376","tags":["report"]},{"url":"https://bugzilla.suse.com/1119416","tags":["report"]},{"url":"https://bugzilla.suse.com/1119792","tags":["report"]},{"url":"https://bugzilla.suse.com/1121717","tags":["report"]},{"url":"https://bugzilla.suse.com/1121852","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1123064","tags":["report"]},{"url":"https://bugzilla.suse.com/1123185","tags":["report"]},{"url":"https://bugzilla.suse.com/1123186","tags":["report"]},{"url":"https://bugzilla.suse.com/1123558","tags":["report"]},{"url":"https://bugzilla.suse.com/1124885","tags":["report"]},{"url":"https://bugzilla.suse.com/1125815","tags":["report"]},{"url":"https://bugzilla.suse.com/1126283","tags":["report"]},{"url":"https://bugzilla.suse.com/1126318","tags":["report"]},{"url":"https://bugzilla.suse.com/1127173","tags":["report"]},{"url":"https://bugzilla.suse.com/1128146","tags":["report"]},{"url":"https://bugzilla.suse.com/1128323","tags":["report"]},{"url":"https://bugzilla.suse.com/1128355","tags":["report"]},{"url":"https://bugzilla.suse.com/1129071","tags":["report"]},{"url":"https://bugzilla.suse.com/1129566","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1132174","tags":["report"]},{"url":"https://bugzilla.suse.com/1132323","tags":["report"]},{"url":"https://bugzilla.suse.com/1132455","tags":["report"]},{"url":"https://bugzilla.suse.com/1132663","tags":["report"]},{"url":"https://bugzilla.suse.com/1132900","tags":["report"]},{"url":"https://bugzilla.suse.com/1135009","tags":["report"]},{"url":"https://bugzilla.suse.com/1136444","tags":["report"]},{"url":"https://bugzilla.suse.com/1138666","tags":["report"]},{"url":"https://bugzilla.suse.com/1138715","tags":["report"]},{"url":"https://bugzilla.suse.com/1138746","tags":["report"]},{"url":"https://bugzilla.suse.com/1139915","tags":["report"]},{"url":"https://bugzilla.suse.com/1140255","tags":["report"]},{"url":"https://bugzilla.suse.com/1141168","tags":["report"]},{"url":"https://bugzilla.suse.com/1142899","tags":["report"]},{"url":"https://bugzilla.suse.com/1143033","tags":["report"]},{"url":"https://bugzilla.suse.com/1143454","tags":["report"]},{"url":"https://bugzilla.suse.com/1143893","tags":["report"]},{"url":"https://bugzilla.suse.com/1144506","tags":["report"]},{"url":"https://bugzilla.suse.com/1149686","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1150190","tags":["report"]},{"url":"https://bugzilla.suse.com/1150895","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1155815","tags":["report"]},{"url":"https://bugzilla.suse.com/1156677","tags":["report"]},{"url":"https://bugzilla.suse.com/1156694","tags":["report"]},{"url":"https://bugzilla.suse.com/1156908","tags":["report"]},{"url":"https://bugzilla.suse.com/1157104","tags":["report"]},{"url":"https://bugzilla.suse.com/1157354","tags":["report"]},{"url":"https://bugzilla.suse.com/1159235","tags":["report"]},{"url":"https://bugzilla.suse.com/1159538","tags":["report"]},{"url":"https://bugzilla.suse.com/1161557","tags":["report"]},{"url":"https://bugzilla.suse.com/1161770","tags":["report"]},{"url":"https://bugzilla.suse.com/1162224","tags":["report"]},{"url":"https://bugzilla.suse.com/1162367","tags":["report"]},{"url":"https://bugzilla.suse.com/1162743","tags":["report"]},{"url":"https://bugzilla.suse.com/1163978","tags":["report"]},{"url":"https://bugzilla.suse.com/1164310","tags":["report"]},{"url":"https://bugzilla.suse.com/1165439","tags":["report"]},{"url":"https://bugzilla.suse.com/1165578","tags":["report"]},{"url":"https://bugzilla.suse.com/1165730","tags":["report"]},{"url":"https://bugzilla.suse.com/1165823","tags":["report"]},{"url":"https://bugzilla.suse.com/1165960","tags":["report"]},{"url":"https://bugzilla.suse.com/1166139","tags":["report"]},{"url":"https://bugzilla.suse.com/1166758","tags":["report"]},{"url":"https://bugzilla.suse.com/1167008","tags":["report"]},{"url":"https://bugzilla.suse.com/1167501","tags":["report"]},{"url":"https://bugzilla.suse.com/1167732","tags":["report"]},{"url":"https://bugzilla.suse.com/1167746","tags":["report"]},{"url":"https://bugzilla.suse.com/1168480","tags":["report"]},{"url":"https://bugzilla.suse.com/1168973","tags":["report"]},{"url":"https://bugzilla.suse.com/1169489","tags":["report"]},{"url":"https://bugzilla.suse.com/1170175","tags":["report"]},{"url":"https://bugzilla.suse.com/1170863","tags":["report"]},{"url":"https://bugzilla.suse.com/1171368","tags":["report"]},{"url":"https://bugzilla.suse.com/1171561","tags":["report"]},{"url":"https://bugzilla.suse.com/1172226","tags":["report"]},{"url":"https://bugzilla.suse.com/1172908","tags":["report"]},{"url":"https://bugzilla.suse.com/1172928","tags":["report"]},{"url":"https://bugzilla.suse.com/1173226","tags":["report"]},{"url":"https://bugzilla.suse.com/1173356","tags":["report"]},{"url":"https://bugzilla.suse.com/1174009","tags":["report"]},{"url":"https://bugzilla.suse.com/1174091","tags":["report"]},{"url":"https://bugzilla.suse.com/1174514","tags":["report"]},{"url":"https://bugzilla.suse.com/1175729","tags":["report"]},{"url":"https://bugzilla.suse.com/1176116","tags":["report"]},{"url":"https://bugzilla.suse.com/1176129","tags":["report"]},{"url":"https://bugzilla.suse.com/1176134","tags":["report"]},{"url":"https://bugzilla.suse.com/1176232","tags":["report"]},{"url":"https://bugzilla.suse.com/1176256","tags":["report"]},{"url":"https://bugzilla.suse.com/1176257","tags":["report"]},{"url":"https://bugzilla.suse.com/1176258","tags":["report"]},{"url":"https://bugzilla.suse.com/1176259","tags":["report"]},{"url":"https://bugzilla.suse.com/1176262","tags":["report"]},{"url":"https://bugzilla.suse.com/1176389","tags":["report"]},{"url":"https://bugzilla.suse.com/1176785","tags":["report"]},{"url":"https://bugzilla.suse.com/1176977","tags":["report"]},{"url":"https://bugzilla.suse.com/1177120","tags":["report"]},{"url":"https://bugzilla.suse.com/1177127","tags":["report"]},{"url":"https://bugzilla.suse.com/1177559","tags":["report"]},{"url":"https://bugzilla.suse.com/1178168","tags":["report"]},{"url":"https://bugzilla.suse.com/1178341","tags":["report"]},{"url":"https://bugzilla.suse.com/1178670","tags":["report"]},{"url":"https://bugzilla.suse.com/1179562","tags":["report"]},{"url":"https://bugzilla.suse.com/1179630","tags":["report"]},{"url":"https://bugzilla.suse.com/1179805","tags":["report"]},{"url":"https://bugzilla.suse.com/1180125","tags":["report"]},{"url":"https://bugzilla.suse.com/1180781","tags":["report"]},{"url":"https://bugzilla.suse.com/1181126","tags":["report"]},{"url":"https://bugzilla.suse.com/1181324","tags":["report"]},{"url":"https://bugzilla.suse.com/1181944","tags":["report"]},{"url":"https://bugzilla.suse.com/1182066","tags":["report"]},{"url":"https://bugzilla.suse.com/1182211","tags":["report"]},{"url":"https://bugzilla.suse.com/1182244","tags":["report"]},{"url":"https://bugzilla.suse.com/1182264","tags":["report"]},{"url":"https://bugzilla.suse.com/1182379","tags":["report"]},{"url":"https://bugzilla.suse.com/1182963","tags":["report"]},{"url":"https://bugzilla.suse.com/1183059","tags":["report"]},{"url":"https://bugzilla.suse.com/1183374","tags":["report"]},{"url":"https://bugzilla.suse.com/1183858","tags":["report"]},{"url":"https://bugzilla.suse.com/1184505","tags":["report"]},{"url":"https://bugzilla.suse.com/1185588","tags":["report"]},{"url":"https://bugzilla.suse.com/1185706","tags":["report"]},{"url":"https://bugzilla.suse.com/1185748","tags":["report"]},{"url":"https://bugzilla.suse.com/1186738","tags":["report"]},{"url":"https://bugzilla.suse.com/1187045","tags":["report"]},{"url":"https://bugzilla.suse.com/1190781","tags":["report"]},{"url":"https://bugzilla.suse.com/1193357","tags":["report"]},{"url":"https://bugzilla.suse.com/428177","tags":["report"]},{"url":"https://bugzilla.suse.com/431945","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/657698","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/715423","tags":["report"]},{"url":"https://bugzilla.suse.com/743787","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/750618","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/754677","tags":["report"]},{"url":"https://bugzilla.suse.com/761500","tags":["report"]},{"url":"https://bugzilla.suse.com/784670","tags":["report"]},{"url":"https://bugzilla.suse.com/787526","tags":["report"]},{"url":"https://bugzilla.suse.com/799119","tags":["report"]},{"url":"https://bugzilla.suse.com/809831","tags":["report"]},{"url":"https://bugzilla.suse.com/811890","tags":["report"]},{"url":"https://bugzilla.suse.com/825221","tags":["report"]},{"url":"https://bugzilla.suse.com/828513","tags":["report"]},{"url":"https://bugzilla.suse.com/831629","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/835687","tags":["report"]},{"url":"https://bugzilla.suse.com/839107","tags":["report"]},{"url":"https://bugzilla.suse.com/84331","tags":["report"]},{"url":"https://bugzilla.suse.com/855666","tags":["report"]},{"url":"https://bugzilla.suse.com/858239","tags":["report"]},{"url":"https://bugzilla.suse.com/867887","tags":["report"]},{"url":"https://bugzilla.suse.com/871152","tags":["report"]},{"url":"https://bugzilla.suse.com/885662","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/889363","tags":["report"]},{"url":"https://bugzilla.suse.com/892480","tags":["report"]},{"url":"https://bugzilla.suse.com/898917","tags":["report"]},{"url":"https://bugzilla.suse.com/907584","tags":["report"]},{"url":"https://bugzilla.suse.com/912460","tags":["report"]},{"url":"https://bugzilla.suse.com/913229","tags":["report"]},{"url":"https://bugzilla.suse.com/915479","tags":["report"]},{"url":"https://bugzilla.suse.com/917607","tags":["report"]},{"url":"https://bugzilla.suse.com/917759","tags":["report"]},{"url":"https://bugzilla.suse.com/917815","tags":["report"]},{"url":"https://bugzilla.suse.com/922448","tags":["report"]},{"url":"https://bugzilla.suse.com/929736","tags":["report"]},{"url":"https://bugzilla.suse.com/930189","tags":["report"]},{"url":"https://bugzilla.suse.com/931978","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://bugzilla.suse.com/937912","tags":["report"]},{"url":"https://bugzilla.suse.com/939456","tags":["report"]},{"url":"https://bugzilla.suse.com/940608","tags":["report"]},{"url":"https://bugzilla.suse.com/942385","tags":["report"]},{"url":"https://bugzilla.suse.com/942751","tags":["report"]},{"url":"https://bugzilla.suse.com/944204","tags":["report"]},{"url":"https://bugzilla.suse.com/945455","tags":["report"]},{"url":"https://bugzilla.suse.com/946648","tags":["report"]},{"url":"https://bugzilla.suse.com/947357","tags":["report"]},{"url":"https://bugzilla.suse.com/947679","tags":["report"]},{"url":"https://bugzilla.suse.com/948198","tags":["report"]},{"url":"https://bugzilla.suse.com/954486","tags":["report"]},{"url":"https://bugzilla.suse.com/954690","tags":["report"]},{"url":"https://bugzilla.suse.com/961334","tags":["report"]},{"url":"https://bugzilla.suse.com/962291","tags":["report"]},{"url":"https://bugzilla.suse.com/963974","tags":["report"]},{"url":"https://bugzilla.suse.com/964204","tags":["report"]},{"url":"https://bugzilla.suse.com/964472","tags":["report"]},{"url":"https://bugzilla.suse.com/964474","tags":["report"]},{"url":"https://bugzilla.suse.com/965830","tags":["report"]},{"url":"https://bugzilla.suse.com/967128","tags":["report"]},{"url":"https://bugzilla.suse.com/968270","tags":["report"]},{"url":"https://bugzilla.suse.com/968601","tags":["report"]},{"url":"https://bugzilla.suse.com/975875","tags":["report"]},{"url":"https://bugzilla.suse.com/981848","tags":["report"]},{"url":"https://bugzilla.suse.com/988086","tags":["report"]},{"url":"https://bugzilla.suse.com/992988","tags":["report"]},{"url":"https://bugzilla.suse.com/992989","tags":["report"]},{"url":"https://bugzilla.suse.com/992992","tags":["report"]},{"url":"https://bugzilla.suse.com/993130","tags":["report"]},{"url":"https://bugzilla.suse.com/993825","tags":["report"]},{"url":"https://bugzilla.suse.com/993968","tags":["report"]},{"url":"https://bugzilla.suse.com/994910","tags":["report"]},{"url":"https://bugzilla.suse.com/996255","tags":["report"]},{"url":"https://bugzilla.suse.com/997614","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3426","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000677","tags":["report"]},{"url":"https://bugzilla.suse.com/1001148","tags":["report"]},{"url":"https://bugzilla.suse.com/1001912","tags":["report"]},{"url":"https://bugzilla.suse.com/1002585","tags":["report"]},{"url":"https://bugzilla.suse.com/1009528","tags":["report"]},{"url":"https://bugzilla.suse.com/1019637","tags":["report"]},{"url":"https://bugzilla.suse.com/1021641","tags":["report"]},{"url":"https://bugzilla.suse.com/1022085","tags":["report"]},{"url":"https://bugzilla.suse.com/1022086","tags":["report"]},{"url":"https://bugzilla.suse.com/1022271","tags":["report"]},{"url":"https://bugzilla.suse.com/1027079","tags":["report"]},{"url":"https://bugzilla.suse.com/1027688","tags":["report"]},{"url":"https://bugzilla.suse.com/1027908","tags":["report"]},{"url":"https://bugzilla.suse.com/1028281","tags":["report"]},{"url":"https://bugzilla.suse.com/1028723","tags":["report"]},{"url":"https://bugzilla.suse.com/1029523","tags":["report"]},{"url":"https://bugzilla.suse.com/1042392","tags":["report"]},{"url":"https://bugzilla.suse.com/1044095","tags":["report"]},{"url":"https://bugzilla.suse.com/1044107","tags":["report"]},{"url":"https://bugzilla.suse.com/1044175","tags":["report"]},{"url":"https://bugzilla.suse.com/1055825","tags":["report"]},{"url":"https://bugzilla.suse.com/1056058","tags":["report"]},{"url":"https://bugzilla.suse.com/1065363","tags":["report"]},{"url":"https://bugzilla.suse.com/1066242","tags":["report"]},{"url":"https://bugzilla.suse.com/1071905","tags":["report"]},{"url":"https://bugzilla.suse.com/1071906","tags":["report"]},{"url":"https://bugzilla.suse.com/1087102","tags":["report"]},{"url":"https://bugzilla.suse.com/1089039","tags":["report"]},{"url":"https://bugzilla.suse.com/1090765","tags":["report"]},{"url":"https://bugzilla.suse.com/1097158","tags":["report"]},{"url":"https://bugzilla.suse.com/1097624","tags":["report"]},{"url":"https://bugzilla.suse.com/1098592","tags":["report"]},{"url":"https://bugzilla.suse.com/1100078","tags":["report"]},{"url":"https://bugzilla.suse.com/1101246","tags":["report"]},{"url":"https://bugzilla.suse.com/1101470","tags":["report"]},{"url":"https://bugzilla.suse.com/1104789","tags":["report"]},{"url":"https://bugzilla.suse.com/1106197","tags":["report"]},{"url":"https://bugzilla.suse.com/1112209","tags":["report"]},{"url":"https://bugzilla.suse.com/1113534","tags":["report"]},{"url":"https://bugzilla.suse.com/1113652","tags":["report"]},{"url":"https://bugzilla.suse.com/1113742","tags":["report"]},{"url":"https://bugzilla.suse.com/1113975","tags":["report"]},{"url":"https://bugzilla.suse.com/1117951","tags":["report"]},{"url":"https://bugzilla.suse.com/1127080","tags":["report"]},{"url":"https://bugzilla.suse.com/1131291","tags":["report"]},{"url":"https://bugzilla.suse.com/1150003","tags":["report"]},{"url":"https://bugzilla.suse.com/1150250","tags":["report"]},{"url":"https://bugzilla.suse.com/1158809","tags":["report"]},{"url":"https://bugzilla.suse.com/1160163","tags":["report"]},{"url":"https://bugzilla.suse.com/1179491","tags":["report"]},{"url":"https://bugzilla.suse.com/1182331","tags":["report"]},{"url":"https://bugzilla.suse.com/1182333","tags":["report"]},{"url":"https://bugzilla.suse.com/1189521","tags":["report"]},{"url":"https://bugzilla.suse.com/356549","tags":["report"]},{"url":"https://bugzilla.suse.com/381844","tags":["report"]},{"url":"https://bugzilla.suse.com/394317","tags":["report"]},{"url":"https://bugzilla.suse.com/408865","tags":["report"]},{"url":"https://bugzilla.suse.com/430141","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/442740","tags":["report"]},{"url":"https://bugzilla.suse.com/459468","tags":["report"]},{"url":"https://bugzilla.suse.com/489641","tags":["report"]},{"url":"https://bugzilla.suse.com/504687","tags":["report"]},{"url":"https://bugzilla.suse.com/509031","tags":["report"]},{"url":"https://bugzilla.suse.com/526319","tags":["report"]},{"url":"https://bugzilla.suse.com/590833","tags":["report"]},{"url":"https://bugzilla.suse.com/610223","tags":["report"]},{"url":"https://bugzilla.suse.com/610642","tags":["report"]},{"url":"https://bugzilla.suse.com/629905","tags":["report"]},{"url":"https://bugzilla.suse.com/651003","tags":["report"]},{"url":"https://bugzilla.suse.com/670526","tags":["report"]},{"url":"https://bugzilla.suse.com/693027","tags":["report"]},{"url":"https://bugzilla.suse.com/720601","tags":["report"]},{"url":"https://bugzilla.suse.com/748738","tags":["report"]},{"url":"https://bugzilla.suse.com/749210","tags":["report"]},{"url":"https://bugzilla.suse.com/749213","tags":["report"]},{"url":"https://bugzilla.suse.com/749735","tags":["report"]},{"url":"https://bugzilla.suse.com/751946","tags":["report"]},{"url":"https://bugzilla.suse.com/751977","tags":["report"]},{"url":"https://bugzilla.suse.com/774710","tags":["report"]},{"url":"https://bugzilla.suse.com/784994","tags":["report"]},{"url":"https://bugzilla.suse.com/793420","tags":["report"]},{"url":"https://bugzilla.suse.com/802184","tags":["report"]},{"url":"https://bugzilla.suse.com/803004","tags":["report"]},{"url":"https://bugzilla.suse.com/822642","tags":["report"]},{"url":"https://bugzilla.suse.com/832833","tags":["report"]},{"url":"https://bugzilla.suse.com/849377","tags":["report"]},{"url":"https://bugzilla.suse.com/855676","tags":["report"]},{"url":"https://bugzilla.suse.com/856687","tags":["report"]},{"url":"https://bugzilla.suse.com/857203","tags":["report"]},{"url":"https://bugzilla.suse.com/857850","tags":["report"]},{"url":"https://bugzilla.suse.com/869945","tags":["report"]},{"url":"https://bugzilla.suse.com/872299","tags":["report"]},{"url":"https://bugzilla.suse.com/873351","tags":["report"]},{"url":"https://bugzilla.suse.com/876282","tags":["report"]},{"url":"https://bugzilla.suse.com/876710","tags":["report"]},{"url":"https://bugzilla.suse.com/876712","tags":["report"]},{"url":"https://bugzilla.suse.com/876748","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/889013","tags":["report"]},{"url":"https://bugzilla.suse.com/892477","tags":["report"]},{"url":"https://bugzilla.suse.com/895129","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901277","tags":["report"]},{"url":"https://bugzilla.suse.com/901902","tags":["report"]},{"url":"https://bugzilla.suse.com/902364","tags":["report"]},{"url":"https://bugzilla.suse.com/906878","tags":["report"]},{"url":"https://bugzilla.suse.com/908362","tags":["report"]},{"url":"https://bugzilla.suse.com/908372","tags":["report"]},{"url":"https://bugzilla.suse.com/912014","tags":["report"]},{"url":"https://bugzilla.suse.com/912015","tags":["report"]},{"url":"https://bugzilla.suse.com/912018","tags":["report"]},{"url":"https://bugzilla.suse.com/912292","tags":["report"]},{"url":"https://bugzilla.suse.com/912293","tags":["report"]},{"url":"https://bugzilla.suse.com/912294","tags":["report"]},{"url":"https://bugzilla.suse.com/912296","tags":["report"]},{"url":"https://bugzilla.suse.com/919648","tags":["report"]},{"url":"https://bugzilla.suse.com/920236","tags":["report"]},{"url":"https://bugzilla.suse.com/922488","tags":["report"]},{"url":"https://bugzilla.suse.com/922496","tags":["report"]},{"url":"https://bugzilla.suse.com/922499","tags":["report"]},{"url":"https://bugzilla.suse.com/922500","tags":["report"]},{"url":"https://bugzilla.suse.com/926597","tags":["report"]},{"url":"https://bugzilla.suse.com/929678","tags":["report"]},{"url":"https://bugzilla.suse.com/931698","tags":["report"]},{"url":"https://bugzilla.suse.com/933898","tags":["report"]},{"url":"https://bugzilla.suse.com/933911","tags":["report"]},{"url":"https://bugzilla.suse.com/934487","tags":["report"]},{"url":"https://bugzilla.suse.com/934489","tags":["report"]},{"url":"https://bugzilla.suse.com/934491","tags":["report"]},{"url":"https://bugzilla.suse.com/934493","tags":["report"]},{"url":"https://bugzilla.suse.com/937085","tags":["report"]},{"url":"https://bugzilla.suse.com/937212","tags":["report"]},{"url":"https://bugzilla.suse.com/937492","tags":["report"]},{"url":"https://bugzilla.suse.com/937634","tags":["report"]},{"url":"https://bugzilla.suse.com/943421","tags":["report"]},{"url":"https://bugzilla.suse.com/947104","tags":["report"]},{"url":"https://bugzilla.suse.com/952871","tags":["report"]},{"url":"https://bugzilla.suse.com/954256","tags":["report"]},{"url":"https://bugzilla.suse.com/957812","tags":["report"]},{"url":"https://bugzilla.suse.com/957813","tags":["report"]},{"url":"https://bugzilla.suse.com/957815","tags":["report"]},{"url":"https://bugzilla.suse.com/958501","tags":["report"]},{"url":"https://bugzilla.suse.com/963415","tags":["report"]},{"url":"https://bugzilla.suse.com/968046","tags":["report"]},{"url":"https://bugzilla.suse.com/968047","tags":["report"]},{"url":"https://bugzilla.suse.com/968048","tags":["report"]},{"url":"https://bugzilla.suse.com/968050","tags":["report"]},{"url":"https://bugzilla.suse.com/968265","tags":["report"]},{"url":"https://bugzilla.suse.com/968374","tags":["report"]},{"url":"https://bugzilla.suse.com/976942","tags":["report"]},{"url":"https://bugzilla.suse.com/977584","tags":["report"]},{"url":"https://bugzilla.suse.com/977614","tags":["report"]},{"url":"https://bugzilla.suse.com/977615","tags":["report"]},{"url":"https://bugzilla.suse.com/977616","tags":["report"]},{"url":"https://bugzilla.suse.com/977663","tags":["report"]},{"url":"https://bugzilla.suse.com/978224","tags":["report"]},{"url":"https://bugzilla.suse.com/982268","tags":["report"]},{"url":"https://bugzilla.suse.com/982575","tags":["report"]},{"url":"https://bugzilla.suse.com/983249","tags":["report"]},{"url":"https://bugzilla.suse.com/984323","tags":["report"]},{"url":"https://bugzilla.suse.com/985054","tags":["report"]},{"url":"https://bugzilla.suse.com/990207","tags":["report"]},{"url":"https://bugzilla.suse.com/990392","tags":["report"]},{"url":"https://bugzilla.suse.com/990419","tags":["report"]},{"url":"https://bugzilla.suse.com/990428","tags":["report"]},{"url":"https://bugzilla.suse.com/991193","tags":["report"]},{"url":"https://bugzilla.suse.com/991877","tags":["report"]},{"url":"https://bugzilla.suse.com/992120","tags":["report"]},{"url":"https://bugzilla.suse.com/993819","tags":["report"]},{"url":"https://bugzilla.suse.com/994749","tags":["report"]},{"url":"https://bugzilla.suse.com/994844","tags":["report"]},{"url":"https://bugzilla.suse.com/995075","tags":["report"]},{"url":"https://bugzilla.suse.com/995324","tags":["report"]},{"url":"https://bugzilla.suse.com/995359","tags":["report"]},{"url":"https://bugzilla.suse.com/995377","tags":["report"]},{"url":"https://bugzilla.suse.com/995959","tags":["report"]},{"url":"https://bugzilla.suse.com/997043","tags":["report"]},{"url":"https://bugzilla.suse.com/998190","tags":["report"]},{"url":"https://bugzilla.suse.com/999665","tags":["report"]},{"url":"https://bugzilla.suse.com/999666","tags":["report"]},{"url":"https://bugzilla.suse.com/999668","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191156-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191554-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203096-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203897-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1160851","tags":["report"]},{"url":"https://bugzilla.suse.com/1177611","tags":["report"]},{"url":"https://bugzilla.suse.com/1178243","tags":["report"]},{"url":"https://bugzilla.suse.com/1178988","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-5390","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-8341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8341","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KPV2O2QPXQEQ5BKRBRQ2RKA7RHVLTZ7E/#KPV2O2QPXQEQ5BKRBRQ2RKA7RHVLTZ7E","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-8341","description":"An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing","status":"disputed","published":"2019-02-15T07:00:00Z","modified":"2024-08-04T21:17:30.55Z","updated_at":"2026-11-02T14:20:22.019351Z"}],"euvd":[{"id":"EUVD-2019-17731","description":"An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing","status":"published","published":"2019-02-15T07:00:00Z","modified":"2024-08-04T21:17:30Z","updated_at":"2026-11-03T03:06:42.975045Z"}],"ghsa":[{"id":"GHSA-f6pv-j8mr-w6rr","title":"** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...","description":"** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing.","status":"published","published":"2022-05-13T01:02:56Z","modified":"2024-03-30T05:01:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:55:44.111751Z"}],"nvd":[{"id":"CVE-2019-8341","description":"An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing","status":"disputed","published":"2019-02-15T07:29:00.257Z","modified":"2026-06-17T02:41:52.073Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:05:04.689371Z"}],"osv":[{"id":"BELL-CVE-2019-8341","title":"CVE-2019-8341 does not affect BellSoft software","status":"withdrawn","published":"2019-02-15T07:29:00Z","modified":"2026-01-26T09:47:42.270795Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-8341","description":"An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing","status":"published","published":"2019-02-15T07:29:00.257Z","modified":"2026-10-24T10:30:51.576153977Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:12.974481Z"},{"id":"DEBIAN-CVE-2019-8341","description":"An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing","status":"published","published":"2019-02-15T07:29:00.257Z","modified":"2026-09-21T07:03:23.966127035Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"UBUNTU-CVE-2019-8341","description":"An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing","status":"published","published":"2019-02-15T07:29:00Z","modified":"2025-09-08T16:45:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:21.741399Z"},{"id":"openSUSE-SU-2019:1395-1","title":"Security update for python-Jinja2","description":"This update for python-Jinja2 to version 2.10.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815).\n- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-05-13T13:01:56Z","modified":"2026-02-04T04:13:33.423738Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-FU-2022:0444-1","title":"Feature update for venv-salt-minion","description":"This feature update for venv-salt-minion provides the following changes:\n\n- Introduce `venv-salt-minion`.\n- Track already fixed issues.\n  ","status":"published","published":"2022-02-16T15:20:54Z","modified":"2026-02-04T03:39:55.775353Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-FU-2022:0445-1","title":"Feature update for venv-salt-minion","description":"This feature update for venv-salt-minion provides the following changes:\n\n- Introduce `venv-salt-minion`.\n- Mention fixed issues provided with the bundle.\n  ","status":"published","published":"2022-02-16T15:23:18Z","modified":"2026-02-04T02:38:14.687149Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2019:1156-1","title":"Security update for python-Jinja2","description":"This update for python-Jinja2 to version 2.10.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815).\n- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).\n","status":"published","published":"2019-05-06T11:46:10Z","modified":"2026-02-04T04:30:14.885194Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1554-1","title":"Security update for python-Jinja2","description":"This update for python-Jinja2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format (bsc#1132174).\n- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).\n- CVE-2019-8341: Fixed command injection in function from_string (bsc#1125815).\n","status":"published","published":"2019-06-18T16:30:33Z","modified":"2026-02-04T04:24:25.635783Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2020:3096-1","title":"Security update for python-Jinja2","description":"This update for python-Jinja2 fixes the following issues:\n\n- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).\n- CVE-2019-8341: Fixed a command injection in function from_string (bsc#1125815).\n","status":"published","published":"2020-10-29T17:08:08Z","modified":"2026-02-04T03:20:04.101534Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3897-1","title":"Security update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark","description":"This update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark fixes the following issues:\n\nSecurity changes included on this update:\n\ngrafana:\n- CVE-2020-24303: Fixed an XXS with series overides. (bsc#1178243)\n\ninfluxdb:\n- CVE-2019-20933: Fixed an authentication bypass. (bsc#1178988)\n\npython-Jinja2:\n- CVE-2019-10906,CVE-2019-8341,CVE-2016-10745: 'SandboxedEnvironment' securely handles 'str.format_map' in order\n  to prevent code execution through untrusted format strings. (bsc#1132323, bsc#1125815, bsc#1132174)\n\npython-pysaml2:\n- CVE-2020-5390: Fixed an issue where there was no check that the signature in a SAML document is enveloped. (bsc#1160851)\n\npython-urllib3:\n- CVE-2020-26137: Fixed a CRLF injection via HTTP request method. (bsc#1177120)\n\nNon-security changes included in this update:\n\nChanges in ardana-cassandra:\n- Update to version 9.0+git.1600802664.7e480a2:\n  * Remove freezer related backup/restore code (SOC-7751)\n\nChanges in ardana-mq:\n- Update to version 9.0+git.1605174486.a78ddce:\n  * Re-enable mirroring of fanout and reply queues (bsc#1177611)\n\nChanges in ardana-osconfig:\n- Update to version 9.0+git.1601621747.a87e5a0:\n  * HOS8 check needs to be a shell rather than command (SOC-11184)\n\nChanges in ardana-tempest:\n- Update to version 9.0+git.1603378983.fc0bca9:\n  * Enable VPNaaS testing (SOC-8764)\n\n- Update to version 9.0+git.1599855218.875b2f3:\n  * unblacklist some revert tests (SOC-9178)\n\nChanges in crowbar-core:\n- Update to version 6.0+git.1606314264.bf9ada813:\n  * ntp: Do not use rate-limiting (bsc#1179161)\n\n- Update to version 6.0+git.1600414599.150832ca2:\n  * Ignore CVE-2020-15169 (SOC-11391)\n\nChanges in crowbar-openstack:\n- Update to version 6.0+git.1604573541.bb18c172d:\n  * rabbitmq: Fix crm running check (SOC-11240)\n\n- Update to version 6.0+git.1604491402.b4dbba849:\n  * Remove aspiers from CODEOWNERS\n  * Remove cmurphy from CODEOWNERS\n\nChanges in grafana:\n- Fix bsc#1178243 CVE-2020-24303 by adding\n  25401-Fix-XSS-vulnerability-with-series-overrides.patch \n\nChanges in influxdb:\n- Add CVE-2019-20933.patch (bsc#1178988, CVE-2019-20933) to\n  fix authentication bypass \n- Declare license files correctly\n\nChanges in openstack-cinder:\n- Update to version cinder-13.0.10.dev20:\n  * PowerMax Driver - Legacy volumes fail to live migrate\n\n- Update to version cinder-13.0.10.dev19:\n  * RBD: Cleanup temporary file during exception\n\n- Update to version cinder-13.0.10.dev17:\n  * Remove experimental job legacy-tempest-dsvm-zeromq-multibackend\n\nChanges in openstack-cinder:\n- Update to version cinder-13.0.10.dev20:\n  * PowerMax Driver - Legacy volumes fail to live migrate\n\n- Update to version cinder-13.0.10.dev19:\n  * RBD: Cleanup temporary file during exception\n\n- Update to version cinder-13.0.10.dev17:\n  * Remove experimental job legacy-tempest-dsvm-zeromq-multibackend\n\nChanges in openstack-heat:\n- Update to version openstack-heat-11.0.4.dev4:\n  * Check external resources after creation\n\n- Update to version openstack-heat-11.0.4.dev2:\n  * Don't store signal\\_url for ec2 signaling of deployments\n  * Allow scale-down of ASG as part of update\n  11.0.3\n\nChanges in openstack-heat:\n- Update to version openstack-heat-11.0.4.dev4:\n  * Check external resources after creation\n\n- Update to version openstack-heat-11.0.4.dev2:\n  * Don't store signal\\_url for ec2 signaling of deployments\n  * Allow scale-down of ASG as part of update\n  11.0.3\n\nChanges in openstack-heat-gbp:\n- Update to version group-based-policy-automation-12.0.1.dev2:\n  * Add support for victoria\n\n- Update to version group-based-policy-automation-12.0.1.dev1:\n  * Add network\\_id field for L2 Policy Heat Extensions\n  12.0.0\n  * Add support for ussuri\n  * Fix master/train gate\n  * Add support for train\n  10.0.0\n  * Upgrade for stable/stein branch\n  9.0.0\n  * Updated with 'stable/rocky' branch\n  * Replace openstack.org URLs with 'git+https://'\n  * OpenDev Migration Patch\n\nChanges in openstack-heat-templates:\n- Update to version 0.0.0+git.1605509190.64f020b:\n  * Fix software config on rdo\n  * optimize size and time using --no-cache-dir\n  * add template for servers using Octavia\n\n- Update to version 0.0.0+git.1604032742.c5733ee:\n  * Move heat-templates-check job to zuul v3\n\nChanges in openstack-horizon-plugin-gbp-ui:\n- Update to version group-based-policy-ui-12.0.1.dev3:\n  * Remove mox3 from requirements\n\n- Update to version group-based-policy-ui-12.0.1.dev2:\n  * Fix python namespacing\n  * Add stable victoria\n  12.0.0\n  * Add support for ussuri\n  * Fix master/train gate\n  * Add support for train\n  10.0.0\n  * Upgrade for stable/stein branch\n  9.0.0\n  * Upgrading for stable/rocky branch\n  * Added Python3 support\n  * OpenDev Migration Patch\n\nChanges in openstack-ironic-python-agent:\n- Update to version ironic-python-agent-3.3.4.dev6:\n  * Fix: make Intel CNA hardware manager none generic\n\nChanges in openstack-manila:\n- Update to version manila-7.4.2.dev57:\n  * fix reno file location and indention\n\n- Update to version manila-7.4.2.dev56:\n  * [Glusterfs] Fix delete share, Couldn't find the 'gluster\\_used\\_vols'\n\n- Update to version manila-7.4.2.dev55:\n  * [Glusterfs] Fix delete share, mount point not disconnected\n\nChanges in openstack-manila:\n- Update to version manila-7.4.2.dev57:\n  * fix reno file location and indention\n\n- Update to version manila-7.4.2.dev56:\n  * [Glusterfs] Fix delete share, Couldn't find the 'gluster\\_used\\_vols'\n\n- Update to version manila-7.4.2.dev55:\n  * [Glusterfs] Fix delete share, mount point not disconnected\n\nChanges in openstack-neutron:\n- Update to version neutron-13.0.8.dev135:\n  * Rehome api tests for propagate\\_uplink\\_status\n\n- Update to version neutron-13.0.8.dev134:\n  * Revert '[Security] fix allowed-address-pair 0.0.0.0/0 issue'\n\n- Update to version neutron-13.0.8.dev132:\n  * Drop invalid rootwrap filters\n  * ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled\n  * Add update\\_id for ResourceUpdate\n\n- Update to version neutron-13.0.8.dev126:\n  * 'ping'/'ping6' command support in rootwrap filters\n\n- Update to version neutron-13.0.8.dev124:\n  * Import 'oslo\\_config.cfg' before 'eventlet'\n  * [OvS] Handle re\\_added multi ports\n\n- Update to version neutron-13.0.8.dev120:\n  * Local mac direct flow for non-openflow firewall\n  * Replace ctype.CDLL by ctypes.PyDLL in linux.ip\\_lib\n\n- Update to version neutron-13.0.8.dev116:\n  * Support gateway which is not in subnet CIDR in ha\\_router\n  * Ensure fip ip rules deleted when fip removed\n\n- Update to version neutron-13.0.8.dev112:\n  * windows: fix terminating processes\n  * [stable/rocky] Drop rally job\n  * Don't raise FileNotFoundError during disabling keepalived\n  * Load the glibc library only once for Pyroute2\n\n- Update to version neutron-13.0.8.dev106:\n  * Do not fail deleting namespace if it does not exist\n\n- Update to version neutron-13.0.8.dev104:\n  * Avoid raising NetworkInterfaceNotFound exception in DHCP agent logs\n\n- Update to version neutron-13.0.8.dev103:\n  * Use dict .get() to avoid a KeyError in the segment plugin\n\n- Update to version neutron-13.0.8.dev101:\n  * Pass context in l3 flavor notifications\n  * Handle properly existing LLA address during l3 agent restart\n\n- Update to version neutron-13.0.8.dev97:\n  * Add 'keepalived\\_use\\_no\\_track' config option\n\nChanges in openstack-neutron:\n- Update to version neutron-13.0.8.dev135:\n  * Rehome api tests for propagate\\_uplink\\_status\n\n- Update to version neutron-13.0.8.dev134:\n  * Revert '[Security] fix allowed-address-pair 0.0.0.0/0 issue'\n\n- Update to version neutron-13.0.8.dev132:\n  * Drop invalid rootwrap filters\n  * ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled\n  * Add update\\_id for ResourceUpdate\n\n- Update to version neutron-13.0.8.dev126:\n  * 'ping'/'ping6' command support in rootwrap filters\n\n- Update to version neutron-13.0.8.dev124:\n  * Import 'oslo\\_config.cfg' before 'eventlet'\n  * [OvS] Handle re\\_added multi ports\n\n- Update to version neutron-13.0.8.dev120:\n  * Local mac direct flow for non-openflow firewall\n  * Replace ctype.CDLL by ctypes.PyDLL in linux.ip\\_lib\n\n- Update to version neutron-13.0.8.dev116:\n  * Support gateway which is not in subnet CIDR in ha\\_router\n  * Ensure fip ip rules deleted when fip removed\n\n- Update to version neutron-13.0.8.dev112:\n  * windows: fix terminating processes\n  * [stable/rocky] Drop rally job\n  * Don't raise FileNotFoundError during disabling keepalived\n  * Load the glibc library only once for Pyroute2\n\n- Update to version neutron-13.0.8.dev106:\n  * Do not fail deleting namespace if it does not exist\n\n- Update to version neutron-13.0.8.dev104:\n  * Avoid raising NetworkInterfaceNotFound exception in DHCP agent logs\n\n- Update to version neutron-13.0.8.dev103:\n  * Use dict .get() to avoid a KeyError in the segment plugin\n\n- Update to version neutron-13.0.8.dev101:\n  * Pass context in l3 flavor notifications\n  * Handle properly existing LLA address during l3 agent restart\n\n- Update to version neutron-13.0.8.dev97:\n  * Add 'keepalived\\_use\\_no\\_track' config option\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-12.0.1.dev5:\n  * Fix ICMP type and ICMP code fields for named and numbered ICMP Protocol\n  2014.2.0rc1\n\n- Update to version group-based-policy-12.0.1.dev4:\n  * Fix erroneous comma (,) in the LOG.exception call\n  2014.2rc1\n\n- Update to version group-based-policy-12.0.1.dev3:\n  * Fix top of tree in gate\n  * Endpoint level qos changes\n  12.0.0\n  * Add support for ussuri\n  * Update subnets for SVI port corresponding to bound port\n  * Fix the intermittent QOS UT failure\n  * Fixed the QOS UT failure\n  * Use train branch instead of stein\n  * Add support for train\n  * Prepare for removal of CommonDbMixin\n  * Make AIM dsvm job voting\n  * Add support for upstream Stein release\n  * Fix python2/3 compatibility\n  * Fix DNS Domain Name in endpoint file\n  * When a subnet added to a bound SVI port, ensure it is added to SVI port\n  * Add support for qos\n  * Fix DNS issue in endpoint file\n  * [AIM] Add pre-existing BD to network extension\n  * Remove get\\_current\\_session\n  * Remove get\\_current\\_session method\n  * [AIM] Add EPG contract masters to network extension\n  * Revert 'Remove get\\_current\\_session method'\n  * Remove get\\_current\\_session method\n  * Support Dual Stack on SVI nets along with BGP\n  9.0.0\n  * Add support for upstream Rocky release\n  * Cleanup Queens (part 2)\n  * Fix missing DB migration\n  * Make aim functional gate job voting\n  * Added Python3 support\n  * [AIM] Sanitize the AIM tenant description field\n  * Fix field sizes for VM names\n  * Bind baremetal VNIC trunk ports\n  * Fix missing trunk\\_details for a trunk without subports\n  * [AIM] Insert remote\\_group\\_id to SG rules properly\n  * Revert '[AIM] Convert remote\\_ips for SG rules properly'\n  * Cleanup Queens\n  * [AIM] Convert remote\\_ips for SG rules properly\n  * Clean up baremetal port handling\n  * [AIM] Clean up the mock and stop the looping thread in the UT env\n  * Don't stop this looping thread when an exception is thrown\n  * [AIM] Fix router\\_id allocation for SVI\n  * Support non SVI static VLAN type segments with OpFlex agent\n  * Baremetal VNIC Trunk support\n  * [AIM] Don't queue notifications (4 of 4)\n  * [AIM] Don't queue registry callbacks (3 of 4)\n  * [AIM] Enable Neutron transaction guards (2 of 4)\n  * Don't call GBP or Neutron APIs from GBP PD precommit methods\n  * [AIM] Retry L3 Plugin Operations\n  * [AIM] Fix most common random UT failures\n  * [AIM] Fixed external subnet ANY\\_CIDRs for l3out EPGs for SVI\n  * Revert 'Nested domain parameters support for openShift networks'\n  * Fix for unbinding baremetal VNIC ports\n  * Nested domain parameters support for openShift networks\n  * Fix tox coverage job\n  * Add suport for baremetal vnic\\_type\n  2014.2.rc1\n\nChanges in openstack-neutron-vpnaas:\n- Remove remove-tempest-entry-point.patch thus enabling the\n  tempest_vpnaas plugin for tempest testing. (SCRD-8681)\n- Package the neutron-vpnaas/tests/ directory contents in a new RPM\n  RPM package, python-neutron-vpnaas-tempest-plugin, that depend on\n  python-neutron-vpnaas, which provides the main neutron-vpnaas\n  code base. Additionally this new package can now safely depend on\n  the python-neutron-tempest-plugin package, providing the required\n  neutron_tempest_plugin module, without causing tempest packages\n  to be installed when python-neutron-vpnaas installed. (SOC-8764)\n  NOTE: This implicitly enables the neutron_tempest_plugin.\n- Corrected LBaaS references to VPNaaS.\n\nChanges in openstack-nova:\n- Update to version nova-18.3.1.dev77:\n  * Follow up for cherry-pick check for merge patch\n\n- Update to version nova-18.3.1.dev76:\n  * post live migration: don't call Neutron needlessly\n\n- Update to version nova-18.3.1.dev74:\n  * libvirt: Do not reference VIR\\_ERR\\_DEVICE\\_MISSING when libvirt is smaller than v4.1.0\n\n- Update to version nova-18.3.1.dev72:\n  * libvirt: Handle VIR\\_ERR\\_DEVICE\\_MISSING when detaching devices\n\n- Update to version nova-18.3.1.dev70:\n  * compute: Don't delete the original attachment during pre LM rollback\n  * Add regression tests for bug #1889108\n  * compute: refactor volume bdm rollback error handling\n\n- Update to version nova-18.3.1.dev64:\n  * compute: Use source\\_bdms to reset attachment\\_ids during LM rollback\n  * Robustify attachment tracking in CinderFixtureNewAttachFlow\n\n- Update to version nova-18.3.1.dev60:\n  * Improve CinderFixtureNewAttachFlow\n\n- Update to version nova-18.3.1.dev58:\n  * Removed the host FQDN from the exception message\n\n- Update to version nova-18.3.1.dev56:\n  * libvirt: Provide VIR\\_MIGRATE\\_PARAM\\_PERSIST\\_XML during live migration\n\nChanges in openstack-nova:\n- Update to version nova-18.3.1.dev77:\n  * Follow up for cherry-pick check for merge patch\n\n- Update to version nova-18.3.1.dev76:\n  * post live migration: don't call Neutron needlessly\n\n- Update to version nova-18.3.1.dev74:\n  * libvirt: Do not reference VIR\\_ERR\\_DEVICE\\_MISSING when libvirt is smaller than v4.1.0\n\n- Update to version nova-18.3.1.dev72:\n  * libvirt: Handle VIR\\_ERR\\_DEVICE\\_MISSING when detaching devices\n\n- Update to version nova-18.3.1.dev70:\n  * compute: Don't delete the original attachment during pre LM rollback\n  * Add regression tests for bug #1889108\n  * compute: refactor volume bdm rollback error handling\n\n- Update to version nova-18.3.1.dev64:\n  * compute: Use source\\_bdms to reset attachment\\_ids during LM rollback\n  * Robustify attachment tracking in CinderFixtureNewAttachFlow\n\n- Update to version nova-18.3.1.dev60:\n  * Improve CinderFixtureNewAttachFlow\n\n- Update to version nova-18.3.1.dev58:\n  * Removed the host FQDN from the exception message\n\n- Rebased patches:\n  + 0004-Provide-VIR_MIGRATE_PARAM_PERSIST_XML-during-live-migration.patch dropped (merged upstream)\n\n- Update to version nova-18.3.1.dev56:\n  * libvirt: Provide VIR\\_MIGRATE\\_PARAM\\_PERSIST\\_XML during live migration\n\nChanges in python-Jinja2:\n- Trim bias from descriptions. Make sure % is escaped.\n\n- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):\n  * 'SandboxedEnvironment' securely handles 'str.format_map' in order\n    to prevent code execution through untrusted format strings.  The\n    sandbox already handled 'str.format'.\n\n- Activate test suite\n- Add minimum build dependency to match runtime dependency\n\n- Fix fdupes call\n\n- Remove superfluous devel dependency for noarch package\n\n- Update to 2.9.5 (bsc#1132174, CVE-2016-10745)\nChanges in python-pysaml2:\n- Add 0001-Fix-XML-Signature-Wrapping-XSW-vulnerabilities.patch\n  (CVE-2020-5390, bsc#1160851)\n\nChanges in python-pytest:\n- update to 3.7.4\n- drop 0001-Use-unittest.mock-if-is-only-aviable.patch\n * Fix possible infinite recursion when writing .pyc files\n * Cache plugin now obeys the -q flag when --last-failed and\n     --failed-first flags are used.\n * Fix bad console output when using console_output_style=classic\n * Fixtures during teardown can again use capsys and capfd to inspect\n     output captured during tests.\n * Fix bugs where unicode arguments could not be passed to testdir.runpytest\n     on Python 2.\n * Fix double collection of tests within packages when the filename starts\n     with a capital letter\n * Fix collection error when specifying test functions directly in the command\n     line using test.py::test syntax together with --doctest-modules\n  * Fix stdout/stderr not getting captured when real-time cli logging is active.\n  * Fix bug where --show-capture=no option would still show logs printed during\n     fixture teardown.\n  * Fix issue where teardown of fixtures of consecutive sub-packages were\n     executed once, at the end of the outer package.\n\n- update to 3.7.2\n- add 0001-Use-unittest.mock-if-is-only-aviable.patch\n * Fix filterwarnings not being registered as a builtin mark.\n * Fix test collection from packages mixed with normal directories.\n * Fix infinite recursion during collection if a pytest_ignore_collect\n    hook returns False instead of None.\n * Fix bug where decorated fixtures would lose functionality\n * Fix bug where importing modules or other objects with prefix pytest_ prefix\n    would raise a PluginValidationError.\n * Fix AttributeError during teardown of TestCase subclasses which raise\n    an exception during __init__.\n * Fix traceback reporting for exceptions with __cause__ cycles.\n\nChanges in python-pytest:\n- update to 3.7.4\n- drop 0001-Use-unittest.mock-if-is-only-aviable.patch\n * Fix possible infinite recursion when writing .pyc files\n * Cache plugin now obeys the -q flag when --last-failed and\n     --failed-first flags are used.\n * Fix bad console output when using console_output_style=classic\n * Fixtures during teardown can again use capsys and capfd to inspect\n     output captured during tests.\n * Fix bugs where unicode arguments could not be passed to testdir.runpytest\n     on Python 2.\n * Fix double collection of tests within packages when the filename starts\n     with a capital letter\n * Fix collection error when specifying test functions directly in the command\n     line using test.py::test syntax together with --doctest-modules\n  * Fix stdout/stderr not getting captured when real-time cli logging is active.\n  * Fix bug where --show-capture=no option would still show logs printed during\n     fixture teardown.\n  * Fix issue where teardown of fixtures of consecutive sub-packages were\n     executed once, at the end of the outer package.\n\n- update to 3.7.2\n- add 0001-Use-unittest.mock-if-is-only-aviable.patch\n * Fix filterwarnings not being registered as a builtin mark.\n * Fix test collection from packages mixed with normal directories.\n * Fix infinite recursion during collection if a pytest_ignore_collect\n    hook returns False instead of None.\n * Fix bug where decorated fixtures would lose functionality\n * Fix bug where importing modules or other objects with prefix pytest_ prefix\n    would raise a PluginValidationError.\n * Fix AttributeError during teardown of TestCase subclasses which raise\n    an exception during __init__.\n * Fix traceback reporting for exceptions with __cause__ cycles.\n\nChanges in python-urllib3:\n- Update urllib3-fix-test-urls.patch. Adjust to match upstream solution.\n\n- Add urllib3-fix-test-urls.patch. Fix tests failing on python checks for\n  CVE-2019-9740.\n\n- Add urllib3-cve-2020-26137.patch. Don't allow control chars in request\n  method. (bsc#1177120, CVE-2020-26137)\n\nChanges in release-notes-suse-openstack-cloud:\n- Update to version 9.20200917:\n  * Change wording to correctly refer to future SES versions\n  * Update adoc/limitations.adoc\n  * Add SES version limitation, remove deprecated note about Octavia for Crowbar\n\n- Update to version 9.20200917:\n  * Announce Upgrade is now available (SOC-9781)\n\nChanges in spark:\n- Add _constraints to prevent build from running out of disk space \n\n  ","status":"published","published":"2020-12-21T12:51:34Z","modified":"2026-02-04T04:16:03.397106Z","updated_at":"2026-11-02T15:53:48.690034Z"}]}}