{"id":"CVE-2020-29651","aliases":["DEBIAN-CVE-2020-29651","DLA-3966-1","EUVD-2020-0152","GHSA-hj5v-574p-mj7c","MGASA-2021-0071","OESA-2022-1562","PYSEC-2020-92","SUSE-FU-2022:0444-1","SUSE-FU-2022:0445-1","SUSE-SU-2021:1859-1","SUSE-SU-2021:1962-1","SUSE-SU-2021:1963-1","SUSE-SU-2021:2236-1","SUSE-SU-2021:2554-1","SUSE-SU-2022:2831-1","UBUNTU-CVE-2020-29651","USN-5138-1","openSUSE-SU-2021:0851-1","openSUSE-SU-2021:1859-1","openSUSE-SU-2024:11108-1","openSUSE-SU-2024:11252-1","openSUSE-SU-2024:14153-1","openSUSE-SU-2026:12027-1"],"status":"published","title":"py vulnerable to Regular Expression Denial of Service","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.04537,"percentile":0.9164,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2020-12-09T06:58:22Z","modified":"2026-10-26T12:01:59Z","fixes":[{"ecosystem":"PyPI","package":"py","fixed_in":["1.10.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"python-py","fixed_in":["1.10.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-py","fixed_in":["1.10.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"python-py","fixed_in":["1.8.0-1.1.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-py","fixed_in":["1.5.4-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"python-py","fixed_in":["1.5.4-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"python-py","fixed_in":["1.5.4-5.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"python-py","fixed_in":["1.8.1-5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-py","fixed_in":["1.8.1-5.6.1","1.10.0-150000.5.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP2","package":"python-py","fixed_in":["1.8.1-5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-py","fixed_in":["1.8.1-5.6.1","1.10.0-150000.5.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"python-py","fixed_in":["1.8.1-5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"python-py","fixed_in":["1.8.1-11.12.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-py","fixed_in":["1.8.1-11.12.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-py","fixed_in":["1.8.1-11.12.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-apipkg","fixed_in":["1.4-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-iniconfig","fixed_in":["1.1.1-150000.1.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-apipkg","fixed_in":["1.4-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-iniconfig","fixed_in":["1.1.1-150000.1.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-py","fixed_in":["1.10.0-150000.5.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"python-coverage","fixed_in":["4.5.4-150000.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"python-coverage","fixed_in":["4.5.4-150000.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"python-coverage","fixed_in":["4.5.4-150000.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"python-coverage","fixed_in":["4.5.4-150000.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-apipkg","fixed_in":["1.4-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-iniconfig","fixed_in":["1.1.1-150000.1.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"python-py","fixed_in":["1.10.0-150000.5.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-py","fixed_in":["1.10.0-150000.5.9.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-apipkg","fixed_in":["1.4-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-atomicwrites-doc","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-coverage","fixed_in":["4.5.4-150000.3.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-py","fixed_in":["1.10.0-150000.5.9.2","1.8.1-5.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-pycodestyle","fixed_in":["2.5.0-150000.3.2.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-pyflakes","fixed_in":["2.1.1-150000.3.2.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-apipkg","fixed_in":["1.4-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-atomicwrites","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-atomicwrites-doc","fixed_in":["1.1.5-150000.3.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-coverage","fixed_in":["4.5.4-150000.3.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-py","fixed_in":["1.10.0-150000.5.9.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-pycodestyle","fixed_in":["2.5.0-150000.3.2.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-pyflakes","fixed_in":["2.1.1-150000.3.2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"python-py","fixed_in":["1.5.2-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"python-py","fixed_in":["1.8.1-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"python-py","fixed_in":["1.8.1-lp152.2.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"python-py-test","fixed_in":["1.8.1-lp152.2.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-py","fixed_in":["1.11.0-6.5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"pypy3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.5+dfsg-2+deb11u4"}]}],"versions":["7.3.5+dfsg-2","7.3.5+dfsg-2+deb11u1","7.3.5+dfsg-2+deb11u2","7.3.5+dfsg-2+deb11u3"],"bundled":8},{"source":"osv","ecosystem":"PyPI","package":"py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0"}]}],"versions":["0.8.0-alpha2","0.9.0","0.9.1","0.9.2","1.0.0","1.0.1","1.0.2","1.1.0","1.1.1","1.2.0","1.2.1","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.4.0","1.4.1","1.4.10","1.4.11","1.4.12","1.4.13","1.4.14","1.4.15","1.4.16","1.4.17","1.4.18","1.4.19","1.4.2","1.4.20","1.4.21","1.4.22","1.4.23","1.4.24","1.4.25","1.4.26","1.4.27","1.4.28","1.4.29","1.4.3","1.4.30","1.4.31","1.4.32","1.4.32.dev1","1.4.33","1.4.34","1.4.4","1.4.5","1.4.6","1.4.7","1.4.7.dev3","1.4.8","1.4.9","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.7.0","1.8.0","1.8.1","1.8.2","1.9.0"]},{"source":"osv","ecosystem":"Mageia:7","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1.1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-5.oe1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0"}]}],"versions":["0.8.0-alpha2","0.9.0","0.9.1","0.9.2","1.0.0","1.0.1","1.0.2","1.1.0","1.1.1","1.2.0","1.2.1","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7.dev3","1.4.7","1.4.8","1.4.9","1.4.10","1.4.11","1.4.12","1.4.13","1.4.14","1.4.15","1.4.16","1.4.17","1.4.18","1.4.19","1.4.20","1.4.21","1.4.22","1.4.23","1.4.24","1.4.25","1.4.26","1.4.27","1.4.28","1.4.29","1.4.30","1.4.31","1.4.32.dev1","1.4.32","1.4.33","1.4.34","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.7.0","1.8.0","1.8.1","1.8.2","1.9.0"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP2","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1615223676.777f0b3-3.25.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1618235096.90974ed-3.10.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-3.3.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-3.23.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-4.9.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev11-3.24.6"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev17-3.25.5"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev164-3.37.4"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev29-3.25.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev82-3.37.6"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-Django1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.3.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-4.6.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.23.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev20-3.26.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2~dev2-3.23.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.21.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.4~dev4-3.23.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev11-4.27.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev17-4.21.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev4-3.24.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-4.23.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.2~dev60-3.29.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1~dev10-3.21.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2~dev3-3.23.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev164-6.27.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev82-3.27.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3~dev7-4.23.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.23.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-2.18.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-3.3.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1616146717.a89ae0f4e-3.34.4"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-3.23.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-4.9.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev11-3.24.6"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev17-3.25.5"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev164-3.37.4"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev29-3.25.3"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev82-3.37.6"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-Django1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.3.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-4.6.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-activerecord-session_store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-4.3.2"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1616146720.44daffca0-9.81.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-1.24.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-9.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180608_12.47-16.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.19-3.29.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-11.16.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"rubygem-activerecord-session_store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.4.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-11.12.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-11.12.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-11.12.4"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1614096566.e8c2b27-3.44.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-5.3.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-opsconsole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-planning","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-4.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1623056900.7917e18-3.21.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190923_16.32-3.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-6.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.34-3.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-5.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.30.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-14.34.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.33.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-horizon-hpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev6-14.36.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev11-11.35.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.32.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.37.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-13.38.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-11.36.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.23.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1614096566.e8c2b27-3.44.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-5.3.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-opsconsole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-planning","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-supplement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-upstream-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-upstream-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-4.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1623056900.7917e18-3.21.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190923_16.32-3.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-6.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.34-3.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-5.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.30.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-14.34.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.33.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev6-14.36.6"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev11-11.35.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.32.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.37.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-13.38.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-11.36.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.23.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-5.3.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1622489449.a8e60e238-3.50.4"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1616001417.67fd9c2a1-4.52.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-supplement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-upstream-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-upstream-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-4.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1623056900.7917e18-3.21.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190923_16.32-3.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-6.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.34-3.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-5.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-activerecord-session_store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-apipkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-iniconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.1.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-150000.5.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-apipkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-iniconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.1.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-150000.5.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-150000.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-150000.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-150000.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-150000.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-apipkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-iniconfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-150000.1.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-150000.5.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-150000.5.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-150000.5.9.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-apipkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-atomicwrites-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-150000.3.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-150000.5.9.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-pycodestyle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150000.3.2.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-pyflakes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-150000.3.2.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-apipkg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-atomicwrites-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.3.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-coverage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-150000.3.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-150000.5.9.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-pycodestyle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150000.3.2.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-pyflakes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-150000.3.2.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.30-2","1.4.31-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1ubuntu0.1"}]}],"versions":["1.4.34-2ubuntu1","1.4.34-3","1.5.2-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1ubuntu0.1"}]}],"versions":["1.8.0-1","1.8.0-1build2","1.8.1-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-1ubuntu0.1"}]}],"versions":["1.4.34-2ubuntu1","1.4.34-3","1.5.2-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1ubuntu0.1"}]}],"versions":["1.8.0-1","1.8.0-1build2","1.8.1-1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-lp152.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"python-py-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-lp152.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-5.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"oci-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-6.5"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-9.5"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oracle","product":"zfs_storage_appliance_kit"},{"vendor":"pytest","product":"py"}],"references":[{"url":"https://github.com/pytest-dev/py/issues/256","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/pytest-dev/py/pull/257","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/pytest-dev/py/pull/257/commits/4a9017dc6199d2a564b6e4b0aa39d6d8870e4144","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYWNYEV3FGDHPIHX4DDUDMFZ6NLCQRC4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHDTINIBJZ67T3W74QTBIY5LPKAXEOGR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29651","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hj5v-574p-mj7c","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/py/PYSEC-2020-92.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYWNYEV3FGDHPIHX4DDUDMFZ6NLCQRC4","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHDTINIBJZ67T3W74QTBIY5LPKAXEOGR","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYWNYEV3FGDHPIHX4DDUDMFZ6NLCQRC4","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHDTINIBJZ67T3W74QTBIY5LPKAXEOGR","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-29651","tags":["advisory"]},{"url":"https://github.com/pytest-dev/py","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0071.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28020","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CHDTINIBJZ67T3W74QTBIY5LPKAXEOGR/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1562","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYWNYEV3FGDHPIHX4DDUDMFZ6NLCQRC4/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHDTINIBJZ67T3W74QTBIY5LPKAXEOGR/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2022-444/suse-fu-20220444-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000080","tags":["report"]},{"url":"https://bugzilla.suse.com/1000117","tags":["report"]},{"url":"https://bugzilla.suse.com/1000194","tags":["report"]},{"url":"https://bugzilla.suse.com/1000742","tags":["report"]},{"url":"https://bugzilla.suse.com/1002895","tags":["report"]},{"url":"https://bugzilla.suse.com/1003091","tags":["report"]},{"url":"https://bugzilla.suse.com/1005246","tags":["report"]},{"url":"https://bugzilla.suse.com/1010874","tags":["report"]},{"url":"https://bugzilla.suse.com/1010966","tags":["report"]},{"url":"https://bugzilla.suse.com/1011936","tags":["report"]},{"url":"https://bugzilla.suse.com/1015549","tags":["report"]},{"url":"https://bugzilla.suse.com/1027610","tags":["report"]},{"url":"https://bugzilla.suse.com/1027705","tags":["report"]},{"url":"https://bugzilla.suse.com/1029902","tags":["report"]},{"url":"https://bugzilla.suse.com/1030038","tags":["report"]},{"url":"https://bugzilla.suse.com/1032118","tags":["report"]},{"url":"https://bugzilla.suse.com/1032119","tags":["report"]},{"url":"https://bugzilla.suse.com/1035604","tags":["report"]},{"url":"https://bugzilla.suse.com/1039469","tags":["report"]},{"url":"https://bugzilla.suse.com/1040164","tags":["report"]},{"url":"https://bugzilla.suse.com/1040256","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1049186","tags":["report"]},{"url":"https://bugzilla.suse.com/1049304","tags":["report"]},{"url":"https://bugzilla.suse.com/1050653","tags":["report"]},{"url":"https://bugzilla.suse.com/1050665","tags":["report"]},{"url":"https://bugzilla.suse.com/1055478","tags":["report"]},{"url":"https://bugzilla.suse.com/1055542","tags":["report"]},{"url":"https://bugzilla.suse.com/1056951","tags":["report"]},{"url":"https://bugzilla.suse.com/1057496","tags":["report"]},{"url":"https://bugzilla.suse.com/1062237","tags":["report"]},{"url":"https://bugzilla.suse.com/1066873","tags":["report"]},{"url":"https://bugzilla.suse.com/1068790","tags":["report"]},{"url":"https://bugzilla.suse.com/1070737","tags":["report"]},{"url":"https://bugzilla.suse.com/1070738","tags":["report"]},{"url":"https://bugzilla.suse.com/1070853","tags":["report"]},{"url":"https://bugzilla.suse.com/1071941","tags":["report"]},{"url":"https://bugzilla.suse.com/1073310","tags":["report"]},{"url":"https://bugzilla.suse.com/1073845","tags":["report"]},{"url":"https://bugzilla.suse.com/1073879","tags":["report"]},{"url":"https://bugzilla.suse.com/1074247","tags":["report"]},{"url":"https://bugzilla.suse.com/1076519","tags":["report"]},{"url":"https://bugzilla.suse.com/1077096","tags":["report"]},{"url":"https://bugzilla.suse.com/1077230","tags":["report"]},{"url":"https://bugzilla.suse.com/1078329","tags":["report"]},{"url":"https://bugzilla.suse.com/1079761","tags":["report"]},{"url":"https://bugzilla.suse.com/1080301","tags":["report"]},{"url":"https://bugzilla.suse.com/1081005","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1081751","tags":["report"]},{"url":"https://bugzilla.suse.com/1082155","tags":["report"]},{"url":"https://bugzilla.suse.com/1082163","tags":["report"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://bugzilla.suse.com/1083826","tags":["report"]},{"url":"https://bugzilla.suse.com/1084117","tags":["report"]},{"url":"https://bugzilla.suse.com/1084157","tags":["report"]},{"url":"https://bugzilla.suse.com/1085276","tags":["report"]},{"url":"https://bugzilla.suse.com/1085529","tags":["report"]},{"url":"https://bugzilla.suse.com/1085661","tags":["report"]},{"url":"https://bugzilla.suse.com/1087104","tags":["report"]},{"url":"https://bugzilla.suse.com/1088573","tags":["report"]},{"url":"https://bugzilla.suse.com/1090427","tags":["report"]},{"url":"https://bugzilla.suse.com/1090953","tags":["report"]},{"url":"https://bugzilla.suse.com/1093518","tags":["report"]},{"url":"https://bugzilla.suse.com/1093917","tags":["report"]},{"url":"https://bugzilla.suse.com/1094788","tags":["report"]},{"url":"https://bugzilla.suse.com/1094814","tags":["report"]},{"url":"https://bugzilla.suse.com/1094883","tags":["report"]},{"url":"https://bugzilla.suse.com/1095267","tags":["report"]},{"url":"https://bugzilla.suse.com/1096738","tags":["report"]},{"url":"https://bugzilla.suse.com/1096937","tags":["report"]},{"url":"https://bugzilla.suse.com/1097531","tags":["report"]},{"url":"https://bugzilla.suse.com/1098535","tags":["report"]},{"url":"https://bugzilla.suse.com/1099308","tags":["report"]},{"url":"https://bugzilla.suse.com/1099569","tags":["report"]},{"url":"https://bugzilla.suse.com/1102868","tags":["report"]},{"url":"https://bugzilla.suse.com/1108508","tags":["report"]},{"url":"https://bugzilla.suse.com/1109882","tags":["report"]},{"url":"https://bugzilla.suse.com/1109998","tags":["report"]},{"url":"https://bugzilla.suse.com/1110435","tags":["report"]},{"url":"https://bugzilla.suse.com/1110869","tags":["report"]},{"url":"https://bugzilla.suse.com/1110871","tags":["report"]},{"url":"https://bugzilla.suse.com/1111493","tags":["report"]},{"url":"https://bugzilla.suse.com/1111622","tags":["report"]},{"url":"https://bugzilla.suse.com/1111657","tags":["report"]},{"url":"https://bugzilla.suse.com/1112357","tags":["report"]},{"url":"https://bugzilla.suse.com/1115769","tags":["report"]},{"url":"https://bugzilla.suse.com/1118611","tags":["report"]},{"url":"https://bugzilla.suse.com/1119376","tags":["report"]},{"url":"https://bugzilla.suse.com/1119416","tags":["report"]},{"url":"https://bugzilla.suse.com/1119792","tags":["report"]},{"url":"https://bugzilla.suse.com/1121717","tags":["report"]},{"url":"https://bugzilla.suse.com/1121852","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1123064","tags":["report"]},{"url":"https://bugzilla.suse.com/1123185","tags":["report"]},{"url":"https://bugzilla.suse.com/1123186","tags":["report"]},{"url":"https://bugzilla.suse.com/1123558","tags":["report"]},{"url":"https://bugzilla.suse.com/1124885","tags":["report"]},{"url":"https://bugzilla.suse.com/1125815","tags":["report"]},{"url":"https://bugzilla.suse.com/1126283","tags":["report"]},{"url":"https://bugzilla.suse.com/1126318","tags":["report"]},{"url":"https://bugzilla.suse.com/1127173","tags":["report"]},{"url":"https://bugzilla.suse.com/1128146","tags":["report"]},{"url":"https://bugzilla.suse.com/1128323","tags":["report"]},{"url":"https://bugzilla.suse.com/1128355","tags":["report"]},{"url":"https://bugzilla.suse.com/1129071","tags":["report"]},{"url":"https://bugzilla.suse.com/1129566","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1132174","tags":["report"]},{"url":"https://bugzilla.suse.com/1132323","tags":["report"]},{"url":"https://bugzilla.suse.com/1132455","tags":["report"]},{"url":"https://bugzilla.suse.com/1132663","tags":["report"]},{"url":"https://bugzilla.suse.com/1132900","tags":["report"]},{"url":"https://bugzilla.suse.com/1135009","tags":["report"]},{"url":"https://bugzilla.suse.com/1136444","tags":["report"]},{"url":"https://bugzilla.suse.com/1138666","tags":["report"]},{"url":"https://bugzilla.suse.com/1138715","tags":["report"]},{"url":"https://bugzilla.suse.com/1138746","tags":["report"]},{"url":"https://bugzilla.suse.com/1139915","tags":["report"]},{"url":"https://bugzilla.suse.com/1140255","tags":["report"]},{"url":"https://bugzilla.suse.com/1141168","tags":["report"]},{"url":"https://bugzilla.suse.com/1142899","tags":["report"]},{"url":"https://bugzilla.suse.com/1143033","tags":["report"]},{"url":"https://bugzilla.suse.com/1143454","tags":["report"]},{"url":"https://bugzilla.suse.com/1143893","tags":["report"]},{"url":"https://bugzilla.suse.com/1144506","tags":["report"]},{"url":"https://bugzilla.suse.com/1149686","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1150190","tags":["report"]},{"url":"https://bugzilla.suse.com/1150895","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1155815","tags":["report"]},{"url":"https://bugzilla.suse.com/1156677","tags":["report"]},{"url":"https://bugzilla.suse.com/1156694","tags":["report"]},{"url":"https://bugzilla.suse.com/1156908","tags":["report"]},{"url":"https://bugzilla.suse.com/1157104","tags":["report"]},{"url":"https://bugzilla.suse.com/1157354","tags":["report"]},{"url":"https://bugzilla.suse.com/1159235","tags":["report"]},{"url":"https://bugzilla.suse.com/1159538","tags":["report"]},{"url":"https://bugzilla.suse.com/1161557","tags":["report"]},{"url":"https://bugzilla.suse.com/1161770","tags":["report"]},{"url":"https://bugzilla.suse.com/1162224","tags":["report"]},{"url":"https://bugzilla.suse.com/1162367","tags":["report"]},{"url":"https://bugzilla.suse.com/1162743","tags":["report"]},{"url":"https://bugzilla.suse.com/1163978","tags":["report"]},{"url":"https://bugzilla.suse.com/1164310","tags":["report"]},{"url":"https://bugzilla.suse.com/1165439","tags":["report"]},{"url":"https://bugzilla.suse.com/1165578","tags":["report"]},{"url":"https://bugzilla.suse.com/1165730","tags":["report"]},{"url":"https://bugzilla.suse.com/1165823","tags":["report"]},{"url":"https://bugzilla.suse.com/1165960","tags":["report"]},{"url":"https://bugzilla.suse.com/1166139","tags":["report"]},{"url":"https://bugzilla.suse.com/1166758","tags":["report"]},{"url":"https://bugzilla.suse.com/1167008","tags":["report"]},{"url":"https://bugzilla.suse.com/1167501","tags":["report"]},{"url":"https://bugzilla.suse.com/1167732","tags":["report"]},{"url":"https://bugzilla.suse.com/1167746","tags":["report"]},{"url":"https://bugzilla.suse.com/1168480","tags":["report"]},{"url":"https://bugzilla.suse.com/1168973","tags":["report"]},{"url":"https://bugzilla.suse.com/1169489","tags":["report"]},{"url":"https://bugzilla.suse.com/1170175","tags":["report"]},{"url":"https://bugzilla.suse.com/1170863","tags":["report"]},{"url":"https://bugzilla.suse.com/1171368","tags":["report"]},{"url":"https://bugzilla.suse.com/1171561","tags":["report"]},{"url":"https://bugzilla.suse.com/1172226","tags":["report"]},{"url":"https://bugzilla.suse.com/1172908","tags":["report"]},{"url":"https://bugzilla.suse.com/1172928","tags":["report"]},{"url":"https://bugzilla.suse.com/1173226","tags":["report"]},{"url":"https://bugzilla.suse.com/1173356","tags":["report"]},{"url":"https://bugzilla.suse.com/1174009","tags":["report"]},{"url":"https://bugzilla.suse.com/1174091","tags":["report"]},{"url":"https://bugzilla.suse.com/1174514","tags":["report"]},{"url":"https://bugzilla.suse.com/1175729","tags":["report"]},{"url":"https://bugzilla.suse.com/1176116","tags":["report"]},{"url":"https://bugzilla.suse.com/1176129","tags":["report"]},{"url":"https://bugzilla.suse.com/1176134","tags":["report"]},{"url":"https://bugzilla.suse.com/1176232","tags":["report"]},{"url":"https://bugzilla.suse.com/1176256","tags":["report"]},{"url":"https://bugzilla.suse.com/1176257","tags":["report"]},{"url":"https://bugzilla.suse.com/1176258","tags":["report"]},{"url":"https://bugzilla.suse.com/1176259","tags":["report"]},{"url":"https://bugzilla.suse.com/1176262","tags":["report"]},{"url":"https://bugzilla.suse.com/1176389","tags":["report"]},{"url":"https://bugzilla.suse.com/1176785","tags":["report"]},{"url":"https://bugzilla.suse.com/1176977","tags":["report"]},{"url":"https://bugzilla.suse.com/1177120","tags":["report"]},{"url":"https://bugzilla.suse.com/1177127","tags":["report"]},{"url":"https://bugzilla.suse.com/1177559","tags":["report"]},{"url":"https://bugzilla.suse.com/1178168","tags":["report"]},{"url":"https://bugzilla.suse.com/1178341","tags":["report"]},{"url":"https://bugzilla.suse.com/1178670","tags":["report"]},{"url":"https://bugzilla.suse.com/1179562","tags":["report"]},{"url":"https://bugzilla.suse.com/1179630","tags":["report"]},{"url":"https://bugzilla.suse.com/1179805","tags":["report"]},{"url":"https://bugzilla.suse.com/1180125","tags":["report"]},{"url":"https://bugzilla.suse.com/1180781","tags":["report"]},{"url":"https://bugzilla.suse.com/1181126","tags":["report"]},{"url":"https://bugzilla.suse.com/1181324","tags":["report"]},{"url":"https://bugzilla.suse.com/1181944","tags":["report"]},{"url":"https://bugzilla.suse.com/1182066","tags":["report"]},{"url":"https://bugzilla.suse.com/1182211","tags":["report"]},{"url":"https://bugzilla.suse.com/1182244","tags":["report"]},{"url":"https://bugzilla.suse.com/1182264","tags":["report"]},{"url":"https://bugzilla.suse.com/1182379","tags":["report"]},{"url":"https://bugzilla.suse.com/1182963","tags":["report"]},{"url":"https://bugzilla.suse.com/1183059","tags":["report"]},{"url":"https://bugzilla.suse.com/1183374","tags":["report"]},{"url":"https://bugzilla.suse.com/1183858","tags":["report"]},{"url":"https://bugzilla.suse.com/1184505","tags":["report"]},{"url":"https://bugzilla.suse.com/1185588","tags":["report"]},{"url":"https://bugzilla.suse.com/1185706","tags":["report"]},{"url":"https://bugzilla.suse.com/1185748","tags":["report"]},{"url":"https://bugzilla.suse.com/1186738","tags":["report"]},{"url":"https://bugzilla.suse.com/1187045","tags":["report"]},{"url":"https://bugzilla.suse.com/1190781","tags":["report"]},{"url":"https://bugzilla.suse.com/1193357","tags":["report"]},{"url":"https://bugzilla.suse.com/428177","tags":["report"]},{"url":"https://bugzilla.suse.com/431945","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/657698","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/715423","tags":["report"]},{"url":"https://bugzilla.suse.com/743787","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/750618","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/754677","tags":["report"]},{"url":"https://bugzilla.suse.com/761500","tags":["report"]},{"url":"https://bugzilla.suse.com/784670","tags":["report"]},{"url":"https://bugzilla.suse.com/787526","tags":["report"]},{"url":"https://bugzilla.suse.com/799119","tags":["report"]},{"url":"https://bugzilla.suse.com/809831","tags":["report"]},{"url":"https://bugzilla.suse.com/811890","tags":["report"]},{"url":"https://bugzilla.suse.com/825221","tags":["report"]},{"url":"https://bugzilla.suse.com/828513","tags":["report"]},{"url":"https://bugzilla.suse.com/831629","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/835687","tags":["report"]},{"url":"https://bugzilla.suse.com/839107","tags":["report"]},{"url":"https://bugzilla.suse.com/84331","tags":["report"]},{"url":"https://bugzilla.suse.com/855666","tags":["report"]},{"url":"https://bugzilla.suse.com/858239","tags":["report"]},{"url":"https://bugzilla.suse.com/867887","tags":["report"]},{"url":"https://bugzilla.suse.com/871152","tags":["report"]},{"url":"https://bugzilla.suse.com/885662","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/889363","tags":["report"]},{"url":"https://bugzilla.suse.com/892480","tags":["report"]},{"url":"https://bugzilla.suse.com/898917","tags":["report"]},{"url":"https://bugzilla.suse.com/907584","tags":["report"]},{"url":"https://bugzilla.suse.com/912460","tags":["report"]},{"url":"https://bugzilla.suse.com/913229","tags":["report"]},{"url":"https://bugzilla.suse.com/915479","tags":["report"]},{"url":"https://bugzilla.suse.com/917607","tags":["report"]},{"url":"https://bugzilla.suse.com/917759","tags":["report"]},{"url":"https://bugzilla.suse.com/917815","tags":["report"]},{"url":"https://bugzilla.suse.com/922448","tags":["report"]},{"url":"https://bugzilla.suse.com/929736","tags":["report"]},{"url":"https://bugzilla.suse.com/930189","tags":["report"]},{"url":"https://bugzilla.suse.com/931978","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://bugzilla.suse.com/937912","tags":["report"]},{"url":"https://bugzilla.suse.com/939456","tags":["report"]},{"url":"https://bugzilla.suse.com/940608","tags":["report"]},{"url":"https://bugzilla.suse.com/942385","tags":["report"]},{"url":"https://bugzilla.suse.com/942751","tags":["report"]},{"url":"https://bugzilla.suse.com/944204","tags":["report"]},{"url":"https://bugzilla.suse.com/945455","tags":["report"]},{"url":"https://bugzilla.suse.com/946648","tags":["report"]},{"url":"https://bugzilla.suse.com/947357","tags":["report"]},{"url":"https://bugzilla.suse.com/947679","tags":["report"]},{"url":"https://bugzilla.suse.com/948198","tags":["report"]},{"url":"https://bugzilla.suse.com/954486","tags":["report"]},{"url":"https://bugzilla.suse.com/954690","tags":["report"]},{"url":"https://bugzilla.suse.com/961334","tags":["report"]},{"url":"https://bugzilla.suse.com/962291","tags":["report"]},{"url":"https://bugzilla.suse.com/963974","tags":["report"]},{"url":"https://bugzilla.suse.com/964204","tags":["report"]},{"url":"https://bugzilla.suse.com/964472","tags":["report"]},{"url":"https://bugzilla.suse.com/964474","tags":["report"]},{"url":"https://bugzilla.suse.com/965830","tags":["report"]},{"url":"https://bugzilla.suse.com/967128","tags":["report"]},{"url":"https://bugzilla.suse.com/968270","tags":["report"]},{"url":"https://bugzilla.suse.com/968601","tags":["report"]},{"url":"https://bugzilla.suse.com/975875","tags":["report"]},{"url":"https://bugzilla.suse.com/981848","tags":["report"]},{"url":"https://bugzilla.suse.com/988086","tags":["report"]},{"url":"https://bugzilla.suse.com/992988","tags":["report"]},{"url":"https://bugzilla.suse.com/992989","tags":["report"]},{"url":"https://bugzilla.suse.com/992992","tags":["report"]},{"url":"https://bugzilla.suse.com/993130","tags":["report"]},{"url":"https://bugzilla.suse.com/993825","tags":["report"]},{"url":"https://bugzilla.suse.com/993968","tags":["report"]},{"url":"https://bugzilla.suse.com/994910","tags":["report"]},{"url":"https://bugzilla.suse.com/996255","tags":["report"]},{"url":"https://bugzilla.suse.com/997614","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3426","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000677","tags":["report"]},{"url":"https://bugzilla.suse.com/1001148","tags":["report"]},{"url":"https://bugzilla.suse.com/1001912","tags":["report"]},{"url":"https://bugzilla.suse.com/1002585","tags":["report"]},{"url":"https://bugzilla.suse.com/1009528","tags":["report"]},{"url":"https://bugzilla.suse.com/1019637","tags":["report"]},{"url":"https://bugzilla.suse.com/1021641","tags":["report"]},{"url":"https://bugzilla.suse.com/1022085","tags":["report"]},{"url":"https://bugzilla.suse.com/1022086","tags":["report"]},{"url":"https://bugzilla.suse.com/1022271","tags":["report"]},{"url":"https://bugzilla.suse.com/1027079","tags":["report"]},{"url":"https://bugzilla.suse.com/1027688","tags":["report"]},{"url":"https://bugzilla.suse.com/1027908","tags":["report"]},{"url":"https://bugzilla.suse.com/1028281","tags":["report"]},{"url":"https://bugzilla.suse.com/1028723","tags":["report"]},{"url":"https://bugzilla.suse.com/1029523","tags":["report"]},{"url":"https://bugzilla.suse.com/1042392","tags":["report"]},{"url":"https://bugzilla.suse.com/1044095","tags":["report"]},{"url":"https://bugzilla.suse.com/1044107","tags":["report"]},{"url":"https://bugzilla.suse.com/1044175","tags":["report"]},{"url":"https://bugzilla.suse.com/1055825","tags":["report"]},{"url":"https://bugzilla.suse.com/1056058","tags":["report"]},{"url":"https://bugzilla.suse.com/1065363","tags":["report"]},{"url":"https://bugzilla.suse.com/1066242","tags":["report"]},{"url":"https://bugzilla.suse.com/1071905","tags":["report"]},{"url":"https://bugzilla.suse.com/1071906","tags":["report"]},{"url":"https://bugzilla.suse.com/1087102","tags":["report"]},{"url":"https://bugzilla.suse.com/1089039","tags":["report"]},{"url":"https://bugzilla.suse.com/1090765","tags":["report"]},{"url":"https://bugzilla.suse.com/1097158","tags":["report"]},{"url":"https://bugzilla.suse.com/1097624","tags":["report"]},{"url":"https://bugzilla.suse.com/1098592","tags":["report"]},{"url":"https://bugzilla.suse.com/1100078","tags":["report"]},{"url":"https://bugzilla.suse.com/1101246","tags":["report"]},{"url":"https://bugzilla.suse.com/1101470","tags":["report"]},{"url":"https://bugzilla.suse.com/1104789","tags":["report"]},{"url":"https://bugzilla.suse.com/1106197","tags":["report"]},{"url":"https://bugzilla.suse.com/1112209","tags":["report"]},{"url":"https://bugzilla.suse.com/1113534","tags":["report"]},{"url":"https://bugzilla.suse.com/1113652","tags":["report"]},{"url":"https://bugzilla.suse.com/1113742","tags":["report"]},{"url":"https://bugzilla.suse.com/1113975","tags":["report"]},{"url":"https://bugzilla.suse.com/1117951","tags":["report"]},{"url":"https://bugzilla.suse.com/1127080","tags":["report"]},{"url":"https://bugzilla.suse.com/1131291","tags":["report"]},{"url":"https://bugzilla.suse.com/1150003","tags":["report"]},{"url":"https://bugzilla.suse.com/1150250","tags":["report"]},{"url":"https://bugzilla.suse.com/1158809","tags":["report"]},{"url":"https://bugzilla.suse.com/1160163","tags":["report"]},{"url":"https://bugzilla.suse.com/1179491","tags":["report"]},{"url":"https://bugzilla.suse.com/1182331","tags":["report"]},{"url":"https://bugzilla.suse.com/1182333","tags":["report"]},{"url":"https://bugzilla.suse.com/1189521","tags":["report"]},{"url":"https://bugzilla.suse.com/356549","tags":["report"]},{"url":"https://bugzilla.suse.com/381844","tags":["report"]},{"url":"https://bugzilla.suse.com/394317","tags":["report"]},{"url":"https://bugzilla.suse.com/408865","tags":["report"]},{"url":"https://bugzilla.suse.com/430141","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/442740","tags":["report"]},{"url":"https://bugzilla.suse.com/459468","tags":["report"]},{"url":"https://bugzilla.suse.com/489641","tags":["report"]},{"url":"https://bugzilla.suse.com/504687","tags":["report"]},{"url":"https://bugzilla.suse.com/509031","tags":["report"]},{"url":"https://bugzilla.suse.com/526319","tags":["report"]},{"url":"https://bugzilla.suse.com/590833","tags":["report"]},{"url":"https://bugzilla.suse.com/610223","tags":["report"]},{"url":"https://bugzilla.suse.com/610642","tags":["report"]},{"url":"https://bugzilla.suse.com/629905","tags":["report"]},{"url":"https://bugzilla.suse.com/651003","tags":["report"]},{"url":"https://bugzilla.suse.com/670526","tags":["report"]},{"url":"https://bugzilla.suse.com/693027","tags":["report"]},{"url":"https://bugzilla.suse.com/720601","tags":["report"]},{"url":"https://bugzilla.suse.com/748738","tags":["report"]},{"url":"https://bugzilla.suse.com/749210","tags":["report"]},{"url":"https://bugzilla.suse.com/749213","tags":["report"]},{"url":"https://bugzilla.suse.com/749735","tags":["report"]},{"url":"https://bugzilla.suse.com/751946","tags":["report"]},{"url":"https://bugzilla.suse.com/751977","tags":["report"]},{"url":"https://bugzilla.suse.com/774710","tags":["report"]},{"url":"https://bugzilla.suse.com/784994","tags":["report"]},{"url":"https://bugzilla.suse.com/793420","tags":["report"]},{"url":"https://bugzilla.suse.com/802184","tags":["report"]},{"url":"https://bugzilla.suse.com/803004","tags":["report"]},{"url":"https://bugzilla.suse.com/822642","tags":["report"]},{"url":"https://bugzilla.suse.com/832833","tags":["report"]},{"url":"https://bugzilla.suse.com/849377","tags":["report"]},{"url":"https://bugzilla.suse.com/855676","tags":["report"]},{"url":"https://bugzilla.suse.com/856687","tags":["report"]},{"url":"https://bugzilla.suse.com/857203","tags":["report"]},{"url":"https://bugzilla.suse.com/857850","tags":["report"]},{"url":"https://bugzilla.suse.com/869945","tags":["report"]},{"url":"https://bugzilla.suse.com/872299","tags":["report"]},{"url":"https://bugzilla.suse.com/873351","tags":["report"]},{"url":"https://bugzilla.suse.com/876282","tags":["report"]},{"url":"https://bugzilla.suse.com/876710","tags":["report"]},{"url":"https://bugzilla.suse.com/876712","tags":["report"]},{"url":"https://bugzilla.suse.com/876748","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/889013","tags":["report"]},{"url":"https://bugzilla.suse.com/892477","tags":["report"]},{"url":"https://bugzilla.suse.com/895129","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901277","tags":["report"]},{"url":"https://bugzilla.suse.com/901902","tags":["report"]},{"url":"https://bugzilla.suse.com/902364","tags":["report"]},{"url":"https://bugzilla.suse.com/906878","tags":["report"]},{"url":"https://bugzilla.suse.com/908362","tags":["report"]},{"url":"https://bugzilla.suse.com/908372","tags":["report"]},{"url":"https://bugzilla.suse.com/912014","tags":["report"]},{"url":"https://bugzilla.suse.com/912015","tags":["report"]},{"url":"https://bugzilla.suse.com/912018","tags":["report"]},{"url":"https://bugzilla.suse.com/912292","tags":["report"]},{"url":"https://bugzilla.suse.com/912293","tags":["report"]},{"url":"https://bugzilla.suse.com/912294","tags":["report"]},{"url":"https://bugzilla.suse.com/912296","tags":["report"]},{"url":"https://bugzilla.suse.com/919648","tags":["report"]},{"url":"https://bugzilla.suse.com/920236","tags":["report"]},{"url":"https://bugzilla.suse.com/922488","tags":["report"]},{"url":"https://bugzilla.suse.com/922496","tags":["report"]},{"url":"https://bugzilla.suse.com/922499","tags":["report"]},{"url":"https://bugzilla.suse.com/922500","tags":["report"]},{"url":"https://bugzilla.suse.com/926597","tags":["report"]},{"url":"https://bugzilla.suse.com/929678","tags":["report"]},{"url":"https://bugzilla.suse.com/931698","tags":["report"]},{"url":"https://bugzilla.suse.com/933898","tags":["report"]},{"url":"https://bugzilla.suse.com/933911","tags":["report"]},{"url":"https://bugzilla.suse.com/934487","tags":["report"]},{"url":"https://bugzilla.suse.com/934489","tags":["report"]},{"url":"https://bugzilla.suse.com/934491","tags":["report"]},{"url":"https://bugzilla.suse.com/934493","tags":["report"]},{"url":"https://bugzilla.suse.com/937085","tags":["report"]},{"url":"https://bugzilla.suse.com/937212","tags":["report"]},{"url":"https://bugzilla.suse.com/937492","tags":["report"]},{"url":"https://bugzilla.suse.com/937634","tags":["report"]},{"url":"https://bugzilla.suse.com/943421","tags":["report"]},{"url":"https://bugzilla.suse.com/947104","tags":["report"]},{"url":"https://bugzilla.suse.com/952871","tags":["report"]},{"url":"https://bugzilla.suse.com/954256","tags":["report"]},{"url":"https://bugzilla.suse.com/957812","tags":["report"]},{"url":"https://bugzilla.suse.com/957813","tags":["report"]},{"url":"https://bugzilla.suse.com/957815","tags":["report"]},{"url":"https://bugzilla.suse.com/958501","tags":["report"]},{"url":"https://bugzilla.suse.com/963415","tags":["report"]},{"url":"https://bugzilla.suse.com/968046","tags":["report"]},{"url":"https://bugzilla.suse.com/968047","tags":["report"]},{"url":"https://bugzilla.suse.com/968048","tags":["report"]},{"url":"https://bugzilla.suse.com/968050","tags":["report"]},{"url":"https://bugzilla.suse.com/968265","tags":["report"]},{"url":"https://bugzilla.suse.com/968374","tags":["report"]},{"url":"https://bugzilla.suse.com/976942","tags":["report"]},{"url":"https://bugzilla.suse.com/977584","tags":["report"]},{"url":"https://bugzilla.suse.com/977614","tags":["report"]},{"url":"https://bugzilla.suse.com/977615","tags":["report"]},{"url":"https://bugzilla.suse.com/977616","tags":["report"]},{"url":"https://bugzilla.suse.com/977663","tags":["report"]},{"url":"https://bugzilla.suse.com/978224","tags":["report"]},{"url":"https://bugzilla.suse.com/982268","tags":["report"]},{"url":"https://bugzilla.suse.com/982575","tags":["report"]},{"url":"https://bugzilla.suse.com/983249","tags":["report"]},{"url":"https://bugzilla.suse.com/984323","tags":["report"]},{"url":"https://bugzilla.suse.com/985054","tags":["report"]},{"url":"https://bugzilla.suse.com/990207","tags":["report"]},{"url":"https://bugzilla.suse.com/990392","tags":["report"]},{"url":"https://bugzilla.suse.com/990419","tags":["report"]},{"url":"https://bugzilla.suse.com/990428","tags":["report"]},{"url":"https://bugzilla.suse.com/991193","tags":["report"]},{"url":"https://bugzilla.suse.com/991877","tags":["report"]},{"url":"https://bugzilla.suse.com/992120","tags":["report"]},{"url":"https://bugzilla.suse.com/993819","tags":["report"]},{"url":"https://bugzilla.suse.com/994749","tags":["report"]},{"url":"https://bugzilla.suse.com/994844","tags":["report"]},{"url":"https://bugzilla.suse.com/995075","tags":["report"]},{"url":"https://bugzilla.suse.com/995324","tags":["report"]},{"url":"https://bugzilla.suse.com/995359","tags":["report"]},{"url":"https://bugzilla.suse.com/995377","tags":["report"]},{"url":"https://bugzilla.suse.com/995959","tags":["report"]},{"url":"https://bugzilla.suse.com/997043","tags":["report"]},{"url":"https://bugzilla.suse.com/998190","tags":["report"]},{"url":"https://bugzilla.suse.com/999665","tags":["report"]},{"url":"https://bugzilla.suse.com/999666","tags":["report"]},{"url":"https://bugzilla.suse.com/999668","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211859-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211962-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1044849","tags":["report"]},{"url":"https://bugzilla.suse.com/1048688","tags":["report"]},{"url":"https://bugzilla.suse.com/1115960","tags":["report"]},{"url":"https://bugzilla.suse.com/1148383","tags":["report"]},{"url":"https://bugzilla.suse.com/1170657","tags":["report"]},{"url":"https://bugzilla.suse.com/1171909","tags":["report"]},{"url":"https://bugzilla.suse.com/1172409","tags":["report"]},{"url":"https://bugzilla.suse.com/1172450","tags":["report"]},{"url":"https://bugzilla.suse.com/1174583","tags":["report"]},{"url":"https://bugzilla.suse.com/1178243","tags":["report"]},{"url":"https://bugzilla.suse.com/1181277","tags":["report"]},{"url":"https://bugzilla.suse.com/1181278","tags":["report"]},{"url":"https://bugzilla.suse.com/1181689","tags":["report"]},{"url":"https://bugzilla.suse.com/1181690","tags":["report"]},{"url":"https://bugzilla.suse.com/1182317","tags":["report"]},{"url":"https://bugzilla.suse.com/1182433","tags":["report"]},{"url":"https://bugzilla.suse.com/1183174","tags":["report"]},{"url":"https://bugzilla.suse.com/1183803","tags":["report"]},{"url":"https://bugzilla.suse.com/1184148","tags":["report"]},{"url":"https://bugzilla.suse.com/1185623","tags":["report"]},{"url":"https://bugzilla.suse.com/1186608","tags":["report"]},{"url":"https://bugzilla.suse.com/1186611","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33571","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211963-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181379","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3281","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212236-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212554-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1019074","tags":["report"]},{"url":"https://bugzilla.suse.com/1113302","tags":["report"]},{"url":"https://bugzilla.suse.com/1176784","tags":["report"]},{"url":"https://bugzilla.suse.com/1180507","tags":["report"]},{"url":"https://bugzilla.suse.com/1181828","tags":["report"]},{"url":"https://bugzilla.suse.com/1185836","tags":["report"]},{"url":"https://bugzilla.suse.com/940812","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21419","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222831-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1195916","tags":["report"]},{"url":"https://bugzilla.suse.com/1196696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-29651","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5138-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-29651","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J5N5MI5XRBM5X46XPGTD3CVA6C5MMBQJ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B5MZ7NDWQ2PACIOK5L2D7CNODUCJCARI/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42969","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-29651","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2020-12-09T06:58:22Z","modified":"2025-11-03T21:44:20.561Z","updated_at":"2026-11-02T14:35:55.460269Z"}],"euvd":[{"id":"EUVD-2020-0152","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2020-12-09T06:58:22Z","modified":"2025-11-03T21:44:20Z","updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-hj5v-574p-mj7c","title":"py vulnerable to Regular Expression Denial of Service","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2021-04-20T16:39:57Z","modified":"2025-11-04T16:34:15Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:39:05.278442Z"}],"nvd":[{"id":"CVE-2020-29651","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2020-12-09T07:15:12.533Z","modified":"2026-06-17T03:11:33.683Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:27.10541Z"}],"osv":[{"id":"CVE-2020-29651","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2020-12-09T07:15:12.533Z","modified":"2026-10-20T10:54:19.925840026Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:16.612899Z"},{"id":"DEBIAN-CVE-2020-29651","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2020-12-09T07:15:12.533Z","modified":"2026-10-26T12:01:59.446279953Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"GHSA-hj5v-574p-mj7c","title":"py vulnerable to Regular Expression Denial of Service","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2021-04-20T16:39:57Z","modified":"2025-11-04T17:01:48.338149Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:49.28217Z"},{"id":"OESA-2022-1562","title":"python-py security update","description":"Library with cross-python path, ini-parsing, io, code, log facilities.\r\n\r\nSecurity Fix(es):\r\n\r\nA denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.(CVE-2020-29651)","status":"published","published":"2022-03-07T11:04:50Z","modified":"2026-08-18T01:16:27.108486381Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2020-29651","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2020-12-09T07:15:00Z","modified":"2026-02-04T02:31:45.42172Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-3966-1","title":"pypy3 - security update","status":"published","published":"2024-11-26T00:00:00Z","modified":"2026-03-09T01:18:48.110236Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2021-0071","title":"Updated python-py packages fix a security vulnerability","description":"A denial of service via regular expression in the py.path.svnwc component of\npython-py through 1.9.0 could be used by attackers to cause a compute-time\ndenial of service attack by supplying malicious input to the blame\nfunctionality (CVE-2020-29651).\n","status":"published","published":"2021-02-06T18:20:41Z","modified":"2026-04-16T04:41:26.490018693Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0851-1","title":"Security update for python-py","description":"This update for python-py fixes the following issues:\n\n- CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2021-06-07T12:06:03Z","modified":"2026-02-04T03:03:35.614764Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:1859-1","title":"Security update for python-py","description":"This update for python-py fixes the following issues:\n\n- CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505).\n","status":"published","published":"2021-07-11T09:21:16Z","modified":"2026-02-04T02:29:38.967431Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11108-1","title":"oci-cli-3.0.2-1.2 on GA media","description":"These are all security issues fixed in the oci-cli-3.0.2-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:33:23.900066Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11252-1","title":"python36-py-1.10.0-1.5 on GA media","description":"These are all security issues fixed in the python36-py-1.10.0-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:34:28.672655Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:14153-1","title":"python310-py-1.11.0-6.5 on GA media","description":"These are all security issues fixed in the python310-py-1.11.0-6.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T02:46:49.872444Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2026:12027-1","title":"python313-py-1.11.0-9.5 on GA media","description":"These are all security issues fixed in the python313-py-1.11.0-9.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-04T00:00:00Z","modified":"2026-10-05T10:15:51.925960914Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"PYSEC-2020-92","description":"A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.","status":"published","published":"2020-12-09T07:15:00Z","modified":"2023-11-08T04:03:31.65702Z","updated_at":"2026-11-02T15:52:52.682031Z"},{"id":"SUSE-FU-2022:0444-1","title":"Feature update for venv-salt-minion","description":"This feature update for venv-salt-minion provides the following changes:\n\n- Introduce `venv-salt-minion`.\n- Track already fixed issues.\n  ","status":"published","published":"2022-02-16T15:20:54Z","modified":"2026-02-04T03:39:55.775353Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-FU-2022:0445-1","title":"Feature update for venv-salt-minion","description":"This feature update for venv-salt-minion provides the following changes:\n\n- Introduce `venv-salt-minion`.\n- Mention fixed issues provided with the bundle.\n  ","status":"published","published":"2022-02-16T15:23:18Z","modified":"2026-02-04T02:38:14.687149Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2021:1859-1","title":"Security update for python-py","description":"This update for python-py fixes the following issues:\n\n- CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505).\n","status":"published","published":"2021-06-04T07:02:58Z","modified":"2026-02-04T03:38:16.587222Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1962-1","title":"Security update for ardana-neutron, ardana-swift, cassandra, crowbar-openstack, grafana, kibana, openstack-dashboard, openstack-ironic, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, python-py, python-pysaml2, python-xmlschema, rubygem-activerecord-session_store, venv-openstack-keystone","description":"This update for ardana-neutron, ardana-swift, cassandra, crowbar-openstack, grafana, kibana, openstack-dashboard, openstack-ironic, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, python-py, python-pysaml2, python-xmlschema, rubygem-activerecord-session_store, venv-openstack-keystone contains the following fixes:\n\nSecurity fixes included in this update:\n\ncassandra:\n- CVE-2020-17516: Fixed an issue where encryption between nodes was not enforced\n correctly for certain internode_encryption settings (bsc#1181689)\n\ngrafana:\n- CVE-2018-18623, CVE-2018-18624, CVE-2018-18625: Fixed multiple cross\n site scripting vulnerabilities in the dashboard. (bsc#1172450)\n- CVE-2021-27358: Fixed a denial of service via remote API call. (bsc#1183803)\n- CVE-2019-15043: Fixed a denial of service by an unauthenticated user\n in the snapshot HTTP API (bsc#1148383)\n- CVE-2020-13379: Fixed an information leak to unauthenticated users. (bsc#1172409)\n- CVE-2020-12052: Fixed a cross site scripting vulnerability with the annotation\n popup (bsc#1170657)\n- CVE-2018-19039: Fixed an issue where a privileged user could\n exfiltrate files (bsc#1115960)\n- CVE-2020-11110: Fixed a stored cross site scripting vulnerability. (bsc#1174583)\n- CVE-2020-24303: Fixed a cross site scripting vulnerability in a query alias for\n ElasticSearch datasources (bsc#1178243)\n\nkibana:\n- CVE-2017-11499: Fixed a vulnerability in nodejs, related to the HashTable\n implementation, which could cause a denial of service. (bsc#1044849)\n- CVE-2017-11481: Fixed a cross site scripting vulnerability via via URL fields.\n (bsc#1044849)\n- CVE-2020-10743: Fixed a clickjacking issue because X-Frame-Option was not used\n by default. (bsc#1171909)\n\npython-Django:\n- CVE-2021-23336: Fixed a web cache poisoning via django.utils.http.limited_parse_qsl().\n (bsc#1182433)\n- CVE-2021-28658: Fixed a directory traversal via uploaded files. (bsc#1184148)\n- CVE-2021-31542: Fixed a directory traversal via uploaded files with suitably crafted\n file names. (bsc#1185623)\n- CVE-2021-33203: Fixed potential path-traversal via admindocs' TemplateDetailView.\n (bsc#1186608)\n- CVE-2021-33571: Tighten validator checks to not allow leading zeros in IPv4 addresses,\n which potentially leads to further attacks. (bsc#1186611)\n\npython-py:\n- CVE-2020-29651: Fixed a denial of service via regular expressions. (bsc#1179805)\n\npython-pysaml2:\n- CVE-2021-21238: Fixed improper verification of cryptographic signatures for signed\n SAML documents. (bsc#1181277)\n- CVE-2021-21239: Fixed improper verification of cryptographic signatures when using\n CryptoBackendXmlSec1(). (bsc#1181278)\n\nrubygem-activerecord-session_store:\n- CVE-2019-25025: Fixed a timing attacks targeting the session id which could allow\n an attack to hijack sessions. (bsc#1183174)\n\n\nNon-security changes included in this update:\n\nChanges in ardana-neutron:\n- Update to version 9.0+git.1615223676.777f0b3:\n  * Allow users to stop monitoring rootwrap daemon (bsc#1182317)\n\nChanges in ardana-swift:\n- Update to version 9.0+git.1618235096.90974ed:\n  * Run swiftlm-scan in the UTC timezone (bsc#1181690)\n\nChanges in cassandra:\n- update to 3.11.10 (bsc#1181689, CVE-2020-17516)  \n * Fix digest computation for queries with fetched but non queried columns (CASSANDRA-15962)\n * Reduce amount of allocations during batch statement execution (CASSANDRA-16201)\n * Update jflex-1.6.0.jar to match upstream (CASSANDRA-16393)\n * Fix DecimalDeserializer#toString OOM (CASSANDRA-14925)\n * Rate limit validation compactions using compaction_throughput_mb_per_sec (CASSANDRA-16161)\n * SASI's `max_compaction_flush_memory_in_mb` settings over 100GB revert to default of 1GB (CASSANDRA-16071)\n * Prevent unbounded number of pending flushing tasks (CASSANDRA-16261)\n * Improve empty hint file handling during startup (CASSANDRA-16162)\n * Allow empty string in collections with COPY FROM in cqlsh (CASSANDRA-16372)\n * Fix skipping on pre-3.0 created compact storage sstables due to missing primary key liveness (CASSANDRA-16226)\n * Extend the exclusion of replica filtering protection to other indices instead of just SASI (CASSANDRA-16311)\n * Synchronize transaction logs for JBOD (CASSANDRA-16225)\n * Fix the counting of cells per partition (CASSANDRA-16259)\n * Fix serial read/non-applying CAS linearizability (CASSANDRA-12126)\n * Avoid potential NPE in JVMStabilityInspector (CASSANDRA-16294)\n * Improved check of num_tokens against the length of initial_token (CASSANDRA-14477)\n * Fix a race condition on ColumnFamilyStore and TableMetrics (CASSANDRA-16228)\n * Remove the SEPExecutor blocking behavior (CASSANDRA-16186)\n * Fix invalid cell value skipping when reading from disk (CASSANDRA-16223)\n * Prevent invoking enable/disable gossip when not in NORMAL (CASSANDRA-16146)\n * Wait for schema agreement when bootstrapping (CASSANDRA-15158)\n * Fix the histogram merge of the table metrics (CASSANDRA-16259)\n * Synchronize Keyspace instance store/clear (CASSANDRA-16210)\n * Fix ColumnFilter to avoid querying cells of unselected complex columns (CASSANDRA-15977)\n * Fix memory leak in CompressedChunkReader (CASSANDRA-15880)\n * Don't attempt value skipping with mixed version cluster (CASSANDRA-15833)\n * Avoid failing compactions with very large partitions (CASSANDRA-15164)\n * Make sure LCS handles duplicate sstable added/removed notifications correctly (CASSANDRA-14103)\n * Fix OOM when terminating repair session (CASSANDRA-15902)\n * Avoid marking shutting down nodes as up after receiving gossip shutdown message (CASSANDRA-16094)\n * Check SSTables for latest version before dropping compact storage (CASSANDRA-16063)\n * Handle unexpected columns due to schema races (CASSANDRA-15899)\n * Add flag to ignore unreplicated keyspaces during repair (CASSANDRA-15160)\n * Package tools/bin scripts as executable (CASSANDRA-16151)\n * Fixed a NullPointerException when calling nodetool enablethrift (CASSANDRA-16127)\n * Correctly interpret SASI's `max_compaction_flush_memory_in_mb` setting in megabytes not bytes (CASSANDRA-16071)\n * Fix short read protection for GROUP BY queries (CASSANDRA-15459)\n * Frozen RawTuple is not annotated with frozen in the toString method (CASSANDRA-15857)\nMerged from 3.0:\n * Use IF NOT EXISTS for index and UDT create statements in snapshot schema files (CASSANDRA-13935)\n * Fix gossip shutdown order (CASSANDRA-15816)\n * Remove broken 'defrag-on-read' optimization (CASSANDRA-15432)\n * Check for endpoint collision with hibernating nodes (CASSANDRA-14599)\n * Operational improvements and hardening for replica filtering protection (CASSANDRA-15907)\n * stop_paranoid disk failure policy is ignored on CorruptSSTableException after node is up (CASSANDRA-15191)\n * Forbid altering UDTs used in partition keys (CASSANDRA-15933)\n * Fix empty/null json string representation (CASSANDRA-15896)\n * 3.x fails to start if commit log has range tombstones from a column which is also deleted (CASSANDRA-15970)\n * Handle difference in timestamp precision between java8 and java11 in LogFIle.java (CASSANDRA-16050)\nMerged from 2.2:\n * Fix CQL parsing of collections when the column type is reversed (CASSANDRA-15814)\n * Only allow strings to be passed to JMX authentication (CASSANDRA-16077)\n * Fix cqlsh output when fetching all rows in batch mode (CASSANDRA-15905)\n * Upgrade Jackson to 2.9.10 (CASSANDRA-15867)\n * Fix CQL formatting of read command restrictions for slow query log (CASSANDRA-15503)\n * Allow sstableloader to use SSL on the native port (CASSANDRA-14904)\n * Backport CASSANDRA-12189: escape string literals (CASSANDRA-15948)\n * Avoid hinted handoff per-host throttle being arounded to 0 in large cluster (CASSANDRA-15859)\n * Avoid emitting empty range tombstones from RangeTombstoneList (CASSANDRA-15924)\n * Avoid thread starvation, and improve compare-and-swap performance, in the slab allocators (CASSANDRA-15922)\n * Add token to tombstone warning and error messages (CASSANDRA-15890)\n * Fixed range read concurrency factor computation and capped as 10 times tpc cores (CASSANDRA-15752)\n * Catch exception on bootstrap resume and init native transport (CASSANDRA-15863)\n * Fix replica-side filtering returning stale data with CL \u003e ONE (CASSANDRA-8272, CASSANDRA-8273)\n * Fix duplicated row on 2.x upgrades when multi-rows range tombstones interact with collection ones (CASSANDRA-15805)\n * Rely on snapshotted session infos on StreamResultFuture.maybeComplete to avoid race conditions (CASSANDRA-15667)\n * EmptyType doesn't override writeValue so could attempt to write bytes when expected not to (CASSANDRA-15790)\n * Fix index queries on partition key columns when some partitions contains only static data (CASSANDRA-13666)\n * Avoid creating duplicate rows during major upgrades (CASSANDRA-15789)\n * liveDiskSpaceUsed and totalDiskSpaceUsed get corrupted if IndexSummaryRedistribution gets interrupted (CASSANDRA-15674)\n * Fix Debian init start/stop (CASSANDRA-15770)\n * Fix infinite loop on index query paging in tables with clustering (CASSANDRA-14242)\n * Fix chunk index overflow due to large sstable with small chunk length (CASSANDRA-15595)\n * Allow selecting static column only when querying static index (CASSANDRA-14242)\n * cqlsh return non-zero status when STDIN CQL fails (CASSANDRA-15623)\n * Don't skip sstables in slice queries based only on local min/max/deletion timestamp (CASSANDRA-15690)\n * Memtable memory allocations may deadlock (CASSANDRA-15367)\n * Run evictFromMembership in GossipStage (CASSANDRA-15592)\n * Fix nomenclature of allow and deny lists (CASSANDRA-15862)\n * Remove generated files from source artifact (CASSANDRA-15849)\n * Remove duplicated tools binaries from tarballs (CASSANDRA-15768)\n * Duplicate results with DISTINCT queries in mixed mode (CASSANDRA-15501)\n * Disable JMX rebinding (CASSANDRA-15653)\n * Fix writing of snapshot manifest when the table has table-backed secondary indexes (CASSANDRA-10968)\n * Fix parse error in cqlsh COPY FROM and formatting for map of blobs (CASSANDRA-15679)\n * Fix Commit log replays when static column clustering keys are collections (CASSANDRA-14365)\n * Fix Red Hat init script on newer systemd versions (CASSANDRA-15273)\n * Allow EXTRA_CLASSPATH to work on tar/source installations (CASSANDRA-15567)\n * Fix bad UDT sstable metadata serialization headers written by C* 3.0 on upgrade and in sstablescrub (CASSANDRA-15035)\n * Fix nodetool compactionstats showing extra pending task for TWCS - patch implemented (CASSANDRA-15409)\n * Fix SELECT JSON formatting for the 'duration' type (CASSANDRA-15075)\n * Fix LegacyLayout to have same behavior as 2.x when handling unknown column names (CASSANDRA-15081)\n * Update nodetool help stop output (CASSANDRA-15401)\n * Run in-jvm upgrade dtests in circleci (CASSANDRA-15506)\n * Include updates to static column in mutation size calculations (CASSANDRA-15293)\n * Fix point-in-time recoevery ignoring timestamp of updates to static columns (CASSANDRA-15292)\n * GC logs are also put under $CASSANDRA_LOG_DIR (CASSANDRA-14306)\n * Fix sstabledump's position key value when partitions have multiple rows (CASSANDRA-14721)\n * Avoid over-scanning data directories in LogFile.verify() (CASSANDRA-15364)\n * Bump generations and document changes to system_distributed and system_traces in 3.0, 3.11\n   (CASSANDRA-15441)\n * Fix system_traces creation timestamp; optimise system keyspace upgrades (CASSANDRA-15398)\n * Fix various data directory prefix matching issues (CASSANDRA-13974)\n * Minimize clustering values in metadata collector (CASSANDRA-15400)\n * Avoid over-trimming of results in mixed mode clusters (CASSANDRA-15405)\n * validate value sizes in LegacyLayout (CASSANDRA-15373)\n * Ensure that tracing doesn't break connections in 3.x/4.0 mixed mode by default (CASSANDRA-15385)\n * Make sure index summary redistribution does not start when compactions are paused (CASSANDRA-15265)\n * Ensure legacy rows have primary key livenessinfo when they contain illegal cells (CASSANDRA-15365)\n * Fix race condition when setting bootstrap flags (CASSANDRA-14878)\n * Fix NativeLibrary.tryOpenDirectory callers for Windows (CASSANDRA-15426)\n * Fix SELECT JSON output for empty blobs (CASSANDRA-15435)\n * In-JVM DTest: Set correct internode message version for upgrade test (CASSANDRA-15371)\n * In-JVM DTest: Support NodeTool in dtest (CASSANDRA-15429)\n * Fix NativeLibrary.tryOpenDirectory callers for Windows (CASSANDRA-15426)\n * Fix SASI non-literal string comparisons (range operators) (CASSANDRA-15169)\n * Make sure user defined compaction transactions are always closed (CASSANDRA-15123)\n * Fix cassandra-env.sh to use $CASSANDRA_CONF to find cassandra-jaas.config (CASSANDRA-14305)\n * Fixed nodetool cfstats printing index name twice (CASSANDRA-14903)\n * Add flag to disable SASI indexes, and warnings on creation (CASSANDRA-14866)\n * Add ability to cap max negotiable protocol version (CASSANDRA-15193)\n * Gossip tokens on startup if available (CASSANDRA-15335)\n * Fix resource leak in CompressedSequentialWriter (CASSANDRA-15340)\n * Fix bad merge that reverted CASSANDRA-14993 (CASSANDRA-15289)\n * Fix LegacyLayout RangeTombstoneList IndexOutOfBoundsException when upgrading and RangeTombstone bounds are asymmetric (CASSANDRA-15172)\n * Fix NPE when using allocate_tokens_for_keyspace on new DC/rack (CASSANDRA-14952)\n * Filter sstables earlier when running cleanup (CASSANDRA-15100)\n * Use mean row count instead of mean column count for index selectivity calculation (CASSANDRA-15259)\n * Avoid updating unchanged gossip states (CASSANDRA-15097)\n * Prevent recreation of previously dropped columns with a different kind (CASSANDRA-14948)\n * Prevent client requests from blocking on executor task queue (CASSANDRA-15013)\n * Toughen up column drop/recreate type validations (CASSANDRA-15204)\n * LegacyLayout should handle paging states that cross a collection column (CASSANDRA-15201)\n * Prevent RuntimeException when username or password is empty/null (CASSANDRA-15198)\n * Multiget thrift query returns null records after digest mismatch (CASSANDRA-14812)\n * Skipping illegal legacy cells can break reverse iteration of indexed partitions (CASSANDRA-15178)\n * Handle paging states serialized with a different version than the session's (CASSANDRA-15176)\n * Throw IOE instead of asserting on unsupporter peer versions (CASSANDRA-15066)\n * Update token metadata when handling MOVING/REMOVING_TOKEN events (CASSANDRA-15120)\n * Add ability to customize cassandra log directory using $CASSANDRA_LOG_DIR (CASSANDRA-15090)\n * Skip cells with illegal column names when reading legacy sstables (CASSANDRA-15086)\n * Fix assorted gossip races and add related runtime checks (CASSANDRA-15059)\n * Fix mixed mode partition range scans with limit (CASSANDRA-15072)\n * cassandra-stress works with frozen collections: list and set (CASSANDRA-14907)\n * Fix handling FS errors on writing and reading flat files - LogTransaction and hints (CASSANDRA-15053)\n * Avoid double closing the iterator to avoid overcounting the number of requests (CASSANDRA-15058)\n * Improve `nodetool status -r` speed (CASSANDRA-14847)\n * Improve merkle tree size and time on heap (CASSANDRA-14096)\n * Add missing commands to nodetool_completion (CASSANDRA-14916)\n * Anti-compaction temporarily corrupts sstable state for readers (CASSANDRA-15004)\n * Catch non-IOException in FileUtils.close to make sure that all resources are closed (CASSANDRA-15225)\n * Handle exceptions during authentication/authorization (CASSANDRA-15041)\n * Support cross version messaging in in-jvm upgrade dtests (CASSANDRA-15078)\n * Fix index summary redistribution cancellation (CASSANDRA-15045)\n * Fixing invalid CQL in security documentation (CASSANDRA-15020)\n * Allow instance class loaders to be garbage collected for inJVM dtest (CASSANDRA-15170)\n * Add support for network topology and query tracing for inJVM dtest (CASSANDRA-15319)\n * Correct sstable sorting for garbagecollect and levelled compaction (CASSANDRA-14870)\n * Severe concurrency issues in STCS,DTCS,TWCS,TMD.Topology,TypeParser\n * Add a script to make running the cqlsh tests in cassandra repo easier (CASSANDRA-14951)\n * If SizeEstimatesRecorder misses a 'onDropTable' notification, the size_estimates table will never be cleared for that table. (CASSANDRA-14905)\n * Counters fail to increment in 2.1/2.2 to 3.X mixed version clusters (CASSANDRA-14958)\n * Streaming needs to synchronise access to LifecycleTransaction (CASSANDRA-14554)\n * Fix cassandra-stress write hang with default options (CASSANDRA-14616)\n * Differentiate between slices and RTs when decoding legacy bounds (CASSANDRA-14919)\n * Netty epoll IOExceptions caused by unclean client disconnects being logged at INFO (CASSANDRA-14909)\n * Unfiltered.isEmpty conflicts with Row extends AbstractCollection.isEmpty (CASSANDRA-14588)\n * RangeTombstoneList doesn't properly clean up mergeable or superseded rts in some cases (CASSANDRA-14894)\n * Fix handling of collection tombstones for dropped columns from legacy sstables (CASSANDRA-14912)\n * Throw exception if Columns serialized subset encode more columns than possible (CASSANDRA-14591)\n * Drop/add column name with different Kind can result in corruption (CASSANDRA-14843)\n * Fix missing rows when reading 2.1 SSTables with static columns in 3.0 (CASSANDRA-14873)\n * Move TWCS message 'No compaction necessary for bucket size' to Trace level (CASSANDRA-14884)\n * Sstable min/max metadata can cause data loss (CASSANDRA-14861)\n * Dropped columns can cause reverse sstable iteration to return prematurely (CASSANDRA-14838)\n * Legacy sstables with  multi block range tombstones create invalid bound sequences (CASSANDRA-14823)\n * Expand range tombstone validation checks to multiple interim request stages (CASSANDRA-14824)\n * Reverse order reads can return incomplete results (CASSANDRA-14803)\n * Avoid calling iter.next() in a loop when notifying indexers about range tombstones (CASSANDRA-14794)\n * Fix purging semi-expired RT boundaries in reversed iterators (CASSANDRA-14672)\n * DESC order reads can fail to return the last Unfiltered in the partition (CASSANDRA-14766)\n * Fix corrupted collection deletions for dropped columns in 3.0 \u003c-\u003e  2.{1,2} messages (CASSANDRA-14568)\n * Fix corrupted static collection deletions in 3.0 \u003c-\u003e 2.{1,2} messages (CASSANDRA-14568)\n * Handle failures in parallelAllSSTableOperation (cleanup/upgradesstables/etc) (CASSANDRA-14657)\n * Improve TokenMetaData cache populating performance avoid long locking (CASSANDRA-14660)\n * Backport: Flush netty client messages immediately (not by default) (CASSANDRA-13651)\n * Fix static column order for SELECT * wildcard queries (CASSANDRA-14638)\n * sstableloader should use discovered broadcast address to connect intra-cluster (CASSANDRA-14522)\n * Fix reading columns with non-UTF names from schema (CASSANDRA-14468)\n * Don't enable client transports when bootstrap is pending (CASSANDRA-14525)\n * MigrationManager attempts to pull schema from different major version nodes (CASSANDRA-14928)\n * Fix incorrect cqlsh results when selecting same columns multiple times (CASSANDRA-13262)\n * Returns null instead of NaN or Infinity in JSON strings (CASSANDRA-14377)\n * Paged Range Slice queries with DISTINCT can drop rows from results (CASSANDRA-14956)\n\nChanges in crowbar-openstack:\n- Update to version 6.0+git.1616146717.a89ae0f4e:\n  * monasca: restart Kibana on update (bsc#1044849)\n\nChanges in grafana\n- Add CVE-2021-27358.patch (bsc#1183803, CVE-2021-27358)\n  * Prevent unauthenticated remote attackers from causing a DoS through the\n    snapshots API.\n\nChanges in kibana:\n- Ensure /etc/sysconfig/kibana is present\n\n- Update to Kibana 4.6.6 (bsc#1044849, CVE-2017-11499, ESA-2017-14, ESA-2017-16)\n  * [4.6] ignore forked code for babel transpile build phase (#13483)\n  * Allow more than match queries in custom filters (#8614) (#10857)\n  * [state] don't make extra $location.replace() calls (#9954)\n  * [optimizer] move to querystring-browser package for up-to-date api\n  * [state/unhashUrl] use encode-uri-query to generate cleanly encoded urls\n  * server: refactor log_interceptor to be more DRY (#9617)\n  * server: downgrade ECANCELED logs to debug (#9616)\n  * server: do not treat logged warnings as errors (#8746) (#9610)\n  * [server/logger] downgrade EPIPE errors to debug level (#9023)\n  * Add basepath when redirecting from a trailling slash (#9035)\n  * [es/kibanaIndex] use unmapped_type rather than ignore_unmapped (#8968)\n  * [server/shortUrl] validate urls before shortening them\n- Add CVE-2017-11481.patch (bsc#1044849, CVE-2017-11481)\n  * This fixes an XSS vulnerability in URL fields\n- Remove %dir declaration from /opt/kibana/optimize to ensure\n  no files owned by root end up in there\n- Exclude /opt/kibana/optimize from %fdupes\n- Restart service on upgrade\n- Do not copy LICENSE.txt and README.txt to /opt/kibana\n- Fix rpmlint warnings/errors\n- Switch to explicit patch application\n- Fix source URL\n- Fix logic for systemd/systemv detection\n\n- Add 0001-Configurable-custom-response-headers-for-server.patch\n  (bsc#1171909, CVE-2020-10743)\n\n- Added kibana.yml symlink (bsc#1048688, FATE#323204)\nChanges in openstack-dashboard:\n- Update to version horizon-14.1.1.dev11:\n  * Consume tempest-horizon from PyPI release\n\nChanges in openstack-ironic:\n- Update to version ironic-11.1.5.dev17:\n  * Remove lower-constraints job\n\nChanges in openstack-ironic:\n- Update to version ironic-11.1.5.dev17:\n  * Remove lower-constraints job\n\nChanges in openstack-neutron:\n- Update to version neutron-13.0.8.dev164:\n  * Schedule networks to new segments if needed\n\n- Update to version neutron-13.0.8.dev162:\n  * Fix invalid JSON generated by quota details\n\n- Update to version neutron-13.0.8.dev160:\n  * Fix deletion of rfp interfaces when router is re-enabled\n\n- Update to version neutron-13.0.8.dev159:\n  * [OVS FW] Allow egress ICMPv6 only for know addresses\n  * [OVS FW] Clean conntrack entries with mark == CT\\_MARK\\_INVALID\n\n- Update to version neutron-13.0.8.dev155:\n  * Fix removal of dvr-src mac flows when non-gateway port on router is deleted\n\n- Update to version neutron-13.0.8.dev153:\n  * Add some wait time between stopping and starting again ovsdb monitor\n  * Workaround for TCP checksum issue with ovs-dpdk and  veth pair\n\n- Update to version neutron-13.0.8.dev149:\n  * Fix wrong packet\\_type set for IPv6 GRE tunnels in OVS\n\n- Update to version neutron-13.0.8.dev148:\n  * Fix losses of ovs flows when ovs is restarted\n\nChanges in openstack-neutron:\n- Update to version neutron-13.0.8.dev164:\n  * Schedule networks to new segments if needed\n\n- Update to version neutron-13.0.8.dev162:\n  * Fix invalid JSON generated by quota details\n\n- Update to version neutron-13.0.8.dev160:\n  * Fix deletion of rfp interfaces when router is re-enabled\n\n- Update to version neutron-13.0.8.dev159:\n  * [OVS FW] Allow egress ICMPv6 only for know addresses\n  * [OVS FW] Clean conntrack entries with mark == CT\\_MARK\\_INVALID\n\n- Update to version neutron-13.0.8.dev155:\n  * Fix removal of dvr-src mac flows when non-gateway port on router is deleted\n\n- Update to version neutron-13.0.8.dev153:\n  * Add some wait time between stopping and starting again ovsdb monitor\n  * Workaround for TCP checksum issue with ovs-dpdk and  veth pair\n\n- Update to version neutron-13.0.8.dev149:\n  * Fix wrong packet\\_type set for IPv6 GRE tunnels in OVS\n\n- Update to version neutron-13.0.8.dev148:\n  * Fix losses of ovs flows when ovs is restarted\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-12.0.1.dev29:\n  * gbp-validate: Tenant and resource level scoping\n  2014.2.0rc1\n\n- Update to version group-based-policy-12.0.1.dev27:\n  * Import data\\_utils from the new location\n\n- Update to version group-based-policy-12.0.1.dev26:\n  * Add SNAT port's Mac Address to the host\\_snat\\_ips dictionary\n\n- Update to version group-based-policy-12.0.1.dev25:\n  * Add support for victoria\n  2014.2.rc1\n\n- Update to version group-based-policy-12.0.1.dev24:\n  * Fix deletion of SVI networks\n\n- Update to version group-based-policy-12.0.1.dev23:\n  * Allow per-port qos configuration on dhcp port\n  2014.2rc1\n\n- Update to version group-based-policy-12.0.1.dev22:\n  * Add connectivity parameter to driver\n  * [AIM] Fix ERSPAN extension\n  2014.2.rc1\n\n- Update to version group-based-policy-12.0.1.dev19:\n  * Fix exception with cleanup\n  2014.2.0rc1\n\n- Update to version group-based-policy-12.0.1.dev18:\n  * Add workaround to get\\_subnets\n\nChanges in openstack-nova:\n- Update to version nova-18.3.1.dev82:\n  * [stable-only] gate: Pin CEPH\\_RELEASE to nautilus in LM hook\n  * Change default num\\_retries for glance to 3\n\nChanges in openstack-nova:\n- Update to version nova-18.3.1.dev82:\n  * [stable-only] gate: Pin CEPH\\_RELEASE to nautilus in LM hook\n  * Change default num\\_retries for glance to 3\n\nChanges in python-Django1:\n- Add CVE-2021-33203.patch (bsc#1186608, CVE-2021-33203)\n    * Fixed potential path-traversal via admindocs' TemplateDetailView.\n- Add CVE-2021-33571.patch (bsc#1186611, CVE-2021-33571)\n    * Prevented leading zeros in IPv4 addresses.\n\n- Add CVE-2021-31542.patch (bsc#1185623, CVE-2021-31542)\n    * Fixed CVE-2021-31542 -- Tightened path and file name sanitation in file\n      uploads.\n\n- Add CVE-2021-28658.patch (bsc#1184148, CVE-2021-28658)\n  * Fixed potential directory-traversal via uploaded files\n\n- Add CVE-2021-23336.patch (bsc#1182433, CVE-2021-23336)\n  * Fixed web cache poisoning via django.utils.http.limited_parse_qsl()\n\n\nChanges in python-py:\n- Add CVE-2020-29651.patch ((bsc#1179805, CVE-2020-29651)\n  * svnwc: fix regular expression vulnerable to DoS in blame\n    functionality\n\nChanges in python-pysaml2:\n- Fix patches (SOC-11453)\n  * 0005-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch\n     - rename saml2.xml to saml2.samlxml to avoid overriding\n       the xml module in the system module path\n     - add missing __init__.py files\n     - add missing saml2/data package to setup.py\n  * 0007-Make-previous-commits-python2-compatible.patch so as not to\n     - Adjust to saml2.xml to saml2.samlxml changes\n     - Fix a few more syntax errors and Python2-isms.\n\n- Fix CVE-2021-21238, bsc#1181277 with\n  0002-Strengthen-XSW-tests.patch ,\n  0003-Fix-the-parser-to-not-break-on-ePTID-AttributeValues.patch ,\n  0004-Add-xsd-schemas.patch ,\n  0005-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch .\n  This adds a dependency on python-xmlschema, which depends on\n  python-elementpath, thus both need to be added for this to work.\n  The used python-xmlschema needs to support the sandbox argument\n  which was added in 1.2.0 and refined in 1.2.1, but that version\n  doesn't support python2, so a patched version that does both is\n  needed.\n  Add 0007-Make-previous-commits-python2-compatible.patch to\n  not add a dependency on reportlib_resources and make other\n  changes python2 compatible.\n. Fix CVE-2021-21239, bsc#1181278 with\n  0006-Fix-CVE-2021-21239-Restrict-the-key-data-that-xmlsec.patch\n\nChanges in python-xmlschema:\n\n- Add 3 patches to backport sandbox argument, which is needed by a security fix\n  in python-pysaml2 and one patch to make backport python2 compatible.\n- Upstream url changed\n- Add rpmlintrc to make it work on Leap 42.3\n- Update to 1.0.18:\n  * Fix for *ModelVisitor.iter_unordered_content()*\n  * Fixed default converter, AbderaConverter and JsonMLConverter for xs:anyType decode\n  * Fixed validation tests with all converters\n  * Added UnorderedConverter to validation tests\n- Update to 1.0.17:\n  * Enhancement of validation-only speed (~15%)\n  * Added *is_valid()* and *iter_errors()* to module API\n- Update to 1.0.16:\n  * Improved XMLResource class for working with compressed files\n  * Fix for validation with XSD wildcards and 'lax' process content\n  * Fix ambiguous items validation for xs:choice and xs:sequence models\n\n- Handle UnicodeDecodeErrors during build process\n\n- Update to 1.0.15:\n  * Improved XPath 2.0 bindings\n  * Added logging for schema initialization and building (handled with argument loglevel)\n  * Update encoding of collapsed contents with a new model based reordering method\n  * Removed XLink namespace from meta-schema (loaded from a fallback location like XHTML)\n  * Fixed half of failed W3C instance tests (remain 255 over 15344 tests)\n\n- Initial commit, needed by pytest 5.1.2\nChanges in python-elementpath:\n\n- Update to 1.3.1:\n  * Improved schema proxy\n  * Improved XSD type matching using paths\n  * Cached parent path for XPathContext (only Python 3)\n  * Improve typed selection with TypedAttribute and TypedElement named-tuples\n  * Add iter_results to XPathContext\n  * Remove XMLSchemaProxy from package\n  * Fix descendant shortcut operator '//'\n  * Fix text() function\n  * Fix typed select of '(name)' token\n  * Fix 24-hour time for DateTime\n\n- Skip test_hashing to fix 32bit builds\n\n- Initial commit needed by python-xmlschema\nChanges in rubygem-activerecord-session_store:\n- added CVE-2019-25025.patch (CVE-2019-25025, bsc#1183174)\n  * This requires CVE-2019-16782.patch to be included in\n    rubygem-actionpack-4_2 to work correctly.\n\nChanges in venv-openstack-keystone\n- Add python-xmlschema and python-elementpath for new python-pysaml2 version.\n","status":"published","published":"2021-06-11T13:13:53Z","modified":"2026-02-04T03:22:05.167952Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1963-1","title":"Security update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-session_store","description":"This update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-session_store contains the following fixes:\n\nSecurity fixes included in this update:\n\n\ncrowbar-openstack:\n- CVE-2016-8611: Added rate limiting for the '/images' API POST method\n(bsc#1005886).\n\ngrafana:\n- CVE-2021-27358: Fixed a denial of service via remote API call\n(bsc#1183803)\n\nkibana:\n- CVE-2017-11499: Fixed a vulnerability in nodejs, related to the\nHashTable implementation, which could cause a denial of service\n(bsc#1044849)\n- CVE-2017-11481: Fixed a cross site scripting vulnerability via via URL\nfields (bsc#1044849)\n\npython-Django:\n- CVE-2021-3281: Fixed a directory traversal via archive.extract()\n(bsc#1181379)\n- CVE-2021-28658: Fixed a directory traversal via uploaded files\n(bsc#1184148)\n- CVE-2021-31542: Fixed a directory traversal via uploaded files with\nsuitably crafted file names (bsc#1185623)\n- CVE-2021-33203:Fixed potential path-traversal via admindocs'\nTemplateDetailView (bsc#1186608)\n- CVE-2021-33571: Tighten validator checks to not allow leading zeros in\nIPv4 addresses, which potentially leads to further attacks (bsc#1186611)\n\npython-py:\n- CVE-2020-29651: Fixed a denial of service via regular expressions\n(bsc#1179805)\n\nrubygem-activerecord-session_store:\n- CVE-2019-25025: Fixed a timing attacks targeting the session id which\ncould allow an attack to hijack sessions (bsc#1183174)\n\n\nNon-security fixes included in this update:\n\nChanges in crowbar-openstack:\n- Update to version 4.0+git.1616146720.44daffca0:\n  * monasca: restart Kibana on update (bsc#1044849)\n\nChanges in grafana_Update:\n- Add CVE-2021-27358.patch (bsc#1183803, CVE-2021-27358)\n  * Prevent unauthenticated remote attackers from causing a DoS through the\n    snapshots API.\n\nChanges in kibana_Update:\n- Ensure /etc/sysconfig/kibana is present\n\n- Update to Kibana 4.6.6 (bsc#1044849, CVE-2017-11499, ESA-2017-14,\n  ESA-2017-16)\n  * [4.6] ignore forked code for babel transpile build phase (#13483)\n  * Allow more than match queries in custom filters (#8614) (#10857)\n  * [state] don't make extra $location.replace() calls (#9954)\n  * [optimizer] move to querystring-browser package for up-to-date api\n  * [state/unhashUrl] use encode-uri-query to generate cleanly encoded urls\n  * server: refactor log_interceptor to be more DRY (#9617)\n  * server: downgrade ECANCELED logs to debug (#9616)\n  * server: do not treat logged warnings as errors (#8746) (#9610)\n  * [server/logger] downgrade EPIPE errors to debug level (#9023)\n  * Add basepath when redirecting from a trailling slash (#9035)\n  * [es/kibanaIndex] use unmapped_type rather than ignore_unmapped (#8968)\n  * [server/shortUrl] validate urls before shortening them\n- Add CVE-2017-11481.patch (bsc#1044849, CVE-2017-11481)\n  * This fixes an XSS vulnerability in URL fields\n- Remove %dir declaration from /opt/kibana/optimize to ensure\n  no files owned by root end up in there\n- Exclude /opt/kibana/optimize from %fdupes\n- Restart service on upgrade\n- Do not copy LICENSE.txt and README.txt to /opt/kibana\n- Fix rpmlint warnings/errors\n- Switch to explicit patch application\n- Fix source URL\n- Fix logic for systemd/systemv detection\n\nChanges in monasca-installer_Update:\n- Add support-influxdb-1.2.patch (SOC-11435)\n\nChanges in python-Django_Update:\n- Fixed potential path-traversal via admindocs' TemplateDetailView.(bsc#1186608, CVE-2021-33203)\n-  Prevented leading zeros in IPv4 addresses. (bsc#1186611, CVE-2021-33571)\n- Add delegate-os-path-filename-generation-to-storage.patch (bsc#1185623)\n    * Needed for CVE-2021-31542.patch to apply\n- Tightened path \u0026 file name sanitation in file uploads. (bsc#1185623, CVE-2021-31542)\n- Fixed potential directory-traversal via uploaded files. (bsc#1184148, CVE-2021-28658)\n- Fixes a potential directory traversal when extracting archives. (bsc#1181379, CVE-2021-3281)\n\nChanges in python-py_Update:\n- Add CVE-2020-29651.patch (CVE-2020-29651, bsc#1179805)\n  * svnwc: fix regular expression vulnerable to DoS in blame functionality\n- Ensure /usr/share/licenses exists\n\nChanges in rubygem-activerecord-session_store_Update:\n- added CVE-2019-25025.patch (CVE-2019-25025, bsc#1183174)\n  * This requires CVE-2019-16782.patch to be included in\n    rubygem-actionpack-4_2 to work correctly.\n\n","status":"published","published":"2021-06-11T13:14:14Z","modified":"2026-02-04T02:56:38.447387Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2236-1","title":"Security update for python-py","description":"This update for python-py fixes the following issues:\n\n- CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505).\n","status":"published","published":"2021-07-02T15:24:56Z","modified":"2026-02-04T03:17:02.693573Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2554-1","title":"Security update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema ","description":"This update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema fixes the following issues:\n\nSecurity fixes included on this update:\n\ncassandra-kit:\n- CVE-2020-17516: Internode encryption enforcement vulnerability\n\ncassandra:\n- CVE-2020-17516: Internode encryption enforcement vulnerability\n- CVE-2017-5929 logback: Fixed a serialization vulnerability in SocketServer and ServerSocketReceiver\n\ncrowbar-core:\nCVE-2020-26247: Potentially XXE or SSRF attacks by parsed Nokogiri::XML::Schema\n\ngrafana:\n- CVE-2021-27358: Unauthenticated remote attackers to trigger a Denial of Service via a remote API call\n\nkibana:\n- CVE-2017-11481: Fixed an XSS via URL fields\n- CVE-2017-11499: Fixed a constant hashtable seeds vulnerability\n\npython-Django:\n- CVE-2021-28658: Potential directory-traversal via uploaded files\n- CVE-2021-31542: Potential directory-traversal via uploaded files\n- CVE-2021-33203: Potential directory traversal via admindocs\n- CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses\n- CVE-2021-23336: Fixed web cache poisoning via django.utils.http.limited_parse_qsl\n\npython-eventlet:\n- CVE-2021-21419: Improper handling of highly compressed data and memory allocation with excessive size value\n\npython-pysaml2:\n- CVE-2021-21238: Fixed an improper verification of cryptographic signatures for signed SAML documents\n- CVE-2021-21239: Fixed an improper verification of cryptographic signatures when using CryptoBackendXmlSec1()_\n\npython-py:\n- CVE-2020-29651: Regular expression denial of service in svnwc.py\n\nrubygem-activerecord-session_store:\n- CVE-2019-25025: Fixed a hijack sessions by using timing attacks targeting the session id\nCVE-2019-16782\n\nNon-security fixes included on this update:\n\nChanges in ardana-cobbler:\n- Update to version 8.0+git.1614096566.e8c2b27:\n  * Change install_recommended to true (bsc#1181828)\n\nChanges in cassandra:\n- update to 3.11.10 (bsc#1181689, CVE-2020-17516)\n * Fix digest computation for queries with fetched but non queried columns (CASSANDRA-15962)\n * Reduce amount of allocations during batch statement execution (CASSANDRA-16201)\n * Update jflex-1.6.0.jar to match upstream (CASSANDRA-16393)\n * Fix DecimalDeserializer#toString OOM (CASSANDRA-14925)\n * Rate limit validation compactions using compaction_throughput_mb_per_sec (CASSANDRA-16161)\n * SASI's `max_compaction_flush_memory_in_mb` settings over 100GB revert to default of 1GB (CASSANDRA-16071)\n * Prevent unbounded number of pending flushing tasks (CASSANDRA-16261)\n * Improve empty hint file handling during startup (CASSANDRA-16162)\n * Allow empty string in collections with COPY FROM in cqlsh (CASSANDRA-16372)\n * Fix skipping on pre-3.0 created compact storage sstables due to missing primary key liveness (CASSANDRA-16226)\n * Extend the exclusion of replica filtering protection to other indices instead of just SASI (CASSANDRA-16311)\n * Synchronize transaction logs for JBOD (CASSANDRA-16225)\n * Fix the counting of cells per partition (CASSANDRA-16259)\n * Fix serial read/non-applying CAS linearizability (CASSANDRA-12126)\n * Avoid potential NPE in JVMStabilityInspector (CASSANDRA-16294)\n * Improved check of num_tokens against the length of initial_token (CASSANDRA-14477)\n * Fix a race condition on ColumnFamilyStore and TableMetrics (CASSANDRA-16228)\n * Remove the SEPExecutor blocking behavior (CASSANDRA-16186)\n * Fix invalid cell value skipping when reading from disk (CASSANDRA-16223)\n * Prevent invoking enable/disable gossip when not in NORMAL (CASSANDRA-16146)\n * Wait for schema agreement when bootstrapping (CASSANDRA-15158)\n * Fix the histogram merge of the table metrics (CASSANDRA-16259)\n * Synchronize Keyspace instance store/clear (CASSANDRA-16210)\n * Fix ColumnFilter to avoid querying cells of unselected complex columns (CASSANDRA-15977)\n * Fix memory leak in CompressedChunkReader (CASSANDRA-15880)\n * Don't attempt value skipping with mixed version cluster (CASSANDRA-15833)\n * Avoid failing compactions with very large partitions (CASSANDRA-15164)\n * Make sure LCS handles duplicate sstable added/removed notifications correctly (CASSANDRA-14103)\n * Fix OOM when terminating repair session (CASSANDRA-15902)\n * Avoid marking shutting down nodes as up after receiving gossip shutdown message (CASSANDRA-16094)\n * Check SSTables for latest version before dropping compact storage (CASSANDRA-16063)\n * Handle unexpected columns due to schema races (CASSANDRA-15899)\n * Add flag to ignore unreplicated keyspaces during repair (CASSANDRA-15160)\n * Package tools/bin scripts as executable (CASSANDRA-16151)\n * Fixed a NullPointerException when calling nodetool enablethrift (CASSANDRA-16127)\n * Correctly interpret SASI's `max_compaction_flush_memory_in_mb` setting in megabytes not bytes (CASSANDRA-16071)\n * Fix short read protection for GROUP BY queries (CASSANDRA-15459)\n * Frozen RawTuple is not annotated with frozen in the toString method (CASSANDRA-15857)\nMerged from 3.0:\n * Use IF NOT EXISTS for index and UDT create statements in snapshot schema files (CASSANDRA-13935)\n * Fix gossip shutdown order (CASSANDRA-15816)\n * Remove broken 'defrag-on-read' optimization (CASSANDRA-15432)\n * Check for endpoint collision with hibernating nodes (CASSANDRA-14599)\n * Operational improvements and hardening for replica filtering protection (CASSANDRA-15907)\n * stop_paranoid disk failure policy is ignored on CorruptSSTableException after node is up (CASSANDRA-15191)\n * Forbid altering UDTs used in partition keys (CASSANDRA-15933)\n * Fix empty/null json string representation (CASSANDRA-15896)\n * 3.x fails to start if commit log has range tombstones from a column which is also deleted (CASSANDRA-15970)\n * Handle difference in timestamp precision between java8 and java11 in LogFIle.java (CASSANDRA-16050)\nMerged from 2.2:\n * Fix CQL parsing of collections when the column type is reversed (CASSANDRA-15814)\n * Only allow strings to be passed to JMX authentication (CASSANDRA-16077)\n * Fix cqlsh output when fetching all rows in batch mode (CASSANDRA-15905)\n * Upgrade Jackson to 2.9.10 (CASSANDRA-15867)\n * Fix CQL formatting of read command restrictions for slow query log (CASSANDRA-15503)\n * Allow sstableloader to use SSL on the native port (CASSANDRA-14904)\n * Backport CASSANDRA-12189: escape string literals (CASSANDRA-15948)\n * Avoid hinted handoff per-host throttle being arounded to 0 in large cluster (CASSANDRA-15859)\n * Avoid emitting empty range tombstones from RangeTombstoneList (CASSANDRA-15924)\n * Avoid thread starvation, and improve compare-and-swap performance, in the slab allocators (CASSANDRA-15922)\n * Add token to tombstone warning and error messages (CASSANDRA-15890)\n * Fixed range read concurrency factor computation and capped as 10 times tpc cores (CASSANDRA-15752)\n * Catch exception on bootstrap resume and init native transport (CASSANDRA-15863)\n * Fix replica-side filtering returning stale data with CL \u003e ONE (CASSANDRA-8272, CASSANDRA-8273)\n * Fix duplicated row on 2.x upgrades when multi-rows range tombstones interact with collection ones (CASSANDRA-15805)\n * Rely on snapshotted session infos on StreamResultFuture.maybeComplete to avoid race conditions (CASSANDRA-15667)\n * EmptyType doesn't override writeValue so could attempt to write bytes when expected not to (CASSANDRA-15790)\n * Fix index queries on partition key columns when some partitions contains only static data (CASSANDRA-13666)\n * Avoid creating duplicate rows during major upgrades (CASSANDRA-15789)\n * liveDiskSpaceUsed and totalDiskSpaceUsed get corrupted if IndexSummaryRedistribution gets interrupted (CASSANDRA-15674)\n * Fix Debian init start/stop (CASSANDRA-15770)\n * Fix infinite loop on index query paging in tables with clustering (CASSANDRA-14242)\n * Fix chunk index overflow due to large sstable with small chunk length (CASSANDRA-15595)\n * Allow selecting static column only when querying static index (CASSANDRA-14242)\n * cqlsh return non-zero status when STDIN CQL fails (CASSANDRA-15623)\n * Don't skip sstables in slice queries based only on local min/max/deletion timestamp (CASSANDRA-15690)\n * Memtable memory allocations may deadlock (CASSANDRA-15367)\n * Run evictFromMembership in GossipStage (CASSANDRA-15592)\n * Fix nomenclature of allow and deny lists (CASSANDRA-15862)\n * Remove generated files from source artifact (CASSANDRA-15849)\n * Remove duplicated tools binaries from tarballs (CASSANDRA-15768)\n * Duplicate results with DISTINCT queries in mixed mode (CASSANDRA-15501)\n * Disable JMX rebinding (CASSANDRA-15653)\n * Fix writing of snapshot manifest when the table has table-backed secondary indexes (CASSANDRA-10968)\n * Fix parse error in cqlsh COPY FROM and formatting for map of blobs (CASSANDRA-15679)\n * Fix Commit log replays when static column clustering keys are collections (CASSANDRA-14365)\n * Fix Red Hat init script on newer systemd versions (CASSANDRA-15273)\n * Allow EXTRA_CLASSPATH to work on tar/source installations (CASSANDRA-15567)\n * Fix bad UDT sstable metadata serialization headers written by C* 3.0 on upgrade and in sstablescrub (CASSANDRA-15035)\n * Fix nodetool compactionstats showing extra pending task for TWCS - patch implemented (CASSANDRA-15409)\n * Fix SELECT JSON formatting for the 'duration' type (CASSANDRA-15075)\n * Fix LegacyLayout to have same behavior as 2.x when handling unknown column names (CASSANDRA-15081)\n * Update nodetool help stop output (CASSANDRA-15401)\n * Run in-jvm upgrade dtests in circleci (CASSANDRA-15506)\n * Include updates to static column in mutation size calculations (CASSANDRA-15293)\n * Fix point-in-time recoevery ignoring timestamp of updates to static columns (CASSANDRA-15292)\n * GC logs are also put under $CASSANDRA_LOG_DIR (CASSANDRA-14306)\n * Fix sstabledump's position key value when partitions have multiple rows (CASSANDRA-14721)\n * Avoid over-scanning data directories in LogFile.verify() (CASSANDRA-15364)\n * Bump generations and document changes to system_distributed and system_traces in 3.0, 3.11\n   (CASSANDRA-15441)\n * Fix system_traces creation timestamp; optimise system keyspace upgrades (CASSANDRA-15398)\n * Fix various data directory prefix matching issues (CASSANDRA-13974)\n * Minimize clustering values in metadata collector (CASSANDRA-15400)\n * Avoid over-trimming of results in mixed mode clusters (CASSANDRA-15405)\n * validate value sizes in LegacyLayout (CASSANDRA-15373)\n * Ensure that tracing doesn't break connections in 3.x/4.0 mixed mode by default (CASSANDRA-15385)\n * Make sure index summary redistribution does not start when compactions are paused (CASSANDRA-15265)\n * Ensure legacy rows have primary key livenessinfo when they contain illegal cells (CASSANDRA-15365)\n * Fix race condition when setting bootstrap flags (CASSANDRA-14878)\n * Fix NativeLibrary.tryOpenDirectory callers for Windows (CASSANDRA-15426)\n * Fix SELECT JSON output for empty blobs (CASSANDRA-15435)\n * In-JVM DTest: Set correct internode message version for upgrade test (CASSANDRA-15371)\n * In-JVM DTest: Support NodeTool in dtest (CASSANDRA-15429)\n * Fix NativeLibrary.tryOpenDirectory callers for Windows (CASSANDRA-15426)\n * Fix SASI non-literal string comparisons (range operators) (CASSANDRA-15169)\n * Make sure user defined compaction transactions are always closed (CASSANDRA-15123)\n * Fix cassandra-env.sh to use $CASSANDRA_CONF to find cassandra-jaas.config (CASSANDRA-14305)\n * Fixed nodetool cfstats printing index name twice (CASSANDRA-14903)\n * Add flag to disable SASI indexes, and warnings on creation (CASSANDRA-14866)\n * Add ability to cap max negotiable protocol version (CASSANDRA-15193)\n * Gossip tokens on startup if available (CASSANDRA-15335)\n * Fix resource leak in CompressedSequentialWriter (CASSANDRA-15340)\n * Fix bad merge that reverted CASSANDRA-14993 (CASSANDRA-15289)\n * Fix LegacyLayout RangeTombstoneList IndexOutOfBoundsException when upgrading and RangeTombstone bounds are asymmetric (CASSANDRA-15172)\n * Fix NPE when using allocate_tokens_for_keyspace on new DC/rack (CASSANDRA-14952)\n * Filter sstables earlier when running cleanup (CASSANDRA-15100)\n * Use mean row count instead of mean column count for index selectivity calculation (CASSANDRA-15259)\n * Avoid updating unchanged gossip states (CASSANDRA-15097)\n * Prevent recreation of previously dropped columns with a different kind (CASSANDRA-14948)\n * Prevent client requests from blocking on executor task queue (CASSANDRA-15013)\n * Toughen up column drop/recreate type validations (CASSANDRA-15204)\n * LegacyLayout should handle paging states that cross a collection column (CASSANDRA-15201)\n * Prevent RuntimeException when username or password is empty/null (CASSANDRA-15198)\n * Multiget thrift query returns null records after digest mismatch (CASSANDRA-14812)\n * Skipping illegal legacy cells can break reverse iteration of indexed partitions (CASSANDRA-15178)\n * Handle paging states serialized with a different version than the session's (CASSANDRA-15176)\n * Throw IOE instead of asserting on unsupporter peer versions (CASSANDRA-15066)\n * Update token metadata when handling MOVING/REMOVING_TOKEN events (CASSANDRA-15120)\n * Add ability to customize cassandra log directory using $CASSANDRA_LOG_DIR (CASSANDRA-15090)\n * Skip cells with illegal column names when reading legacy sstables (CASSANDRA-15086)\n * Fix assorted gossip races and add related runtime checks (CASSANDRA-15059)\n * Fix mixed mode partition range scans with limit (CASSANDRA-15072)\n * cassandra-stress works with frozen collections: list and set (CASSANDRA-14907)\n * Fix handling FS errors on writing and reading flat files - LogTransaction and hints (CASSANDRA-15053)\n * Avoid double closing the iterator to avoid overcounting the number of requests (CASSANDRA-15058)\n * Improve `nodetool status -r` speed (CASSANDRA-14847)\n * Improve merkle tree size and time on heap (CASSANDRA-14096)\n * Add missing commands to nodetool_completion (CASSANDRA-14916)\n * Anti-compaction temporarily corrupts sstable state for readers (CASSANDRA-15004)\n * Catch non-IOException in FileUtils.close to make sure that all resources are closed (CASSANDRA-15225)\n * Handle exceptions during authentication/authorization (CASSANDRA-15041)\n * Support cross version messaging in in-jvm upgrade dtests (CASSANDRA-15078)\n * Fix index summary redistribution cancellation (CASSANDRA-15045)\n * Fixing invalid CQL in security documentation (CASSANDRA-15020)\n * Allow instance class loaders to be garbage collected for inJVM dtest (CASSANDRA-15170)\n * Add support for network topology and query tracing for inJVM dtest (CASSANDRA-15319)\n * Correct sstable sorting for garbagecollect and levelled compaction (CASSANDRA-14870)\n * Severe concurrency issues in STCS,DTCS,TWCS,TMD.Topology,TypeParser\n * Add a script to make running the cqlsh tests in cassandra repo easier (CASSANDRA-14951)\n * If SizeEstimatesRecorder misses a 'onDropTable' notification, the size_estimates table will never be cleared for that table. (CASSANDRA-14905)\n * Counters fail to increment in 2.1/2.2 to 3.X mixed version clusters (CASSANDRA-14958)\n * Streaming needs to synchronise access to LifecycleTransaction (CASSANDRA-14554)\n * Fix cassandra-stress write hang with default options (CASSANDRA-14616)\n * Differentiate between slices and RTs when decoding legacy bounds (CASSANDRA-14919)\n * Netty epoll IOExceptions caused by unclean client disconnects being logged at INFO (CASSANDRA-14909)\n * Unfiltered.isEmpty conflicts with Row extends AbstractCollection.isEmpty (CASSANDRA-14588)\n * RangeTombstoneList doesn't properly clean up mergeable or superseded rts in some cases (CASSANDRA-14894)\n * Fix handling of collection tombstones for dropped columns from legacy sstables (CASSANDRA-14912)\n * Throw exception if Columns serialized subset encode more columns than possible (CASSANDRA-14591)\n * Drop/add column name with different Kind can result in corruption (CASSANDRA-14843)\n * Fix missing rows when reading 2.1 SSTables with static columns in 3.0 (CASSANDRA-14873)\n * Move TWCS message 'No compaction necessary for bucket size' to Trace level (CASSANDRA-14884)\n * Sstable min/max metadata can cause data loss (CASSANDRA-14861)\n * Dropped columns can cause reverse sstable iteration to return prematurely (CASSANDRA-14838)\n * Legacy sstables with  multi block range tombstones create invalid bound sequences (CASSANDRA-14823)\n * Expand range tombstone validation checks to multiple interim request stages (CASSANDRA-14824)\n * Reverse order reads can return incomplete results (CASSANDRA-14803)\n * Avoid calling iter.next() in a loop when notifying indexers about range tombstones (CASSANDRA-14794)\n * Fix purging semi-expired RT boundaries in reversed iterators (CASSANDRA-14672)\n * DESC order reads can fail to return the last Unfiltered in the partition (CASSANDRA-14766)\n * Fix corrupted collection deletions for dropped columns in 3.0  2.{1,2} messages (CASSANDRA-14568)\n * Fix corrupted static collection deletions in 3.0 2.{1,2} messages (CASSANDRA-14568)\n * Handle failures in parallelAllSSTableOperation (cleanup/upgradesstables/etc) (CASSANDRA-14657)\n * Improve TokenMetaData cache populating performance avoid long locking (CASSANDRA-14660)\n * Backport: Flush netty client messages immediately (not by default) (CASSANDRA-13651)\n * Fix static column order for SELECT * wildcard queries (CASSANDRA-14638)\n * sstableloader should use discovered broadcast address to connect intra-cluster (CASSANDRA-14522)\n * Fix reading columns with non-UTF names from schema (CASSANDRA-14468)\n * Don't enable client transports when bootstrap is pending (CASSANDRA-14525)\n * MigrationManager attempts to pull schema from different major version nodes (CASSANDRA-14928)\n * Fix incorrect cqlsh results when selecting same columns multiple times (CASSANDRA-13262)\n * Returns null instead of NaN or Infinity in JSON strings (CASSANDRA-14377)\n * Paged Range Slice queries with DISTINCT can drop rows from results (CASSANDRA-14956)\n * Validate supported column type with SASI analyzer (CASSANDRA-13669)\n * Remove BTree.Builder Recycler to reduce memory usage (CASSANDRA-13929)\n * Reduce nodetool GC thread count (CASSANDRA-14475)\n * Fix New SASI view creation during Index Redistribution (CASSANDRA-14055)\n * Remove string formatting lines from BufferPool hot path (CASSANDRA-14416)\n * Update metrics to 3.1.5 (CASSANDRA-12924)\n * Detect OpenJDK jvm type and architecture (CASSANDRA-12793)\n * Don't use guava collections in the non-system keyspace jmx attributes (CASSANDRA-12271)\n * Allow existing nodes to use all peers in shadow round (CASSANDRA-13851)\n * Fix cqlsh to read connection.ssl cqlshrc option again (CASSANDRA-14299)\n * Downgrade log level to trace for CommitLogSegmentManager (CASSANDRA-14370)\n * CQL fromJson(null) throws NullPointerException (CASSANDRA-13891)\n * Serialize empty buffer as empty string for json output format (CASSANDRA-14245)\n * Allow logging implementation to be interchanged for embedded testing (CASSANDRA-13396)\n * SASI tokenizer for simple delimiter based entries (CASSANDRA-14247)\n * Fix Loss of digits when doing CAST from varint/bigint to decimal (CASSANDRA-14170)\n * RateBasedBackPressure unnecessarily invokes a lock on the Guava RateLimiter (CASSANDRA-14163)\n * Fix wildcard GROUP BY queries (CASSANDRA-14209)\n * Fix corrupted static collection deletions in 3.0 -\u003e 2.{1,2} messages (CASSANDRA-14568)\n * Fix potential IndexOutOfBoundsException with counters (CASSANDRA-14167)\n * Always close RT markers returned by ReadCommand#executeLocally() (CASSANDRA-14515)\n * Reverse order queries with range tombstones can cause data loss (CASSANDRA-14513)\n * Fix regression of lagging commitlog flush log message (CASSANDRA-14451)\n * Add Missing dependencies in pom-all (CASSANDRA-14422)\n * Cleanup StartupClusterConnectivityChecker and PING Verb (CASSANDRA-14447)\n * Fix deprecated repair error notifications from 3.x clusters to legacy JMX clients (CASSANDRA-13121)\n * Cassandra not starting when using enhanced startup scripts in windows (CASSANDRA-14418)\n * Fix progress stats and units in compactionstats (CASSANDRA-12244)\n * Better handle missing partition columns in system_schema.columns (CASSANDRA-14379)\n * Delay hints store excise by write timeout to avoid race with decommission (CASSANDRA-13740)\n * Deprecate background repair and probablistic read_repair_chance table options\n   (CASSANDRA-13910)\n * Add missed CQL keywords to documentation (CASSANDRA-14359)\n * Fix unbounded validation compactions on repair / revert CASSANDRA-13797 (CASSANDRA-14332)\n * Avoid deadlock when running nodetool refresh before node is fully up (CASSANDRA-14310)\n * Handle all exceptions when opening sstables (CASSANDRA-14202)\n * Handle incompletely written hint descriptors during startup (CASSANDRA-14080)\n * Handle repeat open bound from SRP in read repair (CASSANDRA-14330)\n * Respect max hint window when hinting for LWT (CASSANDRA-14215)\n * Adding missing WriteType enum values to v3, v4, and v5 spec (CASSANDRA-13697)\n * Don't regenerate bloomfilter and summaries on startup (CASSANDRA-11163)\n * Fix NPE when performing comparison against a null frozen in LWT (CASSANDRA-14087)\n * Log when SSTables are deleted (CASSANDRA-14302)\n * Fix batch commitlog sync regression (CASSANDRA-14292)\n * Write to pending endpoint when view replica is also base replica (CASSANDRA-14251)\n * Chain commit log marker potential performance regression in batch commit mode (CASSANDRA-14194)\n * Fully utilise specified compaction threads (CASSANDRA-14210)\n * Pre-create deletion log records to finish compactions quicker (CASSANDRA-12763)\n * Fix bug that prevented compaction of SSTables after full repairs (CASSANDRA-14423)\n * Incorrect counting of pending messages in OutboundTcpConnection (CASSANDRA-11551)\n * Fix compaction failure caused by reading un-flushed data (CASSANDRA-12743)\n * Use Bounds instead of Range for sstables in anticompaction (CASSANDRA-14411)\n * Fix JSON queries with IN restrictions and ORDER BY clause (CASSANDRA-14286)\n * Backport circleci yaml (CASSANDRA-14240)\n * Check checksum before decompressing data (CASSANDRA-14284)\n * CVE-2017-5929 Security vulnerability in Logback warning in NEWS.txt (CASSANDRA-14183)\n- Use %license macro\n\nChanges in cassandra-kit:\n- Update to Cassandra 3.11.10 (bsc#1181689, CVE-2020-17516)\n\nChanges in crowbar-core:\n- Update to version 5.0+git.1622489449.a8e60e238:\n  * avoid v4.1.5 of delayed_job_active_record (noref)\n  * add CVE-2020-26247 to travis ignore list (bsc#1180507)\n\nChanges in crowbar-openstack:\n- Update to version 5.0+git.1616001417.67fd9c2a1:\n  * monasca: restart Kibana on update (bsc#1044849)\n\n- Update to version 5.0+git.1615542070.7841c34b7:\n  * monasca: fix monasca-server reinstall state check (SOC-11471)\n\nChanges in documentation-suse-openstack-cloud:\n- Update to version 8.20210512:\n  * Moved Monasca deployment to immediately after keystone (SOC-11525) (#1312)\n\n- Update to version 8.20210511:\n  * Update the correct SLES version to suse-12.3 (SOC-11521) (#1321)\n  * Renamed the repo name from SLE12-SP3-HA to SLE-HA12-SP3 (SOC-11523) (#1320)\n\n- Update to version 8.20210511:\n  * Add bm-power-status playbook to add sles compute section (#1317)\n\n- Update to version 8.20210507:\n  * Add instructions for checking MySQL cert expiry (SOC-11422) (#1311)\n\n- Update to version 8.20210304:\n  * Add nova and heat db purge cron jobs to maintenance section (SOC-9876) (#1307)\n\nChanges in grafana:\n- Add CVE-2021-27358.patch (bsc#1183803, CVE-2021-27358)\n  * Prevent unauthenticated remote attackers from causing a DoS through the\n    snapshots API.\n\nChanges in kibana:\n- Ensure /etc/sysconfig/kibana is present\n\n- Update to Kibana 4.6.6 (bsc#1044849, CVE-2017-11499, ESA-2017-14, \n  ESA-2017-16)\n  * [4.6] ignore forked code for babel transpile build phase (#13483)\n  * Allow more than match queries in custom filters (#8614) (#10857)\n  * [state] don't make extra $location.replace() calls (#9954)\n  * [optimizer] move to querystring-browser package for up-to-date api\n  * [state/unhashUrl] use encode-uri-query to generate cleanly encoded urls\n  * server: refactor log_interceptor to be more DRY (#9617)\n  * server: downgrade ECANCELED logs to debug (#9616)\n  * server: do not treat logged warnings as errors (#8746) (#9610)\n  * [server/logger] downgrade EPIPE errors to debug level (#9023)\n  * Add basepath when redirecting from a trailling slash (#9035)\n  * [es/kibanaIndex] use unmapped_type rather than ignore_unmapped (#8968)\n  * [server/shortUrl] validate urls before shortening them\n- Add CVE-2017-11481.patch (bsc#1044849, CVE-2017-11481)\n  * This fixes an XSS vulnerability in URL fields\n- Remove %dir declaration from /opt/kibana/optimize to ensure\n  no files owned by root end up in there\n- Exclude /opt/kibana/optimize from %fdupes\n- Restart service on upgrade\n- Do not copy LICENSE.txt and README.txt to /opt/kibana\n- Fix rpmlint warnings/errors\n- Switch to explicit patch application\n- Fix source URL\n- Fix logic for systemd/systemv detection\n\nChanges in openstack-heat-templates:\n- Update to version 0.0.0+git.1623056900.7917e18:\n  * Fix zuul config for heat-templates-check\n\n- Update to version 0.0.0+git.1621405516.71a0f7a:\n  * Remove testr\n\nChanges in openstack-monasca-installer:\n- Add 0001-fix-influxdb-stop-task.patch (SOC-11470)\n- Add 0001-fix-cassandra-deployment.patch (SOC-11470)\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev92:\n  * Lowercase ironic driver hash ring and ignore case in cache\n  * Include only required fields in ironic node cache\n  * Add resource\\_class to fields in ironic node cache\n\n- Update to version nova-16.1.9.dev86:\n  * [stable-only] Move grenade jobs to experimental\n  * Update resources once in update\\_available\\_resource\n  * rt: Make resource tracker always invoking get\\_inventory()\n\n- Update to version nova-16.1.9.dev81:\n  * [stable-only] gate: Pin CEPH\\_RELEASE to nautilus in LM hook\n\n- Update to version nova-16.1.9.dev80:\n  * [placement] Add status and links fields to version document at /\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev92:\n  * Lowercase ironic driver hash ring and ignore case in cache\n  * Include only required fields in ironic node cache\n  * Add resource\\_class to fields in ironic node cache\n\n- Update to version nova-16.1.9.dev86:\n  * [stable-only] Move grenade jobs to experimental\n  * Update resources once in update\\_available\\_resource\n  * rt: Make resource tracker always invoking get\\_inventory()\n\n- Update to version nova-16.1.9.dev81:\n  * [stable-only] gate: Pin CEPH\\_RELEASE to nautilus in LM hook\n\n- Update to version nova-16.1.9.dev80:\n  * [placement] Add status and links fields to version document at /\n\nChanges in python-Django:\n- Add CVE-2021-33203.patch (bsc#1186608, CVE-2021-33203)\n    * Fixed potential path-traversal via admindocs' TemplateDetailView.\n- Add CVE-2021-33571.patch (bsc#1186611, CVE-2021-33571)\n    * Prevented leading zeros in IPv4 addresses.\n\n- Add CVE-2021-31542.patch (bsc#1185623, CVE-2021-31542)\n    * Fixed CVE-2021-31542 -- Tightened path and file name sanitation in file\n      uploads.\n\n- Add CVE-2021-28658.patch (bsc#1184148, CVE-2021-28658)\n  * Fixed potential directory-traversal via uploaded files\n\n- Add CVE-2021-23336.patch (bsc#1182433, CVE-2021-23336)\n  * Fixed web cache poisoning via django.utils.http.limited_parse_qsl()\n\nChanges in python-eventlet:\n- Add 0001-websocket-fd-leak-when-client-did-not-close-connecti.patch \n- Add 0002-websocket-Limit-maximum-uncompressed-frame-length-to.patch (bsc#1185836 CVE-2021-21419)\n    * websocket: Limit maximum uncompressed frame length to 8MiB\n\nChanges in python-py:\n- Add CVE-2020-29651.patch ((bsc#1179805, CVE-2020-29651)\n  * svnwc: fix regular expression vulnerable to DoS in blame\n    functionality\n\nChanges in python-pysaml2:\n- Add %dir declaration for %{_licensedir}\n\n- Fix CVE-2021-21238, bsc#1181277 with\n  0004-Strengthen-XSW-tests.patch ,\n  0005-Fix-the-parser-to-not-break-on-ePTID-AttributeValues.patch ,\n  0006-Add-xsd-schemas.patch ,\n  0007-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch .\n  This adds a dependency on python-xmlschema, which depends on\n  python-elementpath and build depends python-pathlib2, which depends on\n  python-scandir, thus all these need to be added for this to work.\n  The used python-xmlschema needs to support the sandbox argument\n  which was added in 1.2.0 and refined in 1.2.1, but that version\n  doesn't support python2, so a patched version that does both is\n  needed.\n  0009-Make-previous-commits-python2-compatible.patch to\n  not add a dependency on reportlib_resources and make other\n  changes python2 compatible.\n- Fix CVE-2021-21239, bsc#1181278 with\n  0008-Fix-CVE-2021-21239-Restrict-the-key-data-that-xmlsec.patch\n\nChanges in venv-openstack-keystone:\n- Add python-xmlschema and python-elementpath for new python-pysaml2 version.\n\nChanges in python-xmlschema:\n\n- Add missed BuildRequires on pathlib2\n\n- Add 3 patches to backport sandbox argument, which is needed by a security fix\n  in python-pysaml2 and one patch to make backport python2 compatible.\n- Upstream url changed\n- Add rpmlintrc to make it work on Leap 42.3\n- Update to 1.0.18:\n  * Fix for *ModelVisitor.iter_unordered_content()*\n  * Fixed default converter, AbderaConverter and JsonMLConverter for xs:anyType decode\n  * Fixed validation tests with all converters\n  * Added UnorderedConverter to validation tests\n- Update to 1.0.17:\n  * Enhancement of validation-only speed (~15%)\n  * Added *is_valid()* and *iter_errors()* to module API\n- Update to 1.0.16:\n  * Improved XMLResource class for working with compressed files\n  * Fix for validation with XSD wildcards and 'lax' process content\n  * Fix ambiguous items validation for xs:choice and xs:sequence models\n\n- Handle UnicodeDecodeErrors during build process\n\n- Update to 1.0.15:\n  * Improved XPath 2.0 bindings\n  * Added logging for schema initialization and building (handled with argument loglevel)\n  * Update encoding of collapsed contents with a new model based reordering method\n  * Removed XLink namespace from meta-schema (loaded from a fallback location like XHTML)\n  * Fixed half of failed W3C instance tests (remain 255 over 15344 tests)\n\n- Initial commit, needed by pytest 5.1.2\n\nChanges in python-elementpath:\n\n- Update to 1.3.1:\n  * Improved schema proxy\n  * Improved XSD type matching using paths\n  * Cached parent path for XPathContext (only Python 3)\n  * Improve typed selection with TypedAttribute and TypedElement named-tuples\n  * Add iter_results to XPathContext\n  * Remove XMLSchemaProxy from package\n  * Fix descendant shortcut operator '//'\n  * Fix text() function\n  * Fix typed select of '(name)' token\n  * Fix 24-hour time for DateTime\n\n- Skip test_hashing to fix 32bit builds\n\n- Initial commit needed by python-xmlschema\n\nChanges in python-six:\n- Update in SLE-12 (bsc#1176784, jsc#ECO-3105, jsc#PM-2352)\n\n- Fix testsuite on SLE-12\n  + Add python to BuildRequires for suse_version less 1500\n\n- Fix dbm deps as the MU for provides: python-dbm was not released\n  on sle12 yet\n- Add requirement on pytest \u003e 4.0 to see the pytest module works\n  with this MU\n\n- Do not cause buildcycle with previous change but rather\n  install the egg-info prepared metadata from the tarball\n\n- use setuptools for building to support pip 10.x (bsc#1166139)\n\n- update to 1.14.0\n * Add `six.assertNotRegex`\n * `six.moves._dummy_thread` now points to the `_thread` module on\n    Python 3.9+. Python 3.7 and later requires threading and deprecated the\n    `_dummy_thread` module\n * Remove support for Python 2.6 and Python 3.2\n * `six.wraps` now ignores missing attributes\n\n- Pull in dbm/gdbm module from python for testing\n\n- update to 0.13.0:\n  - Issue #298, pull request #299: Add `six.moves.dbm_ndbm`.\n  - Issue #155: Add `six.moves.collections_abc`, which aliases the `collections`\n    module on Python 2-3.2 and the `collections.abc` on Python 3.3 and greater.\n  - Pull request #304: Re-add distutils fallback in `setup.py`.\n  - Pull request #305: On Python 3.7, `with_metaclass` supports classes using PEP\n\n- Simplify the pytest call\n\n- Fix pytest call\n- Fixdocumentation package generating\n\n- Change %pretrans back to %pre to fix bootstrap issue\n  boo#1123064 bsc#1143893\n\n- Require just base python module, even full python is too much\n  and it is not required here\n\n- Update to 0.12.0:\n    * `six.add_metaclass` now preserves `__qualname__` from the\n      original class.\n    * Add `six.ensure_binary`, `six.ensure_text`, and\n      `six.ensure_str`.\n- Because of cyclical dependencies between six and Sphinx, we\n  need to to do multibuild.\n\n- Include in SLE-12 (FATE#326838, bsc#1113302)\n\n- remove egg-info directory in %pretrans\n- fix egg-info directory pattern\n- match any version of egg-info for a certain python version\n\n- Break the cycilical dependency on python-setuptools.\n\n- Remove argparse dependency\n\n- build python3 subpackage (FATE#324435, bsc#1073879)\n\n- remove egg-info directory before installation if it exists,\n  because setuptools produce directory and six switched to distutils\n  that produce a file\n  (and because rpm can't handle that by itself)\n  fixes bsc#1057496\n\n- Fix Source url\n\n- README-\u003eREADME.rst, add CHANGES\n- update to version 1.11.0:\n  * Pull request #178: `with_metaclass` now properly proxies\n    `__prepare__` to the underlying metaclass.\n  * Pull request #191: Allow `with_metaclass` to work with metaclasses\n    implemented in C.\n  * Pull request #203: Add parse_http_list and parse_keqv_list to\n    moved urllib.request.\n  * Pull request #172 and issue #171: Add unquote_to_bytes to moved\n    urllib.parse.\n  * Pull request #167: Add `six.moves.getoutput`.\n  * Pull request #80: Add `six.moves.urllib_parse.splitvalue`.\n  * Pull request #75: Add `six.moves.email_mime_image`.\n  * Pull request #72: Avoid creating reference cycles through\n    tracebacks in `reraise`.\n\n- Submit 1.9.0 to SLE-12 (fate#319030, fate#318838, bsc#940812)\n\n- sanitize release line in specfile\n\nChanges in rubygem-activerecord-session_store.SUSE_SLE-12-SP4_Update_Products_Cloud9_Update:\n- added CVE-2019-25025.patch (CVE-2019-25025, bsc#1183174)\n  * This requires CVE-2019-16782.patch to be included in rubygem-actionpack-4_2\n  to work correctly.\n\nChanges in venv-openstack-keystone:\n- Add python-xmlschema and python-elementpath for new python-pysaml2 version.\n\n- Add python-defusedxml (bsc#1019074)\n\n- Inherit version number of venv from main component (SCRD-8523)\n\n  ","status":"published","published":"2021-07-28T15:27:22Z","modified":"2026-02-04T03:30:06.612594Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:2831-1","title":"Recommended update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures, python-coverage, python-oniconfig, python-unittest-mixins","description":"This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues:\n\n- Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972)\n\n- Remove redundant python3 dependency from Requires\n- Update regular expression to fix python shebang\n- Style is enforced upstream and triggers unnecessary build version requirements\n- Allow specifying fs_id in cloudwatch log group name\n- Includes fix for stunnel path\n- Added hardening to systemd service(s). \n- Raise minimal pytest version\n- Fix typo in the ansi2html Requires\n- Cleanup with spec-cleaner\n- Make sure the tests are really executed\n- Remove useless devel dependency\n- Multiprocessing support in Python 3.8 was broken, but is now fixed\n- Bumpy the URL to point to github rather than to docs\n\n","status":"published","published":"2022-08-17T12:42:07Z","modified":"2026-02-04T03:11:45.302356Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5138-1","title":"python-py vulnerability","description":"\nThe py.path.svnwc component of py (aka python-py) through v1.9.0 contains \na regular expression with an ambiguous subpattern that is susceptible to \ncatastrophic backtracing. This could be used by attackers to cause a compute-time \ndenial of service attack by supplying malicious input to the blame functionality.\n\n","status":"published","published":"2021-11-10T22:09:54Z","modified":"2026-04-27T19:28:26.48754Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}