{"id":"CVE-2021-21419","aliases":["DEBIAN-CVE-2021-21419","EUVD-2021-0072","GHSA-9p9m-jm8w-94p2","MGASA-2021-0266","PYSEC-2021-12","RHSA-2021:2437","RHSA-2021:5071","SUSE-SU-2021:2554-1","SUSE-SU-2021:3729-1","UBUNTU-CVE-2021-21419","USN-4956-1"],"status":"published","title":"Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01792,"percentile":0.78708,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2021-05-07T14:30:12Z","modified":"2026-10-23T18:04:49Z","fixes":[{"ecosystem":"PyPI","package":"eventlet","fixed_in":["0.31.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"python-eventlet","fixed_in":["0.26.1-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-eventlet","fixed_in":["0.26.1-7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-eventlet","fixed_in":["0.26.1-7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"python-eventlet","fixed_in":["0.24.1-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"python-eventlet","fixed_in":["0.31.0-1.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python-eventlet","fixed_in":["0:0.25.2-5.el8ost.1"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-eventlet","fixed_in":["0:0.25.2-5.el8ost.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"python-eventlet","fixed_in":["0.25.1-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10"},{"fixed":"0.31.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.1-7"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.1-7"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.1-7"}]}]},{"source":"osv","ecosystem":"PyPI","package":"eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10"},{"fixed":"0.31.0"}]}],"versions":["0.10.0","0.11.0","0.12.1","0.13.0","0.14.0","0.15.2","0.16.1","0.17.4","0.18.2","0.18.3","0.18.4","0.19.0","0.20.0","0.20.1","0.21.0","0.22.0","0.22.1","0.23.0","0.24.0","0.24.1","0.25.0","0.25.1","0.25.2","0.26.0","0.26.1","0.27.0","0.28.0","0.28.1","0.29.0","0.29.1","0.30.0","0.30.1","0.30.2","0.30.3"]},{"source":"osv","ecosystem":"Mageia:7","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.1-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.0-1.mga8"}]}]},{"source":"osv","ecosystem":"PyPI","package":"eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.0"},{"fixed":"0.31.0"}]}],"versions":["0.10.0","0.11.0","0.12.1","0.13.0","0.14.0","0.15.2","0.16.1","0.17.4","0.18.2","0.18.3","0.18.4","0.19.0","0.20.0","0.20.1","0.21.0","0.22.0","0.22.1","0.23.0","0.24.0","0.24.1","0.25.0","0.25.1","0.25.2","0.26.0","0.26.1","0.27.0","0.28.0","0.28.1","0.29.0","0.29.1","0.30.0","0.30.1","0.30.2","0.30.3"]},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"afterburn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages-issuegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages-profile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-bootinfra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-bootinfra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"haproxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-ipa-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-ipa-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.289.1.1624020353-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.1624022417-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"kata-containers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.2-0.20210611153100.bfa97cb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-debtcollector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-0.20210324220630.649189d.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-0.20210608101214.ca2e4ba.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-ironic-prometheus-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-0.20210325143713.70e39c8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-5.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-0.20210325001456.6a66271.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.12.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-openstacksdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-concurrency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-concurrency-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.5.0-0.20210325050501.cfa2564.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-0.20210325043103.0d02866.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-db-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-i18n-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-log-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-policy-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-upgradecheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-0.20210325003851.9f95a6e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-utils-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-0.20210325001012.7d7154f.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-sushy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-sushy-oem-idrac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-tooz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-0.20210324235001.54448e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-debtcollector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-0.20210324220630.649189d.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-hardware-detect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-inspector-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-0.20210608101214.ca2e4ba.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-prometheus-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-0.20210325143713.70e39c8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.2-0.20210611153100.bfa97cb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-5.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-0.20210325001456.6a66271.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kubernetes-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.12.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openstacksdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openstacksdk-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-concurrency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-concurrency-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.5.0-0.20210325050501.cfa2564.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-0.20210325043103.0d02866.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-db-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-log-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-serialization-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-service-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-upgradecheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-0.20210325003851.9f95a6e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-utils-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-pyrsistent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-0.20210325001012.7d7154f.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-oem-idrac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-oem-idrac-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-tooz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-0.20210324235001.54448e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"redhat-release-coreos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:48.84-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rteval-loads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-12.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rteval-loads-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-12.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rust-afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rust-afterburn-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"stress-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.06-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"stress-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.06-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-3.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-5.el8ost.1"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-5.el8ost.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1614096566.e8c2b27-3.44.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-5.3.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-opsconsole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-planning","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-4.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1623056900.7917e18-3.21.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190923_16.32-3.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-6.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.34-3.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-5.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.30.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-14.34.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.33.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-horizon-hpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev6-14.36.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev11-11.35.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.32.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.37.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-13.38.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-11.36.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.23.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1614096566.e8c2b27-3.44.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-5.3.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-opsconsole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-planning","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-supplement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-upstream-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-upstream-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-4.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1623056900.7917e18-3.21.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190923_16.32-3.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-6.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.34-3.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-5.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.30.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-14.34.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.31.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.33.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev6-14.36.6"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev11-11.35.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.32.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.37.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.28.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-13.38.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-11.36.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.33.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.23.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.32.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.10-5.3.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1622489449.a8e60e238-3.50.4"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1616001417.67fd9c2a1-4.52.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-supplement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-upstream-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-upstream-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20210512-1.32.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-4.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-3.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1623056900.7917e18-3.21.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190923_16.32-3.18.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.48.5"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-Django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.29-3.25.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-elementpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-6.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.34-3.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-pysaml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-5.9.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-xmlschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-1.3.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-activerecord-session_store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-3.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1628097238.f6cbb0e-3.29.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1627995376.30bdf85-3.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"influxdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8-4.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-4.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev23-3.31.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-ec2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1~dev6-3.3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev4-3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1628179051.7d761bff-3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-horizon-plugin-gbp-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev5-3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev7-3.25.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev19-3.28.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev91-3.40.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-8.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev23-3.28.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2~dev2-3.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.4~dev4-3.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev11-4.29.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev17-4.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev7-3.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-4.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.2~dev60-3.31.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1~dev10-3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2~dev3-3.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev164-6.29.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev91-3.29.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3~dev7-4.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-2.20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1630614261.26948f746-3.37.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"influxdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.8-4.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"kibana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-4.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev23-3.31.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-ec2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1~dev6-3.3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev4-3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1628179051.7d761bff-3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-horizon-plugin-gbp-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1~dev5-3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev7-3.25.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev19-3.28.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev91-3.40.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-8.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-4.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-redcarpet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-4.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.1-2ubuntu1.1"}]}],"versions":["0.25.0-0ubuntu1","0.25.1-2build1","0.25.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.1-2ubuntu1.1"}]}],"versions":["0.25.0-0ubuntu1","0.25.1-2build1","0.25.1-2ubuntu1"]}],"products":[{"vendor":"eventlet","product":"eventlet"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5JZP4LZOSP7CUAM3GIRW6PIAWKH5VGB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2WJFSBPLCNSZNHYQC4QDRDFRTEZRMD2L/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21419","tags":["advisory"]},{"url":"https://github.com/eventlet/eventlet/commit/1412f5e4125b4313f815778a1acb4d3336efcd07","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/eventlet/PYSEC-2021-12.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WJFSBPLCNSZNHYQC4QDRDFRTEZRMD2L","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5JZP4LZOSP7CUAM3GIRW6PIAWKH5VGB","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9p9m-jm8w-94p2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-21419","tags":["advisory"]},{"url":"https://github.com/eventlet/eventlet","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0266.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29009","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4956-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2WJFSBPLCNSZNHYQC4QDRDFRTEZRMD2L/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2437","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978621","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2437.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3636","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20291","tags":["advisory"]},{"url":"https://unit42.paloaltonetworks.com/cve-2021-20291/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21419","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21604","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21606","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21608","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21609","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21610","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21623","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2180","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21642","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21643","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21648","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2349","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25735","tags":["advisory"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25737","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25737","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/102106","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954736","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-004","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30465","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5071","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5071.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212554-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1019074","tags":["report"]},{"url":"https://bugzilla.suse.com/1044849","tags":["report"]},{"url":"https://bugzilla.suse.com/1057496","tags":["report"]},{"url":"https://bugzilla.suse.com/1073879","tags":["report"]},{"url":"https://bugzilla.suse.com/1113302","tags":["report"]},{"url":"https://bugzilla.suse.com/1123064","tags":["report"]},{"url":"https://bugzilla.suse.com/1143893","tags":["report"]},{"url":"https://bugzilla.suse.com/1166139","tags":["report"]},{"url":"https://bugzilla.suse.com/1176784","tags":["report"]},{"url":"https://bugzilla.suse.com/1179805","tags":["report"]},{"url":"https://bugzilla.suse.com/1180507","tags":["report"]},{"url":"https://bugzilla.suse.com/1181277","tags":["report"]},{"url":"https://bugzilla.suse.com/1181278","tags":["report"]},{"url":"https://bugzilla.suse.com/1181689","tags":["report"]},{"url":"https://bugzilla.suse.com/1181828","tags":["report"]},{"url":"https://bugzilla.suse.com/1182433","tags":["report"]},{"url":"https://bugzilla.suse.com/1183174","tags":["report"]},{"url":"https://bugzilla.suse.com/1183803","tags":["report"]},{"url":"https://bugzilla.suse.com/1184148","tags":["report"]},{"url":"https://bugzilla.suse.com/1185623","tags":["report"]},{"url":"https://bugzilla.suse.com/1185836","tags":["report"]},{"url":"https://bugzilla.suse.com/1186608","tags":["report"]},{"url":"https://bugzilla.suse.com/1186611","tags":["report"]},{"url":"https://bugzilla.suse.com/940812","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33571","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213729-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1180837","tags":["report"]},{"url":"https://bugzilla.suse.com/1186868","tags":["report"]},{"url":"https://bugzilla.suse.com/1189052","tags":["report"]},{"url":"https://bugzilla.suse.com/1191681","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41136","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-21419","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-21419","title":"Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","status":"published","published":"2021-05-07T14:30:12Z","modified":"2024-08-03T18:09:16.08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:33:00.137099Z"}],"euvd":[{"id":"EUVD-2021-0072","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","status":"published","published":"2021-05-07T14:30:12Z","modified":"2024-08-03T18:09:16Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T03:25:06.347262Z"}],"ghsa":[{"id":"GHSA-9p9m-jm8w-94p2","title":"Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet","description":"### Impact\nA websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame.\n\n### Patches\nVersion 0.31.0 restricts websocket frame to reasonable limits.\n\n### Workarounds\nRestricting memory usage via OS limits would help against overall machine exhaustion. No workaround to protect Eventlet process.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [eventlet](https://github.com/eventlet/eventlet/issues)\n* Contact current maintainers. At 2021-03: temotor@gmail.com or https://t.me/temotor","status":"published","published":"2021-05-07T15:50:36Z","modified":"2024-09-20T17:20:54Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:04.690827Z"}],"nvd":[{"id":"CVE-2021-21419","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","status":"published","published":"2021-05-07T15:15:07.407Z","modified":"2026-06-17T03:35:32.337Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:06:52.81233Z"}],"osv":[{"id":"CVE-2021-21419","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","status":"published","published":"2021-05-07T15:15:07.407Z","modified":"2026-10-20T10:54:29.060586513Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-21419","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","status":"published","published":"2021-05-07T15:15:07.407Z","modified":"2026-10-23T18:04:49.199549596Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"GHSA-9p9m-jm8w-94p2","title":"Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet","description":"### Impact\nA websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame.\n\n### Patches\nVersion 0.31.0 restricts websocket frame to reasonable limits.\n\n### Workarounds\nRestricting memory usage via OS limits would help against overall machine exhaustion. No workaround to protect Eventlet process.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [eventlet](https://github.com/eventlet/eventlet/issues)\n* Contact current maintainers. At 2021-03: temotor@gmail.com or https://t.me/temotor","status":"published","published":"2021-05-07T15:50:36Z","modified":"2026-07-08T06:27:42.178135165Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:43.875515Z"},{"id":"RHSA-2021:2437","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update","status":"published","published":"2024-09-18T04:18:53Z","modified":"2026-10-09T10:02:33Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:5071","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (python-eventlet) security update","status":"published","published":"2024-09-18T04:21:01Z","modified":"2026-08-14T10:01:51Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2021-21419","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","status":"published","published":"2021-05-07T15:15:00Z","modified":"2026-02-04T04:26:19.535349Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:26.29421Z"},{"id":"MGASA-2021-0266","title":"Updated python-eventlet packages fix security vulnerability","description":"Updated python-eventlet packages fix a security vulnerability:\n\nEventlet is a concurrent networking library for Python. A websocket\npeer may exhaust memory on Eventlet side by sending very large websocket\nframes. Malicious peer may exhaust memory on Eventlet side by sending\nhighly compressed data frame. A patch in version 0.31.0 restricts websocket\nframe to reasonable limits. As a workaround, restricting memory usage via\nOS limits would help against overall machine exhaustion, but there is no\nworkaround to protect Eventlet process (CVE-2021-21419).\n","status":"published","published":"2021-06-18T19:24:28Z","modified":"2026-04-16T04:44:32.391764883Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"PYSEC-2021-12","description":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.","status":"published","published":"2021-05-07T15:15:00Z","modified":"2023-11-08T04:04:45.339697Z","updated_at":"2026-11-02T15:52:52.682031Z"},{"id":"SUSE-SU-2021:2554-1","title":"Security update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema ","description":"This update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema fixes the following issues:\n\nSecurity fixes included on this update:\n\ncassandra-kit:\n- CVE-2020-17516: Internode encryption enforcement vulnerability\n\ncassandra:\n- CVE-2020-17516: Internode encryption enforcement vulnerability\n- CVE-2017-5929 logback: Fixed a serialization vulnerability in SocketServer and ServerSocketReceiver\n\ncrowbar-core:\nCVE-2020-26247: Potentially XXE or SSRF attacks by parsed Nokogiri::XML::Schema\n\ngrafana:\n- CVE-2021-27358: Unauthenticated remote attackers to trigger a Denial of Service via a remote API call\n\nkibana:\n- CVE-2017-11481: Fixed an XSS via URL fields\n- CVE-2017-11499: Fixed a constant hashtable seeds vulnerability\n\npython-Django:\n- CVE-2021-28658: Potential directory-traversal via uploaded files\n- CVE-2021-31542: Potential directory-traversal via uploaded files\n- CVE-2021-33203: Potential directory traversal via admindocs\n- CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses\n- CVE-2021-23336: Fixed web cache poisoning via django.utils.http.limited_parse_qsl\n\npython-eventlet:\n- CVE-2021-21419: Improper handling of highly compressed data and memory allocation with excessive size value\n\npython-pysaml2:\n- CVE-2021-21238: Fixed an improper verification of cryptographic signatures for signed SAML documents\n- CVE-2021-21239: Fixed an improper verification of cryptographic signatures when using CryptoBackendXmlSec1()_\n\npython-py:\n- CVE-2020-29651: Regular expression denial of service in svnwc.py\n\nrubygem-activerecord-session_store:\n- CVE-2019-25025: Fixed a hijack sessions by using timing attacks targeting the session id\nCVE-2019-16782\n\nNon-security fixes included on this update:\n\nChanges in ardana-cobbler:\n- Update to version 8.0+git.1614096566.e8c2b27:\n  * Change install_recommended to true (bsc#1181828)\n\nChanges in cassandra:\n- update to 3.11.10 (bsc#1181689, CVE-2020-17516)\n * Fix digest computation for queries with fetched but non queried columns (CASSANDRA-15962)\n * Reduce amount of allocations during batch statement execution (CASSANDRA-16201)\n * Update jflex-1.6.0.jar to match upstream (CASSANDRA-16393)\n * Fix DecimalDeserializer#toString OOM (CASSANDRA-14925)\n * Rate limit validation compactions using compaction_throughput_mb_per_sec (CASSANDRA-16161)\n * SASI's `max_compaction_flush_memory_in_mb` settings over 100GB revert to default of 1GB (CASSANDRA-16071)\n * Prevent unbounded number of pending flushing tasks (CASSANDRA-16261)\n * Improve empty hint file handling during startup (CASSANDRA-16162)\n * Allow empty string in collections with COPY FROM in cqlsh (CASSANDRA-16372)\n * Fix skipping on pre-3.0 created compact storage sstables due to missing primary key liveness (CASSANDRA-16226)\n * Extend the exclusion of replica filtering protection to other indices instead of just SASI (CASSANDRA-16311)\n * Synchronize transaction logs for JBOD (CASSANDRA-16225)\n * Fix the counting of cells per partition (CASSANDRA-16259)\n * Fix serial read/non-applying CAS linearizability (CASSANDRA-12126)\n * Avoid potential NPE in JVMStabilityInspector (CASSANDRA-16294)\n * Improved check of num_tokens against the length of initial_token (CASSANDRA-14477)\n * Fix a race condition on ColumnFamilyStore and TableMetrics (CASSANDRA-16228)\n * Remove the SEPExecutor blocking behavior (CASSANDRA-16186)\n * Fix invalid cell value skipping when reading from disk (CASSANDRA-16223)\n * Prevent invoking enable/disable gossip when not in NORMAL (CASSANDRA-16146)\n * Wait for schema agreement when bootstrapping (CASSANDRA-15158)\n * Fix the histogram merge of the table metrics (CASSANDRA-16259)\n * Synchronize Keyspace instance store/clear (CASSANDRA-16210)\n * Fix ColumnFilter to avoid querying cells of unselected complex columns (CASSANDRA-15977)\n * Fix memory leak in CompressedChunkReader (CASSANDRA-15880)\n * Don't attempt value skipping with mixed version cluster (CASSANDRA-15833)\n * Avoid failing compactions with very large partitions (CASSANDRA-15164)\n * Make sure LCS handles duplicate sstable added/removed notifications correctly (CASSANDRA-14103)\n * Fix OOM when terminating repair session (CASSANDRA-15902)\n * Avoid marking shutting down nodes as up after receiving gossip shutdown message (CASSANDRA-16094)\n * Check SSTables for latest version before dropping compact storage (CASSANDRA-16063)\n * Handle unexpected columns due to schema races (CASSANDRA-15899)\n * Add flag to ignore unreplicated keyspaces during repair (CASSANDRA-15160)\n * Package tools/bin scripts as executable (CASSANDRA-16151)\n * Fixed a NullPointerException when calling nodetool enablethrift (CASSANDRA-16127)\n * Correctly interpret SASI's `max_compaction_flush_memory_in_mb` setting in megabytes not bytes (CASSANDRA-16071)\n * Fix short read protection for GROUP BY queries (CASSANDRA-15459)\n * Frozen RawTuple is not annotated with frozen in the toString method (CASSANDRA-15857)\nMerged from 3.0:\n * Use IF NOT EXISTS for index and UDT create statements in snapshot schema files (CASSANDRA-13935)\n * Fix gossip shutdown order (CASSANDRA-15816)\n * Remove broken 'defrag-on-read' optimization (CASSANDRA-15432)\n * Check for endpoint collision with hibernating nodes (CASSANDRA-14599)\n * Operational improvements and hardening for replica filtering protection (CASSANDRA-15907)\n * stop_paranoid disk failure policy is ignored on CorruptSSTableException after node is up (CASSANDRA-15191)\n * Forbid altering UDTs used in partition keys (CASSANDRA-15933)\n * Fix empty/null json string representation (CASSANDRA-15896)\n * 3.x fails to start if commit log has range tombstones from a column which is also deleted (CASSANDRA-15970)\n * Handle difference in timestamp precision between java8 and java11 in LogFIle.java (CASSANDRA-16050)\nMerged from 2.2:\n * Fix CQL parsing of collections when the column type is reversed (CASSANDRA-15814)\n * Only allow strings to be passed to JMX authentication (CASSANDRA-16077)\n * Fix cqlsh output when fetching all rows in batch mode (CASSANDRA-15905)\n * Upgrade Jackson to 2.9.10 (CASSANDRA-15867)\n * Fix CQL formatting of read command restrictions for slow query log (CASSANDRA-15503)\n * Allow sstableloader to use SSL on the native port (CASSANDRA-14904)\n * Backport CASSANDRA-12189: escape string literals (CASSANDRA-15948)\n * Avoid hinted handoff per-host throttle being arounded to 0 in large cluster (CASSANDRA-15859)\n * Avoid emitting empty range tombstones from RangeTombstoneList (CASSANDRA-15924)\n * Avoid thread starvation, and improve compare-and-swap performance, in the slab allocators (CASSANDRA-15922)\n * Add token to tombstone warning and error messages (CASSANDRA-15890)\n * Fixed range read concurrency factor computation and capped as 10 times tpc cores (CASSANDRA-15752)\n * Catch exception on bootstrap resume and init native transport (CASSANDRA-15863)\n * Fix replica-side filtering returning stale data with CL \u003e ONE (CASSANDRA-8272, CASSANDRA-8273)\n * Fix duplicated row on 2.x upgrades when multi-rows range tombstones interact with collection ones (CASSANDRA-15805)\n * Rely on snapshotted session infos on StreamResultFuture.maybeComplete to avoid race conditions (CASSANDRA-15667)\n * EmptyType doesn't override writeValue so could attempt to write bytes when expected not to (CASSANDRA-15790)\n * Fix index queries on partition key columns when some partitions contains only static data (CASSANDRA-13666)\n * Avoid creating duplicate rows during major upgrades (CASSANDRA-15789)\n * liveDiskSpaceUsed and totalDiskSpaceUsed get corrupted if IndexSummaryRedistribution gets interrupted (CASSANDRA-15674)\n * Fix Debian init start/stop (CASSANDRA-15770)\n * Fix infinite loop on index query paging in tables with clustering (CASSANDRA-14242)\n * Fix chunk index overflow due to large sstable with small chunk length (CASSANDRA-15595)\n * Allow selecting static column only when querying static index (CASSANDRA-14242)\n * cqlsh return non-zero status when STDIN CQL fails (CASSANDRA-15623)\n * Don't skip sstables in slice queries based only on local min/max/deletion timestamp (CASSANDRA-15690)\n * Memtable memory allocations may deadlock (CASSANDRA-15367)\n * Run evictFromMembership in GossipStage (CASSANDRA-15592)\n * Fix nomenclature of allow and deny lists (CASSANDRA-15862)\n * Remove generated files from source artifact (CASSANDRA-15849)\n * Remove duplicated tools binaries from tarballs (CASSANDRA-15768)\n * Duplicate results with DISTINCT queries in mixed mode (CASSANDRA-15501)\n * Disable JMX rebinding (CASSANDRA-15653)\n * Fix writing of snapshot manifest when the table has table-backed secondary indexes (CASSANDRA-10968)\n * Fix parse error in cqlsh COPY FROM and formatting for map of blobs (CASSANDRA-15679)\n * Fix Commit log replays when static column clustering keys are collections (CASSANDRA-14365)\n * Fix Red Hat init script on newer systemd versions (CASSANDRA-15273)\n * Allow EXTRA_CLASSPATH to work on tar/source installations (CASSANDRA-15567)\n * Fix bad UDT sstable metadata serialization headers written by C* 3.0 on upgrade and in sstablescrub (CASSANDRA-15035)\n * Fix nodetool compactionstats showing extra pending task for TWCS - patch implemented (CASSANDRA-15409)\n * Fix SELECT JSON formatting for the 'duration' type (CASSANDRA-15075)\n * Fix LegacyLayout to have same behavior as 2.x when handling unknown column names (CASSANDRA-15081)\n * Update nodetool help stop output (CASSANDRA-15401)\n * Run in-jvm upgrade dtests in circleci (CASSANDRA-15506)\n * Include updates to static column in mutation size calculations (CASSANDRA-15293)\n * Fix point-in-time recoevery ignoring timestamp of updates to static columns (CASSANDRA-15292)\n * GC logs are also put under $CASSANDRA_LOG_DIR (CASSANDRA-14306)\n * Fix sstabledump's position key value when partitions have multiple rows (CASSANDRA-14721)\n * Avoid over-scanning data directories in LogFile.verify() (CASSANDRA-15364)\n * Bump generations and document changes to system_distributed and system_traces in 3.0, 3.11\n   (CASSANDRA-15441)\n * Fix system_traces creation timestamp; optimise system keyspace upgrades (CASSANDRA-15398)\n * Fix various data directory prefix matching issues (CASSANDRA-13974)\n * Minimize clustering values in metadata collector (CASSANDRA-15400)\n * Avoid over-trimming of results in mixed mode clusters (CASSANDRA-15405)\n * validate value sizes in LegacyLayout (CASSANDRA-15373)\n * Ensure that tracing doesn't break connections in 3.x/4.0 mixed mode by default (CASSANDRA-15385)\n * Make sure index summary redistribution does not start when compactions are paused (CASSANDRA-15265)\n * Ensure legacy rows have primary key livenessinfo when they contain illegal cells (CASSANDRA-15365)\n * Fix race condition when setting bootstrap flags (CASSANDRA-14878)\n * Fix NativeLibrary.tryOpenDirectory callers for Windows (CASSANDRA-15426)\n * Fix SELECT JSON output for empty blobs (CASSANDRA-15435)\n * In-JVM DTest: Set correct internode message version for upgrade test (CASSANDRA-15371)\n * In-JVM DTest: Support NodeTool in dtest (CASSANDRA-15429)\n * Fix NativeLibrary.tryOpenDirectory callers for Windows (CASSANDRA-15426)\n * Fix SASI non-literal string comparisons (range operators) (CASSANDRA-15169)\n * Make sure user defined compaction transactions are always closed (CASSANDRA-15123)\n * Fix cassandra-env.sh to use $CASSANDRA_CONF to find cassandra-jaas.config (CASSANDRA-14305)\n * Fixed nodetool cfstats printing index name twice (CASSANDRA-14903)\n * Add flag to disable SASI indexes, and warnings on creation (CASSANDRA-14866)\n * Add ability to cap max negotiable protocol version (CASSANDRA-15193)\n * Gossip tokens on startup if available (CASSANDRA-15335)\n * Fix resource leak in CompressedSequentialWriter (CASSANDRA-15340)\n * Fix bad merge that reverted CASSANDRA-14993 (CASSANDRA-15289)\n * Fix LegacyLayout RangeTombstoneList IndexOutOfBoundsException when upgrading and RangeTombstone bounds are asymmetric (CASSANDRA-15172)\n * Fix NPE when using allocate_tokens_for_keyspace on new DC/rack (CASSANDRA-14952)\n * Filter sstables earlier when running cleanup (CASSANDRA-15100)\n * Use mean row count instead of mean column count for index selectivity calculation (CASSANDRA-15259)\n * Avoid updating unchanged gossip states (CASSANDRA-15097)\n * Prevent recreation of previously dropped columns with a different kind (CASSANDRA-14948)\n * Prevent client requests from blocking on executor task queue (CASSANDRA-15013)\n * Toughen up column drop/recreate type validations (CASSANDRA-15204)\n * LegacyLayout should handle paging states that cross a collection column (CASSANDRA-15201)\n * Prevent RuntimeException when username or password is empty/null (CASSANDRA-15198)\n * Multiget thrift query returns null records after digest mismatch (CASSANDRA-14812)\n * Skipping illegal legacy cells can break reverse iteration of indexed partitions (CASSANDRA-15178)\n * Handle paging states serialized with a different version than the session's (CASSANDRA-15176)\n * Throw IOE instead of asserting on unsupporter peer versions (CASSANDRA-15066)\n * Update token metadata when handling MOVING/REMOVING_TOKEN events (CASSANDRA-15120)\n * Add ability to customize cassandra log directory using $CASSANDRA_LOG_DIR (CASSANDRA-15090)\n * Skip cells with illegal column names when reading legacy sstables (CASSANDRA-15086)\n * Fix assorted gossip races and add related runtime checks (CASSANDRA-15059)\n * Fix mixed mode partition range scans with limit (CASSANDRA-15072)\n * cassandra-stress works with frozen collections: list and set (CASSANDRA-14907)\n * Fix handling FS errors on writing and reading flat files - LogTransaction and hints (CASSANDRA-15053)\n * Avoid double closing the iterator to avoid overcounting the number of requests (CASSANDRA-15058)\n * Improve `nodetool status -r` speed (CASSANDRA-14847)\n * Improve merkle tree size and time on heap (CASSANDRA-14096)\n * Add missing commands to nodetool_completion (CASSANDRA-14916)\n * Anti-compaction temporarily corrupts sstable state for readers (CASSANDRA-15004)\n * Catch non-IOException in FileUtils.close to make sure that all resources are closed (CASSANDRA-15225)\n * Handle exceptions during authentication/authorization (CASSANDRA-15041)\n * Support cross version messaging in in-jvm upgrade dtests (CASSANDRA-15078)\n * Fix index summary redistribution cancellation (CASSANDRA-15045)\n * Fixing invalid CQL in security documentation (CASSANDRA-15020)\n * Allow instance class loaders to be garbage collected for inJVM dtest (CASSANDRA-15170)\n * Add support for network topology and query tracing for inJVM dtest (CASSANDRA-15319)\n * Correct sstable sorting for garbagecollect and levelled compaction (CASSANDRA-14870)\n * Severe concurrency issues in STCS,DTCS,TWCS,TMD.Topology,TypeParser\n * Add a script to make running the cqlsh tests in cassandra repo easier (CASSANDRA-14951)\n * If SizeEstimatesRecorder misses a 'onDropTable' notification, the size_estimates table will never be cleared for that table. (CASSANDRA-14905)\n * Counters fail to increment in 2.1/2.2 to 3.X mixed version clusters (CASSANDRA-14958)\n * Streaming needs to synchronise access to LifecycleTransaction (CASSANDRA-14554)\n * Fix cassandra-stress write hang with default options (CASSANDRA-14616)\n * Differentiate between slices and RTs when decoding legacy bounds (CASSANDRA-14919)\n * Netty epoll IOExceptions caused by unclean client disconnects being logged at INFO (CASSANDRA-14909)\n * Unfiltered.isEmpty conflicts with Row extends AbstractCollection.isEmpty (CASSANDRA-14588)\n * RangeTombstoneList doesn't properly clean up mergeable or superseded rts in some cases (CASSANDRA-14894)\n * Fix handling of collection tombstones for dropped columns from legacy sstables (CASSANDRA-14912)\n * Throw exception if Columns serialized subset encode more columns than possible (CASSANDRA-14591)\n * Drop/add column name with different Kind can result in corruption (CASSANDRA-14843)\n * Fix missing rows when reading 2.1 SSTables with static columns in 3.0 (CASSANDRA-14873)\n * Move TWCS message 'No compaction necessary for bucket size' to Trace level (CASSANDRA-14884)\n * Sstable min/max metadata can cause data loss (CASSANDRA-14861)\n * Dropped columns can cause reverse sstable iteration to return prematurely (CASSANDRA-14838)\n * Legacy sstables with  multi block range tombstones create invalid bound sequences (CASSANDRA-14823)\n * Expand range tombstone validation checks to multiple interim request stages (CASSANDRA-14824)\n * Reverse order reads can return incomplete results (CASSANDRA-14803)\n * Avoid calling iter.next() in a loop when notifying indexers about range tombstones (CASSANDRA-14794)\n * Fix purging semi-expired RT boundaries in reversed iterators (CASSANDRA-14672)\n * DESC order reads can fail to return the last Unfiltered in the partition (CASSANDRA-14766)\n * Fix corrupted collection deletions for dropped columns in 3.0  2.{1,2} messages (CASSANDRA-14568)\n * Fix corrupted static collection deletions in 3.0 2.{1,2} messages (CASSANDRA-14568)\n * Handle failures in parallelAllSSTableOperation (cleanup/upgradesstables/etc) (CASSANDRA-14657)\n * Improve TokenMetaData cache populating performance avoid long locking (CASSANDRA-14660)\n * Backport: Flush netty client messages immediately (not by default) (CASSANDRA-13651)\n * Fix static column order for SELECT * wildcard queries (CASSANDRA-14638)\n * sstableloader should use discovered broadcast address to connect intra-cluster (CASSANDRA-14522)\n * Fix reading columns with non-UTF names from schema (CASSANDRA-14468)\n * Don't enable client transports when bootstrap is pending (CASSANDRA-14525)\n * MigrationManager attempts to pull schema from different major version nodes (CASSANDRA-14928)\n * Fix incorrect cqlsh results when selecting same columns multiple times (CASSANDRA-13262)\n * Returns null instead of NaN or Infinity in JSON strings (CASSANDRA-14377)\n * Paged Range Slice queries with DISTINCT can drop rows from results (CASSANDRA-14956)\n * Validate supported column type with SASI analyzer (CASSANDRA-13669)\n * Remove BTree.Builder Recycler to reduce memory usage (CASSANDRA-13929)\n * Reduce nodetool GC thread count (CASSANDRA-14475)\n * Fix New SASI view creation during Index Redistribution (CASSANDRA-14055)\n * Remove string formatting lines from BufferPool hot path (CASSANDRA-14416)\n * Update metrics to 3.1.5 (CASSANDRA-12924)\n * Detect OpenJDK jvm type and architecture (CASSANDRA-12793)\n * Don't use guava collections in the non-system keyspace jmx attributes (CASSANDRA-12271)\n * Allow existing nodes to use all peers in shadow round (CASSANDRA-13851)\n * Fix cqlsh to read connection.ssl cqlshrc option again (CASSANDRA-14299)\n * Downgrade log level to trace for CommitLogSegmentManager (CASSANDRA-14370)\n * CQL fromJson(null) throws NullPointerException (CASSANDRA-13891)\n * Serialize empty buffer as empty string for json output format (CASSANDRA-14245)\n * Allow logging implementation to be interchanged for embedded testing (CASSANDRA-13396)\n * SASI tokenizer for simple delimiter based entries (CASSANDRA-14247)\n * Fix Loss of digits when doing CAST from varint/bigint to decimal (CASSANDRA-14170)\n * RateBasedBackPressure unnecessarily invokes a lock on the Guava RateLimiter (CASSANDRA-14163)\n * Fix wildcard GROUP BY queries (CASSANDRA-14209)\n * Fix corrupted static collection deletions in 3.0 -\u003e 2.{1,2} messages (CASSANDRA-14568)\n * Fix potential IndexOutOfBoundsException with counters (CASSANDRA-14167)\n * Always close RT markers returned by ReadCommand#executeLocally() (CASSANDRA-14515)\n * Reverse order queries with range tombstones can cause data loss (CASSANDRA-14513)\n * Fix regression of lagging commitlog flush log message (CASSANDRA-14451)\n * Add Missing dependencies in pom-all (CASSANDRA-14422)\n * Cleanup StartupClusterConnectivityChecker and PING Verb (CASSANDRA-14447)\n * Fix deprecated repair error notifications from 3.x clusters to legacy JMX clients (CASSANDRA-13121)\n * Cassandra not starting when using enhanced startup scripts in windows (CASSANDRA-14418)\n * Fix progress stats and units in compactionstats (CASSANDRA-12244)\n * Better handle missing partition columns in system_schema.columns (CASSANDRA-14379)\n * Delay hints store excise by write timeout to avoid race with decommission (CASSANDRA-13740)\n * Deprecate background repair and probablistic read_repair_chance table options\n   (CASSANDRA-13910)\n * Add missed CQL keywords to documentation (CASSANDRA-14359)\n * Fix unbounded validation compactions on repair / revert CASSANDRA-13797 (CASSANDRA-14332)\n * Avoid deadlock when running nodetool refresh before node is fully up (CASSANDRA-14310)\n * Handle all exceptions when opening sstables (CASSANDRA-14202)\n * Handle incompletely written hint descriptors during startup (CASSANDRA-14080)\n * Handle repeat open bound from SRP in read repair (CASSANDRA-14330)\n * Respect max hint window when hinting for LWT (CASSANDRA-14215)\n * Adding missing WriteType enum values to v3, v4, and v5 spec (CASSANDRA-13697)\n * Don't regenerate bloomfilter and summaries on startup (CASSANDRA-11163)\n * Fix NPE when performing comparison against a null frozen in LWT (CASSANDRA-14087)\n * Log when SSTables are deleted (CASSANDRA-14302)\n * Fix batch commitlog sync regression (CASSANDRA-14292)\n * Write to pending endpoint when view replica is also base replica (CASSANDRA-14251)\n * Chain commit log marker potential performance regression in batch commit mode (CASSANDRA-14194)\n * Fully utilise specified compaction threads (CASSANDRA-14210)\n * Pre-create deletion log records to finish compactions quicker (CASSANDRA-12763)\n * Fix bug that prevented compaction of SSTables after full repairs (CASSANDRA-14423)\n * Incorrect counting of pending messages in OutboundTcpConnection (CASSANDRA-11551)\n * Fix compaction failure caused by reading un-flushed data (CASSANDRA-12743)\n * Use Bounds instead of Range for sstables in anticompaction (CASSANDRA-14411)\n * Fix JSON queries with IN restrictions and ORDER BY clause (CASSANDRA-14286)\n * Backport circleci yaml (CASSANDRA-14240)\n * Check checksum before decompressing data (CASSANDRA-14284)\n * CVE-2017-5929 Security vulnerability in Logback warning in NEWS.txt (CASSANDRA-14183)\n- Use %license macro\n\nChanges in cassandra-kit:\n- Update to Cassandra 3.11.10 (bsc#1181689, CVE-2020-17516)\n\nChanges in crowbar-core:\n- Update to version 5.0+git.1622489449.a8e60e238:\n  * avoid v4.1.5 of delayed_job_active_record (noref)\n  * add CVE-2020-26247 to travis ignore list (bsc#1180507)\n\nChanges in crowbar-openstack:\n- Update to version 5.0+git.1616001417.67fd9c2a1:\n  * monasca: restart Kibana on update (bsc#1044849)\n\n- Update to version 5.0+git.1615542070.7841c34b7:\n  * monasca: fix monasca-server reinstall state check (SOC-11471)\n\nChanges in documentation-suse-openstack-cloud:\n- Update to version 8.20210512:\n  * Moved Monasca deployment to immediately after keystone (SOC-11525) (#1312)\n\n- Update to version 8.20210511:\n  * Update the correct SLES version to suse-12.3 (SOC-11521) (#1321)\n  * Renamed the repo name from SLE12-SP3-HA to SLE-HA12-SP3 (SOC-11523) (#1320)\n\n- Update to version 8.20210511:\n  * Add bm-power-status playbook to add sles compute section (#1317)\n\n- Update to version 8.20210507:\n  * Add instructions for checking MySQL cert expiry (SOC-11422) (#1311)\n\n- Update to version 8.20210304:\n  * Add nova and heat db purge cron jobs to maintenance section (SOC-9876) (#1307)\n\nChanges in grafana:\n- Add CVE-2021-27358.patch (bsc#1183803, CVE-2021-27358)\n  * Prevent unauthenticated remote attackers from causing a DoS through the\n    snapshots API.\n\nChanges in kibana:\n- Ensure /etc/sysconfig/kibana is present\n\n- Update to Kibana 4.6.6 (bsc#1044849, CVE-2017-11499, ESA-2017-14, \n  ESA-2017-16)\n  * [4.6] ignore forked code for babel transpile build phase (#13483)\n  * Allow more than match queries in custom filters (#8614) (#10857)\n  * [state] don't make extra $location.replace() calls (#9954)\n  * [optimizer] move to querystring-browser package for up-to-date api\n  * [state/unhashUrl] use encode-uri-query to generate cleanly encoded urls\n  * server: refactor log_interceptor to be more DRY (#9617)\n  * server: downgrade ECANCELED logs to debug (#9616)\n  * server: do not treat logged warnings as errors (#8746) (#9610)\n  * [server/logger] downgrade EPIPE errors to debug level (#9023)\n  * Add basepath when redirecting from a trailling slash (#9035)\n  * [es/kibanaIndex] use unmapped_type rather than ignore_unmapped (#8968)\n  * [server/shortUrl] validate urls before shortening them\n- Add CVE-2017-11481.patch (bsc#1044849, CVE-2017-11481)\n  * This fixes an XSS vulnerability in URL fields\n- Remove %dir declaration from /opt/kibana/optimize to ensure\n  no files owned by root end up in there\n- Exclude /opt/kibana/optimize from %fdupes\n- Restart service on upgrade\n- Do not copy LICENSE.txt and README.txt to /opt/kibana\n- Fix rpmlint warnings/errors\n- Switch to explicit patch application\n- Fix source URL\n- Fix logic for systemd/systemv detection\n\nChanges in openstack-heat-templates:\n- Update to version 0.0.0+git.1623056900.7917e18:\n  * Fix zuul config for heat-templates-check\n\n- Update to version 0.0.0+git.1621405516.71a0f7a:\n  * Remove testr\n\nChanges in openstack-monasca-installer:\n- Add 0001-fix-influxdb-stop-task.patch (SOC-11470)\n- Add 0001-fix-cassandra-deployment.patch (SOC-11470)\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev92:\n  * Lowercase ironic driver hash ring and ignore case in cache\n  * Include only required fields in ironic node cache\n  * Add resource\\_class to fields in ironic node cache\n\n- Update to version nova-16.1.9.dev86:\n  * [stable-only] Move grenade jobs to experimental\n  * Update resources once in update\\_available\\_resource\n  * rt: Make resource tracker always invoking get\\_inventory()\n\n- Update to version nova-16.1.9.dev81:\n  * [stable-only] gate: Pin CEPH\\_RELEASE to nautilus in LM hook\n\n- Update to version nova-16.1.9.dev80:\n  * [placement] Add status and links fields to version document at /\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev92:\n  * Lowercase ironic driver hash ring and ignore case in cache\n  * Include only required fields in ironic node cache\n  * Add resource\\_class to fields in ironic node cache\n\n- Update to version nova-16.1.9.dev86:\n  * [stable-only] Move grenade jobs to experimental\n  * Update resources once in update\\_available\\_resource\n  * rt: Make resource tracker always invoking get\\_inventory()\n\n- Update to version nova-16.1.9.dev81:\n  * [stable-only] gate: Pin CEPH\\_RELEASE to nautilus in LM hook\n\n- Update to version nova-16.1.9.dev80:\n  * [placement] Add status and links fields to version document at /\n\nChanges in python-Django:\n- Add CVE-2021-33203.patch (bsc#1186608, CVE-2021-33203)\n    * Fixed potential path-traversal via admindocs' TemplateDetailView.\n- Add CVE-2021-33571.patch (bsc#1186611, CVE-2021-33571)\n    * Prevented leading zeros in IPv4 addresses.\n\n- Add CVE-2021-31542.patch (bsc#1185623, CVE-2021-31542)\n    * Fixed CVE-2021-31542 -- Tightened path and file name sanitation in file\n      uploads.\n\n- Add CVE-2021-28658.patch (bsc#1184148, CVE-2021-28658)\n  * Fixed potential directory-traversal via uploaded files\n\n- Add CVE-2021-23336.patch (bsc#1182433, CVE-2021-23336)\n  * Fixed web cache poisoning via django.utils.http.limited_parse_qsl()\n\nChanges in python-eventlet:\n- Add 0001-websocket-fd-leak-when-client-did-not-close-connecti.patch \n- Add 0002-websocket-Limit-maximum-uncompressed-frame-length-to.patch (bsc#1185836 CVE-2021-21419)\n    * websocket: Limit maximum uncompressed frame length to 8MiB\n\nChanges in python-py:\n- Add CVE-2020-29651.patch ((bsc#1179805, CVE-2020-29651)\n  * svnwc: fix regular expression vulnerable to DoS in blame\n    functionality\n\nChanges in python-pysaml2:\n- Add %dir declaration for %{_licensedir}\n\n- Fix CVE-2021-21238, bsc#1181277 with\n  0004-Strengthen-XSW-tests.patch ,\n  0005-Fix-the-parser-to-not-break-on-ePTID-AttributeValues.patch ,\n  0006-Add-xsd-schemas.patch ,\n  0007-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch .\n  This adds a dependency on python-xmlschema, which depends on\n  python-elementpath and build depends python-pathlib2, which depends on\n  python-scandir, thus all these need to be added for this to work.\n  The used python-xmlschema needs to support the sandbox argument\n  which was added in 1.2.0 and refined in 1.2.1, but that version\n  doesn't support python2, so a patched version that does both is\n  needed.\n  0009-Make-previous-commits-python2-compatible.patch to\n  not add a dependency on reportlib_resources and make other\n  changes python2 compatible.\n- Fix CVE-2021-21239, bsc#1181278 with\n  0008-Fix-CVE-2021-21239-Restrict-the-key-data-that-xmlsec.patch\n\nChanges in venv-openstack-keystone:\n- Add python-xmlschema and python-elementpath for new python-pysaml2 version.\n\nChanges in python-xmlschema:\n\n- Add missed BuildRequires on pathlib2\n\n- Add 3 patches to backport sandbox argument, which is needed by a security fix\n  in python-pysaml2 and one patch to make backport python2 compatible.\n- Upstream url changed\n- Add rpmlintrc to make it work on Leap 42.3\n- Update to 1.0.18:\n  * Fix for *ModelVisitor.iter_unordered_content()*\n  * Fixed default converter, AbderaConverter and JsonMLConverter for xs:anyType decode\n  * Fixed validation tests with all converters\n  * Added UnorderedConverter to validation tests\n- Update to 1.0.17:\n  * Enhancement of validation-only speed (~15%)\n  * Added *is_valid()* and *iter_errors()* to module API\n- Update to 1.0.16:\n  * Improved XMLResource class for working with compressed files\n  * Fix for validation with XSD wildcards and 'lax' process content\n  * Fix ambiguous items validation for xs:choice and xs:sequence models\n\n- Handle UnicodeDecodeErrors during build process\n\n- Update to 1.0.15:\n  * Improved XPath 2.0 bindings\n  * Added logging for schema initialization and building (handled with argument loglevel)\n  * Update encoding of collapsed contents with a new model based reordering method\n  * Removed XLink namespace from meta-schema (loaded from a fallback location like XHTML)\n  * Fixed half of failed W3C instance tests (remain 255 over 15344 tests)\n\n- Initial commit, needed by pytest 5.1.2\n\nChanges in python-elementpath:\n\n- Update to 1.3.1:\n  * Improved schema proxy\n  * Improved XSD type matching using paths\n  * Cached parent path for XPathContext (only Python 3)\n  * Improve typed selection with TypedAttribute and TypedElement named-tuples\n  * Add iter_results to XPathContext\n  * Remove XMLSchemaProxy from package\n  * Fix descendant shortcut operator '//'\n  * Fix text() function\n  * Fix typed select of '(name)' token\n  * Fix 24-hour time for DateTime\n\n- Skip test_hashing to fix 32bit builds\n\n- Initial commit needed by python-xmlschema\n\nChanges in python-six:\n- Update in SLE-12 (bsc#1176784, jsc#ECO-3105, jsc#PM-2352)\n\n- Fix testsuite on SLE-12\n  + Add python to BuildRequires for suse_version less 1500\n\n- Fix dbm deps as the MU for provides: python-dbm was not released\n  on sle12 yet\n- Add requirement on pytest \u003e 4.0 to see the pytest module works\n  with this MU\n\n- Do not cause buildcycle with previous change but rather\n  install the egg-info prepared metadata from the tarball\n\n- use setuptools for building to support pip 10.x (bsc#1166139)\n\n- update to 1.14.0\n * Add `six.assertNotRegex`\n * `six.moves._dummy_thread` now points to the `_thread` module on\n    Python 3.9+. Python 3.7 and later requires threading and deprecated the\n    `_dummy_thread` module\n * Remove support for Python 2.6 and Python 3.2\n * `six.wraps` now ignores missing attributes\n\n- Pull in dbm/gdbm module from python for testing\n\n- update to 0.13.0:\n  - Issue #298, pull request #299: Add `six.moves.dbm_ndbm`.\n  - Issue #155: Add `six.moves.collections_abc`, which aliases the `collections`\n    module on Python 2-3.2 and the `collections.abc` on Python 3.3 and greater.\n  - Pull request #304: Re-add distutils fallback in `setup.py`.\n  - Pull request #305: On Python 3.7, `with_metaclass` supports classes using PEP\n\n- Simplify the pytest call\n\n- Fix pytest call\n- Fixdocumentation package generating\n\n- Change %pretrans back to %pre to fix bootstrap issue\n  boo#1123064 bsc#1143893\n\n- Require just base python module, even full python is too much\n  and it is not required here\n\n- Update to 0.12.0:\n    * `six.add_metaclass` now preserves `__qualname__` from the\n      original class.\n    * Add `six.ensure_binary`, `six.ensure_text`, and\n      `six.ensure_str`.\n- Because of cyclical dependencies between six and Sphinx, we\n  need to to do multibuild.\n\n- Include in SLE-12 (FATE#326838, bsc#1113302)\n\n- remove egg-info directory in %pretrans\n- fix egg-info directory pattern\n- match any version of egg-info for a certain python version\n\n- Break the cycilical dependency on python-setuptools.\n\n- Remove argparse dependency\n\n- build python3 subpackage (FATE#324435, bsc#1073879)\n\n- remove egg-info directory before installation if it exists,\n  because setuptools produce directory and six switched to distutils\n  that produce a file\n  (and because rpm can't handle that by itself)\n  fixes bsc#1057496\n\n- Fix Source url\n\n- README-\u003eREADME.rst, add CHANGES\n- update to version 1.11.0:\n  * Pull request #178: `with_metaclass` now properly proxies\n    `__prepare__` to the underlying metaclass.\n  * Pull request #191: Allow `with_metaclass` to work with metaclasses\n    implemented in C.\n  * Pull request #203: Add parse_http_list and parse_keqv_list to\n    moved urllib.request.\n  * Pull request #172 and issue #171: Add unquote_to_bytes to moved\n    urllib.parse.\n  * Pull request #167: Add `six.moves.getoutput`.\n  * Pull request #80: Add `six.moves.urllib_parse.splitvalue`.\n  * Pull request #75: Add `six.moves.email_mime_image`.\n  * Pull request #72: Avoid creating reference cycles through\n    tracebacks in `reraise`.\n\n- Submit 1.9.0 to SLE-12 (fate#319030, fate#318838, bsc#940812)\n\n- sanitize release line in specfile\n\nChanges in rubygem-activerecord-session_store.SUSE_SLE-12-SP4_Update_Products_Cloud9_Update:\n- added CVE-2019-25025.patch (CVE-2019-25025, bsc#1183174)\n  * This requires CVE-2019-16782.patch to be included in rubygem-actionpack-4_2\n  to work correctly.\n\nChanges in venv-openstack-keystone:\n- Add python-xmlschema and python-elementpath for new python-pysaml2 version.\n\n- Add python-defusedxml (bsc#1019074)\n\n- Inherit version number of venv from main component (SCRD-8523)\n\n  ","status":"published","published":"2021-07-28T15:27:22Z","modified":"2026-02-04T03:30:06.612594Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3729-1","title":"Security update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova, python-eventlet, rubygem-redcarpet, rubygem-puma","description":"This update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova, python-eventlet, rubygem-redcarpet, rubygem-puma contains the following fixes:\n\nSecurity fixes included in this update:\n\nkibana:\nCVE-2021-22141: Fixed URL redirection flaw (bsc#1186868).\n\npython-eventlet:\nCVE-2021-21419: Fixed improper handling of highly compressed data and memory allocation with excessive size value. (bsc#1185836)\n\nrubygem-redcarpet:\nCVE-2020-26298: Fixed XSS via HTML escaping when processing quotes. (bsc#1180837)\n\nrubygem-puma:\nCVE-2021-41136: Fixes build of the Java state machine for parsing HTTP. (bsc#1191681)\n\nNon-security fixes included in this update:\n\nChanges in ardana-ansible:\n  * Patch service.py to skip blank lines.\n\nChanges in ardana-monasca:\n  * Use specific TLS versions for monasca-thresh DB connections. (SOC-11543)\n\nChanges in crowbar-openstack:\n  * keystone wakeup: get new session on any error. (bsc#1189052)\n\nChanges in influxdb:\n- Set GO111MODULE=auto to fix build with go1.16 and later where default is GO111MODULE=on\n\nCanges in kibana:\n  - Fix an open redirect flaw. (CVE-2021-22141, bsc#1186868)\n\nChanges in openstack-cinder:\n  * Fix typo in Dell EMC Unity driver documentation.\n  * Drop lower-constraints job.\n  * [stable-only] Cap bandit to v1.6.2 and fix constraints.\n\nChanges in openstack-ec2-api:\n  * Remove jobs corresponds to obselete featuresets.\n  * OpenDev Migration Patch.\n\nChanges in openstack-heat-gbp:\n  * Add support for Wallaby.\n  * Fix upstream gate.\n\nChanges in openstack-heat-templates:\n  * [ussuri][goal] Update contributor documentation.\n  * Fix zuul config for heat-templates-check.\n  * Remove testr.\n\nChanges in openstack-horizon-plugin-gbp-ui:\n  * Add support for Wallaby.\n  * Fix upstream gate.\n\nChanges in openstack-keystone:\n  * Retry update\\_user when sqlalchemy raises StaleDataErrors.\n  * Pin keystone-tempest-plugin for py27 compatibility.\n\nChanges in openstack-neutron-gbp:\n  * Fix update router API.\n  * Fix HA IP DB migration.\n  * Revert 'Fix HA IP DB migration'.\n  * Fix HA IP DB migration.\n  * Add network\\_id column to apic\\_ml2\\_ha\\_ipaddress\\_to\\_port\\_owner table.\n  * Use custom converter for extra attributes.\n  * Validate network before creating or updating router.\n  * Fix Data Migration query for HA IP table.\n  * System security grp:Add system sg in port sg list.\n  * Add vrf column to apic\\_ml2\\_ha\\_ipaddress\\_to\\_port\\_owner table.\n  * [apic\\_aim]: Fix HA IP UTs.\n  * Fixing the exception msg for IPAddressGenerationFailure.\n  * Enhancement regarding router/instance attachment to an external network floating ip and snat subnets.\n  * Setting legacy-group-based-policy-dsvm-aim to non-voting gate.\n  * Add support for Wallaby.\n  * Bug fixes for gbp-validate.\n  * [apic\\_aim]: Filter endpoint details.\n  * Bugfix: Policy Enforcement Pref.\n  * Fix unit-tests for tenant-scope validation.\n  * [AIM] Add Policy Enforcement Pref to network extension.\n\nChanges in openstack-nova:\n  * [neutron] Get only ID and name of the SGs from Neutron.\n  * Remove allocations before setting vm\\_status to SHELVED\\_OFFLOADED.\n  * libvirt:driver:Disallow AIO=native when 'O\\_DIRECT' is not available.\n  * Update pci stat pools based on PCI device changes.\n  * Use subqueryload() instead of joinedload() for (system\\_)metadata.\n\nChanges in python-eventlet:\n  Websocket: Limit maximum uncompressed frame length to 8MiB. (bsc#1185836 CVE-2021-21419)\n  ","status":"published","published":"2021-11-19T12:39:54Z","modified":"2026-02-04T04:40:14.481672Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-4956-1","title":"python-eventlet vulnerability","description":"It was discovered that Eventlet incorrectly handled certain requests.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2021-05-17T13:32:42Z","modified":"2026-02-10T04:42:12Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}