{"id":"CVE-2021-40085","aliases":["DEBIAN-CVE-2021-40085","DLA-3027-1","DSA-4983-1","EUVD-2021-0145","GHSA-fh73-gjvg-349c","PYSEC-2021-361","RHSA-2021:3481","RHSA-2021:3488","RHSA-2021:3502","RHSA-2021:3503","SUSE-SU-2022:1729-1","SUSE-SU-2022:1884-1","UBUNTU-CVE-2021-40085","USN-6067-1"],"status":"published","title":"OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01866,"percentile":0.79474,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-08-31T15:00:00Z","modified":"2026-10-24T10:30:54Z","fixes":[{"ecosystem":"PyPI","package":"neutron","fixed_in":["16.4.1","17.2.1","18.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"neutron","fixed_in":["2:18.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"neutron","fixed_in":["2:18.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"neutron","fixed_in":["2:18.1.0-3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"neutron","fixed_in":["2:9.1.1-3+deb9u3"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"neutron","fixed_in":["2:13.0.7+git.2021.09.27.bace3d1890-0+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"neutron","fixed_in":["2:17.2.1-0+deb11u1"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-common","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-linuxbridge","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-macvtap-agent","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-metering-agent","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-ml2","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-openvswitch","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-rpc-server","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-sriov-nic-agent","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-neutron","fixed_in":["1:15.2.1-1.20210409073447.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-common","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-linuxbridge","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-macvtap-agent","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-metering-agent","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-ml2","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-openvswitch","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-rpc-server","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-sriov-nic-agent","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-neutron","fixed_in":["1:15.3.5-2.20210608154813.el8ost.3"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-common","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-linuxbridge","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-macvtap-agent","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-metering-agent","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-ml2","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-openvswitch","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-rpc-server","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-sriov-nic-agent","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"python-neutron","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:10::el7","package":"python-neutron-tests","fixed_in":["1:9.4.1-56.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-common","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-linuxbridge","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-macvtap-agent","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-metering-agent","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-ml2","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-openvswitch","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-rpc-server","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-sriov-nic-agent","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-neutron","fixed_in":["1:12.1.1-42.1.el7ost"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"neutron","fixed_in":["2:12.1.1-0ubuntu8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"neutron","fixed_in":["2:16.4.2-0ubuntu6.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.0"},{"fixed":"17.2.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.0.0"},{"fixed":"18.1.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.1.0-3"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.1-3+deb9u3"}]}],"versions":["2:9.1.1-3","2:9.1.1-3+deb9u1","2:9.1.1-3+deb9u2"]},{"source":"osv","ecosystem":"Debian:10","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:13.0.7+git.2021.09.27.bace3d1890-0+deb10u1"}]}],"versions":["2:13.0.2-15"]},{"source":"osv","ecosystem":"Debian:11","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.1-0+deb11u1"}]}],"versions":["2:17.1.1-6"]},{"source":"osv","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4.1"}]}],"versions":["0.0","10.0.5","10.0.6","10.0.7","11.0.3","11.0.4","11.0.5","11.0.6","11.0.7","11.0.8","12.0.0","12.0.0.0b3","12.0.0.0rc1","12.0.0.0rc2","12.0.1","12.0.2","12.0.3","12.0.4","12.0.5","12.0.6","12.1.0","12.1.1","13.0.0","13.0.0.0b1","13.0.0.0b2","13.0.0.0b3","13.0.0.0rc1","13.0.0.0rc2","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","14.0.0","14.0.0.0b1","14.0.0.0b2","14.0.0.0b3","14.0.0.0rc1","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.3.0","14.3.1","14.4.0","14.4.1","14.4.2","15.0.0","15.0.0.0b1","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.0.2","15.1.0","15.2.0","15.3.0","15.3.1","15.3.2","15.3.3","15.3.4","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.1.0","16.2.0","16.3.0","16.3.1","16.3.2","16.4.0"]},{"source":"osv","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.0"},{"fixed":"17.2.1"}]}],"versions":["17.0.0","17.1.0","17.1.1","17.1.2","17.2.0"]},{"source":"osv","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.0.0"},{"fixed":"18.1.1"}]}],"versions":["18.0.0","18.1.0"]},{"source":"osv","ecosystem":"PyPI","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4.1"},{"introduced":"17.0.0"},{"fixed":"17.2.1"},{"introduced":"18.0.0"},{"fixed":"18.1.1"}]}],"versions":["0.0","10.0.5","10.0.6","10.0.7","11.0.3","11.0.4","11.0.5","11.0.6","11.0.7","11.0.8","12.0.0","12.0.0.0b3","12.0.0.0rc1","12.0.0.0rc2","12.0.1","12.0.2","12.0.3","12.0.4","12.0.5","12.0.6","12.1.0","12.1.1","13.0.0","13.0.0.0b1","13.0.0.0b2","13.0.0.0b3","13.0.0.0rc1","13.0.0.0rc2","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","14.0.0","14.0.0.0b1","14.0.0.0b2","14.0.0.0b3","14.0.0.0rc1","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.3.0","14.3.1","14.4.0","14.4.1","14.4.2","15.0.0","15.0.0.0b1","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.0.2","15.1.0","15.2.0","15.3.0","15.3.1","15.3.2","15.3.3","15.3.4","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.1.0","16.2.0","16.3.0","16.3.1","16.3.2","16.4.0","17.0.0","17.1.0","17.1.1","17.1.2","17.2.0","18.0.0","18.1.0"]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-linuxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-macvtap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-metering-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-ml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-rpc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-neutron-sriov-nic-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.2.1-1.20210409073447.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-linuxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-macvtap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-metering-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-ml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-rpc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-neutron-sriov-nic-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.3.5-2.20210608154813.el8ost.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-linuxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-macvtap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-metering-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-ml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-rpc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"openstack-neutron-sriov-nic-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"python-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"python-neutron-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.4.1-56.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-linuxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-macvtap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-metering-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-ml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-openvswitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-rpc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-neutron-sriov-nic-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.1.1-42.1.el7ost"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1644879908.8a641c1-3.13.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-3.26.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.14.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev24-3.34.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev4-3.9.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-horizon-plugin-gbp-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev3-3.9.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev18-3.28.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev9-3.28.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev206-3.40.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev33-3.31.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-3.17.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-XStatic-jquery-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0.1-4.3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-3.3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"release-notes-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20220413-3.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.35.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev24-3.38.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2~dev2-3.35.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.4~dev4-3.35.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev11-4.39.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev18-4.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev9-3.36.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-4.35.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.2~dev60-3.41.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1~dev10-3.37.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2~dev3-3.35.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev206-6.39.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev91-3.39.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3~dev7-4.35.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.35.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-2.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.4-3.26.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.14.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev24-3.34.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev4-3.9.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-horizon-plugin-gbp-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev3-3.9.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev18-3.28.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev9-3.28.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev206-3.40.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev33-3.31.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-3.17.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-XStatic-jquery-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0.1-4.3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-3.3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"release-notes-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20220413-3.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-4.3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-3.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-3.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-3.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-3.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-3.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-3.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:7.0.0-0ubuntu1","2:8.0.0~b1-0ubuntu2","2:8.0.0~b2-0ubuntu4","2:8.0.0~b2-0ubuntu5","2:8.0.0~b2-0ubuntu7","2:8.0.0~b3-0ubuntu1","2:8.0.0~rc1-0ubuntu1","2:8.0.0-0ubuntu1","2:8.1.0-0ubuntu0.16.04.2","2:8.1.2-0ubuntu1","2:8.2.0-0ubuntu1","2:8.3.0-0ubuntu1","2:8.3.0-0ubuntu1.1","2:8.3.0-0ubuntu1.2","2:8.4.0-0ubuntu1","2:8.4.0-0ubuntu2","2:8.4.0-0ubuntu3","2:8.4.0-0ubuntu4","2:8.4.0-0ubuntu5","2:8.4.0-0ubuntu6","2:8.4.0-0ubuntu7.1","2:8.4.0-0ubuntu7.2","2:8.4.0-0ubuntu7.3","2:8.4.0-0ubuntu7.4","2:8.4.0-0ubuntu7.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.1.1-0ubuntu8.1"}]}],"versions":["2:11.0.1-0ubuntu1","2:12.0.0~b1-0ubuntu1","2:12.0.0~b1-0ubuntu2","2:12.0.0~b2-0ubuntu1","2:12.0.0~b3-0ubuntu1","2:12.0.0~rc1-0ubuntu1","2:12.0.0~rc2-0ubuntu1","2:12.0.0-0ubuntu1","2:12.0.0-0ubuntu1.1","2:12.0.0-0ubuntu1.2","2:12.0.0-0ubuntu1.3","2:12.0.0-0ubuntu1.4","2:12.0.0-0ubuntu2","2:12.0.0-0ubuntu3","2:12.0.1-0ubuntu1","2:12.0.1-0ubuntu1.1","2:12.0.2-0ubuntu1","2:12.0.3-0ubuntu1","2:12.0.5-0ubuntu1","2:12.0.5-0ubuntu4","2:12.0.5-0ubuntu5","2:12.0.6-0ubuntu1","2:12.0.6-0ubuntu2","2:12.0.6-0ubuntu3","2:12.1.0-0ubuntu1","2:12.1.1-0ubuntu1","2:12.1.1-0ubuntu2","2:12.1.1-0ubuntu3","2:12.1.1-0ubuntu4","2:12.1.1-0ubuntu7","2:12.1.1-0ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu6.2"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1","2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1","2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4","2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1","2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1","2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2","2:16.0.0-0ubuntu0.20.04.1","2:16.0.0-0ubuntu0.20.04.2","2:16.1.0-0ubuntu1","2:16.1.0-0ubuntu2","2:16.2.0-0ubuntu1","2:16.2.0-0ubuntu2","2:16.2.0-0ubuntu3","2:16.3.0-0ubuntu3","2:16.3.1-0ubuntu1","2:16.3.1-0ubuntu1.1","2:16.3.2-0ubuntu2","2:16.3.2-0ubuntu3","2:16.4.0-0ubuntu2","2:16.4.0-0ubuntu3","2:16.4.1-0ubuntu2","2:16.4.2-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu3","2:16.4.2-0ubuntu4","2:16.4.2-0ubuntu5","2:16.4.2-0ubuntu6","2:16.4.2-0ubuntu6.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.1.1-0ubuntu8.1"}]}],"versions":["2:11.0.1-0ubuntu1","2:12.0.0~b1-0ubuntu1","2:12.0.0~b1-0ubuntu2","2:12.0.0~b2-0ubuntu1","2:12.0.0~b3-0ubuntu1","2:12.0.0~rc1-0ubuntu1","2:12.0.0~rc2-0ubuntu1","2:12.0.0-0ubuntu1","2:12.0.0-0ubuntu1.1","2:12.0.0-0ubuntu1.2","2:12.0.0-0ubuntu1.3","2:12.0.0-0ubuntu1.4","2:12.0.0-0ubuntu2","2:12.0.0-0ubuntu3","2:12.0.1-0ubuntu1","2:12.0.1-0ubuntu1.1","2:12.0.2-0ubuntu1","2:12.0.3-0ubuntu1","2:12.0.5-0ubuntu1","2:12.0.5-0ubuntu4","2:12.0.5-0ubuntu5","2:12.0.6-0ubuntu1","2:12.0.6-0ubuntu2","2:12.0.6-0ubuntu3","2:12.1.0-0ubuntu1","2:12.1.1-0ubuntu1","2:12.1.1-0ubuntu2","2:12.1.1-0ubuntu3","2:12.1.1-0ubuntu4","2:12.1.1-0ubuntu7","2:12.1.1-0ubuntu8"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu6.2"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1","2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1","2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3","2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4","2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1","2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1","2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2","2:16.0.0-0ubuntu0.20.04.1","2:16.0.0-0ubuntu0.20.04.2","2:16.1.0-0ubuntu1","2:16.1.0-0ubuntu2","2:16.2.0-0ubuntu1","2:16.2.0-0ubuntu2","2:16.2.0-0ubuntu3","2:16.3.0-0ubuntu3","2:16.3.1-0ubuntu1","2:16.3.1-0ubuntu1.1","2:16.3.2-0ubuntu2","2:16.3.2-0ubuntu3","2:16.4.0-0ubuntu2","2:16.4.0-0ubuntu3","2:16.4.1-0ubuntu2","2:16.4.2-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu3","2:16.4.2-0ubuntu4","2:16.4.2-0ubuntu5","2:16.4.2-0ubuntu6","2:16.4.2-0ubuntu6.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.3.0-0ubuntu1.1"}]}],"versions":["2:19.0.0-0ubuntu1","2:19.1.0+git2022030313.b072cbf05f-0ubuntu1","2:20.0.0-0ubuntu1","2:20.0.0-0ubuntu2","2:20.0.0-0ubuntu3","2:20.1.0-0ubuntu2","2:20.2.0-0ubuntu1","2:20.3.0-0ubuntu1"],"bundled":5}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openstack","product":"neutron"}],"references":[{"url":"https://launchpad.net/bugs/1939733","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"http://www.openwall.com/lists/oss-security/2021/08/31/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.openstack.org/ossa/OSSA-2021-005.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2021/dsa-4983","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40085","tags":["advisory"]},{"url":"https://github.com/openstack/neutron/commit/df891f0593d234e01f27d7c0376d9702e178ecfb","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/neutron/PYSEC-2021-361.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-fh73-gjvg-349c","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-40085","tags":["advisory"]},{"url":"https://github.com/openstack/neutron","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3481","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998052","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3481.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-40085","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-40085","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3488","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1916701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1938966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979572","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3488.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3502","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3502.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3503","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3503.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221729-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118088","tags":["report"]},{"url":"https://bugzilla.suse.com/1179534","tags":["report"]},{"url":"https://bugzilla.suse.com/1184177","tags":["report"]},{"url":"https://bugzilla.suse.com/1186380","tags":["report"]},{"url":"https://bugzilla.suse.com/1189390","tags":["report"]},{"url":"https://bugzilla.suse.com/1189794","tags":["report"]},{"url":"https://bugzilla.suse.com/1192070","tags":["report"]},{"url":"https://bugzilla.suse.com/1192073","tags":["report"]},{"url":"https://bugzilla.suse.com/1192075","tags":["report"]},{"url":"https://bugzilla.suse.com/1193597","tags":["report"]},{"url":"https://bugzilla.suse.com/1193688","tags":["report"]},{"url":"https://bugzilla.suse.com/1193752","tags":["report"]},{"url":"https://bugzilla.suse.com/1194521","tags":["report"]},{"url":"https://bugzilla.suse.com/1194551","tags":["report"]},{"url":"https://bugzilla.suse.com/1194552","tags":["report"]},{"url":"https://bugzilla.suse.com/1194952","tags":["report"]},{"url":"https://bugzilla.suse.com/1194954","tags":["report"]},{"url":"https://bugzilla.suse.com/1199138","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29970","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221884-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190339","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40797","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-40085","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6067-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-20267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-40797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3277","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-40085","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2021-08-31T17:32:24Z","modified":"2024-08-04T02:27:31.442Z","updated_at":"2026-11-02T14:33:01.852999Z"}],"euvd":[{"id":"EUVD-2021-0145","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2021-08-31T17:32:24Z","modified":"2024-08-04T02:27:31Z","updated_at":"2026-11-03T03:24:21.368958Z"}],"ghsa":[{"id":"GHSA-fh73-gjvg-349c","title":"OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2022-05-24T19:12:33Z","modified":"2024-10-07T14:47:10Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T14:38:08.742903Z"}],"nvd":[{"id":"CVE-2021-40085","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2021-08-31T18:15:08.837Z","modified":"2026-06-17T04:06:29.6Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:57.67549Z"}],"osv":[{"id":"CVE-2021-40085","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2021-08-31T18:15:08.837Z","modified":"2026-10-24T10:30:54.717774339Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-40085","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2021-08-31T18:15:08.837Z","modified":"2026-10-23T18:05:23.149260729Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"GHSA-fh73-gjvg-349c","title":"OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2022-05-24T19:12:33Z","modified":"2024-12-07T05:38:25.490395Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:46:46.39441Z"},{"id":"RHSA-2021:3481","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (openstack-neutron) security update","status":"published","published":"2024-09-13T17:27:10Z","modified":"2026-10-14T10:01:47Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3488","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update","status":"published","published":"2024-09-13T17:27:45Z","modified":"2026-10-14T10:01:48Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3502","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 10.0 (openstack-neutron) security update","status":"published","published":"2024-09-13T17:27:18Z","modified":"2026-10-14T10:01:48Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3503","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (openstack-neutron) security update","status":"published","published":"2024-09-13T17:27:24Z","modified":"2026-10-14T10:01:49Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2021-40085","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2021-08-31T15:00:00Z","modified":"2026-02-04T04:31:37.337496Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"DLA-3027-1","title":"neutron - security update","status":"published","published":"2022-05-26T00:00:00Z","modified":"2026-03-09T01:22:31.908809Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4983-1","title":"neutron - security update","status":"published","published":"2021-10-10T00:00:00Z","modified":"2026-03-09T02:10:39.66605Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"PYSEC-2021-361","description":"An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.","status":"published","published":"2021-08-31T18:15:00Z","modified":"2026-06-10T17:02:23.776282871Z","updated_at":"2026-11-02T15:52:52.682031Z"},{"id":"SUSE-SU-2022:1729-1","title":"Security update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud","description":"This update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud fixes the following issues:\n\nSecurity fixes included on the update:\n\nardana-barbican:\n\n- Update policies to protect container secret access (SOC-11621)\n- Update policies to protect secret metadata access (SOC-11620)\n\nopenstack-neutron:\n\n- CVE-2021-40085: Fixed arbitrary dnsmasq reconfiguration via extra_dhcp_opts (bsc#1189794).\n\nrubygem-sinatra:\n\n- CVE-2022-29970: Fixed path traversal possible outside of public_dir when serving static files (bsc#1199138).\n\npython-XStatic-jquery-ui:\n\n- CVE-2021-41182: Fixed XSS in the `altField` option of the Datepicker widget (bsc#1192070)\n- CVE-2021-41183: Fixed XSS in the `of` option of the `.position()` util (bsc#1192073)\n- CVE-2021-41184: Fixed XSS in `*Text` options of the Datepicker widget (bsc#1192075)\n\npython-lxml:\n\n- CVE-2018-19787: Fixed that the lxml.html.clean module does remove javascript in lxml/html/clean.py (bsc#1118088).\n- CVE-2020-27783: Fixed mXSS due to the use of improper parser (bsc#1179534).\n- CVE-2021-28957: Fixed missing input sanitization for formaction HTML5 attributes that may have led to XSS (bsc#1184177).\n- CVE-2021-43818: Fixed HTML Cleaner that allowed crafted and SVG embedded scripts to pass through (bsc#1193752).\n\nopenstack-barbican:\n\n- CVE-2022-23451: Disallows authenticated users to add/modify/delete arbitrary metadata on any secret (bsc#1194952).\n- CVE-2022-23452: Disallows anyone with an admin role to add their secrets to a different project's containers (bsc#1194954).\n\ngrafana:\n\n- CVE-2021-44716: Fixed net/http: limit growth of header canonicalization cache (bsc#1193597).\n\nopenstack-keystone:\n\n- CVE-2021-38155: Fixed information disclosure during account locking (bsc#1189390).\n\nNon-security fixes included on the update:\n\nChanges in ardana-barbican:\n- Update to version 9.0+git.1644879908.8a641c1:\n  * Update policies to protect container secret access (SOC-11621)\n\n- Update to version 9.0+git.1643052417.9a3348e:\n  * update policies to protect secret metadata access (SOC-11620)\n\nChanges in grafana:\n- Add CVE-2021-43813.patch (bsc#1193688, CVE-2021-43813)\n  * directory traversal vulnerability for .md files \n\n- Bump Go to 1.16 (bsc#1193597, CVE-2021-44716)\n  * Fix Go net/http: limit growth of header canonicalization cache\n\nChanges in openstack-barbican:\n- Add patches (0001-Fix-RBAC-and-ACL-access-for-managing-secret-containe.patch\n  and 0001-Fix-policy-for-adding-a-secret-to-a-container.patch) to fix\n  the legacy policy rules for adding a secret to a container and removing\n  a secret from a container. bsc#1194954,CVE-2022-23452\n\n- Add patch (0001-Fix-secret-metadata-access-rules.patch) to fix the\n  legacy policy rules for accessing secret metadata by checking that\n  the user making the request is authenticated for the project that\n  owns the secret. bsc#1194952,CVE-2022-23451\n\nChanges in openstack-cinder:\n- Update to version cinder-13.0.10.dev24:\n  * Correct group:reset\\_group\\_snapshot\\_status policy\n\nChanges in openstack-cinder:\n- Update to version cinder-13.0.10.dev24:\n  * Correct group:reset\\_group\\_snapshot\\_status policy\n\nChanges in openstack-heat-gbp:\n- Update to version group-based-policy-automation-14.0.1.dev4:\n  * Add support for yoga\n\n- Update to version group-based-policy-automation-14.0.1.dev3:\n  * Python2/3 compatibility fixes\n\n- Update to version group-based-policy-automation-14.0.1.dev2:\n  * Add support for xena\n\n- Update to version group-based-policy-automation-14.0.1.dev1:\n  * Remove py27 from gate jobs\n  14.0.0\n\nChanges in openstack-horizon-plugin-gbp-ui:\n- Update to version group-based-policy-ui-14.0.1.dev3:\n  * Add support for yoga\n\n- Update to version group-based-policy-ui-14.0.1.dev2:\n  * Python2/3 compatibility changes\n\n- Update to version group-based-policy-ui-14.0.1.dev1:\n  * Add support for xena\n  14.0.0\n\nChanges in openstack-ironic:\n- Update to version ironic-11.1.5.dev18:\n  * Cleanup stable/rocky legacy jobs\n\nChanges in openstack-ironic:\n- Update to version ironic-11.1.5.dev18:\n  * Cleanup stable/rocky legacy jobs\n\nChanges in openstack-keystone:\n- Update to version keystone-14.2.1.dev9:\n  * Delete system role assignments from system\\_assignment table\n\nChanges in openstack-keystone:\n- Add patch (0001-Hide-AccountLocked-exception-from-end-users.patch) to fix\n  the problem where AccountLocked exception discloses sensitive information.\n  bsc#1189390,CVE-2021-38155\n\n- Update to version keystone-14.2.1.dev9:\n  * Delete system role assignments from system\\_assignment table\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-14.0.1.dev33:\n  * Populate network mtu for erspan\n\n- Update to version group-based-policy-14.0.1.dev32:\n  * ERSPAN config error when Openstack port is created in a different project than network it belongs to\n  2014.2.rc1\n\n- Update to version group-based-policy-14.0.1.dev31:\n  * Python2/3 compatibility fixes\n  2014.2.0rc1\n\n- Update to version group-based-policy-14.0.1.dev29:\n  * Fix oslo\\_i18n usage\n\n- Update to version group-based-policy-14.0.1.dev27:\n  * Update mechanism\\_driver cache\n  2014.2.rc1\n\n- Update to version group-based-policy-14.0.1.dev26:\n  * Add support for xena\n\n- Update to version group-based-policy-14.0.1.dev24:\n  * update\\_floatingip\\_status\\_while\\_deleting\\_the\\_vm\n\n- Update to version group-based-policy-14.0.1.dev22:\n  * Updating host id by appending pid in existing host id\n  2014.2.0rc1\n\n- Update to version group-based-policy-14.0.1.dev20:\n  * Revert 'Add workaround to get\\_subnets'\n\nChanges in python-lxml:\n- Fix bsc#1179534 (CVE-2020-27783)\n  mXSS due to the use of improper parser \n  Patch files: 0001-CVE-2020-27783.patch 0002-CVE-2020-27783.patch\n- Fix bsc#1118088 (CVE-2018-19787)\n  lxml/html/clean.py in the lxml.html.clean module does not remove\n  javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks\n  Patch file: 0001-CVE-2018-19787.patch\n- Fix bsc#1184177 (CVE-2021-28957)\n  missing input sanitization for formaction HTML5 attributes may lead to XSS\n  Patch file: 0001-CVE-2021-28957.patch\n- Fix bsc#1193752 (CVE-2021-43818)\n  Cleaner: Remove SVG image data URLs since they can embed script content.\n  Reported as GHSL-2021-1037 and GHSL-2021-1038 \n  Patch files 0001-CVE-2021-43818.patch 0002-CVE-2021-43818.patch\n\nChanges in openstack-neutron-doc:\n- Update to version neutron-13.0.8.dev206:\n  * Wait longer before deleting DPDK vhu trunk bridges\n\n- Update to version neutron-13.0.8.dev205:\n  * Do no use '--strict' for OF deletion in TRANSIENT\\_TABLE\n\n- Update to version neutron-13.0.8.dev203:\n  * Populate self.floating\\_ips\\_dict using 'ip rule' information\n\n- Update to version neutron-13.0.8.dev201:\n  * [Functional] Wait for the initial state of ha router before test\n  * Don't setup bridge controller if it is already set\n\n- Update to version neutron-13.0.8.dev198:\n  * Remove dhcp\\_extra\\_opt name after first newline character\n\n- Update to version neutron-13.0.8.dev196:\n  * [L3] Use processing queue for network update events\n  * Add extra logs to the network update callback in L3 agent\n\n- Update to version neutron-13.0.8.dev192:\n  * Remove dhcp\\_extra\\_opt value after first newline character\n\n- Update to version neutron-13.0.8.dev190:\n  * Don't use singleton in routes.middleware.RoutesMiddleware\n\n- Update to version neutron-13.0.8.dev189:\n  * Fix notify listener syntax for SEGMENT\\_HOST\\_MAPPING\n\n- Update to version neutron-13.0.8.dev188:\n  * Clean port forwarding cache when router is DOWN\n\n- Update to version neutron-13.0.8.dev186:\n  * Remove FIP agent's gw port when L3 agent is deleted\n\n- Update to version neutron-13.0.8.dev184:\n  * Force to close http connection after notify about HA router status\n\n- Update to version neutron-13.0.8.dev183:\n  * Don't configure dnsmasq entries for 'network' ports\n\n- Update to version neutron-13.0.8.dev181:\n  * Exclude fallback tunnel devices from netns cleanup\n\n- Update to version neutron-13.0.8.dev180:\n  * [DVR] Send allowed address pairs info to the L3 agents\n  * designate: allow PTR zone creation to fail\n  * Don't try to create default SG when security groups are disabled\n\n- Update to version neutron-13.0.8.dev174:\n  * Fix update of trunk subports during live migration\n\n- Update to version neutron-13.0.8.dev172:\n  * [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses\n\n- Update to version neutron-13.0.8.dev170:\n  * Call install\\_ingress\\_direct\\_goto\\_flows() when ovs restarts\n\n- Update to version neutron-13.0.8.dev168:\n  * Fix multicast traffic with IGMP snooping enabled\n\n- Update to version neutron-13.0.8.dev166:\n  * Fix OVS conjunctive IP flows cleanup\n\nChanges in openstack-neutron:\n- Update to version neutron-13.0.8.dev206:\n  * Wait longer before deleting DPDK vhu trunk bridges\n\n- Update to version neutron-13.0.8.dev205:\n  * Do no use '--strict' for OF deletion in TRANSIENT\\_TABLE\n\n- Update to version neutron-13.0.8.dev203:\n  * Populate self.floating\\_ips\\_dict using 'ip rule' information\n\n- Update to version neutron-13.0.8.dev201:\n  * [Functional] Wait for the initial state of ha router before test\n  * Don't setup bridge controller if it is already set\n\n- Update to version neutron-13.0.8.dev198:\n  * Remove dhcp\\_extra\\_opt name after first newline character\n\n- Update to version neutron-13.0.8.dev196:\n  * [L3] Use processing queue for network update events\n  * Add extra logs to the network update callback in L3 agent\n\n- Remove cve-2021-40085-stable-rocky.patch (merged upstream)\n\n- Update to version neutron-13.0.8.dev192:\n  * Remove dhcp\\_extra\\_opt value after first newline character\n\n- Update to version neutron-13.0.8.dev190:\n  * Don't use singleton in routes.middleware.RoutesMiddleware\n\n- Update to version neutron-13.0.8.dev189:\n  * Fix notify listener syntax for SEGMENT\\_HOST\\_MAPPING\n\n- Add cve-2021-40085-stable-rocky.patch (bsc#1189794, CVE-2021-40085) \n  * Remove dhcp_extra_opt value after first newline character\n\n- Update to version neutron-13.0.8.dev188:\n  * Clean port forwarding cache when router is DOWN\n\n- Update to version neutron-13.0.8.dev186:\n  * Remove FIP agent's gw port when L3 agent is deleted\n\n- Update to version neutron-13.0.8.dev184:\n  * Force to close http connection after notify about HA router status\n\n- Update to version neutron-13.0.8.dev183:\n  * Don't configure dnsmasq entries for 'network' ports\n\n- Update to version neutron-13.0.8.dev181:\n  * Exclude fallback tunnel devices from netns cleanup\n\n- Update to version neutron-13.0.8.dev180:\n  * [DVR] Send allowed address pairs info to the L3 agents\n  * designate: allow PTR zone creation to fail\n  * Don't try to create default SG when security groups are disabled\n\n- Update to version neutron-13.0.8.dev174:\n  * Fix update of trunk subports during live migration\n\n- Update to version neutron-13.0.8.dev172:\n  * [ovs fw] Restrict IPv6 NA and DHCP(v6) IP and MAC source addresses\n\n- Update to version neutron-13.0.8.dev170:\n  * Call install\\_ingress\\_direct\\_goto\\_flows() when ovs restarts\n\n- Update to version neutron-13.0.8.dev168:\n  * Fix multicast traffic with IGMP snooping enabled\n\n- Update to version neutron-13.0.8.dev166:\n  * Fix OVS conjunctive IP flows cleanup\n\nChanges in python-Pillow:\n- Add 030-CVE-2022-22817.patch\n   * From upstream, backported\n   * Fixes CVE-2022-22817, bsc#1194521 \n   * test from upstream updated for python2\n\n- Add 028-CVE-2022-22815.patch\n   * From upstream, backported\n   * Fixes CVE-2022-22815, bsc#1194552\n- Add 029-CVE-2022-22816.patch\n   * From upstream, backported\n   * Fixes CVE-2022-22816, bsc#1194551\n\nChanges in python-XStatic-jquery-ui:\n- Update to version 1.13.0.1 (bsc#1192070, CVE-2021-41182, bsc#1192073,\n  CVE-2021-41184, bsc#1192075,  CVE-2021-41183)\n    * Fix XSS in the altField option of the Datepicker widget \n     (CVE-2021-41182)\n    * Fix XSS in *Text options of the Datepicker widget\n     (CVE-2021-41183)\n    * Fix XSS in the of option of the .position() util\n      (CVE-2021-41184)\n    * Drop support for Query 1.7\n    * Accordion: allow function parameter for selecting header\n      elements\n    * Datepicker: add optional onUpdateDatepicker callback\n\nChanges in release-notes-suse-openstack-cloud:\n- Update to version 9.20220413:\n  * Update release notes to indicate support for SES7\n- Update to version 9.20220112:\n  * Add reference to keystone bcrypt issue to known limitations (bsc#1186380)\n\nChanges in rubygem-sinatra:\n- Add CVE-2022-29970.patch (bsc#1199138, CVE-2022-29970)\n\n  ","status":"published","published":"2022-05-18T14:55:52Z","modified":"2026-02-04T03:56:30.500919Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1884-1","title":"Security update for openstack-neutron","description":"This update for openstack-neutron fixes the following issues:\n\n- CVE-2021-40797: Fixed routes middleware memory leak for nonexistent controllers (bsc#1190339).\n- CVE-2021-40085: Fixed arbitrary dnsmasq reconfiguration via extra_dhcp_opts (bsc#1189794).\n","status":"published","published":"2022-05-31T06:55:12Z","modified":"2026-02-04T04:19:39.679624Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-6067-1","title":"neutron vulnerabilities","description":"David Sinquin discovered that OpenStack Neutron incorrectly handled the\ndefault Open vSwitch firewall rules. An attacker could possibly use this\nissue to impersonate the IPv6 addresses of other systems on the network.\nThis issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2021-20267)\n\nJake Yip and Justin Mammarella discovered that OpenStack Neutron\nincorrectly handled the linuxbridge driver when ebtables-nft is being\nused. An attacker could possibly use this issue to impersonate the hardware\naddresss of other systems on the network. This issue only affected Ubuntu\n18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-38598)\n\nPavel Toporkov discovered that OpenStack Neutron incorrectly handled\nextra_dhcp_opts values. An attacker could possibly use this issue to\nreconfigure dnsmasq. This issue only affected Ubuntu 18.04 LTS, and Ubuntu\n20.04 LTS. (CVE-2021-40085)\n\nSlawek Kaplonski discovered that OpenStack Neutron incorrectly handled the\nroutes middleware. An attacker could possibly use this issue to cause the\nAPI worker to consume memory, leading to a denial of service. This issue\nonly affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-40797)\n\nIt was discovered that OpenStack Neutron incorrectly handled certain\nqueries. A remote authenticated user could possibly use this issue to cause\nresource consumption, leading to a denial of service. (CVE-2022-3277)\n","status":"published","published":"2023-05-10T11:30:08Z","modified":"2026-04-27T16:40:25.276108Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}