CVE catalog

CVE-2019-16785

waitress: CVE-2019-16785

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.54% · Oct 25, 2026

Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if a front-end server does not parse header fields with an LF the same way as it does those with a CRLF it can lead to the front-end and the back-end server parsing the same HTTP message in two different ways. This can lead to a potential for HTTP request smuggling/splitting whereby Waitress may see two requests while the front-end server only sees a single HTTP message. This issue is fixed in Waitress 1.4.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwaitresssid3.0.2-2fixed
Debianwaitressforky3.0.2-2fixed
Debianwaitresstrixie3.0.2-1fixed
Debianwaitressbookworm2.1.2-2+deb12u1fixed
Susepython-waitressenterprise storage 51.4.3-3.3.1fixed
Susepython-waitresslinux enterprise module for basesystem 15 sp11.4.3-3.3.1fixed
Susepython-waitresslinux enterprise module for basesystem 15 sp21.4.3-3.3.1fixed
Susepython-waitresslinux enterprise module for package hub 15 sp11.4.3-3.3.1fixed
Susepython-waitresslinux enterprise module for package hub 15 sp21.4.3-3.3.1fixed
Susepython-waitresslinux enterprise high performance computing 15-espos1.4.3-3.3.1fixed
Susepython-waitresslinux enterprise high performance computing 15-ltss1.4.3-3.3.1fixed
Susepython-waitresslinux enterprise server 15-ltss1.4.3-3.3.1fixed
Susepython-waitresslinux enterprise server for sap applications 151.4.3-3.3.1fixed
Suseansible1openstack cloud 91.9.6-9.7.2fixed
Suseardana-ansibleopenstack cloud 99.0+git.1591138508.e269bdb-3.22.2fixed
Suseardana-cobbleropenstack cloud 99.0+git.1588181228.bae3b1f-3.13.2fixed
Suseardana-glanceopenstack cloud 99.0+git.1593631708.9354a78-3.13.2fixed
Suseardana-input-modelopenstack cloud 99.0+git.1589740948.c24fc0b-3.19.2fixed
Suseardana-loggingopenstack cloud 99.0+git.1591193994.d93b668-3.13.2fixed
Suseardana-manilaopenstack cloud 99.0+git.1594158642.b5905e4-3.12.2fixed
Suseardana-monascaopenstack cloud 99.0+git.1589385256.7fbfaaf-3.19.2fixed
Suseardana-mqopenstack cloud 99.0+git.1593618110.cbd1a37-3.16.2fixed
Suseardana-neutronopenstack cloud 99.0+git.1590756257.e09d54f-3.22.2fixed
Suseardana-octaviaopenstack cloud 99.0+git.1590079609.a2ae6ab-3.19.2fixed
Suseardana-tempestopenstack cloud 99.0+git.1593033709.9495bb2-3.16.2fixed
Susegrafanaopenstack cloud 96.2.5-3.12.2fixed
Susekibanaopenstack cloud 94.6.3-4.3.2fixed
Suseopenstack-barbicanopenstack cloud 97.0.1~dev24-3.9.5fixed
Suseopenstack-ceilometeropenstack cloud 911.1.1~dev7-3.16.3fixed
Suseopenstack-cinderopenstack cloud 913.0.10~dev12-3.22.4fixed
Suseopenstack-dashboardopenstack cloud 914.1.1~dev6-3.15.5fixed
Suseopenstack-designateopenstack cloud 97.0.2~dev2-3.19.3fixed
Suseopenstack-heat-templatesopenstack cloud 90.0.0+git.1582270132.8a20477-3.6.2fixed
Suseopenstack-ironicopenstack cloud 911.1.5~dev6-3.19.3fixed
Suseopenstack-keystoneopenstack cloud 914.2.1~dev4-3.22.3fixed
Suseopenstack-magnumopenstack cloud 97.2.1~dev1-3.13.3fixed
Suseopenstack-manilaopenstack cloud 97.4.2~dev31-4.24.3fixed
Suseopenstack-monasca-agentopenstack cloud 92.8.2~dev5-3.9.3fixed
Suseopenstack-neutronopenstack cloud 913.0.8~dev68-3.25.3fixed
Suseopenstack-neutron-vsphereopenstack cloud 92.0.1~dev167-3.3.3fixed
Suseopenstack-novaopenstack cloud 918.3.1~dev38-3.25.4fixed
Suseopenstack-octaviaopenstack cloud 93.2.3~dev7-3.25.3fixed
Suseopenstack-octavia-amphora-imageopenstack cloud 90.1.4-7.12.3fixed
Suseopenstack-resource-agentsopenstack cloud 91.0+git.1569436425.8b9c49f-5.3.2fixed
Susepython-Django1openstack cloud 91.11.29-3.15.2fixed
Susepython-Pillowopenstack cloud 95.2.0-3.3.2fixed
Susepython-ardana-packageropenstack cloud 90.0.3-9.3.2fixed
Susepython-heatclientopenstack cloud 91.16.3-3.3.3fixed
Susepython-neutron-tempest-pluginopenstack cloud 90.2.0-3.3.2fixed
Susepython-octavia-tempest-pluginopenstack cloud 90.2.0-3.3.2fixed
Susepython-os-brickopenstack cloud 92.5.10-3.12.3fixed
Susepython-oslo.messagingopenstack cloud 98.1.4-3.6.2fixed
Susepython-pyroute2openstack cloud 90.5.2-4.3.2fixed
Susepython-urllib3openstack cloud 91.23-3.12.2fixed
Susepython-waitressopenstack cloud 91.4.3-3.3.1fixed
Suserelease-notes-suse-openstack-cloudopenstack cloud 99.20200610-3.21.4fixed
Susevenv-openstack-barbicanopenstack cloud 97.0.1~dev24-3.19.3fixed
Susevenv-openstack-cinderopenstack cloud 913.0.10~dev12-3.19.2fixed
Susevenv-openstack-designateopenstack cloud 97.0.2~dev2-3.19.2fixed
Susevenv-openstack-glanceopenstack cloud 917.0.1~dev30-3.17.2fixed
Susevenv-openstack-heatopenstack cloud 911.0.3~dev35-3.19.2fixed
Susevenv-openstack-horizonopenstack cloud 914.1.1~dev6-4.18.3fixed
Susevenv-openstack-ironicopenstack cloud 911.1.5~dev6-4.15.2fixed
Susevenv-openstack-keystoneopenstack cloud 914.2.1~dev4-3.19.2fixed
Susevenv-openstack-magnumopenstack cloud 97.2.1~dev1-4.19.2fixed
Susevenv-openstack-manilaopenstack cloud 97.4.2~dev31-3.21.2fixed
Susevenv-openstack-monascaopenstack cloud 92.7.1~dev10-3.17.3fixed
Susevenv-openstack-monasca-ceilometeropenstack cloud 91.8.2~dev3-3.19.2fixed
Susevenv-openstack-neutronopenstack cloud 913.0.8~dev68-6.19.2fixed
Susevenv-openstack-novaopenstack cloud 918.3.1~dev38-3.19.3fixed
Susevenv-openstack-octaviaopenstack cloud 93.2.3~dev7-4.19.2fixed
Susevenv-openstack-saharaopenstack cloud 99.0.2~dev15-3.19.2fixed
Susevenv-openstack-swiftopenstack cloud 92.19.2~dev48-2.14.2fixed
Susecrowbar-coreopenstack cloud crowbar 96.0+git.1594619891.b75a61d0d-3.25.5fixed
Susecrowbar-openstackopenstack cloud crowbar 96.0+git.1591795073.49cb6400e-3.25.3fixed
Susegrafanaopenstack cloud crowbar 96.2.5-3.12.2fixed
Susekibanaopenstack cloud crowbar 94.6.3-4.3.2fixed
Suseopenstack-barbicanopenstack cloud crowbar 97.0.1~dev24-3.9.5fixed
Suseopenstack-ceilometeropenstack cloud crowbar 911.1.1~dev7-3.16.3fixed
Suseopenstack-cinderopenstack cloud crowbar 913.0.10~dev12-3.22.4fixed
Suseopenstack-dashboardopenstack cloud crowbar 914.1.1~dev6-3.15.5fixed
Suseopenstack-designateopenstack cloud crowbar 97.0.2~dev2-3.19.3fixed
Suseopenstack-heat-templatesopenstack cloud crowbar 90.0.0+git.1582270132.8a20477-3.6.2fixed
Suseopenstack-ironicopenstack cloud crowbar 911.1.5~dev6-3.19.3fixed
Suseopenstack-keystoneopenstack cloud crowbar 914.2.1~dev4-3.22.3fixed
Suseopenstack-magnumopenstack cloud crowbar 97.2.1~dev1-3.13.3fixed
Suseopenstack-manilaopenstack cloud crowbar 97.4.2~dev31-4.24.3fixed
Suseopenstack-monasca-agentopenstack cloud crowbar 92.8.2~dev5-3.9.3fixed
Suseopenstack-neutronopenstack cloud crowbar 913.0.8~dev68-3.25.3fixed
Suseopenstack-neutron-vsphereopenstack cloud crowbar 92.0.1~dev167-3.3.3fixed
Suseopenstack-novaopenstack cloud crowbar 918.3.1~dev38-3.25.4fixed
Suseopenstack-octaviaopenstack cloud crowbar 93.2.3~dev7-3.25.3fixed
Suseopenstack-octavia-amphora-imageopenstack cloud crowbar 90.1.4-7.12.3fixed
Suseopenstack-resource-agentsopenstack cloud crowbar 91.0+git.1569436425.8b9c49f-5.3.2fixed
Susepython-Django1openstack cloud crowbar 91.11.29-3.15.2fixed
Susepython-Pillowopenstack cloud crowbar 95.2.0-3.3.2fixed
Susepython-heatclientopenstack cloud crowbar 91.16.3-3.3.3fixed
Susepython-neutron-tempest-pluginopenstack cloud crowbar 90.2.0-3.3.2fixed
Susepython-octavia-tempest-pluginopenstack cloud crowbar 90.2.0-3.3.2fixed
Susepython-os-brickopenstack cloud crowbar 92.5.10-3.12.3fixed
Susepython-oslo.messagingopenstack cloud crowbar 98.1.4-3.6.2fixed
Susepython-pyroute2openstack cloud crowbar 90.5.2-4.3.2fixed
Susepython-urllib3openstack cloud crowbar 91.23-3.12.2fixed
Susepython-waitressopenstack cloud crowbar 91.4.3-3.3.1fixed
Suserelease-notes-suse-openstack-cloudopenstack cloud crowbar 99.20200610-3.21.4fixed
Suserubygem-activeresourceopenstack cloud crowbar 94.0.0-4.3.1fixed
Suserubygem-json-1_7openstack cloud crowbar 91.7.7-4.3.1fixed
Suserubygem-pumaopenstack cloud crowbar 92.16.0-4.9.1fixed
Opensusepython-waitressleap 15.11.4.3-lp151.3.3.1fixed
Opensusepython-waitressleap 15.21.4.3-lp152.4.3.1fixed
Ubuntuwaitress16.040.8.9-2ubuntu1vulnerable
Ubuntuwaitress16.040.8.10-1vulnerable
Ubuntuwaitress18.041.0.1-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwaitresssourcesid1.4.1-1not yet assignedNot reported[947306]
Debianwaitresssourceforky1.4.1-1not yet assignedNot reported[947306]
Debianwaitresssourcetrixie1.4.1-1not yet assignedNot reported[947306]
Debianwaitresssourcebookworm1.4.1-1not yet assignedNot reported[947306]
Susepython-waitressrpmenterprise storage 51.4.3-3.3.1Not reportedSUSE-SU-2020:3292-1Not reported
Susepython-waitressrpmlinux enterprise module for basesystem 15 sp11.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Susepython-waitressrpmlinux enterprise module for basesystem 15 sp21.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Susepython-waitressrpmlinux enterprise module for package hub 15 sp11.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Susepython-waitressrpmlinux enterprise module for package hub 15 sp21.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Susepython-waitressrpmlinux enterprise high performance computing 15-espos1.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Susepython-waitressrpmlinux enterprise high performance computing 15-ltss1.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Susepython-waitressrpmlinux enterprise server 15-ltss1.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Susepython-waitressrpmlinux enterprise server for sap applications 151.4.3-3.3.1Not reportedSUSE-SU-2020:3269-1Not reported
Suseansible1rpmopenstack cloud 91.9.6-9.7.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-ansiblerpmopenstack cloud 99.0+git.1591138508.e269bdb-3.22.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-cobblerrpmopenstack cloud 99.0+git.1588181228.bae3b1f-3.13.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-glancerpmopenstack cloud 99.0+git.1593631708.9354a78-3.13.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-input-modelrpmopenstack cloud 99.0+git.1589740948.c24fc0b-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-loggingrpmopenstack cloud 99.0+git.1591193994.d93b668-3.13.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-manilarpmopenstack cloud 99.0+git.1594158642.b5905e4-3.12.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-monascarpmopenstack cloud 99.0+git.1589385256.7fbfaaf-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-mqrpmopenstack cloud 99.0+git.1593618110.cbd1a37-3.16.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-neutronrpmopenstack cloud 99.0+git.1590756257.e09d54f-3.22.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-octaviarpmopenstack cloud 99.0+git.1590079609.a2ae6ab-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseardana-tempestrpmopenstack cloud 99.0+git.1593033709.9495bb2-3.16.2Not reportedSUSE-RU-2020:2161-1Not reported
Susegrafanarpmopenstack cloud 96.2.5-3.12.2Not reportedSUSE-RU-2020:2161-1Not reported
Susekibanarpmopenstack cloud 94.6.3-4.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-barbicanrpmopenstack cloud 97.0.1~dev24-3.9.5Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-ceilometerrpmopenstack cloud 911.1.1~dev7-3.16.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-cinderrpmopenstack cloud 913.0.10~dev12-3.22.4Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-dashboardrpmopenstack cloud 914.1.1~dev6-3.15.5Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-designaterpmopenstack cloud 97.0.2~dev2-3.19.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-heat-templatesrpmopenstack cloud 90.0.0+git.1582270132.8a20477-3.6.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-ironicrpmopenstack cloud 911.1.5~dev6-3.19.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-keystonerpmopenstack cloud 914.2.1~dev4-3.22.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-magnumrpmopenstack cloud 97.2.1~dev1-3.13.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-manilarpmopenstack cloud 97.4.2~dev31-4.24.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-monasca-agentrpmopenstack cloud 92.8.2~dev5-3.9.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-neutronrpmopenstack cloud 913.0.8~dev68-3.25.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-neutron-vsphererpmopenstack cloud 92.0.1~dev167-3.3.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-novarpmopenstack cloud 918.3.1~dev38-3.25.4Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-octaviarpmopenstack cloud 93.2.3~dev7-3.25.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-octavia-amphora-imagerpmopenstack cloud 90.1.4-7.12.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-resource-agentsrpmopenstack cloud 91.0+git.1569436425.8b9c49f-5.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-Django1rpmopenstack cloud 91.11.29-3.15.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-Pillowrpmopenstack cloud 95.2.0-3.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-ardana-packagerrpmopenstack cloud 90.0.3-9.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-heatclientrpmopenstack cloud 91.16.3-3.3.3Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-neutron-tempest-pluginrpmopenstack cloud 90.2.0-3.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-octavia-tempest-pluginrpmopenstack cloud 90.2.0-3.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-os-brickrpmopenstack cloud 92.5.10-3.12.3Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-oslo.messagingrpmopenstack cloud 98.1.4-3.6.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-pyroute2rpmopenstack cloud 90.5.2-4.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-urllib3rpmopenstack cloud 91.23-3.12.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-waitressrpmopenstack cloud 91.4.3-3.3.1Not reportedSUSE-RU-2020:2161-1Not reported
Suserelease-notes-suse-openstack-cloudrpmopenstack cloud 99.20200610-3.21.4Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-barbicanrpmopenstack cloud 97.0.1~dev24-3.19.3Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-cinderrpmopenstack cloud 913.0.10~dev12-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-designaterpmopenstack cloud 97.0.2~dev2-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-glancerpmopenstack cloud 917.0.1~dev30-3.17.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-heatrpmopenstack cloud 911.0.3~dev35-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-horizonrpmopenstack cloud 914.1.1~dev6-4.18.3Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-ironicrpmopenstack cloud 911.1.5~dev6-4.15.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-keystonerpmopenstack cloud 914.2.1~dev4-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-magnumrpmopenstack cloud 97.2.1~dev1-4.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-manilarpmopenstack cloud 97.4.2~dev31-3.21.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-monascarpmopenstack cloud 92.7.1~dev10-3.17.3Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-monasca-ceilometerrpmopenstack cloud 91.8.2~dev3-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-neutronrpmopenstack cloud 913.0.8~dev68-6.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-novarpmopenstack cloud 918.3.1~dev38-3.19.3Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-octaviarpmopenstack cloud 93.2.3~dev7-4.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-sahararpmopenstack cloud 99.0.2~dev15-3.19.2Not reportedSUSE-RU-2020:2161-1Not reported
Susevenv-openstack-swiftrpmopenstack cloud 92.19.2~dev48-2.14.2Not reportedSUSE-RU-2020:2161-1Not reported
Susecrowbar-corerpmopenstack cloud crowbar 96.0+git.1594619891.b75a61d0d-3.25.5Not reportedSUSE-RU-2020:2161-1Not reported
Susecrowbar-openstackrpmopenstack cloud crowbar 96.0+git.1591795073.49cb6400e-3.25.3Not reportedSUSE-RU-2020:2161-1Not reported
Susegrafanarpmopenstack cloud crowbar 96.2.5-3.12.2Not reportedSUSE-RU-2020:2161-1Not reported
Susekibanarpmopenstack cloud crowbar 94.6.3-4.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-barbicanrpmopenstack cloud crowbar 97.0.1~dev24-3.9.5Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-ceilometerrpmopenstack cloud crowbar 911.1.1~dev7-3.16.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-cinderrpmopenstack cloud crowbar 913.0.10~dev12-3.22.4Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-dashboardrpmopenstack cloud crowbar 914.1.1~dev6-3.15.5Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-designaterpmopenstack cloud crowbar 97.0.2~dev2-3.19.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-heat-templatesrpmopenstack cloud crowbar 90.0.0+git.1582270132.8a20477-3.6.2Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-ironicrpmopenstack cloud crowbar 911.1.5~dev6-3.19.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-keystonerpmopenstack cloud crowbar 914.2.1~dev4-3.22.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-magnumrpmopenstack cloud crowbar 97.2.1~dev1-3.13.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-manilarpmopenstack cloud crowbar 97.4.2~dev31-4.24.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-monasca-agentrpmopenstack cloud crowbar 92.8.2~dev5-3.9.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-neutronrpmopenstack cloud crowbar 913.0.8~dev68-3.25.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-neutron-vsphererpmopenstack cloud crowbar 92.0.1~dev167-3.3.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-novarpmopenstack cloud crowbar 918.3.1~dev38-3.25.4Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-octaviarpmopenstack cloud crowbar 93.2.3~dev7-3.25.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-octavia-amphora-imagerpmopenstack cloud crowbar 90.1.4-7.12.3Not reportedSUSE-RU-2020:2161-1Not reported
Suseopenstack-resource-agentsrpmopenstack cloud crowbar 91.0+git.1569436425.8b9c49f-5.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-Django1rpmopenstack cloud crowbar 91.11.29-3.15.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-Pillowrpmopenstack cloud crowbar 95.2.0-3.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-heatclientrpmopenstack cloud crowbar 91.16.3-3.3.3Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-neutron-tempest-pluginrpmopenstack cloud crowbar 90.2.0-3.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-octavia-tempest-pluginrpmopenstack cloud crowbar 90.2.0-3.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-os-brickrpmopenstack cloud crowbar 92.5.10-3.12.3Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-oslo.messagingrpmopenstack cloud crowbar 98.1.4-3.6.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-pyroute2rpmopenstack cloud crowbar 90.5.2-4.3.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-urllib3rpmopenstack cloud crowbar 91.23-3.12.2Not reportedSUSE-RU-2020:2161-1Not reported
Susepython-waitressrpmopenstack cloud crowbar 91.4.3-3.3.1Not reportedSUSE-RU-2020:2161-1Not reported
Suserelease-notes-suse-openstack-cloudrpmopenstack cloud crowbar 99.20200610-3.21.4Not reportedSUSE-RU-2020:2161-1Not reported
Suserubygem-activeresourcerpmopenstack cloud crowbar 94.0.0-4.3.1Not reportedSUSE-RU-2020:2161-1Not reported
Suserubygem-json-1_7rpmopenstack cloud crowbar 91.7.7-4.3.1Not reportedSUSE-RU-2020:2161-1Not reported
Suserubygem-pumarpmopenstack cloud crowbar 92.16.0-4.9.1Not reportedSUSE-RU-2020:2161-1Not reported
Opensusepython-waitressrpmleap 15.11.4.3-lp151.3.3.1Not reportedOPENSUSE-SU-2020:1922-1Not reported
Opensusepython-waitressrpmleap 15.21.4.3-lp152.4.3.1Not reportedOPENSUSE-SU-2020:1911-1Not reported

[Debian bug #947306]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [python3-waitress]Unknown

    Source package: [waitress]

    Details (2)

    • 2.1.2-2+deb12u1 · all · bookworm

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · bookworm; dsa · waitress · debian · 12

    • 2.1.2-2+deb12u1 · all · bookworm

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · bookworm; dsa · waitress · debian · 12

  • [python-waitress-doc]Unknown

    Source package: [waitress]

    Details (2)

    • 2.1.2-2+deb12u1 · all · bookworm

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · bookworm; dsa · waitress · debian · 12

    • 2.1.2-2+deb12u1 · all · bookworm

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · bookworm; dsa · waitress · debian · 12

[Debian 13 (Trixie)]

  • [python3-waitress]Unknown

    Source package: [waitress]

    Details (2)

    • 3.0.2-1 · all · trixie

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · 13

    • 3.0.2-1 · all · trixie

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · 13

  • [python-waitress-doc]Unknown

    Source package: [waitress]

    Details (2)

    • 3.0.2-1 · all · trixie

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · 13

    • 3.0.2-1 · all · trixie

      Fixed · Fixed: 1.4.1-1

      dsa · waitress · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]