Skip to content
OpenAdvisories
Medium RHSA-2021:5071 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (python-eventlet) security update

Published Sep 18, 2024 · Updated Aug 14, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.1::el8 python-eventlet 0:0.25.2-5.el8ost.1
Red Hat · OpenStack 16 openstack:16.1::el8 python3-eventlet 0:0.25.2-5.el8ost.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-21419

    Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet

    Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version…

    eventlet eventlet eventlet python-eventlet Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1958407
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5071.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-21419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-21419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-21419