Description
Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| eventlet | eventlet | >= 0.10, < 0.31.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-eventlet | 0.26.1-7 | — |
| Debian 13 | python-eventlet | 0.26.1-7 | — |
| Debian 12 | python-eventlet | 0.26.1-7 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | python-eventlet | 0.25.1-2ubuntu1.1 | USN-4956-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 16 | python-eventlet +1 | 0.25.2-5.el8ost.1 | RHSA-2021:5071 |
| Red Hat OpenShift 4 | afterburn +1 | 5.0.0-1.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | atomic-openshift-service-idler | 4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | butane | 0.12.1-1.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | console-login-helper-messages +2 | 0.20.3-1.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | coreos-installer +1 | 0.9.0-6.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | cri-o | 1.21.2-5.rhaos4.8.gitb27d974.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | cri-tools | 1.21.0-2.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | haproxy | 2.2.13-1.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ignition +1 | 2.9.0-6.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ironic-images +3 | 2021.1-20210614.1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | jenkins | 2.289.1.1624020353-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | jenkins-2-plugins | 4.8.1624022417-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | kata-containers | 2.1.0-4.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openshift +1 | 4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openstack-ironic +4 | 1:17.0.4-0.20210713221218.a415e7e.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openstack-ironic-inspector +4 | 10.6.1-0.20210406091336.579f59c.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openvswitch2.15 +3 | 2.15.0-9.el8fdp | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ostree +3 | 2020.7-5.el8_4 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ovn2.13 +3 | 20.12.0-25.el8fdp | RHSA-2021:2437 |
| Red Hat OpenShift 4 | podman +3 | 3.0.1-6.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-debtcollector +1 | 2.2.0-0.20210324220630.649189d.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-eventlet +1 | 0.25.2-4.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-hardware +2 | 0.27.0-0.20210406121246.756fedb.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-ironic-lib +1 | 4.6.2-0.20210608101214.ca2e4ba.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-ironic-prometheus-exporter +1 | 2.2.1-0.20210325143713.70e39c8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-jsonschema +1 | 3.2.0-5.el8ost | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-keystoneauth1 +1 | 4.3.0-0.20210325001456.6a66271.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-kubernetes +2 | 12.0.1-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-openshift +1 | 1:0.12.1-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-openstacksdk +2 | 0.53.0-0.20210325011601.4629245.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-concurrency +3 | 4.4.0-0.20210325004915.7dcf9e9.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-config +1 | 2:8.5.0-0.20210325050501.cfa2564.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-context +1 | 3.2.0-0.20210325043103.0d02866.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-db +3 | 8.5.0-0.20210325041241.503db60.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-i18n +2 | 5.0.1-0.20210324221600.73187bd.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-log +3 | 4.4.0-0.20210409081224.9b29c90.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-policy +2 | 3.7.0-0.20210325051823.d853485.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-serialization +2 | 4.1.0-0.20210325012242.8445e61.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-service +2 | 2.5.0-0.20210325014731.d25e454.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-upgradecheck +1 | 1.3.0-0.20210325003851.9f95a6e.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-utils +3 | 4.8.0-0.20210325043201.3288539.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-pyrsistent +1 | 0.16.0-3.el8ost | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-stevedore +1 | 3.3.0-0.20210325001012.7d7154f.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-sushy +2 | 3.7.1-0.20210428165244.bc49878.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-sushy-oem-idrac +2 | 2.0.1-0.20210326152858.83b7eb0.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-tooz +1 | 2.8.0-0.20210324235001.54448e9.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python3-ironic-python-agent +1 | 7.0.2-0.20210611153100.bfa97cb.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | redhat-release-coreos | 48.84-4.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | rteval-loads | 1.4-12.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | runc | 1.0.0-98.rhaos4.8.gitcd80260.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | stress-ng | 0.12.06-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | toolbox | 0.0.8-3.rhaos4.8.el8 | RHSA-2021:2437 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1630614261.26948f746-3.37.2 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | influxdb | 1.3.8-4.6.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | kibana | 4.6.6-4.12.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-cinder | 13.0.10~dev23-3.31.2 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ec2-api | 7.1.1~dev6-3.3.2 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat-gbp | 12.0.1~dev4-3.6.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat-templates | 0.0.0+git.1628179051.7d761bff-3.12.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-gbp-ui | 12.0.1~dev5-3.6.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-keystone | 14.2.1~dev7-3.25.2 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 14.0.1~dev19-3.28.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.3.1~dev91-3.40.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-eventlet | 0.20.0-8.3.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-puma | 2.16.0-4.15.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-redcarpet | 3.2.3-4.3.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud Crowbar 8 | cassandra | 3.11.10-5.3.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1622489449.a8e60e238-3.50.4 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1616001417.67fd9c2a1-4.52.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment +3 | 8.20210512-1.32.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | kibana | 4.6.6-3.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova +1 | 16.1.9~dev92-3.48.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.25.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-eventlet | 0.20.0-6.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-py | 1.4.34-3.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-pysaml2 | 4.0.2-5.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-xmlschema | 1.0.18-1.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-activerecord-session_store | 0.1.2-3.3.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 9 | ardana-ansible | 9.0+git.1628097238.f6cbb0e-3.29.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | ardana-monasca | 9.0+git.1627995376.30bdf85-3.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | influxdb | 1.3.8-4.6.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | kibana | 4.6.6-4.12.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-cinder | 13.0.10~dev23-3.31.2 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-ec2-api | 7.1.1~dev6-3.3.2 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-heat-gbp | 12.0.1~dev4-3.6.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-heat-templates | 0.0.0+git.1628179051.7d761bff-3.12.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-gbp-ui | 12.0.1~dev5-3.6.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-keystone | 14.2.1~dev7-3.25.2 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 14.0.1~dev19-3.28.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | openstack-nova | 18.3.1~dev91-3.40.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | python-eventlet | 0.20.0-8.3.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev23-3.28.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.23.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.4~dev4-3.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev11-4.29.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev17-4.23.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev7-3.26.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev60-3.31.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.23.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev164-6.29.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev91-3.29.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.25.1 | SUSE-SU-2021:3729-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.20.1 | SUSE-SU-2021:3729-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | cassandra | 3.11.10-5.3.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user +8 | 8.20210512-1.32.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | kibana | 4.6.6-3.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | openstack-nova +1 | 16.1.9~dev92-3.48.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.25.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-eventlet | 0.20.0-6.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-py | 1.4.34-3.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-pysaml2 | 4.0.2-5.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-xmlschema | 1.0.18-1.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev6-14.36.6 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | cassandra | 3.11.10-5.3.5 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user +5 | 8.20210512-1.32.5 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.18.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | kibana | 4.6.6-3.9.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova +1 | 16.1.9~dev92-3.48.5 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.25.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-eventlet | 0.20.0-6.3.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-py | 1.4.34-3.3.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-pysaml2 | 4.0.2-5.9.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-xmlschema | 1.0.18-1.3.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev6-14.36.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 | SUSE-SU-2021:2554-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | eventlet | >= 0.10, < 0.31.0 | 0.31.0 | GHSA-9p9m-jm8w-94p2 |
| PyPI | eventlet | >= 0.10.0, < 0.31.0 | 0.31.0 | PYSEC-2021-12 |
Advisories 7
- RHSA-2021:2437 Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2021:5071 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (python-eventlet) security update Red Hat Security Advisories (RHSA) · Aug 14, 2026
- USN-4956-1 python-eventlet vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2021:3729-1 Security update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova, python-eventlet, rubygem-redcarpet, rubygem-puma SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2554-1 Security update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-0395 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
- WID-SEC-2024-0103 Red Hat OpenStack: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 16, 2024
References
- https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2
- FEDORA-2021-9fde3d7ab1 vendor-advisory
- FEDORA-2021-d5915c247b vendor-advisory