CVE-2022-31015 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-31015 Interim 1 17 2026-03-05T04:42:02Z current 2022-06-01T23:50:38Z 2026-03-05T04:42:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-31015 Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select(). This will lead to the main thread raising an exception that is not handled and then causing the entire application to be killed. This issue has been fixed in Waitress 2.1.2 by no longer allowing the WSGI thread to close the socket. Instead, that is always delegated to the main thread. There is no work-around for this issue. However, users using waitress behind a reverse proxy server are less likely to have issues if the reverse proxy always reads the full response. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6Q3O22UMHKQ3MPP3ZUQNRRPVZ4GVNVON/ E-Mail link for openSUSE-SU-2025:15108-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed python-waitress python3-waitress python310-waitress-2.1.2-3.1 python311-waitress-2.1.2-150400.12.4.1 python311-waitress-3.0.2-1.4 python311-waitress-doc-2.1.2-150400.12.4.1 python312-waitress-3.0.2-1.4 python313-waitress-3.0.2-1.4 python313-waitress-3.0.2-160000.2.2 python313-waitress-doc-3.0.2-160000.2.2 python38-waitress-2.1.2-3.1 python39-waitress-2.1.2-3.1 python311-waitress-2.1.2-150400.12.4.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-waitress-doc-2.1.2-150400.12.4.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python313-waitress-3.0.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python313-waitress-doc-3.0.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python310-waitress-2.1.2-3.1 as a component of openSUSE Tumbleweed python311-waitress-3.0.2-1.4 as a component of openSUSE Tumbleweed python312-waitress-3.0.2-1.4 as a component of openSUSE Tumbleweed python313-waitress-3.0.2-1.4 as a component of openSUSE Tumbleweed python38-waitress-2.1.2-3.1 as a component of openSUSE Tumbleweed python39-waitress-2.1.2-3.1 as a component of openSUSE Tumbleweed python-waitress as a component of HPE Helion OpenStack 8 python3-waitress as a component of SUSE CaaS Platform 4.0 python-waitress as a component of SUSE CaaS Platform 4.0 python-waitress as a component of SUSE Enterprise Storage 6 python-waitress as a component of SUSE Enterprise Storage 7 python3-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS python-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS python3-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python3-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS python-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS python3-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS python-waitress as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS python3-waitress as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS python-waitress as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS python3-waitress as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python-waitress as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-waitress as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python-waitress as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python3-waitress as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-waitress as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python3-waitress as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python-waitress as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python-waitress as a component of SUSE Linux Enterprise Server 15-ESPOS python3-waitress as a component of SUSE Linux Enterprise Server 15-LTSS python-waitress as a component of SUSE Linux Enterprise Server 15-LTSS python-waitress as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 python-waitress as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 python3-waitress as a component of SUSE Linux Enterprise Server for SAP Applications 15 python-waitress as a component of SUSE Linux Enterprise Server for SAP Applications 15 python3-waitress as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python-waitress as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python3-waitress as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 python-waitress as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 python-waitress as a component of SUSE Manager Proxy 4.1 python-waitress as a component of SUSE Manager Retail Branch Server 4.1 python-waitress as a component of SUSE Manager Server 4.1 python-waitress as a component of SUSE OpenStack Cloud 8 python-waitress as a component of SUSE OpenStack Cloud 9 python-waitress as a component of SUSE OpenStack Cloud Crowbar 8 python-waitress as a component of SUSE OpenStack Cloud Crowbar 9 Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select(). This will lead to the main thread raising an exception that is not handled and then causing the entire application to be killed. This issue has been fixed in Waitress 2.1.2 by no longer allowing the WSGI thread to close the socket. Instead, that is always delegated to the main thread. There is no work-around for this issue. However, users using waitress behind a reverse proxy server are less likely to have issues if the reverse proxy always reads the full response. CVE-2022-31015 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-waitress-2.1.2-150400.12.4.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-waitress-doc-2.1.2-150400.12.4.1 SUSE Linux Enterprise Server 16.0:python313-waitress-3.0.2-160000.2.2 SUSE Linux Enterprise Server 16.0:python313-waitress-doc-3.0.2-160000.2.2 openSUSE Tumbleweed:python310-waitress-2.1.2-3.1 openSUSE Tumbleweed:python311-waitress-3.0.2-1.4 openSUSE Tumbleweed:python312-waitress-3.0.2-1.4 openSUSE Tumbleweed:python313-waitress-3.0.2-1.4 openSUSE Tumbleweed:python38-waitress-2.1.2-3.1 openSUSE Tumbleweed:python39-waitress-2.1.2-3.1 HPE Helion OpenStack 8:python-waitress SUSE CaaS Platform 4.0:python-waitress SUSE CaaS Platform 4.0:python3-waitress SUSE Enterprise Storage 6:python-waitress SUSE Enterprise Storage 7:python-waitress SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python-waitress SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python3-waitress SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python-waitress SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-waitress SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python-waitress SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python3-waitress SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python-waitress SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-waitress SUSE Linux Enterprise High Performance Computing 15-LTSS:python-waitress SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-waitress SUSE Linux Enterprise Module for Basesystem 15 SP3:python-waitress SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-waitress SUSE Linux Enterprise Module for Basesystem 15 SP4:python-waitress SUSE Linux Enterprise Module for Basesystem 15 SP4:python3-waitress SUSE Linux Enterprise Server 15 SP1-LTSS:python-waitress SUSE Linux Enterprise Server 15 SP1-LTSS:python3-waitress SUSE Linux Enterprise Server 15 SP2-LTSS:python-waitress SUSE Linux Enterprise Server 15 SP2-LTSS:python3-waitress SUSE Linux Enterprise Server 15-ESPOS:python-waitress SUSE Linux Enterprise Server 15-LTSS:python-waitress SUSE Linux Enterprise Server 15-LTSS:python3-waitress SUSE Linux Enterprise Server Business Critical Linux 15 SP1:python-waitress SUSE Linux Enterprise Server Business Critical Linux 15 SP2:python-waitress SUSE Linux Enterprise Server for SAP Applications 15 SP1:python-waitress SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-waitress SUSE Linux Enterprise Server for SAP Applications 15 SP2:python-waitress SUSE Linux Enterprise Server for SAP Applications 15 SP2:python3-waitress SUSE Linux Enterprise Server for SAP Applications 15:python-waitress SUSE Linux Enterprise Server for SAP Applications 15:python3-waitress SUSE Manager Proxy 4.1:python-waitress SUSE Manager Retail Branch Server 4.1:python-waitress SUSE Manager Server 4.1:python-waitress SUSE OpenStack Cloud 8:python-waitress SUSE OpenStack Cloud 9:python-waitress SUSE OpenStack Cloud Crowbar 8:python-waitress SUSE OpenStack Cloud Crowbar 9:python-waitress moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L