{
  "GSD": {
    "alias": "CVE-2021-41089",
    "description": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u2019s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.",
    "id": "GSD-2021-41089",
    "references": [
      "https://www.suse.com/security/cve/CVE-2021-41089.html",
      "https://access.redhat.com/errata/RHSA-2022:0735",
      "https://ubuntu.com/security/CVE-2021-41089",
      "https://advisories.mageia.org/CVE-2021-41089.html",
      "https://security.archlinux.org/CVE-2021-41089",
      "https://alas.aws.amazon.com/cve/html/CVE-2021-41089.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-41089"
      ],
      "details": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u2019s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.",
      "id": "GSD-2021-41089",
      "modified": "2023-12-13T01:23:27.062195Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security-advisories@github.com",
        "ID": "CVE-2021-41089",
        "STATE": "PUBLIC",
        "TITLE": "`docker cp` allows unexpected chmod of host files"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "moby",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "\u003c 20.10.9"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "moby"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u2019s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted."
          }
        ]
      },
      "impact": {
        "cvss": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 2.8,
          "baseSeverity": "LOW",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
          "version": "3.1"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-281: Improper Preservation of Permissions"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/moby/moby/security/advisories/GHSA-v994-f8vw-g7j4",
            "refsource": "CONFIRM",
            "url": "https://github.com/moby/moby/security/advisories/GHSA-v994-f8vw-g7j4"
          },
          {
            "name": "https://github.com/moby/moby/commit/bce32e5c93be4caf1a592582155b9cb837fc129a",
            "refsource": "MISC",
            "url": "https://github.com/moby/moby/commit/bce32e5c93be4caf1a592582155b9cb837fc129a"
          },
          {
            "name": "FEDORA-2021-df975338d4",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/"
          },
          {
            "name": "FEDORA-2021-b5a9a481a2",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/"
          },
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf",
            "refsource": "CONFIRM",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf"
          }
        ]
      },
      "source": {
        "advisory": "GHSA-v994-f8vw-g7j4",
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "20.10.9",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security-advisories@github.com",
          "ID": "CVE-2021-41089"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u2019s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-281"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/moby/moby/commit/bce32e5c93be4caf1a592582155b9cb837fc129a",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://github.com/moby/moby/commit/bce32e5c93be4caf1a592582155b9cb837fc129a"
            },
            {
              "name": "https://github.com/moby/moby/security/advisories/GHSA-v994-f8vw-g7j4",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/moby/moby/security/advisories/GHSA-v994-f8vw-g7j4"
            },
            {
              "name": "FEDORA-2021-df975338d4",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNFADTCHHYWVM6W4NJ6CB4FNFM2VMBIB/"
            },
            {
              "name": "FEDORA-2021-b5a9a481a2",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Q6G6I4W5COQE25QMC7FJY3I3PAYFBB/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.4,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.4,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.0,
          "impactScore": 3.7
        }
      },
      "lastModifiedDate": "2022-06-14T11:15Z",
      "publishedDate": "2021-10-04T21:15Z"
    }
  }
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens ProductCERT",
        "summary": "reporting these vulnerabilities to CISA."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability.\n\nSiemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "other",
        "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
        "title": "Advisory Conversion Disclaimer"
      },
      {
        "category": "other",
        "text": "Multiple",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.0 - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-222547.json"
      },
      {
        "category": "self",
        "summary": "SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.0 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-222547.txt"
      },
      {
        "category": "self",
        "summary": "SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.0 - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-22-167-09 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-167-09.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-22-167-09 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-167-09"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Siemens SCALANCE LPE9403 Third-Party Vulnerabilities",
    "tracking": {
      "current_release_date": "2022-06-14T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-22-167-09",
      "initial_release_date": "2022-06-14T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2022-06-14T00:00:00.000000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.0",
                "product": {
                  "name": "SCALANCE LPE9403",
                  "product_id": "CSAFPID-0001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK5998-3GS00-2AC2"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE LPE9403"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-27304",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2020-27304 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2020-27304 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2020-27304.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2020-27304"
    },
    {
      "cve": "CVE-2021-20317",
      "cwe": {
        "id": "CWE-665",
        "name": "Improper Initialization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-20317 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-20317 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-20317.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-20317"
    },
    {
      "cve": "CVE-2021-33910",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The use of alloca function with an uncontrolled size in function unit_name_path_escape allows a local attacker, able to mount a filesystem on a very long path, to crash systemd and the whole system by allocating a very large space in the stack.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-33910 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-33910 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-33910.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-33910"
    },
    {
      "cve": "CVE-2021-36221",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A race condition vulnerability was found in Go. The incoming requests body weren\u0027t closed after the handler panic and as a consequence this could lead to ReverseProxy crash.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-36221 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-36221 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-36221.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-36221"
    },
    {
      "cve": "CVE-2021-39293",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The fix for CVE-2021-33196 can be bypassed by crafted inputs. As a result, the NewReader and OpenReader functions in archive/zip can still cause a panic or an unrecoverable fatal error when reading an archive that claims to contain a large number of files, regardless of its actual size.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-39293 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-39293 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-39293.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-39293"
    },
    {
      "cve": "CVE-2021-41089",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability was found in Moby (Docker Engine) where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host\u2019s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-41089 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-41089 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-41089.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-41089"
    },
    {
      "cve": "CVE-2021-41091",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability was found in Moby (Docker Engine) where the data directory (typically /var/lib/docker) contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-41091 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-41091 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-41091.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-41091"
    },
    {
      "cve": "CVE-2021-41092",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability was found in the Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file (typically ~/.docker/config.json) listing a credsStore or credHelpers that could not be executed would result in any provided credentials being sent to registry-1.docker.io rather than the intended private registry.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-41092 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-41092 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-41092.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-41092"
    },
    {
      "cve": "CVE-2021-41103",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2021-41103 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2021-41103 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2021-41103.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2021-41103"
    },
    {
      "cve": "CVE-2022-0847",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "CVE-2022-0847 - SCALANCE LPE9403",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        },
        {
          "summary": "CVE-2022-0847 Mitre 5.0 json",
          "url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-0847.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.0 or later version",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811123/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ],
      "title": "CVE-2022-0847"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for containerd, docker, runc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for containerd, docker, runc fixes the following issues:\n\nDocker was updated to 20.10.9-ce. (bsc#1191355)\n\nSee upstream changelog in the packaged\n  /usr/share/doc/packages/docker/CHANGELOG.md. \n\n  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103\n\ncontainer was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355\n\n- CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282)\n\n- Install systemd service file as well (bsc#1190826)\n\nUpdate to runc v1.0.2. Upstream changelog is available from\n\n  https://github.com/opencontainers/runc/releases/tag/v1.0.2\n\n* Fixed a failure to set CPU quota period in some cases on cgroup v1.\n* Fixed the inability to start a container with the \u0027adding seccomp filter\n  rule for syscall ...\u0027 error, caused by redundant seccomp rules (i.e. those\n  that has action equal to the default one). Such redundant rules are now\n  skipped.\n* Made release builds reproducible from now on.\n* Fixed a rare debug log race in runc init, which can result in occasional\n  harmful \u0027failed to decode ...\u0027 errors from runc run or exec.\n* Fixed the check in cgroup v1 systemd manager if a container needs to be\n  frozen before Set, and add a setting to skip such freeze unconditionally.\n  The previous fix for that issue, done in runc 1.0.1, was not working.\n\nUpdate to runc v1.0.1. Upstream changelog is available from\n\nhttps://github.com/opencontainers/runc/releases/tag/v1.0.1\n\n* Fixed occasional runc exec/run failure (\u0027interrupted system call\u0027) on an\n  Azure volume.\n* Fixed \u0027unable to find groups ... token too long\u0027 error with /etc/group\n  containing lines longer than 64K characters.\n* cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is\n  frozen. This is a regression in 1.0.0, not affecting runc itself but some\n  of libcontainer users (e.g Kubernetes).\n* cgroupv2: bpf: Ignore inaccessible existing programs in case of\n  permission error when handling replacement of existing bpf cgroup\n  programs. This fixes a regression in 1.0.0, where some SELinux\n  policies would block runc from being able to run entirely.\n* cgroup/systemd/v2: don\u0027t freeze cgroup on Set.\n* cgroup/systemd/v1: avoid unnecessary freeze on Set.\n- fix issues with runc under openSUSE MicroOS\u0027s SELinux policy. bsc#1187704\n\nUpdate to runc v1.0.0. Upstream changelog is available from\n\nhttps://github.com/opencontainers/runc/releases/tag/v1.0.0\n\n! The usage of relative paths for mountpoints will now produce a warning\n  (such configurations are outside of the spec, and in future runc will\n  produce an error when given such configurations).\n* cgroupv2: devices: rework the filter generation to produce consistent\n  results with cgroupv1, and always clobber any existing eBPF\n  program(s) to fix runc update and avoid leaking eBPF programs\n  (resulting in errors when managing containers).\n* cgroupv2: correctly convert \u0027number of IOs\u0027 statistics in a\n  cgroupv1-compatible way.\n* cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.\n* cgroupv2: wait for freeze to finish before returning from the freezing\n  code, optimize the method for checking whether a cgroup is frozen.\n* cgroups/systemd: fixed \u0027retry on dbus disconnect\u0027 logic introduced in rc94\n* cgroups/systemd: fixed returning \u0027unit already exists\u0027 error from a systemd\n  cgroup manager (regression in rc94)\n+ cgroupv2: support SkipDevices with systemd driver\n+ cgroup/systemd: return, not ignore, stop unit error from Destroy\n+ Make \u0027runc --version\u0027 output sane even when built with go get or\n  otherwise outside of our build scripts.\n+ cgroups: set SkipDevices during runc update (so we don\u0027t modify\n  cgroups at all during runc update).\n+ cgroup1: blkio: support BFQ weights.\n+ cgroupv2: set per-device io weights if BFQ IO scheduler is available.\n\nUpdate to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95\n\nThis release of runc contains a fix for CVE-2021-30465, and users are\nstrongly recommended to update (especially if you are providing\nsemi-limited access to spawn containers to untrusted users). (bsc#1185405)\n\nUpdate to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94\n\nBreaking Changes:\n* cgroupv1: kernel memory limits are now always ignored, as kmemcg has\n  been effectively deprecated by the kernel. Users should make use of regular\n  memory cgroup controls.\n\nRegression Fixes:\n\n* seccomp: fix 32-bit compilation errors\n* runc init: fix a hang caused by deadlock in seccomp/ebpf loading code\n* runc start: fix \u0027chdir to cwd: permission denied\u0027 for some setups\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-1404",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1404-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:1404-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L7ADRJZ4HKOCVZC5ZKIM4MD6EZEHBNB3/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:1404-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L7ADRJZ4HKOCVZC5ZKIM4MD6EZEHBNB3/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1102408",
        "url": "https://bugzilla.suse.com/1102408"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185405",
        "url": "https://bugzilla.suse.com/1185405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187704",
        "url": "https://bugzilla.suse.com/1187704"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188282",
        "url": "https://bugzilla.suse.com/1188282"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1190826",
        "url": "https://bugzilla.suse.com/1190826"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191015",
        "url": "https://bugzilla.suse.com/1191015"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191121",
        "url": "https://bugzilla.suse.com/1191121"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191334",
        "url": "https://bugzilla.suse.com/1191334"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191355",
        "url": "https://bugzilla.suse.com/1191355"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191434",
        "url": "https://bugzilla.suse.com/1191434"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-30465 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-30465/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32760 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32760/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41089 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41089/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41091 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41091/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41092 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41092/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41103 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41103/"
      }
    ],
    "title": "Security update for containerd, docker, runc",
    "tracking": {
      "current_release_date": "2021-10-31T14:52:54Z",
      "generator": {
        "date": "2021-10-31T14:52:54Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:1404-1",
      "initial_release_date": "2021-10-31T14:52:54Z",
      "revision_history": [
        {
          "date": "2021-10-31T14:52:54Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
                "product": {
                  "name": "docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
                  "product_id": "docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
                "product": {
                  "name": "docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
                  "product_id": "docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
                "product": {
                  "name": "docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
                  "product_id": "docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.11-lp152.2.12.1.x86_64",
                "product": {
                  "name": "containerd-1.4.11-lp152.2.12.1.x86_64",
                  "product_id": "containerd-1.4.11-lp152.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
                "product": {
                  "name": "containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
                  "product_id": "containerd-ctr-1.4.11-lp152.2.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-lp152.2.18.1.x86_64",
                "product": {
                  "name": "docker-20.10.9_ce-lp152.2.18.1.x86_64",
                  "product_id": "docker-20.10.9_ce-lp152.2.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "runc-1.0.2-lp152.2.9.1.x86_64",
                "product": {
                  "name": "runc-1.0.2-lp152.2.9.1.x86_64",
                  "product_id": "runc-1.0.2-lp152.2.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.11-lp152.2.12.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64"
        },
        "product_reference": "containerd-1.4.11-lp152.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.11-lp152.2.12.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64"
        },
        "product_reference": "containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-lp152.2.18.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64"
        },
        "product_reference": "docker-20.10.9_ce-lp152.2.18.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch"
        },
        "product_reference": "docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch"
        },
        "product_reference": "docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch"
        },
        "product_reference": "docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "runc-1.0.2-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
        },
        "product_reference": "runc-1.0.2-lp152.2.9.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-30465",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-30465"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
          "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-30465",
          "url": "https://www.suse.com/security/cve/CVE-2021-30465"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185405 for CVE-2021-30465",
          "url": "https://bugzilla.suse.com/1185405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189161 for CVE-2021-30465",
          "url": "https://bugzilla.suse.com/1189161"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-31T14:52:54Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-30465"
    },
    {
      "cve": "CVE-2021-32760",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32760"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host\u0027s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in containerd 1.5.4 and 1.4.8. As a workaround, ensure that users only pull images from trusted sources. Linux security modules (LSMs) like SELinux and AppArmor can limit the files potentially affected by this bug through policies and profiles that prevent containerd from interacting with specific files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
          "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32760",
          "url": "https://www.suse.com/security/cve/CVE-2021-32760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188282 for CVE-2021-32760",
          "url": "https://bugzilla.suse.com/1188282"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-31T14:52:54Z",
          "details": "low"
        }
      ],
      "title": "CVE-2021-32760"
    },
    {
      "cve": "CVE-2021-41089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u0027s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
          "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41089",
          "url": "https://www.suse.com/security/cve/CVE-2021-41089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191015 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-31T14:52:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41089"
    },
    {
      "cve": "CVE-2021-41091",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41091"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as `setuid`), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade limit access to the host to trusted users. Limit access to host volumes to trusted containers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
          "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41091",
          "url": "https://www.suse.com/security/cve/CVE-2021-41091"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41091",
          "url": "https://bugzilla.suse.com/1191355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191434 for CVE-2021-41091",
          "url": "https://bugzilla.suse.com/1191434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-31T14:52:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41091"
    },
    {
      "cve": "CVE-2021-41092",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41092"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
          "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41092",
          "url": "https://www.suse.com/security/cve/CVE-2021-41092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191334 for CVE-2021-41092",
          "url": "https://bugzilla.suse.com/1191334"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41092",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-31T14:52:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41092"
    },
    {
      "cve": "CVE-2021-41103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
          "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
          "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
          "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41103",
          "url": "https://www.suse.com/security/cve/CVE-2021-41103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191121 for CVE-2021-41103",
          "url": "https://bugzilla.suse.com/1191121"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41103",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:containerd-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:containerd-ctr-1.4.11-lp152.2.12.1.x86_64",
            "openSUSE Leap 15.2:docker-20.10.9_ce-lp152.2.18.1.x86_64",
            "openSUSE Leap 15.2:docker-bash-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-fish-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:docker-zsh-completion-20.10.9_ce-lp152.2.18.1.noarch",
            "openSUSE Leap 15.2:runc-1.0.2-lp152.2.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-31T14:52:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41103"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for containerd, docker, runc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for containerd, docker, runc fixes the following issues:\n\nDocker was updated to 20.10.9-ce. (bsc#1191355)\n\nSee upstream changelog in the packaged\n  /usr/share/doc/packages/docker/CHANGELOG.md. \n\n  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103\n\ncontainer was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355\n\n- CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282)\n\n- Install systemd service file as well (bsc#1190826)\n\nUpdate to runc v1.0.2. Upstream changelog is available from\n\n  https://github.com/opencontainers/runc/releases/tag/v1.0.2\n\n* Fixed a failure to set CPU quota period in some cases on cgroup v1.\n* Fixed the inability to start a container with the \u0027adding seccomp filter\n  rule for syscall ...\u0027 error, caused by redundant seccomp rules (i.e. those\n  that has action equal to the default one). Such redundant rules are now\n  skipped.\n* Made release builds reproducible from now on.\n* Fixed a rare debug log race in runc init, which can result in occasional\n  harmful \u0027failed to decode ...\u0027 errors from runc run or exec.\n* Fixed the check in cgroup v1 systemd manager if a container needs to be\n  frozen before Set, and add a setting to skip such freeze unconditionally.\n  The previous fix for that issue, done in runc 1.0.1, was not working.\n\nUpdate to runc v1.0.1. Upstream changelog is available from\n\nhttps://github.com/opencontainers/runc/releases/tag/v1.0.1\n\n* Fixed occasional runc exec/run failure (\u0027interrupted system call\u0027) on an\n  Azure volume.\n* Fixed \u0027unable to find groups ... token too long\u0027 error with /etc/group\n  containing lines longer than 64K characters.\n* cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is\n  frozen. This is a regression in 1.0.0, not affecting runc itself but some\n  of libcontainer users (e.g Kubernetes).\n* cgroupv2: bpf: Ignore inaccessible existing programs in case of\n  permission error when handling replacement of existing bpf cgroup\n  programs. This fixes a regression in 1.0.0, where some SELinux\n  policies would block runc from being able to run entirely.\n* cgroup/systemd/v2: don\u0027t freeze cgroup on Set.\n* cgroup/systemd/v1: avoid unnecessary freeze on Set.\n- fix issues with runc under openSUSE MicroOS\u0027s SELinux policy. bsc#1187704\n\nUpdate to runc v1.0.0. Upstream changelog is available from\n\nhttps://github.com/opencontainers/runc/releases/tag/v1.0.0\n\n! The usage of relative paths for mountpoints will now produce a warning\n  (such configurations are outside of the spec, and in future runc will\n  produce an error when given such configurations).\n* cgroupv2: devices: rework the filter generation to produce consistent\n  results with cgroupv1, and always clobber any existing eBPF\n  program(s) to fix runc update and avoid leaking eBPF programs\n  (resulting in errors when managing containers).\n* cgroupv2: correctly convert \u0027number of IOs\u0027 statistics in a\n  cgroupv1-compatible way.\n* cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.\n* cgroupv2: wait for freeze to finish before returning from the freezing\n  code, optimize the method for checking whether a cgroup is frozen.\n* cgroups/systemd: fixed \u0027retry on dbus disconnect\u0027 logic introduced in rc94\n* cgroups/systemd: fixed returning \u0027unit already exists\u0027 error from a systemd\n  cgroup manager (regression in rc94)\n+ cgroupv2: support SkipDevices with systemd driver\n+ cgroup/systemd: return, not ignore, stop unit error from Destroy\n+ Make \u0027runc --version\u0027 output sane even when built with go get or\n  otherwise outside of our build scripts.\n+ cgroups: set SkipDevices during runc update (so we don\u0027t modify\n  cgroups at all during runc update).\n+ cgroup1: blkio: support BFQ weights.\n+ cgroupv2: set per-device io weights if BFQ IO scheduler is available.\n\nUpdate to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95\n\nThis release of runc contains a fix for CVE-2021-30465, and users are\nstrongly recommended to update (especially if you are providing\nsemi-limited access to spawn containers to untrusted users). (bsc#1185405)\n\nUpdate to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94\n\nBreaking Changes:\n* cgroupv1: kernel memory limits are now always ignored, as kmemcg has\n  been effectively deprecated by the kernel. Users should make use of regular\n  memory cgroup controls.\n\nRegression Fixes:\n\n* seccomp: fix 32-bit compilation errors\n* runc init: fix a hang caused by deadlock in seccomp/ebpf loading code\n* runc start: fix \u0027chdir to cwd: permission denied\u0027 for some setups\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-SLE-15.3-2021-3506",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_3506-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:3506-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NP4XGHFKECRFSI6UYXER53KXVGP66EHQ/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:3506-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NP4XGHFKECRFSI6UYXER53KXVGP66EHQ/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1102408",
        "url": "https://bugzilla.suse.com/1102408"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185405",
        "url": "https://bugzilla.suse.com/1185405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187704",
        "url": "https://bugzilla.suse.com/1187704"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188282",
        "url": "https://bugzilla.suse.com/1188282"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1190826",
        "url": "https://bugzilla.suse.com/1190826"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191015",
        "url": "https://bugzilla.suse.com/1191015"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191121",
        "url": "https://bugzilla.suse.com/1191121"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191334",
        "url": "https://bugzilla.suse.com/1191334"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191355",
        "url": "https://bugzilla.suse.com/1191355"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191434",
        "url": "https://bugzilla.suse.com/1191434"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-30465 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-30465/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-32760 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-32760/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41089 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41089/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41091 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41091/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41092 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41092/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41103 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41103/"
      }
    ],
    "title": "Security update for containerd, docker, runc",
    "tracking": {
      "current_release_date": "2021-10-25T08:20:48Z",
      "generator": {
        "date": "2021-10-25T08:20:48Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:3506-1",
      "initial_release_date": "2021-10-25T08:20:48Z",
      "revision_history": [
        {
          "date": "2021-10-25T08:20:48Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.11-56.1.aarch64",
                "product": {
                  "name": "containerd-1.4.11-56.1.aarch64",
                  "product_id": "containerd-1.4.11-56.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.11-56.1.aarch64",
                "product": {
                  "name": "containerd-ctr-1.4.11-56.1.aarch64",
                  "product_id": "containerd-ctr-1.4.11-56.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-156.1.aarch64",
                "product": {
                  "name": "docker-20.10.9_ce-156.1.aarch64",
                  "product_id": "docker-20.10.9_ce-156.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.9_ce-156.1.aarch64",
                "product": {
                  "name": "docker-kubic-20.10.9_ce-156.1.aarch64",
                  "product_id": "docker-kubic-20.10.9_ce-156.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "runc-1.0.2-23.1.aarch64",
                "product": {
                  "name": "runc-1.0.2-23.1.aarch64",
                  "product_id": "runc-1.0.2-23.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.9_ce-156.1.noarch",
                "product": {
                  "name": "docker-bash-completion-20.10.9_ce-156.1.noarch",
                  "product_id": "docker-bash-completion-20.10.9_ce-156.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.9_ce-156.1.noarch",
                "product": {
                  "name": "docker-fish-completion-20.10.9_ce-156.1.noarch",
                  "product_id": "docker-fish-completion-20.10.9_ce-156.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
                "product": {
                  "name": "docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
                  "product_id": "docker-kubic-bash-completion-20.10.9_ce-156.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
                "product": {
                  "name": "docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
                  "product_id": "docker-kubic-fish-completion-20.10.9_ce-156.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
                "product": {
                  "name": "docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
                  "product_id": "docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.9_ce-156.1.noarch",
                "product": {
                  "name": "docker-zsh-completion-20.10.9_ce-156.1.noarch",
                  "product_id": "docker-zsh-completion-20.10.9_ce-156.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.11-56.1.ppc64le",
                "product": {
                  "name": "containerd-1.4.11-56.1.ppc64le",
                  "product_id": "containerd-1.4.11-56.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.11-56.1.ppc64le",
                "product": {
                  "name": "containerd-ctr-1.4.11-56.1.ppc64le",
                  "product_id": "containerd-ctr-1.4.11-56.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-156.1.ppc64le",
                "product": {
                  "name": "docker-20.10.9_ce-156.1.ppc64le",
                  "product_id": "docker-20.10.9_ce-156.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.9_ce-156.1.ppc64le",
                "product": {
                  "name": "docker-kubic-20.10.9_ce-156.1.ppc64le",
                  "product_id": "docker-kubic-20.10.9_ce-156.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "runc-1.0.2-23.1.ppc64le",
                "product": {
                  "name": "runc-1.0.2-23.1.ppc64le",
                  "product_id": "runc-1.0.2-23.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.11-56.1.s390x",
                "product": {
                  "name": "containerd-1.4.11-56.1.s390x",
                  "product_id": "containerd-1.4.11-56.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.11-56.1.s390x",
                "product": {
                  "name": "containerd-ctr-1.4.11-56.1.s390x",
                  "product_id": "containerd-ctr-1.4.11-56.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-156.1.s390x",
                "product": {
                  "name": "docker-20.10.9_ce-156.1.s390x",
                  "product_id": "docker-20.10.9_ce-156.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.9_ce-156.1.s390x",
                "product": {
                  "name": "docker-kubic-20.10.9_ce-156.1.s390x",
                  "product_id": "docker-kubic-20.10.9_ce-156.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "runc-1.0.2-23.1.s390x",
                "product": {
                  "name": "runc-1.0.2-23.1.s390x",
                  "product_id": "runc-1.0.2-23.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.11-56.1.x86_64",
                "product": {
                  "name": "containerd-1.4.11-56.1.x86_64",
                  "product_id": "containerd-1.4.11-56.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.11-56.1.x86_64",
                "product": {
                  "name": "containerd-ctr-1.4.11-56.1.x86_64",
                  "product_id": "containerd-ctr-1.4.11-56.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-156.1.x86_64",
                "product": {
                  "name": "docker-20.10.9_ce-156.1.x86_64",
                  "product_id": "docker-20.10.9_ce-156.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.9_ce-156.1.x86_64",
                "product": {
                  "name": "docker-kubic-20.10.9_ce-156.1.x86_64",
                  "product_id": "docker-kubic-20.10.9_ce-156.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "runc-1.0.2-23.1.x86_64",
                "product": {
                  "name": "runc-1.0.2-23.1.x86_64",
                  "product_id": "runc-1.0.2-23.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.11-56.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64"
        },
        "product_reference": "containerd-1.4.11-56.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.11-56.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le"
        },
        "product_reference": "containerd-1.4.11-56.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.11-56.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x"
        },
        "product_reference": "containerd-1.4.11-56.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.11-56.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64"
        },
        "product_reference": "containerd-1.4.11-56.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.11-56.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64"
        },
        "product_reference": "containerd-ctr-1.4.11-56.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.11-56.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le"
        },
        "product_reference": "containerd-ctr-1.4.11-56.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.11-56.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x"
        },
        "product_reference": "containerd-ctr-1.4.11-56.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.11-56.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64"
        },
        "product_reference": "containerd-ctr-1.4.11-56.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-156.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64"
        },
        "product_reference": "docker-20.10.9_ce-156.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-156.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le"
        },
        "product_reference": "docker-20.10.9_ce-156.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-156.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x"
        },
        "product_reference": "docker-20.10.9_ce-156.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-156.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64"
        },
        "product_reference": "docker-20.10.9_ce-156.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-bash-completion-20.10.9_ce-156.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch"
        },
        "product_reference": "docker-bash-completion-20.10.9_ce-156.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-fish-completion-20.10.9_ce-156.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch"
        },
        "product_reference": "docker-fish-completion-20.10.9_ce-156.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.9_ce-156.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64"
        },
        "product_reference": "docker-kubic-20.10.9_ce-156.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.9_ce-156.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le"
        },
        "product_reference": "docker-kubic-20.10.9_ce-156.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.9_ce-156.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x"
        },
        "product_reference": "docker-kubic-20.10.9_ce-156.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.9_ce-156.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64"
        },
        "product_reference": "docker-kubic-20.10.9_ce-156.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-bash-completion-20.10.9_ce-156.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch"
        },
        "product_reference": "docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-fish-completion-20.10.9_ce-156.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch"
        },
        "product_reference": "docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch"
        },
        "product_reference": "docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-zsh-completion-20.10.9_ce-156.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch"
        },
        "product_reference": "docker-zsh-completion-20.10.9_ce-156.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "runc-1.0.2-23.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64"
        },
        "product_reference": "runc-1.0.2-23.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "runc-1.0.2-23.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le"
        },
        "product_reference": "runc-1.0.2-23.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "runc-1.0.2-23.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x"
        },
        "product_reference": "runc-1.0.2-23.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "runc-1.0.2-23.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
        },
        "product_reference": "runc-1.0.2-23.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-30465",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-30465"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-30465",
          "url": "https://www.suse.com/security/cve/CVE-2021-30465"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185405 for CVE-2021-30465",
          "url": "https://bugzilla.suse.com/1185405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189161 for CVE-2021-30465",
          "url": "https://bugzilla.suse.com/1189161"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-25T08:20:48Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-30465"
    },
    {
      "cve": "CVE-2021-32760",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-32760"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host\u0027s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in containerd 1.5.4 and 1.4.8. As a workaround, ensure that users only pull images from trusted sources. Linux security modules (LSMs) like SELinux and AppArmor can limit the files potentially affected by this bug through policies and profiles that prevent containerd from interacting with specific files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-32760",
          "url": "https://www.suse.com/security/cve/CVE-2021-32760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188282 for CVE-2021-32760",
          "url": "https://bugzilla.suse.com/1188282"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-25T08:20:48Z",
          "details": "low"
        }
      ],
      "title": "CVE-2021-32760"
    },
    {
      "cve": "CVE-2021-41089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u0027s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41089",
          "url": "https://www.suse.com/security/cve/CVE-2021-41089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191015 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-25T08:20:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41089"
    },
    {
      "cve": "CVE-2021-41091",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41091"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as `setuid`), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade limit access to the host to trusted users. Limit access to host volumes to trusted containers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41091",
          "url": "https://www.suse.com/security/cve/CVE-2021-41091"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41091",
          "url": "https://bugzilla.suse.com/1191355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191434 for CVE-2021-41091",
          "url": "https://bugzilla.suse.com/1191434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-25T08:20:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41091"
    },
    {
      "cve": "CVE-2021-41092",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41092"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41092",
          "url": "https://www.suse.com/security/cve/CVE-2021-41092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191334 for CVE-2021-41092",
          "url": "https://bugzilla.suse.com/1191334"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41092",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-25T08:20:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41092"
    },
    {
      "cve": "CVE-2021-41103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
          "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41103",
          "url": "https://www.suse.com/security/cve/CVE-2021-41103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191121 for CVE-2021-41103",
          "url": "https://bugzilla.suse.com/1191121"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41103",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.11-56.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.9_ce-156.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.9_ce-156.1.noarch",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.aarch64",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.ppc64le",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.s390x",
            "openSUSE Leap 15.3:runc-1.0.2-23.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-10-25T08:20:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41103"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for containerd, docker",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for containerd, docker fixes the following issues:\n\n- CVE-2021-41089: Fixed \u0027cp\u0027 can chmod host files (bsc#1191015).\n- CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby (bsc#1191434).\n- CVE-2021-41092: Fixed exposed user credentials with a misconfigured configuration file (bsc#1191334).\n- CVE-2021-41103: Fixed file access to local users in containerd (bsc#1191121).\n- CVE-2021-41190: Fixed OCI manifest and index parsing confusion (bsc#1193273).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-SLE-15.3-2022-334",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_0334-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:0334-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULRUJXC3YBVKDKJAERWLY6BKJ7U3246G/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:0334-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULRUJXC3YBVKDKJAERWLY6BKJ7U3246G/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191015",
        "url": "https://bugzilla.suse.com/1191015"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191121",
        "url": "https://bugzilla.suse.com/1191121"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191334",
        "url": "https://bugzilla.suse.com/1191334"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1191434",
        "url": "https://bugzilla.suse.com/1191434"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193273",
        "url": "https://bugzilla.suse.com/1193273"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41089 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41089/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41091 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41091/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41092 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41092/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41103 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41103/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41190 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41190/"
      }
    ],
    "title": "Security update for containerd, docker",
    "tracking": {
      "current_release_date": "2022-02-04T08:31:13Z",
      "generator": {
        "date": "2022-02-04T08:31:13Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:0334-1",
      "initial_release_date": "2022-02-04T08:31:13Z",
      "revision_history": [
        {
          "date": "2022-02-04T08:31:13Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.12-60.1.aarch64",
                "product": {
                  "name": "containerd-1.4.12-60.1.aarch64",
                  "product_id": "containerd-1.4.12-60.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.12-60.1.aarch64",
                "product": {
                  "name": "containerd-ctr-1.4.12-60.1.aarch64",
                  "product_id": "containerd-ctr-1.4.12-60.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.12_ce-159.1.aarch64",
                "product": {
                  "name": "docker-20.10.12_ce-159.1.aarch64",
                  "product_id": "docker-20.10.12_ce-159.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.12_ce-159.1.aarch64",
                "product": {
                  "name": "docker-kubic-20.10.12_ce-159.1.aarch64",
                  "product_id": "docker-kubic-20.10.12_ce-159.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.12_ce-159.1.noarch",
                "product": {
                  "name": "docker-bash-completion-20.10.12_ce-159.1.noarch",
                  "product_id": "docker-bash-completion-20.10.12_ce-159.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.12_ce-159.1.noarch",
                "product": {
                  "name": "docker-fish-completion-20.10.12_ce-159.1.noarch",
                  "product_id": "docker-fish-completion-20.10.12_ce-159.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
                "product": {
                  "name": "docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
                  "product_id": "docker-kubic-bash-completion-20.10.12_ce-159.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
                "product": {
                  "name": "docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
                  "product_id": "docker-kubic-fish-completion-20.10.12_ce-159.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
                "product": {
                  "name": "docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
                  "product_id": "docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.12_ce-159.1.noarch",
                "product": {
                  "name": "docker-zsh-completion-20.10.12_ce-159.1.noarch",
                  "product_id": "docker-zsh-completion-20.10.12_ce-159.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.12-60.1.ppc64le",
                "product": {
                  "name": "containerd-1.4.12-60.1.ppc64le",
                  "product_id": "containerd-1.4.12-60.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.12-60.1.ppc64le",
                "product": {
                  "name": "containerd-ctr-1.4.12-60.1.ppc64le",
                  "product_id": "containerd-ctr-1.4.12-60.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.12_ce-159.1.ppc64le",
                "product": {
                  "name": "docker-20.10.12_ce-159.1.ppc64le",
                  "product_id": "docker-20.10.12_ce-159.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.12_ce-159.1.ppc64le",
                "product": {
                  "name": "docker-kubic-20.10.12_ce-159.1.ppc64le",
                  "product_id": "docker-kubic-20.10.12_ce-159.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.12-60.1.s390x",
                "product": {
                  "name": "containerd-1.4.12-60.1.s390x",
                  "product_id": "containerd-1.4.12-60.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.12-60.1.s390x",
                "product": {
                  "name": "containerd-ctr-1.4.12-60.1.s390x",
                  "product_id": "containerd-ctr-1.4.12-60.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.12_ce-159.1.s390x",
                "product": {
                  "name": "docker-20.10.12_ce-159.1.s390x",
                  "product_id": "docker-20.10.12_ce-159.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.12_ce-159.1.s390x",
                "product": {
                  "name": "docker-kubic-20.10.12_ce-159.1.s390x",
                  "product_id": "docker-kubic-20.10.12_ce-159.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.4.12-60.1.x86_64",
                "product": {
                  "name": "containerd-1.4.12-60.1.x86_64",
                  "product_id": "containerd-1.4.12-60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.4.12-60.1.x86_64",
                "product": {
                  "name": "containerd-ctr-1.4.12-60.1.x86_64",
                  "product_id": "containerd-ctr-1.4.12-60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.12_ce-159.1.x86_64",
                "product": {
                  "name": "docker-20.10.12_ce-159.1.x86_64",
                  "product_id": "docker-20.10.12_ce-159.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.12_ce-159.1.x86_64",
                "product": {
                  "name": "docker-kubic-20.10.12_ce-159.1.x86_64",
                  "product_id": "docker-kubic-20.10.12_ce-159.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.12-60.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64"
        },
        "product_reference": "containerd-1.4.12-60.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.12-60.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le"
        },
        "product_reference": "containerd-1.4.12-60.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.12-60.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x"
        },
        "product_reference": "containerd-1.4.12-60.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.4.12-60.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64"
        },
        "product_reference": "containerd-1.4.12-60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.12-60.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64"
        },
        "product_reference": "containerd-ctr-1.4.12-60.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.12-60.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le"
        },
        "product_reference": "containerd-ctr-1.4.12-60.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.12-60.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x"
        },
        "product_reference": "containerd-ctr-1.4.12-60.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-ctr-1.4.12-60.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64"
        },
        "product_reference": "containerd-ctr-1.4.12-60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.12_ce-159.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64"
        },
        "product_reference": "docker-20.10.12_ce-159.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.12_ce-159.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le"
        },
        "product_reference": "docker-20.10.12_ce-159.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.12_ce-159.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x"
        },
        "product_reference": "docker-20.10.12_ce-159.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.12_ce-159.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64"
        },
        "product_reference": "docker-20.10.12_ce-159.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-bash-completion-20.10.12_ce-159.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch"
        },
        "product_reference": "docker-bash-completion-20.10.12_ce-159.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-fish-completion-20.10.12_ce-159.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch"
        },
        "product_reference": "docker-fish-completion-20.10.12_ce-159.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.12_ce-159.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64"
        },
        "product_reference": "docker-kubic-20.10.12_ce-159.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.12_ce-159.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le"
        },
        "product_reference": "docker-kubic-20.10.12_ce-159.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.12_ce-159.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x"
        },
        "product_reference": "docker-kubic-20.10.12_ce-159.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-20.10.12_ce-159.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64"
        },
        "product_reference": "docker-kubic-20.10.12_ce-159.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-bash-completion-20.10.12_ce-159.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch"
        },
        "product_reference": "docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-fish-completion-20.10.12_ce-159.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch"
        },
        "product_reference": "docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64"
        },
        "product_reference": "docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch"
        },
        "product_reference": "docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-zsh-completion-20.10.12_ce-159.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
        },
        "product_reference": "docker-zsh-completion-20.10.12_ce-159.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-41089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u0027s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41089",
          "url": "https://www.suse.com/security/cve/CVE-2021-41089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191015 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-04T08:31:13Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41089"
    },
    {
      "cve": "CVE-2021-41091",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41091"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as `setuid`), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade limit access to the host to trusted users. Limit access to host volumes to trusted containers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41091",
          "url": "https://www.suse.com/security/cve/CVE-2021-41091"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41091",
          "url": "https://bugzilla.suse.com/1191355"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191434 for CVE-2021-41091",
          "url": "https://bugzilla.suse.com/1191434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-04T08:31:13Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41091"
    },
    {
      "cve": "CVE-2021-41092",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41092"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41092",
          "url": "https://www.suse.com/security/cve/CVE-2021-41092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191334 for CVE-2021-41092",
          "url": "https://bugzilla.suse.com/1191334"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41092",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-04T08:31:13Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41092"
    },
    {
      "cve": "CVE-2021-41103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41103",
          "url": "https://www.suse.com/security/cve/CVE-2021-41103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191121 for CVE-2021-41103",
          "url": "https://bugzilla.suse.com/1191121"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41103",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-04T08:31:13Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41103"
    },
    {
      "cve": "CVE-2021-41190",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41190"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both \"manifests\" and \"layers\" fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both \"manifests\" and \"layers\" fields or \"manifests\" and \"config\" fields if they are unable to update to version 1.0.1 of the spec.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
          "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
          "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
          "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
          "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41190",
          "url": "https://www.suse.com/security/cve/CVE-2021-41190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193273 for CVE-2021-41190",
          "url": "https://bugzilla.suse.com/1193273"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.aarch64",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.ppc64le",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.s390x",
            "openSUSE Leap 15.3:containerd-ctr-1.4.12-60.1.x86_64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-bash-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-fish-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.aarch64",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.ppc64le",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.s390x",
            "openSUSE Leap 15.3:docker-kubic-kubeadm-criconfig-20.10.12_ce-159.1.x86_64",
            "openSUSE Leap 15.3:docker-kubic-zsh-completion-20.10.12_ce-159.1.noarch",
            "openSUSE Leap 15.3:docker-zsh-completion-20.10.12_ce-159.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-04T08:31:13Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41190"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "docker-20.10.9_ce-1.2 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the docker-20.10.9_ce-1.2 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-11579",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11579-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41089 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41089/"
      }
    ],
    "title": "docker-20.10.9_ce-1.2 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:11579-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-1.2.aarch64",
                "product": {
                  "name": "docker-20.10.9_ce-1.2.aarch64",
                  "product_id": "docker-20.10.9_ce-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.9_ce-1.2.aarch64",
                "product": {
                  "name": "docker-bash-completion-20.10.9_ce-1.2.aarch64",
                  "product_id": "docker-bash-completion-20.10.9_ce-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.9_ce-1.2.aarch64",
                "product": {
                  "name": "docker-fish-completion-20.10.9_ce-1.2.aarch64",
                  "product_id": "docker-fish-completion-20.10.9_ce-1.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.9_ce-1.2.aarch64",
                "product": {
                  "name": "docker-zsh-completion-20.10.9_ce-1.2.aarch64",
                  "product_id": "docker-zsh-completion-20.10.9_ce-1.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-1.2.ppc64le",
                "product": {
                  "name": "docker-20.10.9_ce-1.2.ppc64le",
                  "product_id": "docker-20.10.9_ce-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.9_ce-1.2.ppc64le",
                "product": {
                  "name": "docker-bash-completion-20.10.9_ce-1.2.ppc64le",
                  "product_id": "docker-bash-completion-20.10.9_ce-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.9_ce-1.2.ppc64le",
                "product": {
                  "name": "docker-fish-completion-20.10.9_ce-1.2.ppc64le",
                  "product_id": "docker-fish-completion-20.10.9_ce-1.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.9_ce-1.2.ppc64le",
                "product": {
                  "name": "docker-zsh-completion-20.10.9_ce-1.2.ppc64le",
                  "product_id": "docker-zsh-completion-20.10.9_ce-1.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-1.2.s390x",
                "product": {
                  "name": "docker-20.10.9_ce-1.2.s390x",
                  "product_id": "docker-20.10.9_ce-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.9_ce-1.2.s390x",
                "product": {
                  "name": "docker-bash-completion-20.10.9_ce-1.2.s390x",
                  "product_id": "docker-bash-completion-20.10.9_ce-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.9_ce-1.2.s390x",
                "product": {
                  "name": "docker-fish-completion-20.10.9_ce-1.2.s390x",
                  "product_id": "docker-fish-completion-20.10.9_ce-1.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.9_ce-1.2.s390x",
                "product": {
                  "name": "docker-zsh-completion-20.10.9_ce-1.2.s390x",
                  "product_id": "docker-zsh-completion-20.10.9_ce-1.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-20.10.9_ce-1.2.x86_64",
                "product": {
                  "name": "docker-20.10.9_ce-1.2.x86_64",
                  "product_id": "docker-20.10.9_ce-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.9_ce-1.2.x86_64",
                "product": {
                  "name": "docker-bash-completion-20.10.9_ce-1.2.x86_64",
                  "product_id": "docker-bash-completion-20.10.9_ce-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.9_ce-1.2.x86_64",
                "product": {
                  "name": "docker-fish-completion-20.10.9_ce-1.2.x86_64",
                  "product_id": "docker-fish-completion-20.10.9_ce-1.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.9_ce-1.2.x86_64",
                "product": {
                  "name": "docker-zsh-completion-20.10.9_ce-1.2.x86_64",
                  "product_id": "docker-zsh-completion-20.10.9_ce-1.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.aarch64"
        },
        "product_reference": "docker-20.10.9_ce-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.ppc64le"
        },
        "product_reference": "docker-20.10.9_ce-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.s390x"
        },
        "product_reference": "docker-20.10.9_ce-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.9_ce-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.x86_64"
        },
        "product_reference": "docker-20.10.9_ce-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-bash-completion-20.10.9_ce-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.aarch64"
        },
        "product_reference": "docker-bash-completion-20.10.9_ce-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-bash-completion-20.10.9_ce-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.ppc64le"
        },
        "product_reference": "docker-bash-completion-20.10.9_ce-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-bash-completion-20.10.9_ce-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.s390x"
        },
        "product_reference": "docker-bash-completion-20.10.9_ce-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-bash-completion-20.10.9_ce-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.x86_64"
        },
        "product_reference": "docker-bash-completion-20.10.9_ce-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-fish-completion-20.10.9_ce-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.aarch64"
        },
        "product_reference": "docker-fish-completion-20.10.9_ce-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-fish-completion-20.10.9_ce-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.ppc64le"
        },
        "product_reference": "docker-fish-completion-20.10.9_ce-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-fish-completion-20.10.9_ce-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.s390x"
        },
        "product_reference": "docker-fish-completion-20.10.9_ce-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-fish-completion-20.10.9_ce-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.x86_64"
        },
        "product_reference": "docker-fish-completion-20.10.9_ce-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-zsh-completion-20.10.9_ce-1.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.aarch64"
        },
        "product_reference": "docker-zsh-completion-20.10.9_ce-1.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-zsh-completion-20.10.9_ce-1.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.ppc64le"
        },
        "product_reference": "docker-zsh-completion-20.10.9_ce-1.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-zsh-completion-20.10.9_ce-1.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.s390x"
        },
        "product_reference": "docker-zsh-completion-20.10.9_ce-1.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-zsh-completion-20.10.9_ce-1.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.x86_64"
        },
        "product_reference": "docker-zsh-completion-20.10.9_ce-1.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-41089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u0027s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.aarch64",
          "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.ppc64le",
          "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.s390x",
          "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.x86_64",
          "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.aarch64",
          "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.ppc64le",
          "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.s390x",
          "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.x86_64",
          "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.aarch64",
          "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.ppc64le",
          "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.s390x",
          "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.x86_64",
          "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.aarch64",
          "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.ppc64le",
          "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.s390x",
          "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41089",
          "url": "https://www.suse.com/security/cve/CVE-2021-41089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191015 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191355 for CVE-2021-41089",
          "url": "https://bugzilla.suse.com/1191355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.x86_64",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.x86_64",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.x86_64",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-20.10.9_ce-1.2.x86_64",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-bash-completion-20.10.9_ce-1.2.x86_64",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-fish-completion-20.10.9_ce-1.2.x86_64",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.aarch64",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.ppc64le",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.s390x",
            "openSUSE Tumbleweed:docker-zsh-completion-20.10.9_ce-1.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41089"
    }
  ]
}