Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-23652 (GCVE-0-2024-23652)
Vulnerability from cvelistv5
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
URL | Tags | ||
---|---|---|---|
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-01T23:06:25.358Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8" }, { "name": "https://github.com/moby/buildkit/pull/4603", "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/moby/buildkit/pull/4603" }, { "name": "https://github.com/moby/buildkit/releases/tag/v0.12.5", "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2024-23652", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-02-01T16:13:41.410911Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-06-17T21:29:21.838Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "buildkit", "vendor": "moby", "versions": [ { "status": "affected", "version": "\u003c 0.12.5" } ] } ], "descriptions": [ { "lang": "en", "value": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-01-31T21:57:42.774Z", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M" }, "references": [ { "name": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8", "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8" }, { "name": "https://github.com/moby/buildkit/pull/4603", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/moby/buildkit/pull/4603" }, { "name": "https://github.com/moby/buildkit/releases/tag/v0.12.5", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5" } ], "source": { "advisory": "GHSA-4v98-7qmw-rqr8", "discovery": "UNKNOWN" }, "title": "BuildKit possible host system access from mount stub cleaner" } }, "cveMetadata": { "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2024-23652", "datePublished": "2024-01-31T21:57:42.774Z", "dateReserved": "2024-01-19T00:18:53.234Z", "dateUpdated": "2025-06-17T21:29:21.838Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2024-23652\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2024-01-31T22:15:54.377\",\"lastModified\":\"2024-11-21T08:58:05.700\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.\"},{\"lang\":\"es\",\"value\":\"BuildKit es un conjunto de herramientas para convertir c\u00f3digo fuente para crear artefactos de manera eficiente, expresiva y repetible. Una interfaz de BuildKit maliciosa o un Dockerfile que use RUN --mount podr\u00eda enga\u00f1ar a la funci\u00f3n que elimina archivos vac\u00edos creados para los puntos de montaje para que elimine un archivo fuera del contenedor, del sistema host. El problema se solucion\u00f3 en v0.12.5. Los workarounds incluyen evitar el uso de interfaces de BuildKit desde una fuente que no sea de confianza o crear un Dockerfile que no sea de confianza que contenga la funci\u00f3n RUN --mount.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H\",\"baseScore\":10.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.8},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.12.5\",\"matchCriteriaId\":\"0AAE2F08-4E4D-4B85-8230-8D5BA7788D3D\"}]}]}],\"references\":[{\"url\":\"https://github.com/moby/buildkit/pull/4603\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/moby/buildkit/releases/tag/v0.12.5\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\",\"Release Notes\"]},{\"url\":\"https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/moby/buildkit/pull/4603\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/moby/buildkit/releases/tag/v0.12.5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Release Notes\"]},{\"url\":\"https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}", "vulnrichment": { "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8\", \"name\": \"https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://github.com/moby/buildkit/pull/4603\", \"name\": \"https://github.com/moby/buildkit/pull/4603\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/moby/buildkit/releases/tag/v0.12.5\", \"name\": \"https://github.com/moby/buildkit/releases/tag/v0.12.5\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T23:06:25.358Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-23652\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-02-01T16:13:41.410911Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-17T21:23:36.456Z\"}}], \"cna\": {\"title\": \"BuildKit possible host system access from mount stub cleaner\", \"source\": {\"advisory\": \"GHSA-4v98-7qmw-rqr8\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 10, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"moby\", \"product\": \"buildkit\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.12.5\"}]}], \"references\": [{\"url\": \"https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8\", \"name\": \"https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/moby/buildkit/pull/4603\", \"name\": \"https://github.com/moby/buildkit/pull/4603\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/moby/buildkit/releases/tag/v0.12.5\", \"name\": \"https://github.com/moby/buildkit/releases/tag/v0.12.5\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-22\", \"description\": \"CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2024-01-31T21:57:42.774Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2024-23652\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-06-17T21:29:21.838Z\", \"dateReserved\": \"2024-01-19T00:18:53.234Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2024-01-31T21:57:42.774Z\", \"assignerShortName\": \"GitHub_M\"}", "dataType": "CVE_RECORD", "dataVersion": "5.1" } } }
CERTFR-2024-AVI-0841
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Vendor | Product | Description | ||
---|---|---|---|---|
IBM | N/A | Cloud Application Business Insights versions 1.1.8.x sans le correctif de sécurité ICABI FixPack 1.1.8.5 | ||
IBM | Db2 | Db2 on Cloud Pak for Data versions antérieures à v5.0.3 | ||
IBM | N/A | Cloud Application Business Insights versions 1.1.7.x sans le correctif de sécurité ICABI FixPack 1.1.7.10 | ||
IBM | Db2 | Db2 Warehouse on Cloud Pak for Data versions antérieures à v5.0.3 |
Title | Publication Time | Tags | ||||||
---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "Cloud Application Business Insights versions 1.1.8.x sans le correctif de s\u00e9curit\u00e9 ICABI FixPack 1.1.8.5", "product": { "name": "N/A", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Db2 on Cloud Pak for Data versions ant\u00e9rieures \u00e0 v5.0.3", "product": { "name": "Db2", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Cloud Application Business Insights versions 1.1.7.x sans le correctif de s\u00e9curit\u00e9 ICABI FixPack 1.1.7.10", "product": { "name": "N/A", "vendor": { "name": "IBM", "scada": false } } }, { "description": "Db2 Warehouse on Cloud Pak for Data versions ant\u00e9rieures \u00e0 v5.0.3", "product": { "name": "Db2", "vendor": { "name": "IBM", "scada": false } } } ], "affected_systems_content": "", "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).", "cves": [ { "name": "CVE-2024-1597", "url": "https://www.cve.org/CVERecord?id=CVE-2024-1597" }, { "name": "CVE-2024-21144", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21144" }, { "name": "CVE-2024-4068", "url": "https://www.cve.org/CVERecord?id=CVE-2024-4068" }, { "name": "CVE-2020-9546", "url": "https://www.cve.org/CVERecord?id=CVE-2020-9546" }, { "name": "CVE-2024-3154", "url": "https://www.cve.org/CVERecord?id=CVE-2024-3154" }, { "name": "CVE-2020-10673", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10673" }, { "name": "CVE-2020-35728", "url": "https://www.cve.org/CVERecord?id=CVE-2020-35728" }, { "name": "CVE-2024-23650", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23650" }, { "name": "CVE-2020-36181", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36181" }, { "name": "CVE-2020-9548", "url": "https://www.cve.org/CVERecord?id=CVE-2020-9548" }, { "name": "CVE-2020-36182", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36182" }, { "name": "CVE-2020-24616", "url": "https://www.cve.org/CVERecord?id=CVE-2020-24616" }, { "name": "CVE-2023-50312", "url": "https://www.cve.org/CVERecord?id=CVE-2023-50312" }, { "name": "CVE-2020-36185", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36185" }, { "name": "CVE-2024-27280", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27280" }, { "name": "CVE-2019-16942", "url": "https://www.cve.org/CVERecord?id=CVE-2019-16942" }, { "name": "CVE-2020-9547", "url": "https://www.cve.org/CVERecord?id=CVE-2020-9547" }, { "name": "CVE-2020-36179", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36179" }, { "name": "CVE-2020-10650", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10650" }, { "name": "CVE-2020-36186", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36186" }, { "name": "CVE-2020-36189", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36189" }, { "name": "CVE-2020-35490", "url": "https://www.cve.org/CVERecord?id=CVE-2020-35490" }, { "name": "CVE-2021-20190", "url": "https://www.cve.org/CVERecord?id=CVE-2021-20190" }, { "name": "CVE-2023-25613", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25613" }, { "name": "CVE-2024-25026", "url": "https://www.cve.org/CVERecord?id=CVE-2024-25026" }, { "name": "CVE-2019-10202", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10202" }, { "name": "CVE-2020-11113", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11113" }, { "name": "CVE-2020-10672", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10672" }, { "name": "CVE-2020-10969", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10969" }, { "name": "CVE-2024-39249", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39249" }, { "name": "CVE-2020-36187", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36187" }, { "name": "CVE-2021-43784", "url": "https://www.cve.org/CVERecord?id=CVE-2021-43784" }, { "name": "CVE-2023-3978", "url": "https://www.cve.org/CVERecord?id=CVE-2023-3978" }, { "name": "CVE-2024-22329", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22329" }, { "name": "CVE-2020-11620", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11620" }, { "name": "CVE-2020-24750", "url": "https://www.cve.org/CVERecord?id=CVE-2020-24750" }, { "name": "CVE-2024-21147", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21147" }, { "name": "CVE-2023-41993", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41993" }, { "name": "CVE-2019-16943", "url": "https://www.cve.org/CVERecord?id=CVE-2019-16943" }, { "name": "CVE-2024-21140", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21140" }, { "name": "CVE-2019-20330", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20330" }, { "name": "CVE-2024-41110", "url": "https://www.cve.org/CVERecord?id=CVE-2024-41110" }, { "name": "CVE-2020-14195", "url": "https://www.cve.org/CVERecord?id=CVE-2020-14195" }, { "name": "CVE-2020-35491", "url": "https://www.cve.org/CVERecord?id=CVE-2020-35491" }, { "name": "CVE-2024-23653", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23653" }, { "name": "CVE-2019-17531", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17531" }, { "name": "CVE-2020-14061", "url": "https://www.cve.org/CVERecord?id=CVE-2020-14061" }, { "name": "CVE-2022-42004", "url": "https://www.cve.org/CVERecord?id=CVE-2022-42004" }, { "name": "CVE-2020-11619", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11619" }, { "name": "CVE-2020-36183", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36183" }, { "name": "CVE-2020-8840", "url": "https://www.cve.org/CVERecord?id=CVE-2020-8840" }, { "name": "CVE-2024-23651", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23651" }, { "name": "CVE-2024-21138", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21138" }, { "name": "CVE-2019-10172", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10172" }, { "name": "CVE-2022-34038", "url": "https://www.cve.org/CVERecord?id=CVE-2022-34038" }, { "name": "CVE-2024-37890", "url": "https://www.cve.org/CVERecord?id=CVE-2024-37890" }, { "name": "CVE-2020-36184", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36184" }, { "name": "CVE-2020-36180", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36180" }, { "name": "CVE-2020-36518", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36518" }, { "name": "CVE-2024-21145", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21145" }, { "name": "CVE-2024-23652", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23652" }, { "name": "CVE-2024-3727", "url": "https://www.cve.org/CVERecord?id=CVE-2024-3727" }, { "name": "CVE-2020-10968", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10968" }, { "name": "CVE-2022-42003", "url": "https://www.cve.org/CVERecord?id=CVE-2022-42003" }, { "name": "CVE-2020-25649", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25649" }, { "name": "CVE-2024-21131", "url": "https://www.cve.org/CVERecord?id=CVE-2024-21131" }, { "name": "CVE-2024-22354", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22354" }, { "name": "CVE-2024-39689", "url": "https://www.cve.org/CVERecord?id=CVE-2024-39689" }, { "name": "CVE-2020-11112", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11112" }, { "name": "CVE-2020-11111", "url": "https://www.cve.org/CVERecord?id=CVE-2020-11111" }, { "name": "CVE-2024-27267", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27267" }, { "name": "CVE-2023-6597", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6597" }, { "name": "CVE-2024-20952", "url": "https://www.cve.org/CVERecord?id=CVE-2024-20952" }, { "name": "CVE-2020-14060", "url": "https://www.cve.org/CVERecord?id=CVE-2020-14060" }, { "name": "CVE-2020-36188", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36188" }, { "name": "CVE-2020-14062", "url": "https://www.cve.org/CVERecord?id=CVE-2020-14062" } ], "initial_release_date": "2024-10-04T00:00:00", "last_revision_date": "2024-10-04T00:00:00", "links": [], "reference": "CERTFR-2024-AVI-0841", "revisions": [ { "description": "Version initiale", "revision_date": "2024-10-04T00:00:00.000000" } ], "risks": [ { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" }, { "description": "\u00c9l\u00e9vation de privil\u00e8ges" }, { "description": "D\u00e9ni de service \u00e0 distance" }, { "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es" }, { "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es" }, { "description": "Contournement de la politique de s\u00e9curit\u00e9" }, { "description": "Injection de code indirecte \u00e0 distance (XSS)" }, { "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM", "vendor_advisories": [ { "published_at": "2024-09-30", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7171677", "url": "https://www.ibm.com/support/pages/node/7171677" }, { "published_at": "2024-09-30", "title": "Bulletin de s\u00e9curit\u00e9 IBM 7171704", "url": "https://www.ibm.com/support/pages/node/7171704" } ] }
opensuse-su-2024:13651-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "buildkit-0.12.5-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the buildkit-0.12.5-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-13651", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13651-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" } ], "title": "buildkit-0.12.5-1.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:13651-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "buildkit-0.12.5-1.1.aarch64", "product": { "name": "buildkit-0.12.5-1.1.aarch64", "product_id": "buildkit-0.12.5-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "buildkit-0.12.5-1.1.ppc64le", "product": { "name": "buildkit-0.12.5-1.1.ppc64le", "product_id": "buildkit-0.12.5-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "buildkit-0.12.5-1.1.s390x", "product": { "name": "buildkit-0.12.5-1.1.s390x", "product_id": "buildkit-0.12.5-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "buildkit-0.12.5-1.1.x86_64", "product": { "name": "buildkit-0.12.5-1.1.x86_64", "product_id": "buildkit-0.12.5-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "buildkit-0.12.5-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:buildkit-0.12.5-1.1.aarch64" }, "product_reference": "buildkit-0.12.5-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "buildkit-0.12.5-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:buildkit-0.12.5-1.1.ppc64le" }, "product_reference": "buildkit-0.12.5-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "buildkit-0.12.5-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:buildkit-0.12.5-1.1.s390x" }, "product_reference": "buildkit-0.12.5-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "buildkit-0.12.5-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:buildkit-0.12.5-1.1.x86_64" }, "product_reference": "buildkit-0.12.5-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:buildkit-0.12.5-1.1.aarch64", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.ppc64le", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.s390x", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:buildkit-0.12.5-1.1.aarch64", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.ppc64le", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.s390x", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:buildkit-0.12.5-1.1.aarch64", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.ppc64le", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.s390x", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:buildkit-0.12.5-1.1.aarch64", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.ppc64le", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.s390x", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:buildkit-0.12.5-1.1.aarch64", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.ppc64le", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.s390x", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:buildkit-0.12.5-1.1.aarch64", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.ppc64le", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.s390x", "openSUSE Tumbleweed:buildkit-0.12.5-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-23652" } ] }
opensuse-su-2024:14059-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "singularity-ce-4.1.3-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the singularity-ce-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-14059", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14059-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2022-23538 page", "url": "https://www.suse.com/security/cve/CVE-2022-23538/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-39237 page", "url": "https://www.suse.com/security/cve/CVE-2022-39237/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-21626 page", "url": "https://www.suse.com/security/cve/CVE-2024-21626/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23650 page", "url": "https://www.suse.com/security/cve/CVE-2024-23650/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-3727 page", "url": "https://www.suse.com/security/cve/CVE-2024-3727/" } ], "title": "singularity-ce-4.1.3-1.1 on GA media", "tracking": { "current_release_date": "2024-06-20T00:00:00Z", "generator": { "date": "2024-06-20T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:14059-1", "initial_release_date": "2024-06-20T00:00:00Z", "revision_history": [ { "date": "2024-06-20T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "singularity-ce-4.1.3-1.1.aarch64", "product": { "name": "singularity-ce-4.1.3-1.1.aarch64", "product_id": "singularity-ce-4.1.3-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "singularity-ce-4.1.3-1.1.ppc64le", "product": { "name": "singularity-ce-4.1.3-1.1.ppc64le", "product_id": "singularity-ce-4.1.3-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "singularity-ce-4.1.3-1.1.s390x", "product": { "name": "singularity-ce-4.1.3-1.1.s390x", "product_id": "singularity-ce-4.1.3-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "singularity-ce-4.1.3-1.1.x86_64", "product": { "name": "singularity-ce-4.1.3-1.1.x86_64", "product_id": "singularity-ce-4.1.3-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "singularity-ce-4.1.3-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64" }, "product_reference": "singularity-ce-4.1.3-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "singularity-ce-4.1.3-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le" }, "product_reference": "singularity-ce-4.1.3-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "singularity-ce-4.1.3-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x" }, "product_reference": "singularity-ce-4.1.3-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "singularity-ce-4.1.3-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" }, "product_reference": "singularity-ce-4.1.3-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-23538", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-23538" } ], "notes": [ { "category": "general", "text": "github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirects the client to a backing S3 storage server, to perform a multi-part concurrent download. Depending on site configuration, the S3 service may be provided by a third party. An attacker with access to the S3 service may be able to extract user credentials, allowing them to impersonate the user. The vulnerable multi-part concurrent download flow, with redirect to S3, is only used when communicating with a Singularity Enterprise 1.x installation, or third party server implementing this flow. Interaction with Singularity Enterprise 2.x, and Singularity Container Services (cloud.sylabs.io), does not trigger the vulnerable flow. We encourage all users to update. Users who interact with a Singularity Enterprise 1.x installation, using a 3rd party S3 storage service, are advised to revoke and recreate their authentication tokens within Singularity Enterprise. There is no workaround available at this time.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-23538", "url": "https://www.suse.com/security/cve/CVE-2022-23538" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "important" } ], "title": "CVE-2022-23538" }, { "cve": "CVE-2022-39237", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-39237" } ], "notes": [ { "category": "general", "text": "syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. A patch is available in version \u003e= v2.8.1 of the module. Users are encouraged to upgrade. Users unable to upgrade may independently validate that the hash algorithm(s) used for metadata digest(s) and signature hash are cryptographically secure.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-39237", "url": "https://www.suse.com/security/cve/CVE-2022-39237" }, { "category": "external", "summary": "SUSE Bug 1209493 for CVE-2022-39237", "url": "https://bugzilla.suse.com/1209493" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "important" } ], "title": "CVE-2022-39237" }, { "cve": "CVE-2024-21626", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-21626" } ], "notes": [ { "category": "general", "text": "runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem (\"attack 2\"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run (\"attack 1\"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes (\"attack 3a\" and \"attack 3b\"). runc 1.1.12 includes patches for this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-21626", "url": "https://www.suse.com/security/cve/CVE-2024-21626" }, { "category": "external", "summary": "SUSE Bug 1218894 for CVE-2024-21626", "url": "https://bugzilla.suse.com/1218894" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "important" } ], "title": "CVE-2024-21626" }, { "cve": "CVE-2024-23650", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23650" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23650", "url": "https://www.suse.com/security/cve/CVE-2024-23650" }, { "category": "external", "summary": "SUSE Bug 1219437 for CVE-2024-23650", "url": "https://bugzilla.suse.com/1219437" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-23650" }, { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "important" } ], "title": "CVE-2024-23653" }, { "cve": "CVE-2024-3727", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-3727" } ], "notes": [ { "category": "general", "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-3727", "url": "https://www.suse.com/security/cve/CVE-2024-3727" }, { "category": "external", "summary": "SUSE Bug 1224112 for CVE-2024-3727", "url": "https://bugzilla.suse.com/1224112" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x", "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-20T00:00:00Z", "details": "important" } ], "title": "CVE-2024-3727" } ] }
opensuse-su-2024:13689-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "docker-24.0.7_ce-3.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the docker-24.0.7_ce-3.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-13689", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13689-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" } ], "title": "docker-24.0.7_ce-3.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:13689-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-3.1.aarch64", "product": { "name": "docker-24.0.7_ce-3.1.aarch64", "product_id": "docker-24.0.7_ce-3.1.aarch64" } }, { "category": "product_version", "name": "docker-bash-completion-24.0.7_ce-3.1.aarch64", "product": { "name": "docker-bash-completion-24.0.7_ce-3.1.aarch64", "product_id": "docker-bash-completion-24.0.7_ce-3.1.aarch64" } }, { "category": "product_version", "name": "docker-fish-completion-24.0.7_ce-3.1.aarch64", "product": { "name": "docker-fish-completion-24.0.7_ce-3.1.aarch64", "product_id": "docker-fish-completion-24.0.7_ce-3.1.aarch64" } }, { "category": "product_version", "name": "docker-rootless-extras-24.0.7_ce-3.1.aarch64", "product": { "name": "docker-rootless-extras-24.0.7_ce-3.1.aarch64", "product_id": "docker-rootless-extras-24.0.7_ce-3.1.aarch64" } }, { "category": "product_version", "name": "docker-zsh-completion-24.0.7_ce-3.1.aarch64", "product": { "name": "docker-zsh-completion-24.0.7_ce-3.1.aarch64", "product_id": "docker-zsh-completion-24.0.7_ce-3.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-3.1.ppc64le", "product": { "name": "docker-24.0.7_ce-3.1.ppc64le", "product_id": "docker-24.0.7_ce-3.1.ppc64le" } }, { "category": "product_version", "name": "docker-bash-completion-24.0.7_ce-3.1.ppc64le", "product": { "name": "docker-bash-completion-24.0.7_ce-3.1.ppc64le", "product_id": "docker-bash-completion-24.0.7_ce-3.1.ppc64le" } }, { "category": "product_version", "name": "docker-fish-completion-24.0.7_ce-3.1.ppc64le", "product": { "name": "docker-fish-completion-24.0.7_ce-3.1.ppc64le", "product_id": "docker-fish-completion-24.0.7_ce-3.1.ppc64le" } }, { "category": "product_version", "name": "docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "product": { "name": "docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "product_id": "docker-rootless-extras-24.0.7_ce-3.1.ppc64le" } }, { "category": "product_version", "name": "docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "product": { "name": "docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "product_id": "docker-zsh-completion-24.0.7_ce-3.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-3.1.s390x", "product": { "name": "docker-24.0.7_ce-3.1.s390x", "product_id": "docker-24.0.7_ce-3.1.s390x" } }, { "category": "product_version", "name": "docker-bash-completion-24.0.7_ce-3.1.s390x", "product": { "name": "docker-bash-completion-24.0.7_ce-3.1.s390x", "product_id": "docker-bash-completion-24.0.7_ce-3.1.s390x" } }, { "category": "product_version", "name": "docker-fish-completion-24.0.7_ce-3.1.s390x", "product": { "name": "docker-fish-completion-24.0.7_ce-3.1.s390x", "product_id": "docker-fish-completion-24.0.7_ce-3.1.s390x" } }, { "category": "product_version", "name": "docker-rootless-extras-24.0.7_ce-3.1.s390x", "product": { "name": "docker-rootless-extras-24.0.7_ce-3.1.s390x", "product_id": "docker-rootless-extras-24.0.7_ce-3.1.s390x" } }, { "category": "product_version", "name": "docker-zsh-completion-24.0.7_ce-3.1.s390x", "product": { "name": "docker-zsh-completion-24.0.7_ce-3.1.s390x", "product_id": "docker-zsh-completion-24.0.7_ce-3.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-3.1.x86_64", "product": { "name": "docker-24.0.7_ce-3.1.x86_64", "product_id": "docker-24.0.7_ce-3.1.x86_64" } }, { "category": "product_version", "name": "docker-bash-completion-24.0.7_ce-3.1.x86_64", "product": { "name": "docker-bash-completion-24.0.7_ce-3.1.x86_64", "product_id": "docker-bash-completion-24.0.7_ce-3.1.x86_64" } }, { "category": "product_version", "name": "docker-fish-completion-24.0.7_ce-3.1.x86_64", "product": { "name": "docker-fish-completion-24.0.7_ce-3.1.x86_64", "product_id": "docker-fish-completion-24.0.7_ce-3.1.x86_64" } }, { "category": "product_version", "name": "docker-rootless-extras-24.0.7_ce-3.1.x86_64", "product": { "name": "docker-rootless-extras-24.0.7_ce-3.1.x86_64", "product_id": "docker-rootless-extras-24.0.7_ce-3.1.x86_64" } }, { "category": "product_version", "name": "docker-zsh-completion-24.0.7_ce-3.1.x86_64", "product": { "name": "docker-zsh-completion-24.0.7_ce-3.1.x86_64", "product_id": "docker-zsh-completion-24.0.7_ce-3.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64" }, "product_reference": "docker-24.0.7_ce-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x" }, "product_reference": "docker-24.0.7_ce-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64" }, "product_reference": "docker-24.0.7_ce-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64" }, "product_reference": "docker-bash-completion-24.0.7_ce-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le" }, "product_reference": "docker-bash-completion-24.0.7_ce-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x" }, "product_reference": "docker-bash-completion-24.0.7_ce-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64" }, "product_reference": "docker-bash-completion-24.0.7_ce-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64" }, "product_reference": "docker-fish-completion-24.0.7_ce-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le" }, "product_reference": "docker-fish-completion-24.0.7_ce-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x" }, "product_reference": "docker-fish-completion-24.0.7_ce-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64" }, "product_reference": "docker-fish-completion-24.0.7_ce-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64" }, "product_reference": "docker-rootless-extras-24.0.7_ce-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le" }, "product_reference": "docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x" }, "product_reference": "docker-rootless-extras-24.0.7_ce-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64" }, "product_reference": "docker-rootless-extras-24.0.7_ce-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-zsh-completion-24.0.7_ce-3.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64" }, "product_reference": "docker-zsh-completion-24.0.7_ce-3.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-zsh-completion-24.0.7_ce-3.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le" }, "product_reference": "docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-zsh-completion-24.0.7_ce-3.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x" }, "product_reference": "docker-zsh-completion-24.0.7_ce-3.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "docker-zsh-completion-24.0.7_ce-3.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" }, "product_reference": "docker-zsh-completion-24.0.7_ce-3.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-bash-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-fish-completion-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-rootless-extras-24.0.7_ce-3.1.x86_64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.aarch64", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.ppc64le", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.s390x", "openSUSE Tumbleweed:docker-zsh-completion-24.0.7_ce-3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2024-23653" } ] }
wid-sec-w-2024-3377
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Dell PowerProtect Data Domain Appliances sind speziell f\u00fcr Backup und Daten-Deduplizierung ausgelegte Systeme.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erh\u00f6hen, Informationen offenzulegen und um nicht n\u00e4her beschriebene Auswirkungen zu erzielen.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-3377 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3377.json" }, { "category": "self", "summary": "WID-SEC-2024-3377 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3377" }, { "category": "external", "summary": "Dell Security Update", "url": "https://www.dell.com/support/kbdoc/de-de/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-update-for-dell-powerprotect-dd-vulnerabilityowerprotect-dd-vulnerability" }, { "category": "external", "summary": "Security Update for Dell PowerProtect Data Domain", "url": "https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities" } ], "source_lang": "en-US", "title": "Dell PowerProtect Data Domain: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-08-04T22:00:00.000+00:00", "generator": { "date": "2025-08-05T07:21:01.974+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2024-3377", "initial_release_date": "2024-11-07T23:00:00.000+00:00", "revision_history": [ { "date": "2024-11-07T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2025-08-04T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Dell aufgenommen" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c8.1.0.0", "product": { "name": "Dell PowerProtect Data Domain \u003c8.1.0.0", "product_id": "T038861" } }, { "category": "product_version", "name": "8.1.0.0", "product": { "name": "Dell PowerProtect Data Domain 8.1.0.0", "product_id": "T038861-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:8.1.0.0" } } }, { "category": "product_version_range", "name": "\u003c7.13.1.10", "product": { "name": "Dell PowerProtect Data Domain \u003c7.13.1.10", "product_id": "T038862" } }, { "category": "product_version", "name": "7.13.1.10", "product": { "name": "Dell PowerProtect Data Domain 7.13.1.10", "product_id": "T038862-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:7.13.1.10" } } }, { "category": "product_version_range", "name": "\u003c7.10.1.40", "product": { "name": "Dell PowerProtect Data Domain \u003c7.10.1.40", "product_id": "T038863" } }, { "category": "product_version", "name": "7.10.1.40", "product": { "name": "Dell PowerProtect Data Domain 7.10.1.40", "product_id": "T038863-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:7.10.1.40" } } }, { "category": "product_version_range", "name": "\u003c7.7.5.50", "product": { "name": "Dell PowerProtect Data Domain \u003c7.7.5.50", "product_id": "T038864" } }, { "category": "product_version", "name": "7.7.5.50", "product": { "name": "Dell PowerProtect Data Domain 7.7.5.50", "product_id": "T038864-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:7.7.5.50" } } }, { "category": "product_name", "name": "Dell PowerProtect Data Domain", "product": { "name": "Dell PowerProtect Data Domain", "product_id": "T045852", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:-" } } } ], "category": "product_name", "name": "PowerProtect Data Domain" }, { "category": "product_name", "name": "Dell PowerProtect Data Domain Management Center", "product": { "name": "Dell PowerProtect Data Domain Management Center", "product_id": "T045853", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain_management_center:-" } } }, { "category": "product_name", "name": "Dell PowerProtect Data Domain OS", "product": { "name": "Dell PowerProtect Data Domain OS", "product_id": "T045854", "product_identification_helper": { "cpe": "cpe:/o:dell:powerprotect_data_domain_os:-" } } } ], "category": "vendor", "name": "Dell" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-45759", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-45759" }, { "cve": "CVE-2024-48010", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-48010" }, { "cve": "CVE-2024-48011", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-48011" }, { "cve": "CVE-2017-16829", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2017-16829" }, { "cve": "CVE-2017-5849", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2017-5849" }, { "cve": "CVE-2018-7208", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2018-7208" }, { "cve": "CVE-2019-14889", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2019-14889" }, { "cve": "CVE-2020-12912", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-12912" }, { "cve": "CVE-2020-16135", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-16135" }, { "cve": "CVE-2020-1730", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-1730" }, { "cve": "CVE-2020-24455", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-24455" }, { "cve": "CVE-2020-8694", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-8694" }, { "cve": "CVE-2020-8695", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-8695" }, { "cve": "CVE-2021-27219", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2021-27219" }, { "cve": "CVE-2021-3565", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2021-3565" }, { "cve": "CVE-2021-3634", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2021-3634" }, { "cve": "CVE-2022-1210", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-1210" }, { "cve": "CVE-2022-1622", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-1622" }, { "cve": "CVE-2022-1996", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-1996" }, { "cve": "CVE-2022-22576", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-22576" }, { "cve": "CVE-2022-25313", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-25313" }, { "cve": "CVE-2022-27774", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27774" }, { "cve": "CVE-2022-27775", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27775" }, { "cve": "CVE-2022-27776", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27776" }, { "cve": "CVE-2022-27781", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27781" }, { "cve": "CVE-2022-27782", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27782" }, { "cve": "CVE-2022-29361", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-29361" }, { "cve": "CVE-2022-32205", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32205" }, { "cve": "CVE-2022-32206", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32206" }, { "cve": "CVE-2022-32207", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32207" }, { "cve": "CVE-2022-32208", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32208" }, { "cve": "CVE-2022-32221", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32221" }, { "cve": "CVE-2022-35252", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-35252" }, { "cve": "CVE-2022-40023", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-40023" }, { "cve": "CVE-2022-40090", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-40090" }, { "cve": "CVE-2022-42915", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-42915" }, { "cve": "CVE-2022-42916", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-42916" }, { "cve": "CVE-2022-43551", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-43551" }, { "cve": "CVE-2022-43552", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-43552" }, { "cve": "CVE-2022-4603", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-4603" }, { "cve": "CVE-2022-48064", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-48064" }, { "cve": "CVE-2022-48624", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-48624" }, { "cve": "CVE-2023-0461", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-0461" }, { "cve": "CVE-2023-1667", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-1667" }, { "cve": "CVE-2023-1916", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-1916" }, { "cve": "CVE-2023-20592", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-20592" }, { "cve": "CVE-2023-2137", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-2137" }, { "cve": "CVE-2023-22745", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-22745" }, { "cve": "CVE-2023-2283", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-2283" }, { "cve": "CVE-2023-23914", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23914" }, { "cve": "CVE-2023-23915", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23915" }, { "cve": "CVE-2023-23916", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23916" }, { "cve": "CVE-2023-23934", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23934" }, { "cve": "CVE-2023-25577", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-25577" }, { "cve": "CVE-2023-26965", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-26965" }, { "cve": "CVE-2023-27043", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27043" }, { "cve": "CVE-2023-2731", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-2731" }, { "cve": "CVE-2023-27533", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27533" }, { "cve": "CVE-2023-27534", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27534" }, { "cve": "CVE-2023-27535", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27535" }, { "cve": "CVE-2023-27536", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27536" }, { "cve": "CVE-2023-27538", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27538" }, { "cve": "CVE-2023-28319", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28319" }, { "cve": "CVE-2023-28320", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28320" }, { "cve": "CVE-2023-28321", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28321" }, { "cve": "CVE-2023-28322", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28322" }, { "cve": "CVE-2023-31083", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-31083" }, { "cve": "CVE-2023-34055", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-34055" }, { "cve": "CVE-2023-35116", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-35116" }, { "cve": "CVE-2023-38286", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38286" }, { "cve": "CVE-2023-38469", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38469" }, { "cve": "CVE-2023-38471", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38471" }, { "cve": "CVE-2023-38472", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38472" }, { "cve": "CVE-2023-38545", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38545" }, { "cve": "CVE-2023-38546", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38546" }, { "cve": "CVE-2023-39197", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-39197" }, { "cve": "CVE-2023-39198", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-39198" }, { "cve": "CVE-2023-39804", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-39804" }, { "cve": "CVE-2023-40217", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-40217" }, { "cve": "CVE-2023-42465", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-42465" }, { "cve": "CVE-2023-4255", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-4255" }, { "cve": "CVE-2023-45139", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45139" }, { "cve": "CVE-2023-45322", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45322" }, { "cve": "CVE-2023-45863", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45863" }, { "cve": "CVE-2023-45871", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45871" }, { "cve": "CVE-2023-46136", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46136" }, { "cve": "CVE-2023-46218", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46218" }, { "cve": "CVE-2023-46219", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46219" }, { "cve": "CVE-2023-46751", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46751" }, { "cve": "CVE-2023-48795", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-48795" }, { "cve": "CVE-2023-49083", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-49083" }, { "cve": "CVE-2023-50447", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-50447" }, { "cve": "CVE-2023-5049", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5049" }, { "cve": "CVE-2023-50495", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-50495" }, { "cve": "CVE-2023-50782", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-50782" }, { "cve": "CVE-2023-51257", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-51257" }, { "cve": "CVE-2023-52425", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-52425" }, { "cve": "CVE-2023-52426", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-52426" }, { "cve": "CVE-2023-5678", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5678" }, { "cve": "CVE-2023-5717", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5717" }, { "cve": "CVE-2023-5752", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5752" }, { "cve": "CVE-2023-6004", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-6004" }, { "cve": "CVE-2023-6597", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-6597" }, { "cve": "CVE-2023-6918", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-6918" }, { "cve": "CVE-2023-7207", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-7207" }, { "cve": "CVE-2024-0450", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-0450" }, { "cve": "CVE-2024-0727", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-0727" }, { "cve": "CVE-2024-0985", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-0985" }, { "cve": "CVE-2024-21626", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-21626" }, { "cve": "CVE-2024-22195", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-22195" }, { "cve": "CVE-2024-22365", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-22365" }, { "cve": "CVE-2024-23651", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23653" }, { "cve": "CVE-2024-23672", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23672" }, { "cve": "CVE-2024-24549", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-24549" }, { "cve": "CVE-2024-25062", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-25062" }, { "cve": "CVE-2024-26130", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-26130" }, { "cve": "CVE-2024-26458", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-26458" }, { "cve": "CVE-2024-26461", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-26461" }, { "cve": "CVE-2024-28085", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28085" }, { "cve": "CVE-2024-28182", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28219", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28219" }, { "cve": "CVE-2024-28757", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28757" } ] }
wid-sec-w-2024-0272
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Docker ist eine Open-Source-Software, die dazu verwendet werden kann, Anwendungen mithilfe von Betriebssystemvirtualisierung in Containern zu isolieren.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erh\u00f6hen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsma\u00dfnahmen zu umgehen oder Dateien zu manipulieren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- MacOS X\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0272 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0272.json" }, { "category": "self", "summary": "WID-SEC-2024-0272 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0272" }, { "category": "external", "summary": "Docker Security Advisory vom 2024-01-31", "url": "https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0295-1 vom 2024-02-01", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017833.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0294-1 vom 2024-02-01", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017834.html" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-900DC7F6FF vom 2024-02-01", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-900dc7f6ff" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-9044C9EEFA vom 2024-02-01", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-9044c9eefa" }, { "category": "external", "summary": "Debian Security Advisory DSA-5615 vom 2024-02-04", "url": "https://lists.debian.org/debian-security-announce/2024/msg00022.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0670 vom 2024-02-02", "url": "https://access.redhat.com/errata/RHSA-2024:0670" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-0670 vom 2024-02-06", "url": "http://linux.oracle.com/errata/ELSA-2024-0670.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0328-1 vom 2024-02-05", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017865.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0717 vom 2024-02-07", "url": "https://access.redhat.com/errata/RHSA-2024:0717" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0752 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0752" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0756 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0756" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0764 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0764" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0757 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0757" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0759 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0759" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0666 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0666" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0645 vom 2024-02-07", "url": "https://access.redhat.com/errata/RHSA-2024:0645" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0682 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0682" }, { "category": "external", "summary": "Docker Desktop release notes vom 2024-02-08", "url": "https://docs.docker.com/desktop/release-notes/#4272" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0760 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0760" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0662 vom 2024-02-07", "url": "https://access.redhat.com/errata/RHSA-2024:0662" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0748 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0748" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0758 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0758" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0755 vom 2024-02-09", "url": "https://access.redhat.com/errata/RHSA-2024:0755" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0684 vom 2024-02-09", "url": "https://access.redhat.com/errata/RHSA-2024:0684" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-17931 vom 2024-02-10", "url": "https://linux.oracle.com/errata/ELSA-2024-17931.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-12148 vom 2024-02-10", "url": "https://linux.oracle.com/errata/ELSA-2024-12148.html" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:0752 vom 2024-02-12", "url": "https://errata.build.resf.org/RLSA-2024:0752" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0459-1 vom 2024-02-13", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017910.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-0748 vom 2024-02-15", "url": "https://linux.oracle.com/errata/ELSA-2024-0748.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-0752 vom 2024-02-14", "url": "https://linux.oracle.com/errata/ELSA-2024-0752.html" }, { "category": "external", "summary": "Debian Security Advisory DLA-3735 vom 2024-02-19", "url": "https://lists.debian.org/debian-lts-announce/2024/02/msg00005.html" }, { "category": "external", "summary": "Palo Alto Networks Security Advisory PAN-SA-2024-0002 vom 2024-02-22", "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0002" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0586-1 vom 2024-02-22", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017990.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0587-1 vom 2024-02-22", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017989.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:7201 vom 2024-02-28", "url": "https://access.redhat.com/errata/RHSA-2023:7201" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2024-039 vom 2024-03-06", "url": "https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2024-039.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASDOCKER-2024-039 vom 2024-03-06", "url": "https://alas.aws.amazon.com/AL2/ALASDOCKER-2024-039.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:1270 vom 2024-03-12", "url": "https://access.redhat.com/errata/RHSA-2024:1270" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0586-2 vom 2024-04-04", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018256.html" }, { "category": "external", "summary": "Dell Security Advisory DSA-2024-164 vom 2024-04-05", "url": "https://www.dell.com/support/kbdoc/000223801/dsa-2024-=" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:1469-1 vom 2024-04-29", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018439.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:2988 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:2988" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-2988 vom 2024-05-28", "url": "https://linux.oracle.com/errata/ELSA-2024-2988.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202407-12 vom 2024-07-05", "url": "https://security.gentoo.org/glsa/202407-12" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202407-25 vom 2024-07-10", "url": "https://security.gentoo.org/glsa/202407-25" }, { "category": "external", "summary": "IBM Security Bulletin 7162077 vom 2024-07-31", "url": "https://www.ibm.com/support/pages/node/7162077" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2801-1 vom 2024-08-07", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019134.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2801-2 vom 2024-08-07", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019136.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202408-25 vom 2024-08-11", "url": "https://security.gentoo.org/glsa/202408-25" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASDOCKER-2024-044 vom 2024-08-29", "url": "https://alas.aws.amazon.com/AL2/ALASDOCKER-2024-044.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2024-045 vom 2024-08-29", "url": "https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2024-045.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:3120-1 vom 2024-09-03", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019345.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASECS-2024-041 vom 2024-09-03", "url": "https://alas.aws.amazon.com/AL2/ALASECS-2024-041.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202409-29 vom 2024-09-28", "url": "https://security.gentoo.org/glsa/202409-29" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-EPEL-2024-0282083260 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0282083260" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-1CAB90A9E7 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-1cab90a9e7" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-28E375F8CA vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-28e375f8ca" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-1068D5C32B vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-1068d5c32b" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-AFA796A751 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-afa796a751" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-EE9F0F22B6 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-ee9f0f22b6" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-69528C0BA6 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-69528c0ba6" }, { "category": "external", "summary": "Brocade Security Advisory BSA-2024-2749 vom 2024-11-02", "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25074" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10147 vom 2024-11-27", "url": "https://access.redhat.com/errata/RHSA-2024:10149" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10520 vom 2024-12-03", "url": "https://access.redhat.com/errata/RHSA-2024:10520" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10525 vom 2024-12-05", "url": "https://access.redhat.com/errata/RHSA-2024:10525" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10841 vom 2024-12-12", "url": "https://access.redhat.com/errata/RHSA-2024:10841" }, { "category": "external", "summary": "openSUSE Security Update OPENSUSE-SU-2024:14571-1 vom 2024-12-13", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6XZ7QNLFOMP7ZODQGCLQFRNRPEWZELNY/" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:0115 vom 2025-01-14", "url": "https://access.redhat.com/errata/RHSA-2025:0115" } ], "source_lang": "en-US", "title": "docker: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-01-13T23:00:00.000+00:00", "generator": { "date": "2025-01-14T13:52:43.090+00:00", "engine": { "name": "BSI-WID", "version": "1.3.10" } }, "id": "WID-SEC-W-2024-0272", "initial_release_date": "2024-01-31T23:00:00.000+00:00", "revision_history": [ { "date": "2024-01-31T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-02-01T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2024-02-04T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Debian und Red Hat aufgenommen" }, { "date": "2024-02-05T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Oracle Linux und SUSE aufgenommen" }, { "date": "2024-02-07T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-02-08T23:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-02-11T23:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-02-12T23:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen" }, { "date": "2024-02-13T23:00:00.000+00:00", "number": "9", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-02-14T23:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-02-18T23:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2024-02-21T23:00:00.000+00:00", "number": "12", "summary": "Neue Updates von Palo Alto Networks aufgenommen" }, { "date": "2024-02-22T23:00:00.000+00:00", "number": "13", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-02-27T23:00:00.000+00:00", "number": "14", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-03-05T23:00:00.000+00:00", "number": "15", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2024-03-12T23:00:00.000+00:00", "number": "16", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-04-04T22:00:00.000+00:00", "number": "17", "summary": "Neue Updates von SUSE und Dell aufgenommen" }, { "date": "2024-04-29T22:00:00.000+00:00", "number": "18", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-05-21T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-05-28T22:00:00.000+00:00", "number": "20", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-07-04T22:00:00.000+00:00", "number": "21", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-07-09T22:00:00.000+00:00", "number": "22", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-07-31T22:00:00.000+00:00", "number": "23", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-08-06T22:00:00.000+00:00", "number": "24", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-08-07T22:00:00.000+00:00", "number": "25", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-08-11T22:00:00.000+00:00", "number": "26", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-08-29T22:00:00.000+00:00", "number": "27", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2024-09-03T22:00:00.000+00:00", "number": "28", "summary": "Neue Updates von SUSE und Amazon aufgenommen" }, { "date": "2024-09-29T22:00:00.000+00:00", "number": "29", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-10-20T22:00:00.000+00:00", "number": "30", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2024-11-03T23:00:00.000+00:00", "number": "31", "summary": "Neue Updates von BROCADE aufgenommen" }, { "date": "2024-11-26T23:00:00.000+00:00", "number": "32", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-03T23:00:00.000+00:00", "number": "33", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-04T23:00:00.000+00:00", "number": "34", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-11T23:00:00.000+00:00", "number": "35", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-15T23:00:00.000+00:00", "number": "36", "summary": "Neue Updates von openSUSE aufgenommen" }, { "date": "2025-01-13T23:00:00.000+00:00", "number": "37", "summary": "Neue Updates von Red Hat aufgenommen" } ], "status": "final", "version": "37" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c2.3.1a", "product": { "name": "Broadcom Brocade SANnav \u003c2.3.1a", "product_id": "T038317" } }, { "category": "product_version", "name": "2.3.1a", "product": { "name": "Broadcom Brocade SANnav 2.3.1a", "product_id": "T038317-fixed", "product_identification_helper": { "cpe": "cpe:/a:broadcom:brocade_sannav:2.3.1a" } } } ], "category": "product_name", "name": "Brocade SANnav" } ], "category": "vendor", "name": "Broadcom" }, { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c19.10.0.2", "product": { "name": "Dell NetWorker \u003c19.10.0.2", "product_id": "T033910" } }, { "category": "product_version", "name": "19.10.0.2", "product": { "name": "Dell NetWorker 19.10.0.2", "product_id": "T033910-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:networker:19.10.0.2" } } } ], "category": "product_name", "name": "NetWorker" } ], "category": "vendor", "name": "Dell" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "runc \u003c1.1.12", "product": { "name": "Open Source docker runc \u003c1.1.12", "product_id": "T032453" } }, { "category": "product_version", "name": "runc 1.1.12", "product": { "name": "Open Source docker runc 1.1.12", "product_id": "T032453-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:runc__1.1.12" } } }, { "category": "product_version_range", "name": "BuildKit \u003c0.12.5", "product": { "name": "Open Source docker BuildKit \u003c0.12.5", "product_id": "T032454" } }, { "category": "product_version", "name": "BuildKit 0.12.5", "product": { "name": "Open Source docker BuildKit 0.12.5", "product_id": "T032454-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:buildkit__0.12.5" } } }, { "category": "product_version_range", "name": "Moby \u003c25.0.2", "product": { "name": "Open Source docker Moby \u003c25.0.2", "product_id": "T032455" } }, { "category": "product_version", "name": "Moby 25.0.2", "product": { "name": "Open Source docker Moby 25.0.2", "product_id": "T032455-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:moby__25.0.2" } } }, { "category": "product_version_range", "name": "Moby \u003c24.0.9", "product": { "name": "Open Source docker Moby \u003c24.0.9", "product_id": "T032456" } }, { "category": "product_version", "name": "Moby 24.0.9", "product": { "name": "Open Source docker Moby 24.0.9", "product_id": "T032456-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:moby__24.0.9" } } }, { "category": "product_version_range", "name": "Desktop \u003c4.27.1", "product": { "name": "Open Source docker Desktop \u003c4.27.1", "product_id": "T032457" } }, { "category": "product_version", "name": "Desktop 4.27.1", "product": { "name": "Open Source docker Desktop 4.27.1", "product_id": "T032457-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:desktop__4.27.1" } } }, { "category": "product_version_range", "name": "Desktop \u003c4.27.2", "product": { "name": "Open Source docker Desktop \u003c4.27.2", "product_id": "T032605" } }, { "category": "product_version", "name": "Desktop 4.27.2", "product": { "name": "Open Source docker Desktop 4.27.2", "product_id": "T032605-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:desktop__4.27.2" } } } ], "category": "product_name", "name": "docker" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "PaloAlto Networks Cortex XSOAR", "product": { "name": "PaloAlto Networks Cortex XSOAR", "product_id": "T033043", "product_identification_helper": { "cpe": "cpe:/a:paloaltonetworks:cortex_xsoar:-" } } } ], "category": "vendor", "name": "PaloAlto Networks" }, { "branches": [ { "category": "product_name", "name": "RESF Rocky Linux", "product": { "name": "RESF Rocky Linux", "product_id": "T032255", "product_identification_helper": { "cpe": "cpe:/o:resf:rocky_linux:-" } } } ], "category": "vendor", "name": "RESF" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } }, { "branches": [ { "category": "product_version_range", "name": "Container Platform \u003c4.14.11", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.14.11", "product_id": "T032600" } }, { "category": "product_version", "name": "Container Platform 4.14.11", "product": { "name": "Red Hat OpenShift Container Platform 4.14.11", "product_id": "T032600-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.14.11" } } }, { "category": "product_version_range", "name": "Container Platform \u003c4.13.32", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.13.32", "product_id": "T032601" } }, { "category": "product_version", "name": "Container Platform 4.13.32", "product": { "name": "Red Hat OpenShift Container Platform 4.13.32", "product_id": "T032601-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.13.32" } } }, { "category": "product_version_range", "name": "Container Platform \u003c4.12.49", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.12.49", "product_id": "T032602" } }, { "category": "product_version", "name": "Container Platform 4.12.49", "product": { "name": "Red Hat OpenShift Container Platform 4.12.49", "product_id": "T032602-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.12.49" } } }, { "category": "product_version_range", "name": "Container Platform \u003c4.11.58", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.11.58", "product_id": "T032603" } }, { "category": "product_version", "name": "Container Platform 4.11.58", "product": { "name": "Red Hat OpenShift Container Platform 4.11.58", "product_id": "T032603-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.11.58" } } } ], "category": "product_name", "name": "OpenShift" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } }, { "category": "product_name", "name": "SUSE openSUSE", "product": { "name": "SUSE openSUSE", "product_id": "T027843", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "vendor", "name": "SUSE" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-21626", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der runc-Komponente aufgrund eines internen Dateideskriptor-Lecks, was zu mehreren potenziellen Sicherheitsproblemen f\u00fchrt, die eine vollst\u00e4ndige Kontrolle \u00fcber das Host-System erm\u00f6glichen. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T032600", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "T032453", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-21626" }, { "cve": "CVE-2024-23651", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente aufgrund eines Race-Condition-Problems, wenn Build-Schritte denselben Cache-Mount mit Unterpfaden teilen, was das Lesen von Dateien aus dem Host-System erm\u00f6glicht. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente aufgrund eines Pfad\u00fcberquerungsproblems, das es erm\u00f6glicht, eine Datei au\u00dferhalb des Containers aus dem Hostsystem zu entfernen. Ein entfernter, anonymer Angreifer kann eine Datei au\u00dferhalb des Containers entfernen, vom Host-System Dateien manipulieren." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente w\u00e4hrend der Handhabung von APIs zum Ausf\u00fchren von interaktiven Containern auf der Grundlage von erstellten Images, wodurch ein Container mit erh\u00f6hten Rechten ausgef\u00fchrt werden kann. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23653" }, { "cve": "CVE-2024-23650", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente aufgrund einer unsachgem\u00e4\u00dfen Pr\u00fcfung auf ungew\u00f6hnliche oder au\u00dfergew\u00f6hnliche Bedingungen. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23650" }, { "cve": "CVE-2024-24557", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der Komponente Moby (Docker Engine) aufgrund einer unzureichenden \u00dcberpr\u00fcfung der von Grund auf neu erstellten Images. Ein entfernter, anonymer Angreifer mit Kenntnis der Dockerdatei, die jemand verwendet, kann einen Cache-Poisoning-Angriff durchf\u00fchren und so die Sicherheitsma\u00dfnahmen umgehen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T032600", "T032455", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-24557" } ] }
WID-SEC-W-2024-0272
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Docker ist eine Open-Source-Software, die dazu verwendet werden kann, Anwendungen mithilfe von Betriebssystemvirtualisierung in Containern zu isolieren.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erh\u00f6hen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsma\u00dfnahmen zu umgehen oder Dateien zu manipulieren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- MacOS X\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0272 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0272.json" }, { "category": "self", "summary": "WID-SEC-2024-0272 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0272" }, { "category": "external", "summary": "Docker Security Advisory vom 2024-01-31", "url": "https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0295-1 vom 2024-02-01", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017833.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0294-1 vom 2024-02-01", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017834.html" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-900DC7F6FF vom 2024-02-01", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-900dc7f6ff" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-9044C9EEFA vom 2024-02-01", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-9044c9eefa" }, { "category": "external", "summary": "Debian Security Advisory DSA-5615 vom 2024-02-04", "url": "https://lists.debian.org/debian-security-announce/2024/msg00022.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0670 vom 2024-02-02", "url": "https://access.redhat.com/errata/RHSA-2024:0670" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-0670 vom 2024-02-06", "url": "http://linux.oracle.com/errata/ELSA-2024-0670.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0328-1 vom 2024-02-05", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017865.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0717 vom 2024-02-07", "url": "https://access.redhat.com/errata/RHSA-2024:0717" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0752 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0752" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0756 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0756" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0764 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0764" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0757 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0757" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0759 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0759" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0666 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0666" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0645 vom 2024-02-07", "url": "https://access.redhat.com/errata/RHSA-2024:0645" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0682 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0682" }, { "category": "external", "summary": "Docker Desktop release notes vom 2024-02-08", "url": "https://docs.docker.com/desktop/release-notes/#4272" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0760 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0760" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0662 vom 2024-02-07", "url": "https://access.redhat.com/errata/RHSA-2024:0662" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0748 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0748" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0758 vom 2024-02-08", "url": "https://access.redhat.com/errata/RHSA-2024:0758" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0755 vom 2024-02-09", "url": "https://access.redhat.com/errata/RHSA-2024:0755" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0684 vom 2024-02-09", "url": "https://access.redhat.com/errata/RHSA-2024:0684" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-17931 vom 2024-02-10", "url": "https://linux.oracle.com/errata/ELSA-2024-17931.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-12148 vom 2024-02-10", "url": "https://linux.oracle.com/errata/ELSA-2024-12148.html" }, { "category": "external", "summary": "Rocky Linux Security Advisory RLSA-2024:0752 vom 2024-02-12", "url": "https://errata.build.resf.org/RLSA-2024:0752" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0459-1 vom 2024-02-13", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017910.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-0748 vom 2024-02-15", "url": "https://linux.oracle.com/errata/ELSA-2024-0748.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-0752 vom 2024-02-14", "url": "https://linux.oracle.com/errata/ELSA-2024-0752.html" }, { "category": "external", "summary": "Debian Security Advisory DLA-3735 vom 2024-02-19", "url": "https://lists.debian.org/debian-lts-announce/2024/02/msg00005.html" }, { "category": "external", "summary": "Palo Alto Networks Security Advisory PAN-SA-2024-0002 vom 2024-02-22", "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0002" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0586-1 vom 2024-02-22", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017990.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0587-1 vom 2024-02-22", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017989.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:7201 vom 2024-02-28", "url": "https://access.redhat.com/errata/RHSA-2023:7201" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2024-039 vom 2024-03-06", "url": "https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2024-039.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASDOCKER-2024-039 vom 2024-03-06", "url": "https://alas.aws.amazon.com/AL2/ALASDOCKER-2024-039.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:1270 vom 2024-03-12", "url": "https://access.redhat.com/errata/RHSA-2024:1270" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:0586-2 vom 2024-04-04", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018256.html" }, { "category": "external", "summary": "Dell Security Advisory DSA-2024-164 vom 2024-04-05", "url": "https://www.dell.com/support/kbdoc/000223801/dsa-2024-=" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:1469-1 vom 2024-04-29", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018439.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:2988 vom 2024-05-22", "url": "https://access.redhat.com/errata/RHSA-2024:2988" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-2988 vom 2024-05-28", "url": "https://linux.oracle.com/errata/ELSA-2024-2988.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202407-12 vom 2024-07-05", "url": "https://security.gentoo.org/glsa/202407-12" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202407-25 vom 2024-07-10", "url": "https://security.gentoo.org/glsa/202407-25" }, { "category": "external", "summary": "IBM Security Bulletin 7162077 vom 2024-07-31", "url": "https://www.ibm.com/support/pages/node/7162077" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2801-1 vom 2024-08-07", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019134.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:2801-2 vom 2024-08-07", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019136.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202408-25 vom 2024-08-11", "url": "https://security.gentoo.org/glsa/202408-25" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASDOCKER-2024-044 vom 2024-08-29", "url": "https://alas.aws.amazon.com/AL2/ALASDOCKER-2024-044.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2024-045 vom 2024-08-29", "url": "https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2024-045.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2024:3120-1 vom 2024-09-03", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019345.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASECS-2024-041 vom 2024-09-03", "url": "https://alas.aws.amazon.com/AL2/ALASECS-2024-041.html" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202409-29 vom 2024-09-28", "url": "https://security.gentoo.org/glsa/202409-29" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-EPEL-2024-0282083260 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0282083260" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-1CAB90A9E7 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-1cab90a9e7" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-28E375F8CA vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-28e375f8ca" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-1068D5C32B vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-1068d5c32b" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-AFA796A751 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-afa796a751" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-EE9F0F22B6 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-ee9f0f22b6" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2024-69528C0BA6 vom 2024-10-19", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-69528c0ba6" }, { "category": "external", "summary": "Brocade Security Advisory BSA-2024-2749 vom 2024-11-02", "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25074" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10147 vom 2024-11-27", "url": "https://access.redhat.com/errata/RHSA-2024:10149" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10520 vom 2024-12-03", "url": "https://access.redhat.com/errata/RHSA-2024:10520" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10525 vom 2024-12-05", "url": "https://access.redhat.com/errata/RHSA-2024:10525" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:10841 vom 2024-12-12", "url": "https://access.redhat.com/errata/RHSA-2024:10841" }, { "category": "external", "summary": "openSUSE Security Update OPENSUSE-SU-2024:14571-1 vom 2024-12-13", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6XZ7QNLFOMP7ZODQGCLQFRNRPEWZELNY/" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:0115 vom 2025-01-14", "url": "https://access.redhat.com/errata/RHSA-2025:0115" } ], "source_lang": "en-US", "title": "docker: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-01-13T23:00:00.000+00:00", "generator": { "date": "2025-01-14T13:52:43.090+00:00", "engine": { "name": "BSI-WID", "version": "1.3.10" } }, "id": "WID-SEC-W-2024-0272", "initial_release_date": "2024-01-31T23:00:00.000+00:00", "revision_history": [ { "date": "2024-01-31T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-02-01T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2024-02-04T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Debian und Red Hat aufgenommen" }, { "date": "2024-02-05T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Oracle Linux und SUSE aufgenommen" }, { "date": "2024-02-07T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-02-08T23:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-02-11T23:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-02-12T23:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen" }, { "date": "2024-02-13T23:00:00.000+00:00", "number": "9", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-02-14T23:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-02-18T23:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2024-02-21T23:00:00.000+00:00", "number": "12", "summary": "Neue Updates von Palo Alto Networks aufgenommen" }, { "date": "2024-02-22T23:00:00.000+00:00", "number": "13", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-02-27T23:00:00.000+00:00", "number": "14", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-03-05T23:00:00.000+00:00", "number": "15", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2024-03-12T23:00:00.000+00:00", "number": "16", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-04-04T22:00:00.000+00:00", "number": "17", "summary": "Neue Updates von SUSE und Dell aufgenommen" }, { "date": "2024-04-29T22:00:00.000+00:00", "number": "18", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-05-21T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-05-28T22:00:00.000+00:00", "number": "20", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-07-04T22:00:00.000+00:00", "number": "21", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-07-09T22:00:00.000+00:00", "number": "22", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-07-31T22:00:00.000+00:00", "number": "23", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-08-06T22:00:00.000+00:00", "number": "24", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-08-07T22:00:00.000+00:00", "number": "25", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-08-11T22:00:00.000+00:00", "number": "26", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-08-29T22:00:00.000+00:00", "number": "27", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2024-09-03T22:00:00.000+00:00", "number": "28", "summary": "Neue Updates von SUSE und Amazon aufgenommen" }, { "date": "2024-09-29T22:00:00.000+00:00", "number": "29", "summary": "Neue Updates von Gentoo aufgenommen" }, { "date": "2024-10-20T22:00:00.000+00:00", "number": "30", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2024-11-03T23:00:00.000+00:00", "number": "31", "summary": "Neue Updates von BROCADE aufgenommen" }, { "date": "2024-11-26T23:00:00.000+00:00", "number": "32", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-03T23:00:00.000+00:00", "number": "33", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-04T23:00:00.000+00:00", "number": "34", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-11T23:00:00.000+00:00", "number": "35", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-12-15T23:00:00.000+00:00", "number": "36", "summary": "Neue Updates von openSUSE aufgenommen" }, { "date": "2025-01-13T23:00:00.000+00:00", "number": "37", "summary": "Neue Updates von Red Hat aufgenommen" } ], "status": "final", "version": "37" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c2.3.1a", "product": { "name": "Broadcom Brocade SANnav \u003c2.3.1a", "product_id": "T038317" } }, { "category": "product_version", "name": "2.3.1a", "product": { "name": "Broadcom Brocade SANnav 2.3.1a", "product_id": "T038317-fixed", "product_identification_helper": { "cpe": "cpe:/a:broadcom:brocade_sannav:2.3.1a" } } } ], "category": "product_name", "name": "Brocade SANnav" } ], "category": "vendor", "name": "Broadcom" }, { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c19.10.0.2", "product": { "name": "Dell NetWorker \u003c19.10.0.2", "product_id": "T033910" } }, { "category": "product_version", "name": "19.10.0.2", "product": { "name": "Dell NetWorker 19.10.0.2", "product_id": "T033910-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:networker:19.10.0.2" } } } ], "category": "product_name", "name": "NetWorker" } ], "category": "vendor", "name": "Dell" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "runc \u003c1.1.12", "product": { "name": "Open Source docker runc \u003c1.1.12", "product_id": "T032453" } }, { "category": "product_version", "name": "runc 1.1.12", "product": { "name": "Open Source docker runc 1.1.12", "product_id": "T032453-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:runc__1.1.12" } } }, { "category": "product_version_range", "name": "BuildKit \u003c0.12.5", "product": { "name": "Open Source docker BuildKit \u003c0.12.5", "product_id": "T032454" } }, { "category": "product_version", "name": "BuildKit 0.12.5", "product": { "name": "Open Source docker BuildKit 0.12.5", "product_id": "T032454-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:buildkit__0.12.5" } } }, { "category": "product_version_range", "name": "Moby \u003c25.0.2", "product": { "name": "Open Source docker Moby \u003c25.0.2", "product_id": "T032455" } }, { "category": "product_version", "name": "Moby 25.0.2", "product": { "name": "Open Source docker Moby 25.0.2", "product_id": "T032455-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:moby__25.0.2" } } }, { "category": "product_version_range", "name": "Moby \u003c24.0.9", "product": { "name": "Open Source docker Moby \u003c24.0.9", "product_id": "T032456" } }, { "category": "product_version", "name": "Moby 24.0.9", "product": { "name": "Open Source docker Moby 24.0.9", "product_id": "T032456-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:moby__24.0.9" } } }, { "category": "product_version_range", "name": "Desktop \u003c4.27.1", "product": { "name": "Open Source docker Desktop \u003c4.27.1", "product_id": "T032457" } }, { "category": "product_version", "name": "Desktop 4.27.1", "product": { "name": "Open Source docker Desktop 4.27.1", "product_id": "T032457-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:desktop__4.27.1" } } }, { "category": "product_version_range", "name": "Desktop \u003c4.27.2", "product": { "name": "Open Source docker Desktop \u003c4.27.2", "product_id": "T032605" } }, { "category": "product_version", "name": "Desktop 4.27.2", "product": { "name": "Open Source docker Desktop 4.27.2", "product_id": "T032605-fixed", "product_identification_helper": { "cpe": "cpe:/a:docker:docker:desktop__4.27.2" } } } ], "category": "product_name", "name": "docker" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "PaloAlto Networks Cortex XSOAR", "product": { "name": "PaloAlto Networks Cortex XSOAR", "product_id": "T033043", "product_identification_helper": { "cpe": "cpe:/a:paloaltonetworks:cortex_xsoar:-" } } } ], "category": "vendor", "name": "PaloAlto Networks" }, { "branches": [ { "category": "product_name", "name": "RESF Rocky Linux", "product": { "name": "RESF Rocky Linux", "product_id": "T032255", "product_identification_helper": { "cpe": "cpe:/o:resf:rocky_linux:-" } } } ], "category": "vendor", "name": "RESF" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } }, { "branches": [ { "category": "product_version_range", "name": "Container Platform \u003c4.14.11", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.14.11", "product_id": "T032600" } }, { "category": "product_version", "name": "Container Platform 4.14.11", "product": { "name": "Red Hat OpenShift Container Platform 4.14.11", "product_id": "T032600-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.14.11" } } }, { "category": "product_version_range", "name": "Container Platform \u003c4.13.32", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.13.32", "product_id": "T032601" } }, { "category": "product_version", "name": "Container Platform 4.13.32", "product": { "name": "Red Hat OpenShift Container Platform 4.13.32", "product_id": "T032601-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.13.32" } } }, { "category": "product_version_range", "name": "Container Platform \u003c4.12.49", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.12.49", "product_id": "T032602" } }, { "category": "product_version", "name": "Container Platform 4.12.49", "product": { "name": "Red Hat OpenShift Container Platform 4.12.49", "product_id": "T032602-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.12.49" } } }, { "category": "product_version_range", "name": "Container Platform \u003c4.11.58", "product": { "name": "Red Hat OpenShift Container Platform \u003c4.11.58", "product_id": "T032603" } }, { "category": "product_version", "name": "Container Platform 4.11.58", "product": { "name": "Red Hat OpenShift Container Platform 4.11.58", "product_id": "T032603-fixed", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:container_platform__4.11.58" } } } ], "category": "product_name", "name": "OpenShift" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } }, { "category": "product_name", "name": "SUSE openSUSE", "product": { "name": "SUSE openSUSE", "product_id": "T027843", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "vendor", "name": "SUSE" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-21626", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der runc-Komponente aufgrund eines internen Dateideskriptor-Lecks, was zu mehreren potenziellen Sicherheitsproblemen f\u00fchrt, die eine vollst\u00e4ndige Kontrolle \u00fcber das Host-System erm\u00f6glichen. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T032600", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "T032453", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-21626" }, { "cve": "CVE-2024-23651", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente aufgrund eines Race-Condition-Problems, wenn Build-Schritte denselben Cache-Mount mit Unterpfaden teilen, was das Lesen von Dateien aus dem Host-System erm\u00f6glicht. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente aufgrund eines Pfad\u00fcberquerungsproblems, das es erm\u00f6glicht, eine Datei au\u00dferhalb des Containers aus dem Hostsystem zu entfernen. Ein entfernter, anonymer Angreifer kann eine Datei au\u00dferhalb des Containers entfernen, vom Host-System Dateien manipulieren." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente w\u00e4hrend der Handhabung von APIs zum Ausf\u00fchren von interaktiven Containern auf der Grundlage von erstellten Images, wodurch ein Container mit erh\u00f6hten Rechten ausgef\u00fchrt werden kann. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23653" }, { "cve": "CVE-2024-23650", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der BuildKit-Komponente aufgrund einer unsachgem\u00e4\u00dfen Pr\u00fcfung auf ungew\u00f6hnliche oder au\u00dfergew\u00f6hnliche Bedingungen. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen." } ], "product_status": { "known_affected": [ "T032600", "T032454", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-23650" }, { "cve": "CVE-2024-24557", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Docker. Dieser Fehler besteht in der Komponente Moby (Docker Engine) aufgrund einer unzureichenden \u00dcberpr\u00fcfung der von Grund auf neu erstellten Images. Ein entfernter, anonymer Angreifer mit Kenntnis der Dockerdatei, die jemand verwendet, kann einen Cache-Poisoning-Angriff durchf\u00fchren und so die Sicherheitsma\u00dfnahmen umgehen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T032600", "T032455", "T032603", "T038317", "67646", "T032601", "T033910", "T032602", "T033043", "T012167", "T004914", "T032255", "74185", "2951", "T002207", "T027843", "398363", "T032605" ] }, "release_date": "2024-01-31T23:00:00.000+00:00", "title": "CVE-2024-24557" } ] }
WID-SEC-W-2024-3377
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Dell PowerProtect Data Domain Appliances sind speziell f\u00fcr Backup und Daten-Deduplizierung ausgelegte Systeme.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um seine Privilegien zu erh\u00f6hen, Informationen offenzulegen und um nicht n\u00e4her beschriebene Auswirkungen zu erzielen.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-3377 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3377.json" }, { "category": "self", "summary": "WID-SEC-2024-3377 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3377" }, { "category": "external", "summary": "Dell Security Update", "url": "https://www.dell.com/support/kbdoc/de-de/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-update-for-dell-powerprotect-dd-vulnerabilityowerprotect-dd-vulnerability" }, { "category": "external", "summary": "Security Update for Dell PowerProtect Data Domain", "url": "https://www.dell.com/support/kbdoc/en-us/000348708/dsa-2025-159-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities" } ], "source_lang": "en-US", "title": "Dell PowerProtect Data Domain: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-08-04T22:00:00.000+00:00", "generator": { "date": "2025-08-05T07:21:01.974+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2024-3377", "initial_release_date": "2024-11-07T23:00:00.000+00:00", "revision_history": [ { "date": "2024-11-07T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2025-08-04T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Dell aufgenommen" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c8.1.0.0", "product": { "name": "Dell PowerProtect Data Domain \u003c8.1.0.0", "product_id": "T038861" } }, { "category": "product_version", "name": "8.1.0.0", "product": { "name": "Dell PowerProtect Data Domain 8.1.0.0", "product_id": "T038861-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:8.1.0.0" } } }, { "category": "product_version_range", "name": "\u003c7.13.1.10", "product": { "name": "Dell PowerProtect Data Domain \u003c7.13.1.10", "product_id": "T038862" } }, { "category": "product_version", "name": "7.13.1.10", "product": { "name": "Dell PowerProtect Data Domain 7.13.1.10", "product_id": "T038862-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:7.13.1.10" } } }, { "category": "product_version_range", "name": "\u003c7.10.1.40", "product": { "name": "Dell PowerProtect Data Domain \u003c7.10.1.40", "product_id": "T038863" } }, { "category": "product_version", "name": "7.10.1.40", "product": { "name": "Dell PowerProtect Data Domain 7.10.1.40", "product_id": "T038863-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:7.10.1.40" } } }, { "category": "product_version_range", "name": "\u003c7.7.5.50", "product": { "name": "Dell PowerProtect Data Domain \u003c7.7.5.50", "product_id": "T038864" } }, { "category": "product_version", "name": "7.7.5.50", "product": { "name": "Dell PowerProtect Data Domain 7.7.5.50", "product_id": "T038864-fixed", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:7.7.5.50" } } }, { "category": "product_name", "name": "Dell PowerProtect Data Domain", "product": { "name": "Dell PowerProtect Data Domain", "product_id": "T045852", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain:-" } } } ], "category": "product_name", "name": "PowerProtect Data Domain" }, { "category": "product_name", "name": "Dell PowerProtect Data Domain Management Center", "product": { "name": "Dell PowerProtect Data Domain Management Center", "product_id": "T045853", "product_identification_helper": { "cpe": "cpe:/a:dell:powerprotect_data_domain_management_center:-" } } }, { "category": "product_name", "name": "Dell PowerProtect Data Domain OS", "product": { "name": "Dell PowerProtect Data Domain OS", "product_id": "T045854", "product_identification_helper": { "cpe": "cpe:/o:dell:powerprotect_data_domain_os:-" } } } ], "category": "vendor", "name": "Dell" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-45759", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-45759" }, { "cve": "CVE-2024-48010", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-48010" }, { "cve": "CVE-2024-48011", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-48011" }, { "cve": "CVE-2017-16829", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2017-16829" }, { "cve": "CVE-2017-5849", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2017-5849" }, { "cve": "CVE-2018-7208", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2018-7208" }, { "cve": "CVE-2019-14889", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2019-14889" }, { "cve": "CVE-2020-12912", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-12912" }, { "cve": "CVE-2020-16135", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-16135" }, { "cve": "CVE-2020-1730", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-1730" }, { "cve": "CVE-2020-24455", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-24455" }, { "cve": "CVE-2020-8694", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-8694" }, { "cve": "CVE-2020-8695", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2020-8695" }, { "cve": "CVE-2021-27219", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2021-27219" }, { "cve": "CVE-2021-3565", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2021-3565" }, { "cve": "CVE-2021-3634", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2021-3634" }, { "cve": "CVE-2022-1210", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-1210" }, { "cve": "CVE-2022-1622", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-1622" }, { "cve": "CVE-2022-1996", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-1996" }, { "cve": "CVE-2022-22576", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-22576" }, { "cve": "CVE-2022-25313", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-25313" }, { "cve": "CVE-2022-27774", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27774" }, { "cve": "CVE-2022-27775", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27775" }, { "cve": "CVE-2022-27776", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27776" }, { "cve": "CVE-2022-27781", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27781" }, { "cve": "CVE-2022-27782", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-27782" }, { "cve": "CVE-2022-29361", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-29361" }, { "cve": "CVE-2022-32205", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32205" }, { "cve": "CVE-2022-32206", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32206" }, { "cve": "CVE-2022-32207", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32207" }, { "cve": "CVE-2022-32208", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32208" }, { "cve": "CVE-2022-32221", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-32221" }, { "cve": "CVE-2022-35252", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-35252" }, { "cve": "CVE-2022-40023", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-40023" }, { "cve": "CVE-2022-40090", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-40090" }, { "cve": "CVE-2022-42915", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-42915" }, { "cve": "CVE-2022-42916", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-42916" }, { "cve": "CVE-2022-43551", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-43551" }, { "cve": "CVE-2022-43552", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-43552" }, { "cve": "CVE-2022-4603", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-4603" }, { "cve": "CVE-2022-48064", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-48064" }, { "cve": "CVE-2022-48624", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2022-48624" }, { "cve": "CVE-2023-0461", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-0461" }, { "cve": "CVE-2023-1667", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-1667" }, { "cve": "CVE-2023-1916", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-1916" }, { "cve": "CVE-2023-20592", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-20592" }, { "cve": "CVE-2023-2137", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-2137" }, { "cve": "CVE-2023-22745", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-22745" }, { "cve": "CVE-2023-2283", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-2283" }, { "cve": "CVE-2023-23914", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23914" }, { "cve": "CVE-2023-23915", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23915" }, { "cve": "CVE-2023-23916", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23916" }, { "cve": "CVE-2023-23934", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-23934" }, { "cve": "CVE-2023-25577", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-25577" }, { "cve": "CVE-2023-26965", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-26965" }, { "cve": "CVE-2023-27043", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27043" }, { "cve": "CVE-2023-2731", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-2731" }, { "cve": "CVE-2023-27533", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27533" }, { "cve": "CVE-2023-27534", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27534" }, { "cve": "CVE-2023-27535", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27535" }, { "cve": "CVE-2023-27536", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27536" }, { "cve": "CVE-2023-27538", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-27538" }, { "cve": "CVE-2023-28319", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28319" }, { "cve": "CVE-2023-28320", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28320" }, { "cve": "CVE-2023-28321", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28321" }, { "cve": "CVE-2023-28322", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-28322" }, { "cve": "CVE-2023-31083", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-31083" }, { "cve": "CVE-2023-34055", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-34055" }, { "cve": "CVE-2023-35116", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-35116" }, { "cve": "CVE-2023-38286", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38286" }, { "cve": "CVE-2023-38469", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38469" }, { "cve": "CVE-2023-38471", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38471" }, { "cve": "CVE-2023-38472", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38472" }, { "cve": "CVE-2023-38545", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38545" }, { "cve": "CVE-2023-38546", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-38546" }, { "cve": "CVE-2023-39197", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-39197" }, { "cve": "CVE-2023-39198", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-39198" }, { "cve": "CVE-2023-39804", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-39804" }, { "cve": "CVE-2023-40217", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-40217" }, { "cve": "CVE-2023-42465", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-42465" }, { "cve": "CVE-2023-4255", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-4255" }, { "cve": "CVE-2023-45139", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45139" }, { "cve": "CVE-2023-45322", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45322" }, { "cve": "CVE-2023-45863", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45863" }, { "cve": "CVE-2023-45871", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-45871" }, { "cve": "CVE-2023-46136", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46136" }, { "cve": "CVE-2023-46218", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46218" }, { "cve": "CVE-2023-46219", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46219" }, { "cve": "CVE-2023-46751", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-46751" }, { "cve": "CVE-2023-48795", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-48795" }, { "cve": "CVE-2023-49083", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-49083" }, { "cve": "CVE-2023-50447", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-50447" }, { "cve": "CVE-2023-5049", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5049" }, { "cve": "CVE-2023-50495", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-50495" }, { "cve": "CVE-2023-50782", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-50782" }, { "cve": "CVE-2023-51257", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-51257" }, { "cve": "CVE-2023-52425", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-52425" }, { "cve": "CVE-2023-52426", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-52426" }, { "cve": "CVE-2023-5678", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5678" }, { "cve": "CVE-2023-5717", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5717" }, { "cve": "CVE-2023-5752", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-5752" }, { "cve": "CVE-2023-6004", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-6004" }, { "cve": "CVE-2023-6597", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-6597" }, { "cve": "CVE-2023-6918", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-6918" }, { "cve": "CVE-2023-7207", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2023-7207" }, { "cve": "CVE-2024-0450", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-0450" }, { "cve": "CVE-2024-0727", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-0727" }, { "cve": "CVE-2024-0985", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-0985" }, { "cve": "CVE-2024-21626", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-21626" }, { "cve": "CVE-2024-22195", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-22195" }, { "cve": "CVE-2024-22365", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-22365" }, { "cve": "CVE-2024-23651", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23653" }, { "cve": "CVE-2024-23672", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-23672" }, { "cve": "CVE-2024-24549", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-24549" }, { "cve": "CVE-2024-25062", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-25062" }, { "cve": "CVE-2024-26130", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-26130" }, { "cve": "CVE-2024-26458", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-26458" }, { "cve": "CVE-2024-26461", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-26461" }, { "cve": "CVE-2024-28085", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28085" }, { "cve": "CVE-2024-28182", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28182" }, { "cve": "CVE-2024-28219", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28219" }, { "cve": "CVE-2024-28757", "product_status": { "known_affected": [ "T045853", "T045852", "T045854", "T038864", "T038863", "T038862", "T038861" ] }, "release_date": "2024-11-07T23:00:00.000+00:00", "title": "CVE-2024-28757" } ] }
fkie_cve-2024-23652
Vulnerability from fkie_nvd
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Vendor | Product | Version | |
---|---|---|---|
mobyproject | buildkit | * |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "0AAE2F08-4E4D-4B85-8230-8D5BA7788D3D", "versionEndExcluding": "0.12.5", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature." }, { "lang": "es", "value": "BuildKit es un conjunto de herramientas para convertir c\u00f3digo fuente para crear artefactos de manera eficiente, expresiva y repetible. Una interfaz de BuildKit maliciosa o un Dockerfile que use RUN --mount podr\u00eda enga\u00f1ar a la funci\u00f3n que elimina archivos vac\u00edos creados para los puntos de montaje para que elimine un archivo fuera del contenedor, del sistema host. El problema se solucion\u00f3 en v0.12.5. Los workarounds incluyen evitar el uso de interfaces de BuildKit desde una fuente que no sea de confianza o crear un Dockerfile que no sea de confianza que contenga la funci\u00f3n RUN --mount." } ], "id": "CVE-2024-23652", "lastModified": "2024-11-21T08:58:05.700", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.8, "source": "security-advisories@github.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-01-31T22:15:54.377", "references": [ { "source": "security-advisories@github.com", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://github.com/moby/buildkit/pull/4603" }, { "source": "security-advisories@github.com", "tags": [ "Patch", "Release Notes" ], "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5" }, { "source": "security-advisories@github.com", "tags": [ "Vendor Advisory" ], "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://github.com/moby/buildkit/pull/4603" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Release Notes" ], "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8" } ], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-22" } ], "source": "security-advisories@github.com", "type": "Primary" } ] }
suse-su-2024:0587-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for docker", "title": "Title of the patch" }, { "category": "description", "text": "This update for docker fixes the following issues:\n\nVendor latest buildkit v0.11 including bugfixes for the following:\n\n* CVE-2024-23653: BuildKit API doesn\u0027t validate entitlement on container creation (bsc#1219438).\n* CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).\n* CVE-2024-23651: Fixed race condition in mount (bsc#1219267).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-587,SUSE-SLE-Module-Containers-12-2024-587", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0587-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:0587-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240587-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:0587-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017989.html" }, { "category": "self", "summary": "SUSE Bug 1219267", "url": "https://bugzilla.suse.com/1219267" }, { "category": "self", "summary": "SUSE Bug 1219268", "url": "https://bugzilla.suse.com/1219268" }, { "category": "self", "summary": "SUSE Bug 1219438", "url": "https://bugzilla.suse.com/1219438" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" } ], "title": "Security update for docker", "tracking": { "current_release_date": "2024-02-22T08:55:20Z", "generator": { "date": "2024-02-22T08:55:20Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:0587-1", "initial_release_date": "2024-02-22T08:55:20Z", "revision_history": [ { "date": "2024-02-22T08:55:20Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-98.106.1.aarch64", "product": { "name": "docker-24.0.7_ce-98.106.1.aarch64", "product_id": "docker-24.0.7_ce-98.106.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-98.106.1.i586", "product": { "name": "docker-24.0.7_ce-98.106.1.i586", "product_id": "docker-24.0.7_ce-98.106.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "docker-bash-completion-24.0.7_ce-98.106.1.noarch", "product": { "name": "docker-bash-completion-24.0.7_ce-98.106.1.noarch", "product_id": "docker-bash-completion-24.0.7_ce-98.106.1.noarch" } }, { "category": "product_version", "name": "docker-fish-completion-24.0.7_ce-98.106.1.noarch", "product": { "name": "docker-fish-completion-24.0.7_ce-98.106.1.noarch", "product_id": "docker-fish-completion-24.0.7_ce-98.106.1.noarch" } }, { "category": "product_version", "name": "docker-rootless-extras-24.0.7_ce-98.106.1.noarch", "product": { "name": "docker-rootless-extras-24.0.7_ce-98.106.1.noarch", "product_id": "docker-rootless-extras-24.0.7_ce-98.106.1.noarch" } }, { "category": "product_version", "name": "docker-zsh-completion-24.0.7_ce-98.106.1.noarch", "product": { "name": "docker-zsh-completion-24.0.7_ce-98.106.1.noarch", "product_id": "docker-zsh-completion-24.0.7_ce-98.106.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-98.106.1.ppc64le", "product": { "name": "docker-24.0.7_ce-98.106.1.ppc64le", "product_id": "docker-24.0.7_ce-98.106.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-98.106.1.s390x", "product": { "name": "docker-24.0.7_ce-98.106.1.s390x", "product_id": "docker-24.0.7_ce-98.106.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-98.106.1.x86_64", "product": { "name": "docker-24.0.7_ce-98.106.1.x86_64", "product_id": "docker-24.0.7_ce-98.106.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Containers 12", "product": { "name": "SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-containers:12" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-98.106.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-98.106.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-98.106.1.s390x as component of SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x" }, "product_reference": "docker-24.0.7_ce-98.106.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-98.106.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" }, "product_reference": "docker-24.0.7_ce-98.106.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-22T08:55:20Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-22T08:55:20Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-24.0.7_ce-98.106.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-22T08:55:20Z", "details": "moderate" } ], "title": "CVE-2024-23653" } ] }
suse-su-2024:3120-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for buildah, docker", "title": "Title of the patch" }, { "category": "description", "text": "This update for buildah, docker fixes the following issues:\n\nChanges in docker:\n- CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)\n- CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)\n- CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)\n- CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)\n\nOther fixes:\n\n- Update to Docker 25.0.6-ce. See upstream changelog online at\n \u003chttps://docs.docker.com/engine/release-notes/25.0/#2506\u003e\n- Update to Docker 25.0.5-ce (bsc#1223409)\n\n- Fix BuildKit\u0027s symlink resolution logic to correctly handle non-lexical\n symlinks. (bsc#1221916)\n- Write volume options atomically so sudden system crashes won\u0027t result in\n future Docker starts failing due to empty files. (bsc#1214855)\n\nChanges in buildah:\n- Update to version 1.35.4:\n * [release-1.35] Bump to Buildah v1.35.4\n * [release-1.35] CVE-2024-3727 updates (bsc#1224117)\n * integration test: handle new labels in \u0027bud and test --unsetlabel\u0027\n * [release-1.35] Bump go-jose CVE-2024-28180\n * [release-1.35] Bump ocicrypt and go-jose CVE-2024-28180\n\n- Update to version 1.35.3:\n * [release-1.35] Bump to Buildah v1.35.3\n * [release-1.35] correctly configure /etc/hosts and resolv.conf\n * [release-1.35] buildah: refactor resolv/hosts setup.\n * [release-1.35] rename the hostFile var to reflect\n * [release-1.35] Bump c/common to v0.58.1\n * [release-1.35] Bump Buildah to v1.35.2\n * [release-1.35] CVE-2024-24786 protobuf to 1.33\n * [release-1.35] Bump to v1.35.2-dev\n\n- Update to version 1.35.1:\n * [release-1.35] Bump to v1.35.1\n * [release-1.35] CVE-2024-1753 container escape fix (bsc#1221677)\n\n- Buildah dropped cni support, require netavark instead (bsc#1221243)\n\n- Remove obsolete requires libcontainers-image \u0026 libcontainers-storage\n\n- Require passt for rootless networking (poo#156955)\n Buildah moved to passt/pasta for rootless networking from slirp4netns\n (https://github.com/containers/common/pull/1846)\n\n- Update to version 1.35.0:\n * Bump v1.35.0\n * Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0\n * conformance tests: don\u0027t break on trailing zeroes in layer blobs\n * Add a conformance test for copying to a mounted prior stage\n * fix(deps): update module github.com/stretchr/testify to v1.9.0\n * cgroups: reuse version check from c/common\n * Update vendor of containers/(common,image)\n * fix(deps): update github.com/containers/storage digest to eadc620\n * fix(deps): update github.com/containers/luksy digest to ceb12d4\n * fix(deps): update github.com/containers/image/v5 digest to cdc6802\n * manifest add: complain if we get artifact flags without --artifact\n * Use retry logic from containers/common\n * Vendor in containers/(storage,image,common)\n * Update module golang.org/x/crypto to v0.20.0\n * Add comment re: Total Success task name\n * tests: skip_if_no_unshare(): check for --setuid\n * Properly handle build --pull=false\n * [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1\n * Update module go.etcd.io/bbolt to v1.3.9\n * Revert \u0027Reduce official image size\u0027\n * Update module github.com/opencontainers/image-spec to v1.1.0\n * Reduce official image size\n * Build with CNI support on FreeBSD\n * build --all-platforms: skip some base \u0027image\u0027 platforms\n * Bump main to v1.35.0-dev\n * Vendor in latest containers/(storage,image,common)\n * Split up error messages for missing --sbom related flags\n * `buildah manifest`: add artifact-related options\n * cmd/buildah/manifest.go: lock lists before adding/annotating/pushing\n * cmd/buildah/manifest.go: don\u0027t make struct declarations aliases\n * Use golang.org/x/exp/slices.Contains\n * Disable loong64 again\n * Fix a couple of typos in one-line comments\n * egrep is obsolescent; use grep -E\n * Try Cirrus with a newer VM version\n * Set CONTAINERS_CONF in the chroot-mount-flags integration test\n * Update to match dependency API update\n * Update github.com/openshift/imagebuilder and containers/common\n * docs: correct default authfile path\n * fix(deps): update module github.com/containerd/containerd to v1.7.13\n * tests: retrofit test for heredoc summary\n * build, heredoc: show heredoc summary in build output\n * manifest, push: add support for --retry and --retry-delay\n * fix(deps): update github.com/openshift/imagebuilder digest to b767bc3\n * imagebuildah: fix crash with empty RUN\n * fix(deps): update github.com/containers/luksy digest to b62d551\n * fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]\n * fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]\n * Make buildah match podman for handling of ulimits\n * docs: move footnotes to where they\u0027re applicable\n * Allow users to specify no-dereference\n * Run codespell on code\n * Fix FreeBSD version parsing\n * Fix a build break on FreeBSD\n * Remove a bad FROM line\n * fix(deps): update module github.com/onsi/gomega to v1.31.1\n * fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6\n * docs: use reversed logo for dark theme in README\n * build,commit: add --sbom to scan and produce SBOMs when committing\n * commit: force omitHistory if the parent has layers but no history\n * docs: fix a couple of typos\n * internal/mkcw.Archive(): handle extra image content\n * stage_executor,heredoc: honor interpreter in heredoc\n * stage_executor,layers: burst cache if heredoc content is changed\n * fix(deps): update module golang.org/x/crypto to v0.18.0\n * Replace map[K]bool with map[K]struct{} where it makes sense\n * fix(deps): update module golang.org/x/sync to v0.6.0\n * fix(deps): update module golang.org/x/term to v0.16.0\n * Bump CI VMs\n * Replace strings.SplitN with strings.Cut\n * fix(deps): update github.com/containers/storage digest to ef81e9b\n * fix(deps): update github.com/containers/image/v5 digest to 1b221d4\n * fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1\n * Document use of containers-transports values in buildah\n * fix(deps): update module golang.org/x/crypto to v0.17.0 [security]\n * chore(deps): update dependency containers/automation_images to v20231208\n * manifest: addCompression use default from containers.conf\n * commit: add a --add-file flag\n * mkcw: populate the rootfs using an overlay\n * chore(deps): update dependency containers/automation_images to v20230517\n * [skip-ci] Update actions/stale action to v9\n * fix(deps): update module github.com/containernetworking/plugins to v1.4.0\n * fix(deps): update github.com/containers/image/v5 digest to 7a40fee\n * Bump to v1.34.1-dev\n * Ignore errors if label.Relabel returns ENOSUP\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-3120,SUSE-SLE-Micro-5.3-2024-3120,SUSE-SLE-Micro-5.4-2024-3120,SUSE-SLE-Micro-5.5-2024-3120,SUSE-SLE-Module-Containers-15-SP5-2024-3120,SUSE-SLE-Module-Containers-15-SP6-2024-3120,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-3120,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3120,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3120,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3120,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-3120,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3120,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3120,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-3120,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3120,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3120,SUSE-SUSE-MicroOS-5.1-2024-3120,SUSE-SUSE-MicroOS-5.2-2024-3120,SUSE-Storage-7.1-2024-3120,openSUSE-Leap-Micro-5.5-2024-3120,openSUSE-SLE-15.5-2024-3120,openSUSE-SLE-15.6-2024-3120", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3120-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:3120-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243120-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:3120-1", "url": "https://lists.suse.com/pipermail/sle-updates/2024-September/036751.html" }, { "category": "self", "summary": "SUSE Bug 1214855", "url": "https://bugzilla.suse.com/1214855" }, { "category": "self", "summary": "SUSE Bug 1219267", "url": "https://bugzilla.suse.com/1219267" }, { "category": "self", "summary": "SUSE Bug 1219268", "url": "https://bugzilla.suse.com/1219268" }, { "category": "self", "summary": "SUSE Bug 1219438", "url": "https://bugzilla.suse.com/1219438" }, { "category": "self", "summary": "SUSE Bug 1221243", "url": "https://bugzilla.suse.com/1221243" }, { "category": "self", "summary": "SUSE Bug 1221677", "url": "https://bugzilla.suse.com/1221677" }, { "category": "self", "summary": "SUSE Bug 1221916", "url": "https://bugzilla.suse.com/1221916" }, { "category": "self", "summary": "SUSE Bug 1223409", "url": "https://bugzilla.suse.com/1223409" }, { "category": "self", "summary": "SUSE Bug 1224117", "url": "https://bugzilla.suse.com/1224117" }, { "category": "self", "summary": "SUSE Bug 1228324", "url": "https://bugzilla.suse.com/1228324" }, { "category": "self", "summary": "SUSE CVE CVE-2024-1753 page", "url": "https://www.suse.com/security/cve/CVE-2024-1753/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-24786 page", "url": "https://www.suse.com/security/cve/CVE-2024-24786/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-28180 page", "url": "https://www.suse.com/security/cve/CVE-2024-28180/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-3727 page", "url": "https://www.suse.com/security/cve/CVE-2024-3727/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-41110 page", "url": "https://www.suse.com/security/cve/CVE-2024-41110/" } ], "title": "Security update for buildah, docker", "tracking": { "current_release_date": "2024-09-03T15:13:23Z", "generator": { "date": "2024-09-03T15:13:23Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:3120-1", "initial_release_date": "2024-09-03T15:13:23Z", "revision_history": [ { "date": "2024-09-03T15:13:23Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "buildah-1.35.4-150300.8.25.1.aarch64", "product": { "name": "buildah-1.35.4-150300.8.25.1.aarch64", "product_id": "buildah-1.35.4-150300.8.25.1.aarch64" } }, { "category": "product_version", "name": "docker-25.0.6_ce-150000.207.1.aarch64", "product": { "name": "docker-25.0.6_ce-150000.207.1.aarch64", "product_id": "docker-25.0.6_ce-150000.207.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "buildah-1.35.4-150300.8.25.1.i586", "product": { "name": "buildah-1.35.4-150300.8.25.1.i586", "product_id": "buildah-1.35.4-150300.8.25.1.i586" } }, { "category": "product_version", "name": "docker-25.0.6_ce-150000.207.1.i586", "product": { "name": "docker-25.0.6_ce-150000.207.1.i586", "product_id": "docker-25.0.6_ce-150000.207.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "product": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "product_id": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch" } }, { "category": "product_version", "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "product": { "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "product_id": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch" } }, { "category": "product_version", "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "product": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "product_id": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" } }, { "category": "product_version", "name": "docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "product": { "name": "docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "product_id": "docker-zsh-completion-25.0.6_ce-150000.207.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "buildah-1.35.4-150300.8.25.1.ppc64le", "product": { "name": "buildah-1.35.4-150300.8.25.1.ppc64le", "product_id": "buildah-1.35.4-150300.8.25.1.ppc64le" } }, { "category": "product_version", "name": "docker-25.0.6_ce-150000.207.1.ppc64le", "product": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le", "product_id": "docker-25.0.6_ce-150000.207.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "buildah-1.35.4-150300.8.25.1.s390x", "product": { "name": "buildah-1.35.4-150300.8.25.1.s390x", "product_id": "buildah-1.35.4-150300.8.25.1.s390x" } }, { "category": "product_version", "name": "docker-25.0.6_ce-150000.207.1.s390x", "product": { "name": "docker-25.0.6_ce-150000.207.1.s390x", "product_id": "docker-25.0.6_ce-150000.207.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "buildah-1.35.4-150300.8.25.1.x86_64", "product": { "name": "buildah-1.35.4-150300.8.25.1.x86_64", "product_id": "buildah-1.35.4-150300.8.25.1.x86_64" } }, { "category": "product_version", "name": "docker-25.0.6_ce-150000.207.1.x86_64", "product": { "name": "docker-25.0.6_ce-150000.207.1.x86_64", "product_id": "docker-25.0.6_ce-150000.207.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.3", "product": { "name": "SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.4", "product": { "name": "SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.5", "product": { "name": "SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Containers 15 SP5", "product": { "name": "SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-containers:15:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Containers 15 SP6", "product": { "name": "SUSE Linux Enterprise Module for Containers 15 SP6", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-containers:15:sp6" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.1", "product": { "name": "SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-microos:5.1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.2", "product": { "name": "SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-microos:5.2" } } }, { "category": "product_name", "name": "SUSE Enterprise Storage 7.1", "product": { "name": "SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1", "product_identification_helper": { "cpe": "cpe:/o:suse:ses:7.1" } } }, { "category": "product_name", "name": "openSUSE Leap Micro 5.5", "product": { "name": "openSUSE Leap Micro 5.5", "product_id": "openSUSE Leap Micro 5.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap-micro:5.5" } } }, { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } }, { "category": "product_name", "name": "openSUSE Leap 15.6", "product": { "name": "openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.6" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP6", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP6", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP6", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP6", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP6", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP6", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64" }, "product_reference": "buildah-1.35.4-150300.8.25.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64" }, "product_reference": "buildah-1.35.4-150300.8.25.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64" }, "product_reference": "buildah-1.35.4-150300.8.25.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le" }, "product_reference": "buildah-1.35.4-150300.8.25.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x" }, "product_reference": "buildah-1.35.4-150300.8.25.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64" }, "product_reference": "buildah-1.35.4-150300.8.25.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le" }, "product_reference": "buildah-1.35.4-150300.8.25.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64" }, "product_reference": "buildah-1.35.4-150300.8.25.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.aarch64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64" }, "product_reference": "buildah-1.35.4-150300.8.25.1.aarch64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "buildah-1.35.4-150300.8.25.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64" }, "product_reference": "buildah-1.35.4-150300.8.25.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of openSUSE Leap Micro 5.5", "product_id": "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "openSUSE Leap Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of openSUSE Leap Micro 5.5", "product_id": "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "openSUSE Leap Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of openSUSE Leap Micro 5.5", "product_id": "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "openSUSE Leap Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-zsh-completion-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.aarch64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.ppc64le as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le" }, "product_reference": "docker-25.0.6_ce-150000.207.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.s390x as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x" }, "product_reference": "docker-25.0.6_ce-150000.207.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.6_ce-150000.207.1.x86_64 as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64" }, "product_reference": "docker-25.0.6_ce-150000.207.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.6" }, { "category": "default_component_of", "full_product_name": { "name": "docker-zsh-completion-25.0.6_ce-150000.207.1.noarch as component of openSUSE Leap 15.6", "product_id": "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch" }, "product_reference": "docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-1753", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-1753" } ], "notes": [ { "category": "general", "text": "A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-1753", "url": "https://www.suse.com/security/cve/CVE-2024-1753" }, { "category": "external", "summary": "SUSE Bug 1221677 for CVE-2024-1753", "url": "https://bugzilla.suse.com/1221677" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "important" } ], "title": "CVE-2024-1753" }, { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "moderate" } ], "title": "CVE-2024-23653" }, { "cve": "CVE-2024-24786", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-24786" } ], "notes": [ { "category": "general", "text": "The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-24786", "url": "https://www.suse.com/security/cve/CVE-2024-24786" }, { "category": "external", "summary": "SUSE Bug 1226136 for CVE-2024-24786", "url": "https://bugzilla.suse.com/1226136" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "important" } ], "title": "CVE-2024-24786" }, { "cve": "CVE-2024-28180", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-28180" } ], "notes": [ { "category": "general", "text": "Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-28180", "url": "https://www.suse.com/security/cve/CVE-2024-28180" }, { "category": "external", "summary": "SUSE Bug 1234984 for CVE-2024-28180", "url": "https://bugzilla.suse.com/1234984" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "moderate" } ], "title": "CVE-2024-28180" }, { "cve": "CVE-2024-3727", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-3727" } ], "notes": [ { "category": "general", "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-3727", "url": "https://www.suse.com/security/cve/CVE-2024-3727" }, { "category": "external", "summary": "SUSE Bug 1224112 for CVE-2024-3727", "url": "https://bugzilla.suse.com/1224112" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "important" } ], "title": "CVE-2024-3727" }, { "cve": "CVE-2024-41110", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-41110" } ], "notes": [ { "category": "general", "text": "Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-41110", "url": "https://www.suse.com/security/cve/CVE-2024-41110" }, { "category": "external", "summary": "SUSE Bug 1228324 for CVE-2024-41110", "url": "https://bugzilla.suse.com/1228324" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.9, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Enterprise Storage 7.1:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Enterprise Storage 7.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:buildah-1.35.4-150300.8.25.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-25.0.6_ce-150000.207.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.5:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.ppc64le", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap 15.6:docker-25.0.6_ce-150000.207.1.x86_64", "openSUSE Leap 15.6:docker-bash-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-fish-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-rootless-extras-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap 15.6:docker-zsh-completion-25.0.6_ce-150000.207.1.noarch", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.aarch64", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.s390x", "openSUSE Leap Micro 5.5:docker-25.0.6_ce-150000.207.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-09-03T15:13:23Z", "details": "critical" } ], "title": "CVE-2024-41110" } ] }
suse-su-2025:03540-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for docker-stable", "title": "Title of the patch" }, { "category": "description", "text": "This update for docker-stable fixes the following issues:\n\n- Include historical changelog data from before the docker-stable fork. The\n initial changelog entry did technically provide all the necessary\n information, but our CVE tracking tools do not understand how the package is\n forked and so it seems that this package does not include fixes for ~12 years\n of updates. So, include a copy of the original package\u0027s changelog up until\n the fork point. (bsc#1250596)\n\n- Remove git-core recommends on SLE. Most SLE systems have\n installRecommends=yes by default and thus end up installing git with Docker.\n bsc#1250508\n\n This feature is mostly intended for developers (\u0027docker build git://\u0027) so\n most users already have the dependency installed, and the error when git is\n missing is fairly straightforward (so they can easily figure out what they\n need to install).\n\n- Backport \u003chttps://github.com/moby/moby/pull/48517\u003e. bsc#1247362\n\n- Update to docker-buildx v0.25.0. Upstream changelog:\n \u003chttps://github.com/docker/buildx/releases/tag/v0.25.0\u003e\n\n- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as\n Docker does not have permission to access the host zypper credentials in this\n mode (and unprivileged users cannot disable the feature using\n /etc/docker/suse-secrets-enable.) bsc#1240150\n\n- Initial docker-stable fork, forked from Docker 24.0.7-ce release\n (packaged on 2024-02-14). The original changelog is included below for\n historical reference.\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2025-3540,SUSE-SLE-SERVER-12-SP5-LTSS-2025-3540,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-3540", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03540-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2025:03540-1", "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202503540-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2025:03540-1", "url": "https://lists.suse.com/pipermail/sle-updates/2025-October/042077.html" }, { "category": "self", "summary": "SUSE Bug 1001161", "url": "https://bugzilla.suse.com/1001161" }, { "category": "self", "summary": "SUSE Bug 1004490", "url": "https://bugzilla.suse.com/1004490" }, { "category": "self", "summary": "SUSE Bug 1007249", "url": "https://bugzilla.suse.com/1007249" }, { "category": "self", "summary": "SUSE Bug 1009961", "url": "https://bugzilla.suse.com/1009961" }, { "category": "self", "summary": "SUSE Bug 1012568", "url": "https://bugzilla.suse.com/1012568" }, { "category": "self", "summary": "SUSE Bug 1015661", "url": "https://bugzilla.suse.com/1015661" }, { "category": "self", "summary": "SUSE Bug 1016307", "url": "https://bugzilla.suse.com/1016307" }, { "category": "self", "summary": "SUSE Bug 1016992", "url": "https://bugzilla.suse.com/1016992" }, { "category": "self", "summary": "SUSE Bug 1019251", "url": "https://bugzilla.suse.com/1019251" }, { "category": "self", "summary": "SUSE Bug 1020806", "url": "https://bugzilla.suse.com/1020806" }, { "category": "self", "summary": "SUSE Bug 1021227", "url": "https://bugzilla.suse.com/1021227" }, { "category": "self", "summary": "SUSE Bug 1026827", "url": "https://bugzilla.suse.com/1026827" }, { "category": "self", "summary": "SUSE Bug 1028638", "url": "https://bugzilla.suse.com/1028638" }, { "category": "self", "summary": "SUSE Bug 1028639", "url": "https://bugzilla.suse.com/1028639" }, { "category": "self", "summary": "SUSE Bug 1029320", "url": "https://bugzilla.suse.com/1029320" }, { "category": "self", "summary": "SUSE Bug 1029630", "url": "https://bugzilla.suse.com/1029630" }, { "category": "self", "summary": "SUSE Bug 1030702", "url": "https://bugzilla.suse.com/1030702" }, { "category": "self", "summary": "SUSE Bug 1032287", "url": "https://bugzilla.suse.com/1032287" }, { "category": "self", "summary": "SUSE Bug 1032644", "url": "https://bugzilla.suse.com/1032644" }, { "category": "self", "summary": "SUSE Bug 1034053", "url": "https://bugzilla.suse.com/1034053" }, { "category": "self", "summary": "SUSE Bug 1034063", "url": "https://bugzilla.suse.com/1034063" }, { "category": "self", "summary": "SUSE Bug 1037436", "url": "https://bugzilla.suse.com/1037436" }, { "category": "self", "summary": "SUSE Bug 1037607", "url": "https://bugzilla.suse.com/1037607" }, { "category": "self", "summary": "SUSE Bug 1038476", "url": "https://bugzilla.suse.com/1038476" }, { "category": "self", "summary": "SUSE Bug 1038493", "url": "https://bugzilla.suse.com/1038493" }, { "category": "self", "summary": "SUSE Bug 1045628", "url": "https://bugzilla.suse.com/1045628" }, { "category": "self", "summary": "SUSE Bug 1046024", "url": "https://bugzilla.suse.com/1046024" }, { "category": "self", "summary": "SUSE Bug 1047218", "url": "https://bugzilla.suse.com/1047218" }, { "category": "self", "summary": "SUSE Bug 1048046", "url": "https://bugzilla.suse.com/1048046" }, { "category": "self", "summary": "SUSE Bug 1051429", "url": "https://bugzilla.suse.com/1051429" }, { "category": "self", "summary": "SUSE Bug 1055676", "url": "https://bugzilla.suse.com/1055676" }, { "category": "self", "summary": "SUSE Bug 1057743", "url": "https://bugzilla.suse.com/1057743" }, { "category": "self", "summary": "SUSE Bug 1058173", "url": "https://bugzilla.suse.com/1058173" }, { "category": "self", "summary": "SUSE Bug 1059011", "url": "https://bugzilla.suse.com/1059011" }, { "category": "self", "summary": "SUSE Bug 1064781", "url": "https://bugzilla.suse.com/1064781" }, { "category": "self", "summary": "SUSE Bug 1065609", "url": "https://bugzilla.suse.com/1065609" }, { "category": "self", "summary": "SUSE Bug 1066210", "url": "https://bugzilla.suse.com/1066210" }, { "category": "self", "summary": "SUSE Bug 1066801", "url": "https://bugzilla.suse.com/1066801" }, { "category": "self", "summary": "SUSE Bug 1069468", "url": "https://bugzilla.suse.com/1069468" }, { "category": "self", "summary": "SUSE Bug 1069758", "url": "https://bugzilla.suse.com/1069758" }, { "category": "self", "summary": "SUSE Bug 1072798", "url": "https://bugzilla.suse.com/1072798" }, { "category": "self", "summary": "SUSE Bug 1073877", "url": "https://bugzilla.suse.com/1073877" }, { "category": "self", "summary": "SUSE Bug 1074971", "url": "https://bugzilla.suse.com/1074971" }, { "category": "self", "summary": "SUSE Bug 1080978", "url": "https://bugzilla.suse.com/1080978" }, { "category": "self", "summary": "SUSE Bug 1084533", "url": "https://bugzilla.suse.com/1084533" }, { "category": "self", "summary": "SUSE Bug 1085117", "url": "https://bugzilla.suse.com/1085117" }, { "category": "self", "summary": "SUSE Bug 1085380", "url": "https://bugzilla.suse.com/1085380" }, { "category": "self", "summary": "SUSE Bug 1086185", "url": "https://bugzilla.suse.com/1086185" }, { "category": "self", "summary": "SUSE Bug 1089732", "url": "https://bugzilla.suse.com/1089732" }, { "category": "self", "summary": "SUSE Bug 1095817", "url": "https://bugzilla.suse.com/1095817" }, { "category": "self", "summary": "SUSE Bug 1096726", "url": "https://bugzilla.suse.com/1096726" }, { "category": "self", "summary": "SUSE Bug 1099277", "url": "https://bugzilla.suse.com/1099277" }, { "category": "self", "summary": "SUSE Bug 1100331", "url": "https://bugzilla.suse.com/1100331" }, { "category": "self", "summary": "SUSE Bug 1100727", "url": "https://bugzilla.suse.com/1100727" }, { "category": "self", "summary": "SUSE Bug 1102522", "url": "https://bugzilla.suse.com/1102522" }, { "category": "self", "summary": "SUSE Bug 1104821", "url": "https://bugzilla.suse.com/1104821" }, { "category": "self", "summary": "SUSE Bug 1105000", "url": "https://bugzilla.suse.com/1105000" }, { "category": "self", "summary": "SUSE Bug 1108038", "url": "https://bugzilla.suse.com/1108038" }, { "category": "self", "summary": "SUSE Bug 1112980", "url": "https://bugzilla.suse.com/1112980" }, { "category": "self", "summary": "SUSE Bug 1113313", "url": "https://bugzilla.suse.com/1113313" }, { "category": "self", "summary": "SUSE Bug 1114832", "url": "https://bugzilla.suse.com/1114832" }, { "category": "self", "summary": "SUSE Bug 1115464", "url": "https://bugzilla.suse.com/1115464" }, { "category": "self", "summary": "SUSE Bug 1118897", "url": "https://bugzilla.suse.com/1118897" }, { "category": "self", "summary": "SUSE Bug 1118898", "url": "https://bugzilla.suse.com/1118898" }, { "category": "self", "summary": "SUSE Bug 1118899", "url": "https://bugzilla.suse.com/1118899" }, { "category": "self", "summary": "SUSE Bug 1118990", "url": "https://bugzilla.suse.com/1118990" }, { "category": "self", "summary": "SUSE Bug 1119634", "url": "https://bugzilla.suse.com/1119634" }, { "category": "self", "summary": "SUSE Bug 1121412", "url": "https://bugzilla.suse.com/1121412" }, { "category": "self", "summary": "SUSE Bug 1121768", "url": "https://bugzilla.suse.com/1121768" }, { "category": "self", "summary": "SUSE Bug 1122469", "url": "https://bugzilla.suse.com/1122469" }, { "category": "self", "summary": "SUSE Bug 1124308", "url": "https://bugzilla.suse.com/1124308" }, { "category": "self", "summary": "SUSE Bug 1128376", "url": "https://bugzilla.suse.com/1128376" }, { "category": "self", "summary": "SUSE Bug 1128746", "url": "https://bugzilla.suse.com/1128746" }, { "category": "self", "summary": "SUSE Bug 1134068", "url": "https://bugzilla.suse.com/1134068" }, { "category": "self", "summary": "SUSE Bug 1138920", "url": "https://bugzilla.suse.com/1138920" }, { "category": "self", "summary": "SUSE Bug 1139649", "url": "https://bugzilla.suse.com/1139649" }, { "category": "self", "summary": "SUSE Bug 1142160", "url": "https://bugzilla.suse.com/1142160" }, { "category": "self", "summary": "SUSE Bug 1142413", "url": "https://bugzilla.suse.com/1142413" }, { "category": "self", "summary": "SUSE Bug 1143349", "url": "https://bugzilla.suse.com/1143349" }, { "category": "self", "summary": "SUSE Bug 1150397", "url": "https://bugzilla.suse.com/1150397" }, { "category": "self", "summary": "SUSE Bug 1153367", "url": "https://bugzilla.suse.com/1153367" }, { "category": "self", "summary": "SUSE Bug 1157330", "url": "https://bugzilla.suse.com/1157330" }, { "category": "self", "summary": "SUSE Bug 1158590", "url": "https://bugzilla.suse.com/1158590" }, { "category": "self", "summary": "SUSE Bug 1170415", "url": "https://bugzilla.suse.com/1170415" }, { "category": "self", "summary": "SUSE Bug 1170446", "url": "https://bugzilla.suse.com/1170446" }, { "category": "self", "summary": "SUSE Bug 1172377", "url": "https://bugzilla.suse.com/1172377" }, { "category": "self", "summary": "SUSE Bug 1174075", "url": "https://bugzilla.suse.com/1174075" }, { "category": "self", "summary": "SUSE Bug 1175081", "url": "https://bugzilla.suse.com/1175081" }, { "category": "self", "summary": "SUSE Bug 1176708", "url": "https://bugzilla.suse.com/1176708" }, { "category": "self", "summary": "SUSE Bug 1178760", "url": "https://bugzilla.suse.com/1178760" }, { "category": "self", "summary": "SUSE Bug 1178801", "url": "https://bugzilla.suse.com/1178801" }, { "category": "self", "summary": "SUSE Bug 1180243", "url": "https://bugzilla.suse.com/1180243" }, { "category": "self", "summary": "SUSE Bug 1180401", "url": "https://bugzilla.suse.com/1180401" }, { "category": "self", "summary": "SUSE Bug 1181594", "url": "https://bugzilla.suse.com/1181594" }, { "category": "self", "summary": "SUSE Bug 1181641", "url": "https://bugzilla.suse.com/1181641" }, { "category": "self", "summary": "SUSE Bug 1181677", "url": "https://bugzilla.suse.com/1181677" }, { "category": "self", "summary": "SUSE Bug 1181730", "url": "https://bugzilla.suse.com/1181730" }, { "category": "self", "summary": "SUSE Bug 1181732", "url": "https://bugzilla.suse.com/1181732" }, { "category": "self", "summary": "SUSE Bug 1182168", "url": "https://bugzilla.suse.com/1182168" }, { "category": "self", "summary": "SUSE Bug 1182476", "url": "https://bugzilla.suse.com/1182476" }, { "category": "self", "summary": "SUSE Bug 1182947", "url": "https://bugzilla.suse.com/1182947" }, { "category": "self", "summary": "SUSE Bug 1183855", "url": "https://bugzilla.suse.com/1183855" }, { "category": "self", "summary": "SUSE Bug 1184768", "url": "https://bugzilla.suse.com/1184768" }, { "category": "self", "summary": "SUSE Bug 1188447", "url": "https://bugzilla.suse.com/1188447" }, { "category": "self", "summary": "SUSE Bug 1190670", "url": "https://bugzilla.suse.com/1190670" }, { "category": "self", "summary": "SUSE Bug 1191015", "url": "https://bugzilla.suse.com/1191015" }, { "category": "self", "summary": "SUSE Bug 1191121", "url": "https://bugzilla.suse.com/1191121" }, { "category": "self", "summary": "SUSE Bug 1191334", "url": "https://bugzilla.suse.com/1191334" }, { "category": "self", "summary": "SUSE Bug 1191355", "url": "https://bugzilla.suse.com/1191355" }, { "category": "self", "summary": "SUSE Bug 1191434", "url": "https://bugzilla.suse.com/1191434" }, { "category": "self", "summary": "SUSE Bug 1192814", "url": "https://bugzilla.suse.com/1192814" }, { "category": "self", "summary": "SUSE Bug 1193273", "url": "https://bugzilla.suse.com/1193273" }, { "category": "self", "summary": "SUSE Bug 1193930", "url": "https://bugzilla.suse.com/1193930" }, { "category": "self", "summary": "SUSE Bug 1197284", "url": "https://bugzilla.suse.com/1197284" }, { "category": "self", "summary": "SUSE Bug 1197517", "url": "https://bugzilla.suse.com/1197517" }, { "category": "self", "summary": "SUSE Bug 1200022", "url": "https://bugzilla.suse.com/1200022" }, { "category": "self", "summary": "SUSE Bug 1200145", "url": "https://bugzilla.suse.com/1200145" }, { "category": "self", "summary": "SUSE Bug 1205375", "url": "https://bugzilla.suse.com/1205375" }, { "category": "self", "summary": "SUSE Bug 1206065", "url": "https://bugzilla.suse.com/1206065" }, { "category": "self", "summary": "SUSE Bug 1208074", "url": "https://bugzilla.suse.com/1208074" }, { "category": "self", "summary": "SUSE Bug 1210141", "url": "https://bugzilla.suse.com/1210141" }, { "category": "self", "summary": "SUSE Bug 1210797", "url": "https://bugzilla.suse.com/1210797" }, { "category": "self", "summary": "SUSE Bug 1211578", "url": "https://bugzilla.suse.com/1211578" }, { "category": "self", "summary": "SUSE Bug 1212368", "url": "https://bugzilla.suse.com/1212368" }, { "category": "self", "summary": "SUSE Bug 1213120", "url": "https://bugzilla.suse.com/1213120" }, { "category": "self", "summary": "SUSE Bug 1213229", "url": "https://bugzilla.suse.com/1213229" }, { "category": "self", "summary": "SUSE Bug 1213500", "url": "https://bugzilla.suse.com/1213500" }, { "category": "self", "summary": "SUSE Bug 1214107", "url": "https://bugzilla.suse.com/1214107" }, { "category": "self", "summary": "SUSE Bug 1214108", "url": "https://bugzilla.suse.com/1214108" }, { "category": "self", "summary": "SUSE Bug 1214109", "url": "https://bugzilla.suse.com/1214109" }, { "category": "self", "summary": "SUSE Bug 1215323", "url": "https://bugzilla.suse.com/1215323" }, { "category": "self", "summary": "SUSE Bug 1217513", "url": "https://bugzilla.suse.com/1217513" }, { "category": "self", "summary": "SUSE Bug 1219267", "url": "https://bugzilla.suse.com/1219267" }, { "category": "self", "summary": "SUSE Bug 1219268", "url": "https://bugzilla.suse.com/1219268" }, { "category": "self", "summary": "SUSE Bug 1219438", "url": "https://bugzilla.suse.com/1219438" }, { "category": "self", "summary": "SUSE Bug 1240150", "url": "https://bugzilla.suse.com/1240150" }, { "category": "self", "summary": "SUSE Bug 1247362", "url": "https://bugzilla.suse.com/1247362" }, { "category": "self", "summary": "SUSE Bug 1250508", "url": "https://bugzilla.suse.com/1250508" }, { "category": "self", "summary": "SUSE Bug 1250596", "url": "https://bugzilla.suse.com/1250596" }, { "category": "self", "summary": "SUSE Bug 885209", "url": "https://bugzilla.suse.com/885209" }, { "category": "self", "summary": "SUSE Bug 907012", "url": "https://bugzilla.suse.com/907012" }, { "category": "self", "summary": "SUSE Bug 907014", "url": "https://bugzilla.suse.com/907014" }, { "category": "self", "summary": "SUSE Bug 908033", "url": "https://bugzilla.suse.com/908033" }, { "category": "self", "summary": "SUSE Bug 909709", "url": "https://bugzilla.suse.com/909709" }, { "category": "self", "summary": "SUSE Bug 909710", "url": "https://bugzilla.suse.com/909710" }, { "category": "self", "summary": "SUSE Bug 909712", "url": "https://bugzilla.suse.com/909712" }, { "category": "self", "summary": "SUSE Bug 913211", "url": "https://bugzilla.suse.com/913211" }, { "category": "self", "summary": "SUSE Bug 913213", "url": "https://bugzilla.suse.com/913213" }, { "category": "self", "summary": "SUSE Bug 920645", "url": "https://bugzilla.suse.com/920645" }, { "category": "self", "summary": "SUSE Bug 930235", "url": "https://bugzilla.suse.com/930235" }, { "category": "self", "summary": "SUSE Bug 931301", "url": "https://bugzilla.suse.com/931301" }, { "category": "self", "summary": "SUSE Bug 935570", "url": "https://bugzilla.suse.com/935570" }, { "category": "self", "summary": "SUSE Bug 938156", "url": "https://bugzilla.suse.com/938156" }, { "category": "self", "summary": "SUSE Bug 942369", "url": "https://bugzilla.suse.com/942369" }, { "category": "self", "summary": "SUSE Bug 942370", "url": "https://bugzilla.suse.com/942370" }, { "category": "self", "summary": "SUSE Bug 946653", "url": "https://bugzilla.suse.com/946653" }, { "category": "self", "summary": "SUSE Bug 949660", "url": "https://bugzilla.suse.com/949660" }, { "category": "self", "summary": "SUSE Bug 950931", "url": "https://bugzilla.suse.com/950931" }, { "category": "self", "summary": "SUSE Bug 953182", "url": "https://bugzilla.suse.com/953182" }, { "category": "self", "summary": "SUSE Bug 954737", "url": "https://bugzilla.suse.com/954737" }, { "category": "self", "summary": "SUSE Bug 954797", "url": "https://bugzilla.suse.com/954797" }, { "category": "self", "summary": "SUSE Bug 954812", "url": "https://bugzilla.suse.com/954812" }, { "category": "self", "summary": "SUSE Bug 956434", "url": "https://bugzilla.suse.com/956434" }, { "category": "self", "summary": "SUSE Bug 958255", "url": "https://bugzilla.suse.com/958255" }, { "category": "self", "summary": "SUSE Bug 959405", "url": "https://bugzilla.suse.com/959405" }, { "category": "self", "summary": "SUSE Bug 963142", "url": "https://bugzilla.suse.com/963142" }, { "category": "self", "summary": "SUSE Bug 964468", "url": "https://bugzilla.suse.com/964468" }, { "category": "self", "summary": "SUSE Bug 964673", "url": "https://bugzilla.suse.com/964673" }, { "category": "self", "summary": "SUSE Bug 965600", "url": "https://bugzilla.suse.com/965600" }, { "category": "self", "summary": "SUSE Bug 965918", "url": "https://bugzilla.suse.com/965918" }, { "category": "self", "summary": "SUSE Bug 968933", "url": "https://bugzilla.suse.com/968933" }, { "category": "self", "summary": "SUSE Bug 968972", "url": "https://bugzilla.suse.com/968972" }, { "category": "self", "summary": "SUSE Bug 970637", "url": "https://bugzilla.suse.com/970637" }, { "category": "self", "summary": "SUSE Bug 974208", "url": "https://bugzilla.suse.com/974208" }, { "category": "self", "summary": "SUSE Bug 976777", "url": "https://bugzilla.suse.com/976777" }, { "category": "self", "summary": "SUSE Bug 977394", "url": "https://bugzilla.suse.com/977394" }, { "category": "self", "summary": "SUSE Bug 978260", "url": "https://bugzilla.suse.com/978260" }, { "category": "self", "summary": "SUSE Bug 980555", "url": "https://bugzilla.suse.com/980555" }, { "category": "self", "summary": "SUSE Bug 983015", "url": "https://bugzilla.suse.com/983015" }, { "category": "self", "summary": "SUSE Bug 984942", "url": "https://bugzilla.suse.com/984942" }, { "category": "self", "summary": "SUSE Bug 987198", "url": "https://bugzilla.suse.com/987198" }, { "category": "self", "summary": "SUSE Bug 988408", "url": "https://bugzilla.suse.com/988408" }, { "category": "self", "summary": "SUSE Bug 988707", "url": "https://bugzilla.suse.com/988707" }, { "category": "self", "summary": "SUSE Bug 989566", "url": "https://bugzilla.suse.com/989566" }, { "category": "self", "summary": "SUSE Bug 993847", "url": "https://bugzilla.suse.com/993847" }, { "category": "self", "summary": "SUSE Bug 995058", "url": "https://bugzilla.suse.com/995058" }, { "category": "self", "summary": "SUSE Bug 995102", "url": "https://bugzilla.suse.com/995102" }, { "category": "self", "summary": "SUSE Bug 995620", "url": "https://bugzilla.suse.com/995620" }, { "category": "self", "summary": "SUSE Bug 996015", "url": "https://bugzilla.suse.com/996015" }, { "category": "self", "summary": "SUSE Bug 999582", "url": "https://bugzilla.suse.com/999582" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3499 page", "url": "https://www.suse.com/security/cve/CVE-2014-3499/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-5277 page", "url": "https://www.suse.com/security/cve/CVE-2014-5277/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-6407 page", "url": "https://www.suse.com/security/cve/CVE-2014-6407/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-6408 page", "url": "https://www.suse.com/security/cve/CVE-2014-6408/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8178 page", "url": "https://www.suse.com/security/cve/CVE-2014-8178/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8179 page", "url": "https://www.suse.com/security/cve/CVE-2014-8179/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-9356 page", "url": "https://www.suse.com/security/cve/CVE-2014-9356/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-9357 page", "url": "https://www.suse.com/security/cve/CVE-2014-9357/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-9358 page", "url": "https://www.suse.com/security/cve/CVE-2014-9358/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3627 page", "url": "https://www.suse.com/security/cve/CVE-2015-3627/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3629 page", "url": "https://www.suse.com/security/cve/CVE-2015-3629/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3630 page", "url": "https://www.suse.com/security/cve/CVE-2015-3630/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3631 page", "url": "https://www.suse.com/security/cve/CVE-2015-3631/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-3697 page", "url": "https://www.suse.com/security/cve/CVE-2016-3697/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-8867 page", "url": "https://www.suse.com/security/cve/CVE-2016-8867/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-9962 page", "url": "https://www.suse.com/security/cve/CVE-2016-9962/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-14992 page", "url": "https://www.suse.com/security/cve/CVE-2017-14992/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-16539 page", "url": "https://www.suse.com/security/cve/CVE-2017-16539/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-10892 page", "url": "https://www.suse.com/security/cve/CVE-2018-10892/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-15664 page", "url": "https://www.suse.com/security/cve/CVE-2018-15664/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16873 page", "url": "https://www.suse.com/security/cve/CVE-2018-16873/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16874 page", "url": "https://www.suse.com/security/cve/CVE-2018-16874/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16875 page", "url": "https://www.suse.com/security/cve/CVE-2018-16875/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20699 page", "url": "https://www.suse.com/security/cve/CVE-2018-20699/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-13509 page", "url": "https://www.suse.com/security/cve/CVE-2019-13509/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-14271 page", "url": "https://www.suse.com/security/cve/CVE-2019-14271/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-12912 page", "url": "https://www.suse.com/security/cve/CVE-2020-12912/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-13401 page", "url": "https://www.suse.com/security/cve/CVE-2020-13401/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-15257 page", "url": "https://www.suse.com/security/cve/CVE-2020-15257/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8694 page", "url": "https://www.suse.com/security/cve/CVE-2020-8694/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8695 page", "url": "https://www.suse.com/security/cve/CVE-2020-8695/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-21284 page", "url": "https://www.suse.com/security/cve/CVE-2021-21284/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-21285 page", "url": "https://www.suse.com/security/cve/CVE-2021-21285/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-41089 page", "url": "https://www.suse.com/security/cve/CVE-2021-41089/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-41091 page", "url": "https://www.suse.com/security/cve/CVE-2021-41091/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-41092 page", "url": "https://www.suse.com/security/cve/CVE-2021-41092/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-41103 page", "url": "https://www.suse.com/security/cve/CVE-2021-41103/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-41190 page", "url": "https://www.suse.com/security/cve/CVE-2021-41190/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-43565 page", "url": "https://www.suse.com/security/cve/CVE-2021-43565/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-24769 page", "url": "https://www.suse.com/security/cve/CVE-2022-24769/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-27191 page", "url": "https://www.suse.com/security/cve/CVE-2022-27191/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-36109 page", "url": "https://www.suse.com/security/cve/CVE-2022-36109/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-28840 page", "url": "https://www.suse.com/security/cve/CVE-2023-28840/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-28841 page", "url": "https://www.suse.com/security/cve/CVE-2023-28841/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-28842 page", "url": "https://www.suse.com/security/cve/CVE-2023-28842/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23650 page", "url": "https://www.suse.com/security/cve/CVE-2024-23650/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-29018 page", "url": "https://www.suse.com/security/cve/CVE-2024-29018/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-41110 page", "url": "https://www.suse.com/security/cve/CVE-2024-41110/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-22868 page", "url": "https://www.suse.com/security/cve/CVE-2025-22868/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-22869 page", "url": "https://www.suse.com/security/cve/CVE-2025-22869/" } ], "title": "Security update for docker-stable", "tracking": { "current_release_date": "2025-10-10T19:04:02Z", "generator": { "date": "2025-10-10T19:04:02Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2025:03540-1", "initial_release_date": "2025-10-10T19:04:02Z", "revision_history": [ { "date": "2025-10-10T19:04:02Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "docker-stable-24.0.9_ce-1.20.1.aarch64", "product": { "name": "docker-stable-24.0.9_ce-1.20.1.aarch64", "product_id": "docker-stable-24.0.9_ce-1.20.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "docker-stable-24.0.9_ce-1.20.1.i586", "product": { "name": "docker-stable-24.0.9_ce-1.20.1.i586", "product_id": "docker-stable-24.0.9_ce-1.20.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "product": { "name": "docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "product_id": "docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" } }, { "category": "product_version", "name": "docker-stable-fish-completion-24.0.9_ce-1.20.1.noarch", "product": { "name": "docker-stable-fish-completion-24.0.9_ce-1.20.1.noarch", "product_id": "docker-stable-fish-completion-24.0.9_ce-1.20.1.noarch" } }, { "category": "product_version", "name": "docker-stable-rootless-extras-24.0.9_ce-1.20.1.noarch", "product": { "name": "docker-stable-rootless-extras-24.0.9_ce-1.20.1.noarch", "product_id": "docker-stable-rootless-extras-24.0.9_ce-1.20.1.noarch" } }, { "category": "product_version", "name": "docker-stable-zsh-completion-24.0.9_ce-1.20.1.noarch", "product": { "name": "docker-stable-zsh-completion-24.0.9_ce-1.20.1.noarch", "product_id": "docker-stable-zsh-completion-24.0.9_ce-1.20.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "docker-stable-24.0.9_ce-1.20.1.ppc64le", "product": { "name": "docker-stable-24.0.9_ce-1.20.1.ppc64le", "product_id": "docker-stable-24.0.9_ce-1.20.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "docker-stable-24.0.9_ce-1.20.1.s390x", "product": { "name": "docker-stable-24.0.9_ce-1.20.1.s390x", "product_id": "docker-stable-24.0.9_ce-1.20.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "docker-stable-24.0.9_ce-1.20.1.x86_64", "product": { "name": "docker-stable-24.0.9_ce-1.20.1.x86_64", "product_id": "docker-stable-24.0.9_ce-1.20.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP5-LTSS", "product": { "name": "SUSE Linux Enterprise Server 12 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:12:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5", "product": { "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5", "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-stable-24.0.9_ce-1.20.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64" }, "product_reference": "docker-stable-24.0.9_ce-1.20.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-stable-24.0.9_ce-1.20.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le" }, "product_reference": "docker-stable-24.0.9_ce-1.20.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-stable-24.0.9_ce-1.20.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x" }, "product_reference": "docker-stable-24.0.9_ce-1.20.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-stable-24.0.9_ce-1.20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64" }, "product_reference": "docker-stable-24.0.9_ce-1.20.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" }, "product_reference": "docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-stable-24.0.9_ce-1.20.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5", "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64" }, "product_reference": "docker-stable-24.0.9_ce-1.20.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5", "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" }, "product_reference": "docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-3499", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3499" } ], "notes": [ { "category": "general", "text": "Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3499", "url": "https://www.suse.com/security/cve/CVE-2014-3499" }, { "category": "external", "summary": "SUSE Bug 885209 for CVE-2014-3499", "url": "https://bugzilla.suse.com/885209" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2014-3499" }, { "cve": "CVE-2014-5277", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-5277" } ], "notes": [ { "category": "general", "text": "Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-5277", "url": "https://www.suse.com/security/cve/CVE-2014-5277" }, { "category": "external", "summary": "SUSE Bug 904165 for CVE-2014-5277", "url": "https://bugzilla.suse.com/904165" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2014-5277" }, { "cve": "CVE-2014-6407", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-6407" } ], "notes": [ { "category": "general", "text": "Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-6407", "url": "https://www.suse.com/security/cve/CVE-2014-6407" }, { "category": "external", "summary": "SUSE Bug 907012 for CVE-2014-6407", "url": "https://bugzilla.suse.com/907012" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2014-6407" }, { "cve": "CVE-2014-6408", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-6408" } ], "notes": [ { "category": "general", "text": "Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security options to an image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-6408", "url": "https://www.suse.com/security/cve/CVE-2014-6408" }, { "category": "external", "summary": "SUSE Bug 907014 for CVE-2014-6408", "url": "https://bugzilla.suse.com/907014" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2014-6408" }, { "cve": "CVE-2014-8178", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8178" } ], "notes": [ { "category": "general", "text": "Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8178", "url": "https://www.suse.com/security/cve/CVE-2014-8178" }, { "category": "external", "summary": "SUSE Bug 949660 for CVE-2014-8178", "url": "https://bugzilla.suse.com/949660" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2014-8178" }, { "cve": "CVE-2014-8179", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8179" } ], "notes": [ { "category": "general", "text": "Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8179", "url": "https://www.suse.com/security/cve/CVE-2014-8179" }, { "category": "external", "summary": "SUSE Bug 949660 for CVE-2014-8179", "url": "https://bugzilla.suse.com/949660" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2014-8179" }, { "cve": "CVE-2014-9356", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-9356" } ], "notes": [ { "category": "general", "text": "Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-9356", "url": "https://www.suse.com/security/cve/CVE-2014-9356" }, { "category": "external", "summary": "SUSE Bug 909710 for CVE-2014-9356", "url": "https://bugzilla.suse.com/909710" }, { "category": "external", "summary": "SUSE Bug 909712 for CVE-2014-9356", "url": "https://bugzilla.suse.com/909712" }, { "category": "external", "summary": "SUSE Bug 909747 for CVE-2014-9356", "url": "https://bugzilla.suse.com/909747" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2014-9356" }, { "cve": "CVE-2014-9357", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-9357" } ], "notes": [ { "category": "general", "text": "Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build in a Dockerfile in an LZMA (.xz) archive, related to the chroot for archive extraction.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-9357", "url": "https://www.suse.com/security/cve/CVE-2014-9357" }, { "category": "external", "summary": "SUSE Bug 909710 for CVE-2014-9357", "url": "https://bugzilla.suse.com/909710" }, { "category": "external", "summary": "SUSE Bug 909747 for CVE-2014-9357", "url": "https://bugzilla.suse.com/909747" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2014-9357" }, { "cve": "CVE-2014-9358", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-9358" } ], "notes": [ { "category": "general", "text": "Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) \"docker load\" operation or (2) \"registry communications.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2014-9358", "url": "https://www.suse.com/security/cve/CVE-2014-9358" }, { "category": "external", "summary": "SUSE Bug 909709 for CVE-2014-9358", "url": "https://bugzilla.suse.com/909709" }, { "category": "external", "summary": "SUSE Bug 909747 for CVE-2014-9358", "url": "https://bugzilla.suse.com/909747" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2014-9358" }, { "cve": "CVE-2015-3627", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3627" } ], "notes": [ { "category": "general", "text": "Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3627", "url": "https://www.suse.com/security/cve/CVE-2015-3627" }, { "category": "external", "summary": "SUSE Bug 930235 for CVE-2015-3627", "url": "https://bugzilla.suse.com/930235" }, { "category": "external", "summary": "SUSE Bug 945060 for CVE-2015-3627", "url": "https://bugzilla.suse.com/945060" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "low" } ], "title": "CVE-2015-3627" }, { "cve": "CVE-2015-3629", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3629" } ], "notes": [ { "category": "general", "text": "Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization (\"mount namespace breakout\") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3629", "url": "https://www.suse.com/security/cve/CVE-2015-3629" }, { "category": "external", "summary": "SUSE Bug 930235 for CVE-2015-3629", "url": "https://bugzilla.suse.com/930235" }, { "category": "external", "summary": "SUSE Bug 945060 for CVE-2015-3629", "url": "https://bugzilla.suse.com/945060" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2015-3629" }, { "cve": "CVE-2015-3630", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3630" } ], "notes": [ { "category": "general", "text": "Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a crafted image.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3630", "url": "https://www.suse.com/security/cve/CVE-2015-3630" }, { "category": "external", "summary": "SUSE Bug 930235 for CVE-2015-3630", "url": "https://bugzilla.suse.com/930235" }, { "category": "external", "summary": "SUSE Bug 945060 for CVE-2015-3630", "url": "https://bugzilla.suse.com/945060" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2015-3630" }, { "cve": "CVE-2015-3631", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3631" } ], "notes": [ { "category": "general", "text": "Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3631", "url": "https://www.suse.com/security/cve/CVE-2015-3631" }, { "category": "external", "summary": "SUSE Bug 930235 for CVE-2015-3631", "url": "https://bugzilla.suse.com/930235" }, { "category": "external", "summary": "SUSE Bug 945060 for CVE-2015-3631", "url": "https://bugzilla.suse.com/945060" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2015-3631" }, { "cve": "CVE-2016-3697", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-3697" } ], "notes": [ { "category": "general", "text": "libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2016-3697", "url": "https://www.suse.com/security/cve/CVE-2016-3697" }, { "category": "external", "summary": "SUSE Bug 976777 for CVE-2016-3697", "url": "https://bugzilla.suse.com/976777" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2016-3697" }, { "cve": "CVE-2016-8867", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-8867" } ], "notes": [ { "category": "general", "text": "Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2016-8867", "url": "https://www.suse.com/security/cve/CVE-2016-8867" }, { "category": "external", "summary": "SUSE Bug 1007249 for CVE-2016-8867", "url": "https://bugzilla.suse.com/1007249" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2016-8867" }, { "cve": "CVE-2016-9962", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-9962" } ], "notes": [ { "category": "general", "text": "RunC allowed additional container processes via \u0027runc exec\u0027 to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2016-9962", "url": "https://www.suse.com/security/cve/CVE-2016-9962" }, { "category": "external", "summary": "SUSE Bug 1012568 for CVE-2016-9962", "url": "https://bugzilla.suse.com/1012568" }, { "category": "external", "summary": "SUSE Bug 1173425 for CVE-2016-9962", "url": "https://bugzilla.suse.com/1173425" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2016-9962" }, { "cve": "CVE-2017-14992", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-14992" } ], "notes": [ { "category": "general", "text": "Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2017-14992", "url": "https://www.suse.com/security/cve/CVE-2017-14992" }, { "category": "external", "summary": "SUSE Bug 1066210 for CVE-2017-14992", "url": "https://bugzilla.suse.com/1066210" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2017-14992" }, { "cve": "CVE-2017-16539", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-16539" } ], "notes": [ { "category": "general", "text": "The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss (when certain older Linux kernels are used) by leveraging Docker container access to write a \"scsi remove-single-device\" line to /proc/scsi/scsi, aka SCSI MICDROP.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2017-16539", "url": "https://www.suse.com/security/cve/CVE-2017-16539" }, { "category": "external", "summary": "SUSE Bug 1066801 for CVE-2017-16539", "url": "https://bugzilla.suse.com/1066801" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2017-16539" }, { "cve": "CVE-2018-10892", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-10892" } ], "notes": [ { "category": "general", "text": "The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host\u0027s hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2018-10892", "url": "https://www.suse.com/security/cve/CVE-2018-10892" }, { "category": "external", "summary": "SUSE Bug 1100331 for CVE-2018-10892", "url": "https://bugzilla.suse.com/1100331" }, { "category": "external", "summary": "SUSE Bug 1100838 for CVE-2018-10892", "url": "https://bugzilla.suse.com/1100838" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2018-10892" }, { "cve": "CVE-2018-15664", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-15664" } ], "notes": [ { "category": "general", "text": "In Docker through 18.06.1-ce-rc2, the API endpoints behind the \u0027docker cp\u0027 command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2018-15664", "url": "https://www.suse.com/security/cve/CVE-2018-15664" }, { "category": "external", "summary": "SUSE Bug 1096726 for CVE-2018-15664", "url": "https://bugzilla.suse.com/1096726" }, { "category": "external", "summary": "SUSE Bug 1139649 for CVE-2018-15664", "url": "https://bugzilla.suse.com/1139649" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2018-15664" }, { "cve": "CVE-2018-16873", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16873" } ], "notes": [ { "category": "general", "text": "In Go before 1.10.6 and 1.11.x before 1.11.3, the \"go get\" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). Using custom domains, it\u0027s possible to arrange things so that a Git repository is cloned to a folder named \".git\" by using a vanity import path that ends with \"/.git\". If the Git repository root contains a \"HEAD\" file, a \"config\" file, an \"objects\" directory, a \"refs\" directory, with some work to ensure the proper ordering of operations, \"go get -u\" can be tricked into considering the parent directory as a repository root, and running Git commands on it. That will use the \"config\" file in the original Git repository root for its configuration, and if that config file contains malicious commands, they will execute on the system running \"go get -u\".", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16873", "url": "https://www.suse.com/security/cve/CVE-2018-16873" }, { "category": "external", "summary": "SUSE Bug 1118897 for CVE-2018-16873", "url": "https://bugzilla.suse.com/1118897" }, { "category": "external", "summary": "SUSE Bug 1118898 for CVE-2018-16873", "url": "https://bugzilla.suse.com/1118898" }, { "category": "external", "summary": "SUSE Bug 1118899 for CVE-2018-16873", "url": "https://bugzilla.suse.com/1118899" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2018-16873" }, { "cve": "CVE-2018-16874", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16874" } ], "notes": [ { "category": "general", "text": "In Go before 1.10.6 and 1.11.x before 1.11.3, the \"go get\" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both \u0027{\u0027 and \u0027}\u0027 characters). Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which can lead to code execution.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16874", "url": "https://www.suse.com/security/cve/CVE-2018-16874" }, { "category": "external", "summary": "SUSE Bug 1118897 for CVE-2018-16874", "url": "https://bugzilla.suse.com/1118897" }, { "category": "external", "summary": "SUSE Bug 1118898 for CVE-2018-16874", "url": "https://bugzilla.suse.com/1118898" }, { "category": "external", "summary": "SUSE Bug 1118899 for CVE-2018-16874", "url": "https://bugzilla.suse.com/1118899" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2018-16874" }, { "cve": "CVE-2018-16875", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16875" } ], "notes": [ { "category": "general", "text": "The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16875", "url": "https://www.suse.com/security/cve/CVE-2018-16875" }, { "category": "external", "summary": "SUSE Bug 1118897 for CVE-2018-16875", "url": "https://bugzilla.suse.com/1118897" }, { "category": "external", "summary": "SUSE Bug 1118898 for CVE-2018-16875", "url": "https://bugzilla.suse.com/1118898" }, { "category": "external", "summary": "SUSE Bug 1118899 for CVE-2018-16875", "url": "https://bugzilla.suse.com/1118899" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2018-16875" }, { "cve": "CVE-2018-20699", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20699" } ], "notes": [ { "category": "general", "text": "Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20699", "url": "https://www.suse.com/security/cve/CVE-2018-20699" }, { "category": "external", "summary": "SUSE Bug 1121768 for CVE-2018-20699", "url": "https://bugzilla.suse.com/1121768" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2018-20699" }, { "cve": "CVE-2019-13509", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-13509" } ], "notes": [ { "category": "general", "text": "In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2019-13509", "url": "https://www.suse.com/security/cve/CVE-2019-13509" }, { "category": "external", "summary": "SUSE Bug 1142160 for CVE-2019-13509", "url": "https://bugzilla.suse.com/1142160" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2019-13509" }, { "cve": "CVE-2019-14271", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-14271" } ], "notes": [ { "category": "general", "text": "In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2019-14271", "url": "https://www.suse.com/security/cve/CVE-2019-14271" }, { "category": "external", "summary": "SUSE Bug 1143409 for CVE-2019-14271", "url": "https://bugzilla.suse.com/1143409" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2019-14271" }, { "cve": "CVE-2020-12912", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-12912" } ], "notes": [ { "category": "general", "text": "A potential vulnerability in the AMD extension to Linux \"hwmon\" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-12912", "url": "https://www.suse.com/security/cve/CVE-2020-12912" }, { "category": "external", "summary": "SUSE Bug 1178760 for CVE-2020-12912", "url": "https://bugzilla.suse.com/1178760" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2020-12912" }, { "cve": "CVE-2020-13401", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-13401" } ], "notes": [ { "category": "general", "text": "An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-13401", "url": "https://www.suse.com/security/cve/CVE-2020-13401" }, { "category": "external", "summary": "SUSE Bug 1172375 for CVE-2020-13401", "url": "https://bugzilla.suse.com/1172375" }, { "category": "external", "summary": "SUSE Bug 1172377 for CVE-2020-13401", "url": "https://bugzilla.suse.com/1172377" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2020-13401" }, { "cve": "CVE-2020-15257", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-15257" } ], "notes": [ { "category": "general", "text": "containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim\u0027s API socket verified that the connecting process had an effective UID of 0, but did not otherwise restrict access to the abstract Unix domain socket. This would allow malicious containers running in the same network namespace as the shim, with an effective UID of 0 but otherwise reduced privileges, to cause new processes to be run with elevated privileges. This vulnerability has been fixed in containerd 1.3.9 and 1.4.3. Users should update to these versions as soon as they are released. It should be noted that containers started with an old version of containerd-shim should be stopped and restarted, as running containers will continue to be vulnerable even after an upgrade. If you are not providing the ability for untrusted users to start containers in the same network namespace as the shim (typically the \"host\" network namespace, for example with docker run --net=host or hostNetwork: true in a Kubernetes pod) and run with an effective UID of 0, you are not vulnerable to this issue. If you are running containers with a vulnerable configuration, you can deny access to all abstract sockets with AppArmor by adding a line similar to deny unix addr=@**, to your policy. It is best practice to run containers with a reduced set of privileges, with a non-zero UID, and with isolated namespaces. The containerd maintainers strongly advise against sharing namespaces with the host. Reducing the set of isolation mechanisms used for a container necessarily increases that container\u0027s privilege, regardless of what container runtime is used for running that container.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-15257", "url": "https://www.suse.com/security/cve/CVE-2020-15257" }, { "category": "external", "summary": "SUSE Bug 1178969 for CVE-2020-15257", "url": "https://bugzilla.suse.com/1178969" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2020-15257" }, { "cve": "CVE-2020-8694", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8694" } ], "notes": [ { "category": "general", "text": "Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8694", "url": "https://www.suse.com/security/cve/CVE-2020-8694" }, { "category": "external", "summary": "SUSE Bug 1170415 for CVE-2020-8694", "url": "https://bugzilla.suse.com/1170415" }, { "category": "external", "summary": "SUSE Bug 1170446 for CVE-2020-8694", "url": "https://bugzilla.suse.com/1170446" }, { "category": "external", "summary": "SUSE Bug 1178591 for CVE-2020-8694", "url": "https://bugzilla.suse.com/1178591" }, { "category": "external", "summary": "SUSE Bug 1178700 for CVE-2020-8694", "url": "https://bugzilla.suse.com/1178700" }, { "category": "external", "summary": "SUSE Bug 1179661 for CVE-2020-8694", "url": "https://bugzilla.suse.com/1179661" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2020-8694" }, { "cve": "CVE-2020-8695", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8695" } ], "notes": [ { "category": "general", "text": "Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8695", "url": "https://www.suse.com/security/cve/CVE-2020-8695" }, { "category": "external", "summary": "SUSE Bug 1170415 for CVE-2020-8695", "url": "https://bugzilla.suse.com/1170415" }, { "category": "external", "summary": "SUSE Bug 1170446 for CVE-2020-8695", "url": "https://bugzilla.suse.com/1170446" }, { "category": "external", "summary": "SUSE Bug 1178591 for CVE-2020-8695", "url": "https://bugzilla.suse.com/1178591" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2020-8695" }, { "cve": "CVE-2021-21284", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-21284" } ], "notes": [ { "category": "general", "text": "In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using \"--userns-remap\", if the root user in the remapped namespace has access to the host filesystem they can modify files under \"/var/lib/docker/\u003cremapping\u003e\" that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-21284", "url": "https://www.suse.com/security/cve/CVE-2021-21284" }, { "category": "external", "summary": "SUSE Bug 1181732 for CVE-2021-21284", "url": "https://bugzilla.suse.com/1181732" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "low" } ], "title": "CVE-2021-21284" }, { "cve": "CVE-2021-21285", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-21285" } ], "notes": [ { "category": "general", "text": "In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-21285", "url": "https://www.suse.com/security/cve/CVE-2021-21285" }, { "category": "external", "summary": "SUSE Bug 1181730 for CVE-2021-21285", "url": "https://bugzilla.suse.com/1181730" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2021-21285" }, { "cve": "CVE-2021-41089", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-41089" } ], "notes": [ { "category": "general", "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host\u0027s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-41089", "url": "https://www.suse.com/security/cve/CVE-2021-41089" }, { "category": "external", "summary": "SUSE Bug 1191015 for CVE-2021-41089", "url": "https://bugzilla.suse.com/1191015" }, { "category": "external", "summary": "SUSE Bug 1191355 for CVE-2021-41089", "url": "https://bugzilla.suse.com/1191355" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.6, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2021-41089" }, { "cve": "CVE-2021-41091", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-41091" } ], "notes": [ { "category": "general", "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the data directory (typically `/var/lib/docker`) contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as `setuid`), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade limit access to the host to trusted users. Limit access to host volumes to trusted containers.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-41091", "url": "https://www.suse.com/security/cve/CVE-2021-41091" }, { "category": "external", "summary": "SUSE Bug 1191355 for CVE-2021-41091", "url": "https://bugzilla.suse.com/1191355" }, { "category": "external", "summary": "SUSE Bug 1191434 for CVE-2021-41091", "url": "https://bugzilla.suse.com/1191434" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2021-41091" }, { "cve": "CVE-2021-41092", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-41092" } ], "notes": [ { "category": "general", "text": "Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-private-registry.example.com` with a misconfigured configuration file (typically `~/.docker/config.json`) listing a `credsStore` or `credHelpers` that could not be executed would result in any provided credentials being sent to `registry-1.docker.io` rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-41092", "url": "https://www.suse.com/security/cve/CVE-2021-41092" }, { "category": "external", "summary": "SUSE Bug 1191334 for CVE-2021-41092", "url": "https://bugzilla.suse.com/1191334" }, { "category": "external", "summary": "SUSE Bug 1191355 for CVE-2021-41092", "url": "https://bugzilla.suse.com/1191355" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2021-41092" }, { "cve": "CVE-2021-41103", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-41103" } ], "notes": [ { "category": "general", "text": "containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-41103", "url": "https://www.suse.com/security/cve/CVE-2021-41103" }, { "category": "external", "summary": "SUSE Bug 1191121 for CVE-2021-41103", "url": "https://bugzilla.suse.com/1191121" }, { "category": "external", "summary": "SUSE Bug 1191355 for CVE-2021-41103", "url": "https://bugzilla.suse.com/1191355" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2021-41103" }, { "cve": "CVE-2021-41190", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-41190" } ], "notes": [ { "category": "general", "text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both \"manifests\" and \"layers\" fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both \"manifests\" and \"layers\" fields or \"manifests\" and \"config\" fields if they are unable to update to version 1.0.1 of the spec.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-41190", "url": "https://www.suse.com/security/cve/CVE-2021-41190" }, { "category": "external", "summary": "SUSE Bug 1193273 for CVE-2021-41190", "url": "https://bugzilla.suse.com/1193273" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2021-41190" }, { "cve": "CVE-2021-43565", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-43565" } ], "notes": [ { "category": "general", "text": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2021-43565", "url": "https://www.suse.com/security/cve/CVE-2021-43565" }, { "category": "external", "summary": "SUSE Bug 1193930 for CVE-2021-43565", "url": "https://bugzilla.suse.com/1193930" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2021-43565" }, { "cve": "CVE-2022-24769", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-24769" } ], "notes": [ { "category": "general", "text": "Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during `execve(2)`. Normally, when executable programs have specified permitted file capabilities, otherwise unprivileged users and processes can execute those programs and gain the specified file capabilities up to the bounding set. Due to this bug, containers which included executable programs with inheritable file capabilities allowed otherwise unprivileged users and processes to additionally gain these inheritable file capabilities up to the container\u0027s bounding set. Containers which use Linux users and groups to perform privilege separation inside the container are most directly impacted. This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container\u0027s bounding set. This bug has been fixed in Moby (Docker Engine) 20.10.14. Running containers should be stopped, deleted, and recreated for the inheritable capabilities to be reset. This fix changes Moby (Docker Engine) behavior such that containers are started with a more typical Linux environment. As a workaround, the entry point of a container can be modified to use a utility like `capsh(1)` to drop inheritable capabilities prior to the primary process starting.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2022-24769", "url": "https://www.suse.com/security/cve/CVE-2022-24769" }, { "category": "external", "summary": "SUSE Bug 1197517 for CVE-2022-24769", "url": "https://bugzilla.suse.com/1197517" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2022-24769" }, { "cve": "CVE-2022-27191", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-27191" } ], "notes": [ { "category": "general", "text": "The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2022-27191", "url": "https://www.suse.com/security/cve/CVE-2022-27191" }, { "category": "external", "summary": "SUSE Bug 1197284 for CVE-2022-27191", "url": "https://bugzilla.suse.com/1197284" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2022-27191" }, { "cve": "CVE-2022-36109", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-36109" } ], "notes": [ { "category": "general", "text": "Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade, this problem can be worked around by not using the `\"USER $USERNAME\"` Dockerfile instruction. Instead by calling `ENTRYPOINT [\"su\", \"-\", \"user\"]` the supplementary groups will be set up properly.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2022-36109", "url": "https://www.suse.com/security/cve/CVE-2022-36109" }, { "category": "external", "summary": "SUSE Bug 1205375 for CVE-2022-36109", "url": "https://bugzilla.suse.com/1205375" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2022-36109" }, { "cve": "CVE-2023-28840", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-28840" } ], "notes": [ { "category": "general", "text": "Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly referred to as *Docker*.\n\nSwarm Mode, which is compiled in and delivered by default in dockerd and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.\n\nThe overlay network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.\n\nEncrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.\n\nWhen setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the u32 iptables extension provided by the xt_u32 kernel module to directly filter on a VXLAN packet\u0027s VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.\n\nTwo iptables rules serve to filter incoming VXLAN datagrams with a VNI that corresponds to an encrypted network and discards unencrypted datagrams. The rules are appended to the end of the INPUT filter chain, following any rules that have been previously set by the system administrator. Administrator-set rules take precedence over the rules Moby sets to discard unencrypted VXLAN datagrams, which can potentially admit unencrypted datagrams that should have been discarded.\n\nThe injection of arbitrary Ethernet frames can enable a Denial of Service attack. A sophisticated attacker may be able to establish a UDP or TCP connection by way of the container\u0027s outbound gateway that would otherwise be blocked by a stateful firewall, or carry out other escalations beyond simple injection by smuggling packets into the overlay network.\n\nPatches are available in Moby releases 23.0.3 and 20.10.24. As Mirantis Container Runtime\u0027s 20.10 releases are numbered differently, users of that platform should update to 20.10.16.\n\nSome workarounds are available. Close the VXLAN port (by default, UDP port 4789) to incoming traffic at the Internet boundary to prevent all VXLAN packet injection, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2023-28840", "url": "https://www.suse.com/security/cve/CVE-2023-28840" }, { "category": "external", "summary": "SUSE Bug 1214107 for CVE-2023-28840", "url": "https://bugzilla.suse.com/1214107" }, { "category": "external", "summary": "SUSE Bug 1215525 for CVE-2023-28840", "url": "https://bugzilla.suse.com/1215525" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2023-28840" }, { "cve": "CVE-2023-28841", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-28841" } ], "notes": [ { "category": "general", "text": "Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.\n\nSwarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.\n\nThe `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.\n\nEncrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.\n\nWhen setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet\u0027s VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.\n\nAn iptables rule designates outgoing VXLAN datagrams with a VNI that corresponds to an encrypted overlay network for IPsec encapsulation.\n\nEncrypted overlay networks on affected platforms silently transmit unencrypted data. As a result, `overlay` networks may appear to be functional, passing traffic as expected, but without any of the expected confidentiality or data integrity guarantees.\n\nIt is possible for an attacker sitting in a trusted position on the network to read all of the application traffic that is moving across the overlay network, resulting in unexpected secrets or user data disclosure. Thus, because many database protocols, internal APIs, etc. are not protected by a second layer of encryption, a user may use Swarm encrypted overlay networks to provide confidentiality, which due to this vulnerability this is no longer guaranteed.\n\nPatches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime\u0027s 20.10 releases are numbered differently, users of that platform should update to 20.10.16.\n\nSome workarounds are available. Close the VXLAN port (by default, UDP port 4789) to outgoing traffic at the Internet boundary in order to prevent unintentionally leaking unencrypted traffic over the Internet, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2023-28841", "url": "https://www.suse.com/security/cve/CVE-2023-28841" }, { "category": "external", "summary": "SUSE Bug 1214108 for CVE-2023-28841", "url": "https://bugzilla.suse.com/1214108" }, { "category": "external", "summary": "SUSE Bug 1215525 for CVE-2023-28841", "url": "https://bugzilla.suse.com/1215525" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2023-28841" }, { "cve": "CVE-2023-28842", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-28842" } ], "notes": [ { "category": "general", "text": "Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.\n\nSwarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.\n\nThe `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.\n\nEncrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.\n\nWhen setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet\u0027s VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.\n\nThe `overlay` driver dynamically and lazily defines the kernel configuration for the VXLAN network on each node as containers are attached and detached. Routes and encryption parameters are only defined for destination nodes that participate in the network. The iptables rules that prevent encrypted overlay networks from accepting unencrypted packets are not created until a peer is available with which to communicate.\n\nEncrypted overlay networks silently accept cleartext VXLAN datagrams that are tagged with the VNI of an encrypted overlay network. As a result, it is possible to inject arbitrary Ethernet frames into the encrypted overlay network by encapsulating them in VXLAN datagrams. The implications of this can be quite dire, and GHSA-vwm3-crmr-xfxw should be referenced for a deeper exploration.\n\nPatches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime\u0027s 20.10 releases are numbered differently, users of that platform should update to 20.10.16.\n\nSome workarounds are available. In multi-node clusters, deploy a global \u0027pause\u0027 container for each encrypted overlay network, on every node. For a single-node cluster, do not use overlay networks of any sort. Bridge networks provide the same connectivity on a single node and have no multi-node features. The Swarm ingress feature is implemented using an overlay network, but can be disabled by publishing ports in `host` mode instead of `ingress` mode (allowing the use of an external load balancer), and removing the `ingress` network. If encrypted overlay networks are in exclusive use, block UDP port 4789 from traffic that has not been validated by IPSec.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2023-28842", "url": "https://www.suse.com/security/cve/CVE-2023-28842" }, { "category": "external", "summary": "SUSE Bug 1214109 for CVE-2023-28842", "url": "https://bugzilla.suse.com/1214109" }, { "category": "external", "summary": "SUSE Bug 1215525 for CVE-2023-28842", "url": "https://bugzilla.suse.com/1215525" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2023-28842" }, { "cve": "CVE-2024-23650", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23650" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23650", "url": "https://www.suse.com/security/cve/CVE-2024-23650" }, { "category": "external", "summary": "SUSE Bug 1219437 for CVE-2024-23650", "url": "https://bugzilla.suse.com/1219437" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2024-23650" }, { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2024-23653" }, { "cve": "CVE-2024-29018", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-29018" } ], "notes": [ { "category": "general", "text": "Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby\u0027s networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature is frequently referred to as custom networks, as each network can have a different driver, set of parameters and thus behaviors. When creating a network, the `--internal` flag is used to designate a network as _internal_. The `internal` attribute in a docker-compose.yml file may also be used to mark a network _internal_, and other API clients may specify the `internal` parameter as well.\n\nWhen containers with networking are created, they are assigned unique network interfaces and IP addresses. The host serves as a router for non-internal networks, with a gateway IP that provides SNAT/DNAT to/from container IPs.\n\nContainers on an internal network may communicate between each other, but are precluded from communicating with any networks the host has access to (LAN or WAN) as no default route is configured, and firewall rules are set up to drop all outgoing traffic. Communication with the gateway IP address (and thus appropriately configured host services) is possible, and the host may communicate with any container IP directly.\n\nIn addition to configuring the Linux kernel\u0027s various networking features to enable container networking, `dockerd` directly provides some services to container networks. Principal among these is serving as a resolver, enabling service discovery, and resolution of names from an upstream resolver.\n\nWhen a DNS request for a name that does not correspond to a container is received, the request is forwarded to the configured upstream resolver. This request is made from the container\u0027s network namespace: the level of access and routing of traffic is the same as if the request was made by the container itself.\n\nAs a consequence of this design, containers solely attached to an internal network will be unable to resolve names using the upstream resolver, as the container itself is unable to communicate with that nameserver. Only the names of containers also attached to the internal network are able to be resolved.\n\nMany systems run a local forwarding DNS resolver. As the host and any containers have separate loopback devices, a consequence of the design described above is that containers are unable to resolve names from the host\u0027s configured resolver, as they cannot reach these addresses on the host loopback device. To bridge this gap, and to allow containers to properly resolve names even when a local forwarding resolver is used on a loopback address, `dockerd` detects this scenario and instead forward DNS requests from the host namework namespace. The loopback resolver then forwards the requests to its configured upstream resolvers, as expected.\n\nBecause `dockerd` forwards DNS requests to the host loopback device, bypassing the container network namespace\u0027s normal routing semantics entirely, internal networks can unexpectedly forward DNS requests to an external nameserver. By registering a domain for which they control the authoritative nameservers, an attacker could arrange for a compromised container to exfiltrate data by encoding it in DNS queries that will eventually be answered by their nameservers.\n\nDocker Desktop is not affected, as Docker Desktop always runs an internal resolver on a RFC 1918 address.\n\nMoby releases 26.0.0, 25.0.4, and 23.0.11 are patched to prevent forwarding any DNS requests from internal networks. As a workaround, run containers intended to be solely attached to internal networks with a custom upstream address, which will force all upstream DNS queries to be resolved from the container\u0027s network namespace.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-29018", "url": "https://www.suse.com/security/cve/CVE-2024-29018" }, { "category": "external", "summary": "SUSE Bug 1234089 for CVE-2024-29018", "url": "https://bugzilla.suse.com/1234089" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "moderate" } ], "title": "CVE-2024-29018" }, { "cve": "CVE-2024-41110", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-41110" } ], "notes": [ { "category": "general", "text": "Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances. The base likelihood of this being exploited is low.\n\nUsing a specially-crafted API request, an Engine API client could make the daemon forward the request or response to an authorization plugin without the body. In certain circumstances, the authorization plugin may allow a request which it would have otherwise denied if the body had been forwarded to it.\n\nA security issue was discovered In 2018, where an attacker could bypass AuthZ plugins using a specially crafted API request. This could lead to unauthorized actions, including privilege escalation. Although this issue was fixed in Docker Engine v18.09.1 in January 2019, the fix was not carried forward to later major versions, resulting in a regression. Anyone who depends on authorization plugins that introspect the request and/or response body to make access control decisions is potentially impacted.\n\nDocker EE v19.03.x and all versions of Mirantis Container Runtime are not vulnerable.\n\ndocker-ce v27.1.1 containes patches to fix the vulnerability. Patches have also been merged into the master, 19.03, 20.0, 23.0, 24.0, 25.0, 26.0, and 26.1 release branches. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-41110", "url": "https://www.suse.com/security/cve/CVE-2024-41110" }, { "category": "external", "summary": "SUSE Bug 1228324 for CVE-2024-41110", "url": "https://bugzilla.suse.com/1228324" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.9, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "critical" } ], "title": "CVE-2024-41110" }, { "cve": "CVE-2025-22868", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-22868" } ], "notes": [ { "category": "general", "text": "An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2025-22868", "url": "https://www.suse.com/security/cve/CVE-2025-22868" }, { "category": "external", "summary": "SUSE Bug 1239185 for CVE-2025-22868", "url": "https://bugzilla.suse.com/1239185" }, { "category": "external", "summary": "SUSE Bug 1239186 for CVE-2025-22868", "url": "https://bugzilla.suse.com/1239186" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2025-22868" }, { "cve": "CVE-2025-22869", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-22869" } ], "notes": [ { "category": "general", "text": "SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2025-22869", "url": "https://www.suse.com/security/cve/CVE-2025-22869" }, { "category": "external", "summary": "SUSE Bug 1239322 for CVE-2025-22869", "url": "https://bugzilla.suse.com/1239322" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.aarch64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.ppc64le", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.s390x", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server 12 SP5-LTSS:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-24.0.9_ce-1.20.1.x86_64", "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:docker-stable-bash-completion-24.0.9_ce-1.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2025-10-10T19:04:02Z", "details": "important" } ], "title": "CVE-2025-22869" } ] }
suse-su-2024:0586-2
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for docker", "title": "Title of the patch" }, { "category": "description", "text": "This update for docker fixes the following issues:\n\nVendor latest buildkit v0.11 including bugfixes for the following:\n\n* CVE-2024-23653: BuildKit API doesn\u0027t validate entitlement on container creation (bsc#1219438).\n* CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).\n* CVE-2024-23651: Fixed race condition in mount (bsc#1219267).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-586,SUSE-SLE-Module-Containers-15-SP4-2024-586", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0586-2.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:0586-2", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240586-2/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:0586-2", "url": "https://lists.suse.com/pipermail/sle-updates/2024-April/034848.html" }, { "category": "self", "summary": "SUSE Bug 1219267", "url": "https://bugzilla.suse.com/1219267" }, { "category": "self", "summary": "SUSE Bug 1219268", "url": "https://bugzilla.suse.com/1219268" }, { "category": "self", "summary": "SUSE Bug 1219438", "url": "https://bugzilla.suse.com/1219438" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" } ], "title": "Security update for docker", "tracking": { "current_release_date": "2024-04-04T13:13:53Z", "generator": { "date": "2024-04-04T13:13:53Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:0586-2", "initial_release_date": "2024-04-04T13:13:53Z", "revision_history": [ { "date": "2024-04-04T13:13:53Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.aarch64", "product": { "name": "docker-24.0.7_ce-150000.193.1.aarch64", "product_id": "docker-24.0.7_ce-150000.193.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.i586", "product": { "name": "docker-24.0.7_ce-150000.193.1.i586", "product_id": "docker-24.0.7_ce-150000.193.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch" } }, { "category": "product_version", "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch" } }, { "category": "product_version", "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" } }, { "category": "product_version", "name": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.ppc64le", "product": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le", "product_id": "docker-24.0.7_ce-150000.193.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.s390x", "product": { "name": "docker-24.0.7_ce-150000.193.1.s390x", "product_id": "docker-24.0.7_ce-150000.193.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.x86_64", "product": { "name": "docker-24.0.7_ce-150000.193.1.x86_64", "product_id": "docker-24.0.7_ce-150000.193.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Containers 15 SP4", "product": { "name": "SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-containers:15:sp4" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2024-04-04T13:13:53Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2024-04-04T13:13:53Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2024-04-04T13:13:53Z", "details": "moderate" } ], "title": "CVE-2024-23653" } ] }
suse-su-2024:1469-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for docker", "title": "Title of the patch" }, { "category": "description", "text": "This update for docker fixes the following issues:\n\n- CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)\n- CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)\n- CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)\n\nOther fixes:\n- Update to Docker 25.0.5-ce (bsc#1223409)\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-1469,SUSE-SLE-Module-Containers-12-2024-1469", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1469-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:1469-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241469-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:1469-1", "url": "https://lists.suse.com/pipermail/sle-updates/2024-April/035123.html" }, { "category": "self", "summary": "SUSE Bug 1219267", "url": "https://bugzilla.suse.com/1219267" }, { "category": "self", "summary": "SUSE Bug 1219268", "url": "https://bugzilla.suse.com/1219268" }, { "category": "self", "summary": "SUSE Bug 1219438", "url": "https://bugzilla.suse.com/1219438" }, { "category": "self", "summary": "SUSE Bug 1223409", "url": "https://bugzilla.suse.com/1223409" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" } ], "title": "Security update for docker", "tracking": { "current_release_date": "2024-04-29T15:59:43Z", "generator": { "date": "2024-04-29T15:59:43Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:1469-1", "initial_release_date": "2024-04-29T15:59:43Z", "revision_history": [ { "date": "2024-04-29T15:59:43Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "docker-25.0.5_ce-98.112.1.aarch64", "product": { "name": "docker-25.0.5_ce-98.112.1.aarch64", "product_id": "docker-25.0.5_ce-98.112.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "docker-25.0.5_ce-98.112.1.i586", "product": { "name": "docker-25.0.5_ce-98.112.1.i586", "product_id": "docker-25.0.5_ce-98.112.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "docker-bash-completion-25.0.5_ce-98.112.1.noarch", "product": { "name": "docker-bash-completion-25.0.5_ce-98.112.1.noarch", "product_id": "docker-bash-completion-25.0.5_ce-98.112.1.noarch" } }, { "category": "product_version", "name": "docker-fish-completion-25.0.5_ce-98.112.1.noarch", "product": { "name": "docker-fish-completion-25.0.5_ce-98.112.1.noarch", "product_id": "docker-fish-completion-25.0.5_ce-98.112.1.noarch" } }, { "category": "product_version", "name": "docker-rootless-extras-25.0.5_ce-98.112.1.noarch", "product": { "name": "docker-rootless-extras-25.0.5_ce-98.112.1.noarch", "product_id": "docker-rootless-extras-25.0.5_ce-98.112.1.noarch" } }, { "category": "product_version", "name": "docker-zsh-completion-25.0.5_ce-98.112.1.noarch", "product": { "name": "docker-zsh-completion-25.0.5_ce-98.112.1.noarch", "product_id": "docker-zsh-completion-25.0.5_ce-98.112.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "docker-25.0.5_ce-98.112.1.ppc64le", "product": { "name": "docker-25.0.5_ce-98.112.1.ppc64le", "product_id": "docker-25.0.5_ce-98.112.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "docker-25.0.5_ce-98.112.1.s390x", "product": { "name": "docker-25.0.5_ce-98.112.1.s390x", "product_id": "docker-25.0.5_ce-98.112.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "docker-25.0.5_ce-98.112.1.x86_64", "product": { "name": "docker-25.0.5_ce-98.112.1.x86_64", "product_id": "docker-25.0.5_ce-98.112.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Containers 12", "product": { "name": "SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-containers:12" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.5_ce-98.112.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le" }, "product_reference": "docker-25.0.5_ce-98.112.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.5_ce-98.112.1.s390x as component of SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x" }, "product_reference": "docker-25.0.5_ce-98.112.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12" }, { "category": "default_component_of", "full_product_name": { "name": "docker-25.0.5_ce-98.112.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 12", "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" }, "product_reference": "docker-25.0.5_ce-98.112.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-04-29T15:59:43Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-04-29T15:59:43Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.ppc64le", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.s390x", "SUSE Linux Enterprise Module for Containers 12:docker-25.0.5_ce-98.112.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-04-29T15:59:43Z", "details": "moderate" } ], "title": "CVE-2024-23653" } ] }
suse-su-2024:0586-1
Vulnerability from csaf_suse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for docker", "title": "Title of the patch" }, { "category": "description", "text": "This update for docker fixes the following issues:\n\nVendor latest buildkit v0.11 including bugfixes for the following:\n\n* CVE-2024-23653: BuildKit API doesn\u0027t validate entitlement on container creation (bsc#1219438).\n* CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).\n* CVE-2024-23651: Fixed race condition in mount (bsc#1219267).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2024-586,SUSE-SLE-Micro-5.3-2024-586,SUSE-SLE-Micro-5.4-2024-586,SUSE-SLE-Micro-5.5-2024-586,SUSE-SLE-Module-Containers-15-SP4-2024-586,SUSE-SLE-Module-Containers-15-SP5-2024-586,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-586,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-586,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-586,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-586,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-586,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-586,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-586,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-586,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-586,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-586,SUSE-SUSE-MicroOS-5.1-2024-586,SUSE-SUSE-MicroOS-5.2-2024-586,SUSE-Storage-7.1-2024-586,openSUSE-Leap-Micro-5.3-2024-586,openSUSE-Leap-Micro-5.4-2024-586,openSUSE-SLE-15.5-2024-586", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0586-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2024:0586-1", "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240586-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2024:0586-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017990.html" }, { "category": "self", "summary": "SUSE Bug 1219267", "url": "https://bugzilla.suse.com/1219267" }, { "category": "self", "summary": "SUSE Bug 1219268", "url": "https://bugzilla.suse.com/1219268" }, { "category": "self", "summary": "SUSE Bug 1219438", "url": "https://bugzilla.suse.com/1219438" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23651 page", "url": "https://www.suse.com/security/cve/CVE-2024-23651/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23652 page", "url": "https://www.suse.com/security/cve/CVE-2024-23652/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-23653 page", "url": "https://www.suse.com/security/cve/CVE-2024-23653/" } ], "title": "Security update for docker", "tracking": { "current_release_date": "2024-02-22T08:54:32Z", "generator": { "date": "2024-02-22T08:54:32Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2024:0586-1", "initial_release_date": "2024-02-22T08:54:32Z", "revision_history": [ { "date": "2024-02-22T08:54:32Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.aarch64", "product": { "name": "docker-24.0.7_ce-150000.193.1.aarch64", "product_id": "docker-24.0.7_ce-150000.193.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.i586", "product": { "name": "docker-24.0.7_ce-150000.193.1.i586", "product_id": "docker-24.0.7_ce-150000.193.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch" } }, { "category": "product_version", "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch" } }, { "category": "product_version", "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" } }, { "category": "product_version", "name": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "product": { "name": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "product_id": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.ppc64le", "product": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le", "product_id": "docker-24.0.7_ce-150000.193.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.s390x", "product": { "name": "docker-24.0.7_ce-150000.193.1.s390x", "product_id": "docker-24.0.7_ce-150000.193.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "docker-24.0.7_ce-150000.193.1.x86_64", "product": { "name": "docker-24.0.7_ce-150000.193.1.x86_64", "product_id": "docker-24.0.7_ce-150000.193.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.3", "product": { "name": "SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.4", "product": { "name": "SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.5", "product": { "name": "SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-micro:5.5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Containers 15 SP4", "product": { "name": "SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-containers:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Containers 15 SP5", "product": { "name": "SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-containers:15:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp3" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.1", "product": { "name": "SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-microos:5.1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Micro 5.2", "product": { "name": "SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-microos:5.2" } } }, { "category": "product_name", "name": "SUSE Enterprise Storage 7.1", "product": { "name": "SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1", "product_identification_helper": { "cpe": "cpe:/o:suse:ses:7.1" } } }, { "category": "product_name", "name": "openSUSE Leap Micro 5.3", "product": { "name": "openSUSE Leap Micro 5.3", "product_id": "openSUSE Leap Micro 5.3", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap-micro:5.3" } } }, { "category": "product_name", "name": "openSUSE Leap Micro 5.4", "product": { "name": "openSUSE Leap Micro 5.4", "product_id": "openSUSE Leap Micro 5.4", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap-micro:5.4" } } }, { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3", "product_id": "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4", "product_id": "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5", "product_id": "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP4", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP5", "product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1", "product_id": "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2", "product_id": "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch as component of SUSE Enterprise Storage 7.1", "product_id": "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "SUSE Enterprise Storage 7.1" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of openSUSE Leap Micro 5.3", "product_id": "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "openSUSE Leap Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of openSUSE Leap Micro 5.3", "product_id": "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "openSUSE Leap Micro 5.3" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of openSUSE Leap Micro 5.4", "product_id": "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "openSUSE Leap Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of openSUSE Leap Micro 5.4", "product_id": "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "openSUSE Leap Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of openSUSE Leap Micro 5.4", "product_id": "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "openSUSE Leap Micro 5.4" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.aarch64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.aarch64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.ppc64le as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le" }, "product_reference": "docker-24.0.7_ce-150000.193.1.ppc64le", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.s390x as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x" }, "product_reference": "docker-24.0.7_ce-150000.193.1.s390x", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-24.0.7_ce-150000.193.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64" }, "product_reference": "docker-24.0.7_ce-150000.193.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch" }, "product_reference": "docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-23651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23651" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23651", "url": "https://www.suse.com/security/cve/CVE-2024-23651" }, { "category": "external", "summary": "SUSE Bug 1219267 for CVE-2024-23651", "url": "https://bugzilla.suse.com/1219267" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-22T08:54:32Z", "details": "important" } ], "title": "CVE-2024-23651" }, { "cve": "CVE-2024-23652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23652" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23652", "url": "https://www.suse.com/security/cve/CVE-2024-23652" }, { "category": "external", "summary": "SUSE Bug 1219268 for CVE-2024-23652", "url": "https://bugzilla.suse.com/1219268" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-22T08:54:32Z", "details": "moderate" } ], "title": "CVE-2024-23652" }, { "cve": "CVE-2024-23653", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-23653" } ], "notes": [ { "category": "general", "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-23653", "url": "https://www.suse.com/security/cve/CVE-2024-23653" }, { "category": "external", "summary": "SUSE Bug 1219438 for CVE-2024-23653", "url": "https://bugzilla.suse.com/1219438" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Enterprise Storage 7.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Enterprise Storage 7.1:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Enterprise Storage 7.1:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.1:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Micro 5.5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP2-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP3-LTSS:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.aarch64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.s390x", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server 15 SP4-LTSS:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP2:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP3:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-24.0.7_ce-150000.193.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "SUSE Linux Enterprise Server for SAP Applications 15 SP4:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.ppc64le", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap 15.5:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap 15.5:docker-bash-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-fish-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-rootless-extras-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap 15.5:docker-zsh-completion-24.0.7_ce-150000.193.1.noarch", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.3:docker-24.0.7_ce-150000.193.1.x86_64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.aarch64", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.s390x", "openSUSE Leap Micro 5.4:docker-24.0.7_ce-150000.193.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-02-22T08:54:32Z", "details": "moderate" } ], "title": "CVE-2024-23653" } ] }
gsd-2024-23652
Vulnerability from gsd
{ "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2024-23652" ], "details": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.", "id": "GSD-2024-23652", "modified": "2024-01-19T06:02:13.182313Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security-advisories@github.com", "ID": "CVE-2024-23652", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "buildkit", "version": { "version_data": [ { "version_affected": "=", "version_value": "\u003c 0.12.5" } ] } } ] }, "vendor_name": "moby" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature." } ] }, "impact": { "cvss": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "cweId": "CWE-22", "lang": "eng", "value": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8", "refsource": "MISC", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8" }, { "name": "https://github.com/moby/buildkit/pull/4603", "refsource": "MISC", "url": "https://github.com/moby/buildkit/pull/4603" }, { "name": "https://github.com/moby/buildkit/releases/tag/v0.12.5", "refsource": "MISC", "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5" } ] }, "source": { "advisory": "GHSA-4v98-7qmw-rqr8", "discovery": "UNKNOWN" } }, "nvd.nist.gov": { "cve": { "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "0AAE2F08-4E4D-4B85-8230-8D5BA7788D3D", "versionEndExcluding": "0.12.5", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "descriptions": [ { "lang": "en", "value": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature." }, { "lang": "es", "value": "BuildKit es un conjunto de herramientas para convertir c\u00f3digo fuente para crear artefactos de manera eficiente, expresiva y repetible. Una interfaz de BuildKit maliciosa o un Dockerfile que use RUN --mount podr\u00eda enga\u00f1ar a la funci\u00f3n que elimina archivos vac\u00edos creados para los puntos de montaje para que elimine un archivo fuera del contenedor, del sistema host. El problema se solucion\u00f3 en v0.12.5. Los workarounds incluyen evitar el uso de interfaces de BuildKit desde una fuente que no sea de confianza o crear un Dockerfile que no sea de confianza que contenga la funci\u00f3n RUN --mount." } ], "id": "CVE-2024-23652", "lastModified": "2024-02-09T01:44:27.827", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.8, "source": "security-advisories@github.com", "type": "Secondary" } ] }, "published": "2024-01-31T22:15:54.377", "references": [ { "source": "security-advisories@github.com", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://github.com/moby/buildkit/pull/4603" }, { "source": "security-advisories@github.com", "tags": [ "Patch", "Release Notes" ], "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5" }, { "source": "security-advisories@github.com", "tags": [ "Vendor Advisory" ], "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8" } ], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-22" } ], "source": "security-advisories@github.com", "type": "Primary" } ] } } } }
ghsa-4v98-7qmw-rqr8
Vulnerability from github
Impact
A malicious BuildKit frontend or Dockerfile using RUN --mount
could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system.
Patches
The issue has been fixed in v0.12.5
Workarounds
Avoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing RUN --mount
feature.
References
{ "affected": [ { "package": { "ecosystem": "Go", "name": "github.com/moby/buildkit" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "0.12.5" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2024-23652" ], "database_specific": { "cwe_ids": [ "CWE-22" ], "github_reviewed": true, "github_reviewed_at": "2024-01-31T22:43:26Z", "nvd_published_at": "2024-01-31T22:15:54Z", "severity": "CRITICAL" }, "details": "### Impact\nA malicious BuildKit frontend or Dockerfile using `RUN --mount` could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system.\n\n### Patches\nThe issue has been fixed in v0.12.5\n\n### Workarounds\nAvoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing `RUN --mount` feature.\n\n### References\n\n", "id": "GHSA-4v98-7qmw-rqr8", "modified": "2024-02-01T17:48:26Z", "published": "2024-01-31T22:43:26Z", "references": [ { "type": "WEB", "url": "https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23652" }, { "type": "WEB", "url": "https://github.com/moby/buildkit/pull/4603" }, { "type": "PACKAGE", "url": "https://github.com/moby/buildkit" }, { "type": "WEB", "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H", "type": "CVSS_V3" } ], "summary": "BuildKit vulnerable to possible host system access from mount stub cleaner" }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.