Vulnerability from csaf_suse
Published
2022-04-07 14:35
Modified
2022-04-07 14:35
Summary
Security update for openjpeg2

Notes

Title of the patch
Security update for openjpeg2
Description of the patch
This update for openjpeg2 fixes the following issues: - CVE-2016-1924: Fixed heap buffer overflow (bsc#980504). - CVE-2016-3183: Fixed out-of-bounds read in sycc422_to_rgb function (bsc#971617). - CVE-2016-4797: Fixed heap buffer overflow (bsc#980504). - CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016). - CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882). - CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881). - CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (bsc#1140130). - CVE-2018-20846: Fixed out-of-bounds accesses in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205). - CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090). - CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578). - CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457). - CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774). - CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).
Patchnames
HPE-Helion-OpenStack-8-2022-1129,SUSE-2022-1129,SUSE-OpenStack-Cloud-8-2022-1129,SUSE-OpenStack-Cloud-9-2022-1129,SUSE-OpenStack-Cloud-Crowbar-8-2022-1129,SUSE-OpenStack-Cloud-Crowbar-9-2022-1129,SUSE-SLE-SAP-12-SP3-2022-1129,SUSE-SLE-SAP-12-SP4-2022-1129,SUSE-SLE-SERVER-12-SP2-BCL-2022-1129,SUSE-SLE-SERVER-12-SP3-2022-1129,SUSE-SLE-SERVER-12-SP3-BCL-2022-1129,SUSE-SLE-SERVER-12-SP4-LTSS-2022-1129,SUSE-SLE-SERVER-12-SP5-2022-1129
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).



{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for openjpeg2",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for openjpeg2 fixes the following issues:\n\n- CVE-2016-1924: Fixed heap buffer overflow (bsc#980504).\n- CVE-2016-3183: Fixed out-of-bounds read in sycc422_to_rgb function (bsc#971617).\n- CVE-2016-4797: Fixed heap buffer overflow (bsc#980504).\n- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).\n- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).\n- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).\n- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (bsc#1140130).\n- CVE-2018-20846: Fixed out-of-bounds accesses in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205).\n- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).\n- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).\n- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).\n- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).\n- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "HPE-Helion-OpenStack-8-2022-1129,SUSE-2022-1129,SUSE-OpenStack-Cloud-8-2022-1129,SUSE-OpenStack-Cloud-9-2022-1129,SUSE-OpenStack-Cloud-Crowbar-8-2022-1129,SUSE-OpenStack-Cloud-Crowbar-9-2022-1129,SUSE-SLE-SAP-12-SP3-2022-1129,SUSE-SLE-SAP-12-SP4-2022-1129,SUSE-SLE-SERVER-12-SP2-BCL-2022-1129,SUSE-SLE-SERVER-12-SP3-2022-1129,SUSE-SLE-SERVER-12-SP3-BCL-2022-1129,SUSE-SLE-SERVER-12-SP4-LTSS-2022-1129,SUSE-SLE-SERVER-12-SP5-2022-1129",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_1129-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2022:1129-1",
            url: "https://www.suse.com/support/update/announcement/2022/suse-su-20221129-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2022:1129-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010666.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1102016",
            url: "https://bugzilla.suse.com/1102016",
         },
         {
            category: "self",
            summary: "SUSE Bug 1106881",
            url: "https://bugzilla.suse.com/1106881",
         },
         {
            category: "self",
            summary: "SUSE Bug 1106882",
            url: "https://bugzilla.suse.com/1106882",
         },
         {
            category: "self",
            summary: "SUSE Bug 1140130",
            url: "https://bugzilla.suse.com/1140130",
         },
         {
            category: "self",
            summary: "SUSE Bug 1140205",
            url: "https://bugzilla.suse.com/1140205",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162090",
            url: "https://bugzilla.suse.com/1162090",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173578",
            url: "https://bugzilla.suse.com/1173578",
         },
         {
            category: "self",
            summary: "SUSE Bug 1180457",
            url: "https://bugzilla.suse.com/1180457",
         },
         {
            category: "self",
            summary: "SUSE Bug 1184774",
            url: "https://bugzilla.suse.com/1184774",
         },
         {
            category: "self",
            summary: "SUSE Bug 1197738",
            url: "https://bugzilla.suse.com/1197738",
         },
         {
            category: "self",
            summary: "SUSE Bug 971617",
            url: "https://bugzilla.suse.com/971617",
         },
         {
            category: "self",
            summary: "SUSE Bug 980504",
            url: "https://bugzilla.suse.com/980504",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1924 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1924/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-3183 page",
            url: "https://www.suse.com/security/cve/CVE-2016-3183/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-4797 page",
            url: "https://www.suse.com/security/cve/CVE-2016-4797/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-14423 page",
            url: "https://www.suse.com/security/cve/CVE-2018-14423/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-16375 page",
            url: "https://www.suse.com/security/cve/CVE-2018-16375/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-16376 page",
            url: "https://www.suse.com/security/cve/CVE-2018-16376/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-20845 page",
            url: "https://www.suse.com/security/cve/CVE-2018-20845/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-20846 page",
            url: "https://www.suse.com/security/cve/CVE-2018-20846/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15389 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15389/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-27823 page",
            url: "https://www.suse.com/security/cve/CVE-2020-27823/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-8112 page",
            url: "https://www.suse.com/security/cve/CVE-2020-8112/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-29338 page",
            url: "https://www.suse.com/security/cve/CVE-2021-29338/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-1122 page",
            url: "https://www.suse.com/security/cve/CVE-2022-1122/",
         },
      ],
      title: "Security update for openjpeg2",
      tracking: {
         current_release_date: "2022-04-07T14:35:05Z",
         generator: {
            date: "2022-04-07T14:35:05Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2022:1129-1",
         initial_release_date: "2022-04-07T14:35:05Z",
         revision_history: [
            {
               date: "2022-04-07T14:35:05Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libopenjp2-7-2.1.0-4.15.1.aarch64",
                        product: {
                           name: "libopenjp2-7-2.1.0-4.15.1.aarch64",
                           product_id: "libopenjp2-7-2.1.0-4.15.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-2.1.0-4.15.1.aarch64",
                        product: {
                           name: "openjpeg2-2.1.0-4.15.1.aarch64",
                           product_id: "openjpeg2-2.1.0-4.15.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-2.1.0-4.15.1.aarch64",
                        product: {
                           name: "openjpeg2-devel-2.1.0-4.15.1.aarch64",
                           product_id: "openjpeg2-devel-2.1.0-4.15.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libopenjp2-7-64bit-2.1.0-4.15.1.aarch64_ilp32",
                        product: {
                           name: "libopenjp2-7-64bit-2.1.0-4.15.1.aarch64_ilp32",
                           product_id: "libopenjp2-7-64bit-2.1.0-4.15.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libopenjp2-7-2.1.0-4.15.1.i586",
                        product: {
                           name: "libopenjp2-7-2.1.0-4.15.1.i586",
                           product_id: "libopenjp2-7-2.1.0-4.15.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-2.1.0-4.15.1.i586",
                        product: {
                           name: "openjpeg2-2.1.0-4.15.1.i586",
                           product_id: "openjpeg2-2.1.0-4.15.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-2.1.0-4.15.1.i586",
                        product: {
                           name: "openjpeg2-devel-2.1.0-4.15.1.i586",
                           product_id: "openjpeg2-devel-2.1.0-4.15.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
                        product: {
                           name: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
                           product_id: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-2.1.0-4.15.1.ppc64le",
                        product: {
                           name: "openjpeg2-2.1.0-4.15.1.ppc64le",
                           product_id: "openjpeg2-2.1.0-4.15.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-2.1.0-4.15.1.ppc64le",
                        product: {
                           name: "openjpeg2-devel-2.1.0-4.15.1.ppc64le",
                           product_id: "openjpeg2-devel-2.1.0-4.15.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libopenjp2-7-2.1.0-4.15.1.s390",
                        product: {
                           name: "libopenjp2-7-2.1.0-4.15.1.s390",
                           product_id: "libopenjp2-7-2.1.0-4.15.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-2.1.0-4.15.1.s390",
                        product: {
                           name: "openjpeg2-2.1.0-4.15.1.s390",
                           product_id: "openjpeg2-2.1.0-4.15.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-2.1.0-4.15.1.s390",
                        product: {
                           name: "openjpeg2-devel-2.1.0-4.15.1.s390",
                           product_id: "openjpeg2-devel-2.1.0-4.15.1.s390",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libopenjp2-7-2.1.0-4.15.1.s390x",
                        product: {
                           name: "libopenjp2-7-2.1.0-4.15.1.s390x",
                           product_id: "libopenjp2-7-2.1.0-4.15.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libopenjp2-7-32bit-2.1.0-4.15.1.s390x",
                        product: {
                           name: "libopenjp2-7-32bit-2.1.0-4.15.1.s390x",
                           product_id: "libopenjp2-7-32bit-2.1.0-4.15.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-2.1.0-4.15.1.s390x",
                        product: {
                           name: "openjpeg2-2.1.0-4.15.1.s390x",
                           product_id: "openjpeg2-2.1.0-4.15.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-2.1.0-4.15.1.s390x",
                        product: {
                           name: "openjpeg2-devel-2.1.0-4.15.1.s390x",
                           product_id: "openjpeg2-devel-2.1.0-4.15.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libopenjp2-7-2.1.0-4.15.1.x86_64",
                        product: {
                           name: "libopenjp2-7-2.1.0-4.15.1.x86_64",
                           product_id: "libopenjp2-7-2.1.0-4.15.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libopenjp2-7-32bit-2.1.0-4.15.1.x86_64",
                        product: {
                           name: "libopenjp2-7-32bit-2.1.0-4.15.1.x86_64",
                           product_id: "libopenjp2-7-32bit-2.1.0-4.15.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-2.1.0-4.15.1.x86_64",
                        product: {
                           name: "openjpeg2-2.1.0-4.15.1.x86_64",
                           product_id: "openjpeg2-2.1.0-4.15.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-2.1.0-4.15.1.x86_64",
                        product: {
                           name: "openjpeg2-devel-2.1.0-4.15.1.x86_64",
                           product_id: "openjpeg2-devel-2.1.0-4.15.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "HPE Helion OpenStack 8",
                        product: {
                           name: "HPE Helion OpenStack 8",
                           product_id: "HPE Helion OpenStack 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:hpe-helion-openstack:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 8",
                        product: {
                           name: "SUSE OpenStack Cloud 8",
                           product_id: "SUSE OpenStack Cloud 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 9",
                        product: {
                           name: "SUSE OpenStack Cloud 9",
                           product_id: "SUSE OpenStack Cloud 9",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:9",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud Crowbar 8",
                        product: {
                           name: "SUSE OpenStack Cloud Crowbar 8",
                           product_id: "SUSE OpenStack Cloud Crowbar 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud Crowbar 9",
                        product: {
                           name: "SUSE OpenStack Cloud Crowbar 9",
                           product_id: "SUSE OpenStack Cloud Crowbar 9",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:9",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2-BCL",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2-BCL",
                           product_id: "SUSE Linux Enterprise Server 12 SP2-BCL",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-bcl:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3-BCL",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3-BCL",
                           product_id: "SUSE Linux Enterprise Server 12 SP3-BCL",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-bcl:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP5",
                           product_id: "SUSE Linux Enterprise Server 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of HPE Helion OpenStack 8",
               product_id: "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "HPE Helion OpenStack 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE OpenStack Cloud 8",
               product_id: "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
               product_id: "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libopenjp2-7-2.1.0-4.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
            },
            product_reference: "libopenjp2-7-2.1.0-4.15.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-1924",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1924",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1924",
               url: "https://www.suse.com/security/cve/CVE-2016-1924",
            },
            {
               category: "external",
               summary: "SUSE Bug 962522 for CVE-2016-1924",
               url: "https://bugzilla.suse.com/962522",
            },
            {
               category: "external",
               summary: "SUSE Bug 980504 for CVE-2016-1924",
               url: "https://bugzilla.suse.com/980504",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "important",
            },
         ],
         title: "CVE-2016-1924",
      },
      {
         cve: "CVE-2016-3183",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-3183",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-3183",
               url: "https://www.suse.com/security/cve/CVE-2016-3183",
            },
            {
               category: "external",
               summary: "SUSE Bug 971617 for CVE-2016-3183",
               url: "https://bugzilla.suse.com/971617",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-3183",
      },
      {
         cve: "CVE-2016-4797",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-4797",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-4797",
               url: "https://www.suse.com/security/cve/CVE-2016-4797",
            },
            {
               category: "external",
               summary: "SUSE Bug 979911 for CVE-2016-4797",
               url: "https://bugzilla.suse.com/979911",
            },
            {
               category: "external",
               summary: "SUSE Bug 980504 for CVE-2016-4797",
               url: "https://bugzilla.suse.com/980504",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-4797",
      },
      {
         cve: "CVE-2018-14423",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-14423",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-14423",
               url: "https://www.suse.com/security/cve/CVE-2018-14423",
            },
            {
               category: "external",
               summary: "SUSE Bug 1102016 for CVE-2018-14423",
               url: "https://bugzilla.suse.com/1102016",
            },
            {
               category: "external",
               summary: "SUSE Bug 1140130 for CVE-2018-14423",
               url: "https://bugzilla.suse.com/1140130",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "low",
            },
         ],
         title: "CVE-2018-14423",
      },
      {
         cve: "CVE-2018-16375",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-16375",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-16375",
               url: "https://www.suse.com/security/cve/CVE-2018-16375",
            },
            {
               category: "external",
               summary: "SUSE Bug 1106882 for CVE-2018-16375",
               url: "https://bugzilla.suse.com/1106882",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-16375",
      },
      {
         cve: "CVE-2018-16376",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-16376",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-16376",
               url: "https://www.suse.com/security/cve/CVE-2018-16376",
            },
            {
               category: "external",
               summary: "SUSE Bug 1106881 for CVE-2018-16376",
               url: "https://bugzilla.suse.com/1106881",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-16376",
      },
      {
         cve: "CVE-2018-20845",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-20845",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-20845",
               url: "https://www.suse.com/security/cve/CVE-2018-20845",
            },
            {
               category: "external",
               summary: "SUSE Bug 1140130 for CVE-2018-20845",
               url: "https://bugzilla.suse.com/1140130",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "low",
            },
         ],
         title: "CVE-2018-20845",
      },
      {
         cve: "CVE-2018-20846",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-20846",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-20846",
               url: "https://www.suse.com/security/cve/CVE-2018-20846",
            },
            {
               category: "external",
               summary: "SUSE Bug 1140205 for CVE-2018-20846",
               url: "https://bugzilla.suse.com/1140205",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-20846",
      },
      {
         cve: "CVE-2020-15389",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15389",
            },
         ],
         notes: [
            {
               category: "general",
               text: "jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15389",
               url: "https://www.suse.com/security/cve/CVE-2020-15389",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173578 for CVE-2020-15389",
               url: "https://bugzilla.suse.com/1173578",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-15389",
      },
      {
         cve: "CVE-2020-27823",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-27823",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-27823",
               url: "https://www.suse.com/security/cve/CVE-2020-27823",
            },
            {
               category: "external",
               summary: "SUSE Bug 1180457 for CVE-2020-27823",
               url: "https://bugzilla.suse.com/1180457",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "important",
            },
         ],
         title: "CVE-2020-27823",
      },
      {
         cve: "CVE-2020-8112",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-8112",
            },
         ],
         notes: [
            {
               category: "general",
               text: "opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-8112",
               url: "https://www.suse.com/security/cve/CVE-2020-8112",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162090 for CVE-2020-8112",
               url: "https://bugzilla.suse.com/1162090",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "important",
            },
         ],
         title: "CVE-2020-8112",
      },
      {
         cve: "CVE-2021-29338",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-29338",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option \"-ImgDir\" on a directory that contains 1048576 files.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-29338",
               url: "https://www.suse.com/security/cve/CVE-2021-29338",
            },
            {
               category: "external",
               summary: "SUSE Bug 1184774 for CVE-2021-29338",
               url: "https://bugzilla.suse.com/1184774",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "low",
            },
         ],
         title: "CVE-2021-29338",
      },
      {
         cve: "CVE-2022-1122",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-1122",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-1122",
               url: "https://www.suse.com/security/cve/CVE-2022-1122",
            },
            {
               category: "external",
               summary: "SUSE Bug 1197738 for CVE-2022-1122",
               url: "https://bugzilla.suse.com/1197738",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libopenjp2-7-2.1.0-4.15.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.15.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2022-04-07T14:35:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-1122",
      },
   ],
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.