{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for podman",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for podman fixes the following issues:\n\npodman was updated to version 4.3.1:\n\n4.3.1:\n\n* Bugfixes\n\n- Fixed a deadlock between the `podman ps` and `podman container inspect` commands\n\n* Misc\n\n- Updated the containers/image library to v5.23.1\n \n4.3.0:\n\n* Features\n\n- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.\n- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted\n- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).\n- The `podman kube play` command now supports Kubernetes secrets using Podman\u0027s secrets backend.\n- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).\n- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).\n- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml`\n- The `podman kube play` command now supports the `emptyDir` volume type\n- The `podman kube play` command now supports the `HostUsers` field in the pod spec.\n- The `podman play kube` command now supports `binaryData` in ConfigMaps.\n- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.\n- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user\n- The `podman volume create` command\u0027s `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.\n- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.\n- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge \u0027PATH=$PATH:/my/app\u0027 ...`)\n- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).\n- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container)\n- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file\n- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.\n- The `podman restart` command now supports the `--cidfile` and `--filter` options.\n- The `podman rm` command now supports the `--filter` option to select which containers will be removed.\n- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.\n- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.\n- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.\n- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility\n- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.\n- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.\n- The `podman secret create` command\u0027s `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.\n- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.\n- The `podman secret ls` command now accepts the `--quiet`/`-q` option.\n- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.\n- The `podman stats` command now accepts the `--no-trunc` option.\n- The `podman save` command now accepts the `--signature-policy` option\n- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods\n- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.\n- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set\n\n### Changes\n\n- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match\n- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.\n- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.\n- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.\n- The installer for the Windows Podman client has been improved.\n- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers)\n- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container\n- Events for containers that are part of a pod now include the ID of the pod in the event.\n- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.\n- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.\n- The `podman inspect` command on containers now includes the digest of the image used to create the container.\n- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.\n\n\nUpdate to version 4.2.0:\n\n* Features\n\n- Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.\n- A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod\n- A new command has been added, podman volume reload, to sync changes in state between Podman\u0027s database and any configured volume plugins\n- A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.\n- Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.\n- The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod\u0027s security context.\n- The podman play kube command now supports volumes with the BlockDevice and CharDevice types\n- The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto\n- The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.\n- Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod\u0027s infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube\n- The podman pod create command now allows the pod\u0027s name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.\n- The podman pod create command\u0027s --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared)\n- The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).\n- The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.\n- The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!\n- The podman create and podman run commands now include the -c short option for the --cpu-shares option.\n- The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).\n- The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.\n- The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.\n- The podman machine inspect command now prints the location of the VM\u0027s Podman API socket on the host (#14231).\n- The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).\n- Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).\n- The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).\n- Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).\n- The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).\n- Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).\n- The podman volume ls command\u0027s --filter name= option now supports regular expression matching for volume names (#14583).\n- When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.\n- The remote Podman client\u0027s podman push command now supports the --remove-signatures option (#14558).\n- The remote Podman client now supports the podman image scp command.\n- The podman image scp command now supports tagging the transferred image with a new name.\n- The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).\n- The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.\n- The podman events command now includes the -f short option for the --filter option.\n- The podman pull command now includes the -a short option for the --all-tags option.\n- The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).\n- The Podman global option --url now has two aliases: -H and --host.\n- The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.\n- Added the ability to create sigstore signatures in podman push and podman manifest push.\n- Added an option to read image signing passphrase from a file.\n\n* Changes\n\n- Paused containers can now be killed with the podman kill command.\n- The podman system prune command now removes unused networks.\n- The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.\n- If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).\n- The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).\n- All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.\n- The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.\n- Init containers created with podman play kube now default to the once type (#14877).\n- Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).\n- The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.\n- The libpod/common package has been removed as it\u0027s not used anywhere.\n- The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).\n\n\n* Misc\n\n- Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.\n- The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.\n- Podman Machine support for QEMU installations at non-default paths has been improved.\n- The podman machine ssh command no longer prints spurious warnings every time it is run.\n- When accessing the WSL prompt on Windows, the rootless user will be preferred.\n- The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.\n- The podman system prune command now no longer prints the Deleted Images header if no images were pruned.\n- The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).\n- Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)\n- Updated the containers/image library to v5.22.0\n- Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)\n- Updated the containers/common library to v0.49.1\n- Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).\n- Fixed an incorrect release note about regexp.\n- A new MacOS installer (via pkginstaller) is now supported.\n\nUpdate to version 4.1.1:\n\n* The output of the podman load command now mirrors that of docker load.\n* Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.\n* A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.\n* Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.\n* Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.\n* The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.\n* The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.\n* The podman play kube command will now set default resource limits when the provided YAML does not include them.\n* The podman play kube command now supports a new option, --annotation, to add annotations to created containers.\n* The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.\n* The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.\n* The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.\n* The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.\n* The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.\n* The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.\n* The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.\n* The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.\n* The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.\n* The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.\n* The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.\n* The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.\n* The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).\n* The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container\u0027s /etc/passwd file.\n* The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.\n* The podman volume create command\u0027s -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.\n* The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.\n* Fix CVE-2022-27191 / bsc#1197284\n\n- Require catatonit \u003e= 0.1.7 for pause functionality needed by pods\n\nUpdate to version 4.0.3:\n\n* Security\n\n  - This release fixes CVE-2022-27649, where containers run by Podman would have excess inheritable capabilities set.\n\n* Changes\n\n  - The podman machine rm --force command will now remove running machines as well (such machines are shut down first, then removed) (#13448).\n  - When a podman machine VM is started that is using a too-old VM image, it will now start in a reduced functionality mode, and provide instructions on how to recreate it (previously, VMs were effectively unusable) (#13510).\n\n  - Updated the containers/common library to v0.47.5\n\n- This release addresses CVE-2021-4024 / bsc#1193166, where the podman machine command opened the gvproxy API (used to forward ports to podman machine VMs) to the public internet on port 7777.\n- This release addresses CVE-2021-41190 / bsc#1193273, where incomplete specification of behavior regarding image manifests could lead to inconsistent decoding on different clients.\n\nUpdate to version 3.1.0: (bsc#1181961, CVE-2021-20206)\n\n- A fix for CVE-2021-20199 / bsc#1181640 is included. Podman between v1.8.0 and v2.2.1 used 127.0.0.1 as the source address for all traffic forwarded into rootless containers by a forwarded port; this has been changed to address the issue.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2023-187,SUSE-SLE-Micro-5.3-2023-187,SUSE-SLE-Module-Containers-15-SP4-2023-187,openSUSE-Leap-Micro-5.3-2023-187,openSUSE-SLE-15.4-2023-187",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_0187-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2023:0187-1",
        "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20230187-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2023:0187-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-January/013557.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181640",
        "url": "https://bugzilla.suse.com/1181640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181961",
        "url": "https://bugzilla.suse.com/1181961"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193166",
        "url": "https://bugzilla.suse.com/1193166"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193273",
        "url": "https://bugzilla.suse.com/1193273"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197672",
        "url": "https://bugzilla.suse.com/1197672"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199790",
        "url": "https://bugzilla.suse.com/1199790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1202809",
        "url": "https://bugzilla.suse.com/1202809"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-20199 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-20199/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-20206 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-20206/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-4024 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-4024/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41190 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41190/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-27649 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-27649/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-2989 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-2989/"
      }
    ],
    "title": "Security update for podman",
    "tracking": {
      "current_release_date": "2023-01-27T10:27:02Z",
      "generator": {
        "date": "2023-01-27T10:27:02Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2023:0187-1",
      "initial_release_date": "2023-01-27T10:27:02Z",
      "revision_history": [
        {
          "date": "2023-01-27T10:27:02Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150400.4.11.1.aarch64",
                "product": {
                  "name": "podman-4.3.1-150400.4.11.1.aarch64",
                  "product_id": "podman-4.3.1-150400.4.11.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150400.4.11.1.aarch64",
                "product": {
                  "name": "podman-remote-4.3.1-150400.4.11.1.aarch64",
                  "product_id": "podman-remote-4.3.1-150400.4.11.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150400.4.11.1.i586",
                "product": {
                  "name": "podman-4.3.1-150400.4.11.1.i586",
                  "product_id": "podman-4.3.1-150400.4.11.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150400.4.11.1.i586",
                "product": {
                  "name": "podman-remote-4.3.1-150400.4.11.1.i586",
                  "product_id": "podman-remote-4.3.1-150400.4.11.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-cni-config-4.3.1-150400.4.11.1.noarch",
                "product": {
                  "name": "podman-cni-config-4.3.1-150400.4.11.1.noarch",
                  "product_id": "podman-cni-config-4.3.1-150400.4.11.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "podman-docker-4.3.1-150400.4.11.1.noarch",
                "product": {
                  "name": "podman-docker-4.3.1-150400.4.11.1.noarch",
                  "product_id": "podman-docker-4.3.1-150400.4.11.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150400.4.11.1.ppc64le",
                "product": {
                  "name": "podman-4.3.1-150400.4.11.1.ppc64le",
                  "product_id": "podman-4.3.1-150400.4.11.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150400.4.11.1.ppc64le",
                "product": {
                  "name": "podman-remote-4.3.1-150400.4.11.1.ppc64le",
                  "product_id": "podman-remote-4.3.1-150400.4.11.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150400.4.11.1.s390x",
                "product": {
                  "name": "podman-4.3.1-150400.4.11.1.s390x",
                  "product_id": "podman-4.3.1-150400.4.11.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150400.4.11.1.s390x",
                "product": {
                  "name": "podman-remote-4.3.1-150400.4.11.1.s390x",
                  "product_id": "podman-remote-4.3.1-150400.4.11.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150400.4.11.1.x86_64",
                "product": {
                  "name": "podman-4.3.1-150400.4.11.1.x86_64",
                  "product_id": "podman-4.3.1-150400.4.11.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150400.4.11.1.x86_64",
                "product": {
                  "name": "podman-remote-4.3.1-150400.4.11.1.x86_64",
                  "product_id": "podman-remote-4.3.1-150400.4.11.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.3",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.3",
                  "product_id": "SUSE Linux Enterprise Micro 5.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Containers 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Containers 15 SP4",
                  "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-containers:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap Micro 5.3",
                "product": {
                  "name": "openSUSE Leap Micro 5.3",
                  "product_id": "openSUSE Leap Micro 5.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap-micro:5.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.4",
                "product": {
                  "name": "openSUSE Leap 15.4",
                  "product_id": "openSUSE Leap 15.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150400.4.11.1.noarch as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150400.4.11.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150400.4.11.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150400.4.11.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-4.3.1-150400.4.11.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch"
        },
        "product_reference": "podman-docker-4.3.1-150400.4.11.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.aarch64 as component of openSUSE Leap Micro 5.3",
          "product_id": "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.x86_64 as component of openSUSE Leap Micro 5.3",
          "product_id": "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150400.4.11.1.noarch as component of openSUSE Leap Micro 5.3",
          "product_id": "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150400.4.11.1.noarch",
        "relates_to_product_reference": "openSUSE Leap Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150400.4.11.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150400.4.11.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150400.4.11.1.noarch as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150400.4.11.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-4.3.1-150400.4.11.1.noarch as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch"
        },
        "product_reference": "podman-docker-4.3.1-150400.4.11.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-4.3.1-150400.4.11.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64"
        },
        "product_reference": "podman-remote-4.3.1-150400.4.11.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-20199",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-20199"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-20199",
          "url": "https://www.suse.com/security/cve/CVE-2021-20199"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181640 for CVE-2021-20199",
          "url": "https://bugzilla.suse.com/1181640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-01-27T10:27:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2021-20199"
    },
    {
      "cve": "CVE-2021-20206",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-20206"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the \u0027type\u0027 field in the network configuration, it is possible to use special elements such as \"../\" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as \u0027reboot\u0027. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-20206",
          "url": "https://www.suse.com/security/cve/CVE-2021-20206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181961 for CVE-2021-20206",
          "url": "https://bugzilla.suse.com/1181961"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-01-27T10:27:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-20206"
    },
    {
      "cve": "CVE-2021-4024",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-4024"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host\u0027s firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host\u0027s services by forwarding all ports to the VM.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-4024",
          "url": "https://www.suse.com/security/cve/CVE-2021-4024"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193166 for CVE-2021-4024",
          "url": "https://bugzilla.suse.com/1193166"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-01-27T10:27:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-4024"
    },
    {
      "cve": "CVE-2021-41190",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41190"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both \"manifests\" and \"layers\" fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both \"manifests\" and \"layers\" fields or \"manifests\" and \"config\" fields if they are unable to update to version 1.0.1 of the spec.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41190",
          "url": "https://www.suse.com/security/cve/CVE-2021-41190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193273 for CVE-2021-41190",
          "url": "https://bugzilla.suse.com/1193273"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-01-27T10:27:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41190"
    },
    {
      "cve": "CVE-2022-27649",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-27649"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-27649",
          "url": "https://www.suse.com/security/cve/CVE-2022-27649"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197909 for CVE-2022-27649",
          "url": "https://bugzilla.suse.com/1197909"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-01-27T10:27:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-27649"
    },
    {
      "cve": "CVE-2022-2989",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-2989"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
          "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
          "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
          "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-2989",
          "url": "https://www.suse.com/security/cve/CVE-2022-2989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202809 for CVE-2022-2989",
          "url": "https://bugzilla.suse.com/1202809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.3.1-150400.4.11.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap 15.4:podman-cni-config-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-docker-4.3.1-150400.4.11.1.noarch",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.ppc64le",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.s390x",
            "openSUSE Leap 15.4:podman-remote-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.aarch64",
            "openSUSE Leap Micro 5.3:podman-4.3.1-150400.4.11.1.x86_64",
            "openSUSE Leap Micro 5.3:podman-cni-config-4.3.1-150400.4.11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-01-27T10:27:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-2989"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for containerd, docker",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for containerd, docker fixes the following issues:\n\n- CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517).\n- CVE-2022-23648: Fixed directory traversal issue (bsc#1196441).\n- CVE-2021-41190: Fixed parsing confusions in OCI manifest and index (bsc#1193273).\n- CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284).\n- CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2022-1507,SUSE-SLE-Module-Containers-12-2022-1507",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_1507-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:1507-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20221507-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:1507-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010921.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192814",
        "url": "https://bugzilla.suse.com/1192814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193273",
        "url": "https://bugzilla.suse.com/1193273"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193930",
        "url": "https://bugzilla.suse.com/1193930"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1196441",
        "url": "https://bugzilla.suse.com/1196441"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197284",
        "url": "https://bugzilla.suse.com/1197284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197517",
        "url": "https://bugzilla.suse.com/1197517"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41190 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41190/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-43565 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-43565/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23648 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23648/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-24769 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-24769/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-27191 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-27191/"
      }
    ],
    "title": "Security update for containerd, docker",
    "tracking": {
      "current_release_date": "2022-05-03T14:08:25Z",
      "generator": {
        "date": "2022-05-03T14:08:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:1507-1",
      "initial_release_date": "2022-05-03T14:08:25Z",
      "revision_history": [
        {
          "date": "2022-05-03T14:08:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.5.11-16.57.1.aarch64",
                "product": {
                  "name": "containerd-1.5.11-16.57.1.aarch64",
                  "product_id": "containerd-1.5.11-16.57.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.5.11-16.57.1.aarch64",
                "product": {
                  "name": "containerd-ctr-1.5.11-16.57.1.aarch64",
                  "product_id": "containerd-ctr-1.5.11-16.57.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.14_ce-98.80.1.aarch64",
                "product": {
                  "name": "docker-20.10.14_ce-98.80.1.aarch64",
                  "product_id": "docker-20.10.14_ce-98.80.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.14_ce-98.80.1.aarch64",
                "product": {
                  "name": "docker-kubic-20.10.14_ce-98.80.1.aarch64",
                  "product_id": "docker-kubic-20.10.14_ce-98.80.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.aarch64",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.aarch64",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.5.11-16.57.1.i586",
                "product": {
                  "name": "containerd-1.5.11-16.57.1.i586",
                  "product_id": "containerd-1.5.11-16.57.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.5.11-16.57.1.i586",
                "product": {
                  "name": "containerd-ctr-1.5.11-16.57.1.i586",
                  "product_id": "containerd-ctr-1.5.11-16.57.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.14_ce-98.80.1.i586",
                "product": {
                  "name": "docker-20.10.14_ce-98.80.1.i586",
                  "product_id": "docker-20.10.14_ce-98.80.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-bash-completion-20.10.14_ce-98.80.1.noarch",
                "product": {
                  "name": "docker-bash-completion-20.10.14_ce-98.80.1.noarch",
                  "product_id": "docker-bash-completion-20.10.14_ce-98.80.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-fish-completion-20.10.14_ce-98.80.1.noarch",
                "product": {
                  "name": "docker-fish-completion-20.10.14_ce-98.80.1.noarch",
                  "product_id": "docker-fish-completion-20.10.14_ce-98.80.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-bash-completion-20.10.14_ce-98.80.1.noarch",
                "product": {
                  "name": "docker-kubic-bash-completion-20.10.14_ce-98.80.1.noarch",
                  "product_id": "docker-kubic-bash-completion-20.10.14_ce-98.80.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-fish-completion-20.10.14_ce-98.80.1.noarch",
                "product": {
                  "name": "docker-kubic-fish-completion-20.10.14_ce-98.80.1.noarch",
                  "product_id": "docker-kubic-fish-completion-20.10.14_ce-98.80.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-zsh-completion-20.10.14_ce-98.80.1.noarch",
                "product": {
                  "name": "docker-kubic-zsh-completion-20.10.14_ce-98.80.1.noarch",
                  "product_id": "docker-kubic-zsh-completion-20.10.14_ce-98.80.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "docker-zsh-completion-20.10.14_ce-98.80.1.noarch",
                "product": {
                  "name": "docker-zsh-completion-20.10.14_ce-98.80.1.noarch",
                  "product_id": "docker-zsh-completion-20.10.14_ce-98.80.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.5.11-16.57.1.ppc64le",
                "product": {
                  "name": "containerd-1.5.11-16.57.1.ppc64le",
                  "product_id": "containerd-1.5.11-16.57.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.5.11-16.57.1.ppc64le",
                "product": {
                  "name": "containerd-ctr-1.5.11-16.57.1.ppc64le",
                  "product_id": "containerd-ctr-1.5.11-16.57.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.14_ce-98.80.1.ppc64le",
                "product": {
                  "name": "docker-20.10.14_ce-98.80.1.ppc64le",
                  "product_id": "docker-20.10.14_ce-98.80.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.14_ce-98.80.1.ppc64le",
                "product": {
                  "name": "docker-kubic-20.10.14_ce-98.80.1.ppc64le",
                  "product_id": "docker-kubic-20.10.14_ce-98.80.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.ppc64le",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.ppc64le",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.5.11-16.57.1.s390x",
                "product": {
                  "name": "containerd-1.5.11-16.57.1.s390x",
                  "product_id": "containerd-1.5.11-16.57.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.5.11-16.57.1.s390x",
                "product": {
                  "name": "containerd-ctr-1.5.11-16.57.1.s390x",
                  "product_id": "containerd-ctr-1.5.11-16.57.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.14_ce-98.80.1.s390x",
                "product": {
                  "name": "docker-20.10.14_ce-98.80.1.s390x",
                  "product_id": "docker-20.10.14_ce-98.80.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.14_ce-98.80.1.s390x",
                "product": {
                  "name": "docker-kubic-20.10.14_ce-98.80.1.s390x",
                  "product_id": "docker-kubic-20.10.14_ce-98.80.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.s390x",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.s390x",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerd-1.5.11-16.57.1.x86_64",
                "product": {
                  "name": "containerd-1.5.11-16.57.1.x86_64",
                  "product_id": "containerd-1.5.11-16.57.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerd-ctr-1.5.11-16.57.1.x86_64",
                "product": {
                  "name": "containerd-ctr-1.5.11-16.57.1.x86_64",
                  "product_id": "containerd-ctr-1.5.11-16.57.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-20.10.14_ce-98.80.1.x86_64",
                "product": {
                  "name": "docker-20.10.14_ce-98.80.1.x86_64",
                  "product_id": "docker-20.10.14_ce-98.80.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-20.10.14_ce-98.80.1.x86_64",
                "product": {
                  "name": "docker-kubic-20.10.14_ce-98.80.1.x86_64",
                  "product_id": "docker-kubic-20.10.14_ce-98.80.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.x86_64",
                "product": {
                  "name": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.x86_64",
                  "product_id": "docker-kubic-kubeadm-criconfig-20.10.14_ce-98.80.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Containers 12",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Containers 12",
                  "product_id": "SUSE Linux Enterprise Module for Containers 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-containers:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.5.11-16.57.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 12",
          "product_id": "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le"
        },
        "product_reference": "containerd-1.5.11-16.57.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.5.11-16.57.1.s390x as component of SUSE Linux Enterprise Module for Containers 12",
          "product_id": "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x"
        },
        "product_reference": "containerd-1.5.11-16.57.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerd-1.5.11-16.57.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 12",
          "product_id": "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64"
        },
        "product_reference": "containerd-1.5.11-16.57.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.14_ce-98.80.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 12",
          "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le"
        },
        "product_reference": "docker-20.10.14_ce-98.80.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.14_ce-98.80.1.s390x as component of SUSE Linux Enterprise Module for Containers 12",
          "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x"
        },
        "product_reference": "docker-20.10.14_ce-98.80.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-20.10.14_ce-98.80.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 12",
          "product_id": "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
        },
        "product_reference": "docker-20.10.14_ce-98.80.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-41190",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41190"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both \"manifests\" and \"layers\" fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both \"manifests\" and \"layers\" fields or \"manifests\" and \"config\" fields if they are unable to update to version 1.0.1 of the spec.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41190",
          "url": "https://www.suse.com/security/cve/CVE-2021-41190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193273 for CVE-2021-41190",
          "url": "https://bugzilla.suse.com/1193273"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-03T14:08:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41190"
    },
    {
      "cve": "CVE-2021-43565",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-43565"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-43565",
          "url": "https://www.suse.com/security/cve/CVE-2021-43565"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193930 for CVE-2021-43565",
          "url": "https://bugzilla.suse.com/1193930"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-03T14:08:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-43565"
    },
    {
      "cve": "CVE-2022-23648",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23648"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd\u0027s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd\u0027s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23648",
          "url": "https://www.suse.com/security/cve/CVE-2022-23648"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196441 for CVE-2022-23648",
          "url": "https://bugzilla.suse.com/1196441"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-03T14:08:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-23648"
    },
    {
      "cve": "CVE-2022-24769",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-24769"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during `execve(2)`. Normally, when executable programs have specified permitted file capabilities, otherwise unprivileged users and processes can execute those programs and gain the specified file capabilities up to the bounding set. Due to this bug, containers which included executable programs with inheritable file capabilities allowed otherwise unprivileged users and processes to additionally gain these inheritable file capabilities up to the container\u0027s bounding set. Containers which use Linux users and groups to perform privilege separation inside the container are most directly impacted. This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container\u0027s bounding set. This bug has been fixed in Moby (Docker Engine) 20.10.14. Running containers should be stopped, deleted, and recreated for the inheritable capabilities to be reset. This fix changes Moby (Docker Engine) behavior such that containers are started with a more typical Linux environment. As a workaround, the entry point of a container can be modified to use a utility like `capsh(1)` to drop inheritable capabilities prior to the primary process starting.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-24769",
          "url": "https://www.suse.com/security/cve/CVE-2022-24769"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197517 for CVE-2022-24769",
          "url": "https://bugzilla.suse.com/1197517"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-03T14:08:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-24769"
    },
    {
      "cve": "CVE-2022-27191",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-27191"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
          "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-27191",
          "url": "https://www.suse.com/security/cve/CVE-2022-27191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197284 for CVE-2022-27191",
          "url": "https://bugzilla.suse.com/1197284"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:containerd-1.5.11-16.57.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.s390x",
            "SUSE Linux Enterprise Module for Containers 12:docker-20.10.14_ce-98.80.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-03T14:08:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-27191"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for umoci",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for umoci fixes the following issues:\n\nUpdate to umoci v0.5.0. Upstream changelog is available from\n\n  \u003chttps://github.com/opencontainers/umoci/releases/tag/v0.5.0\u003e bsc#1243388\n\nA security flaw was found in the OCI image-spec, where it is possible to\ncause a blob with one media-type to be interpreted as a different media-type.\nAs umoci is not a registry nor does it handle signatures, this vulnerability\nhad no real impact on umoci but for safety we implemented the now-recommended\nmedia-type embedding and verification. CVE-2021-41190\n\nOther changes in this release:\n\n  * Several large reworks and API-related changes to the umoci\u0027s overlayfs\n\tsupport. This is only available to Go API users.\n  * The runtime-spec config.json generated by umoci is updated to be more\n\tmodern and work properly with modern runc versions.\n  * The default gzip compression blocksize has been adjusted to match Docker.\n  * zstd-compressed images are now fully supported. Users can explcitily\n    request the compression algorithm for newly-generated layers with the\n    --compress option.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-2282,SUSE-SLE-Module-Basesystem-15-SP6-2025-2282,SUSE-SLE-Module-Basesystem-15-SP7-2025-2282,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2282,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2282,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2282,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2282,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2282,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2282,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2282,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2282,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2282,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2282,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2282,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2282,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2282,SUSE-Storage-7.1-2025-2282,openSUSE-SLE-15.6-2025-2282",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02282-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:02282-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502282-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:02282-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040691.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1243388",
        "url": "https://bugzilla.suse.com/1243388"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41190 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41190/"
      }
    ],
    "title": "Security update for umoci",
    "tracking": {
      "current_release_date": "2025-07-11T08:34:24Z",
      "generator": {
        "date": "2025-07-11T08:34:24Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:02282-1",
      "initial_release_date": "2025-07-11T08:34:24Z",
      "revision_history": [
        {
          "date": "2025-07-11T08:34:24Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "umoci-0.5.0-150000.3.15.1.aarch64",
                "product": {
                  "name": "umoci-0.5.0-150000.3.15.1.aarch64",
                  "product_id": "umoci-0.5.0-150000.3.15.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "umoci-0.5.0-150000.3.15.1.i586",
                "product": {
                  "name": "umoci-0.5.0-150000.3.15.1.i586",
                  "product_id": "umoci-0.5.0-150000.3.15.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "umoci-0.5.0-150000.3.15.1.ppc64le",
                "product": {
                  "name": "umoci-0.5.0-150000.3.15.1.ppc64le",
                  "product_id": "umoci-0.5.0-150000.3.15.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "umoci-0.5.0-150000.3.15.1.s390x",
                "product": {
                  "name": "umoci-0.5.0-150000.3.15.1.s390x",
                  "product_id": "umoci-0.5.0-150000.3.15.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "umoci-0.5.0-150000.3.15.1.x86_64",
                "product": {
                  "name": "umoci-0.5.0-150000.3.15.1.x86_64",
                  "product_id": "umoci-0.5.0-150000.3.15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 4.3",
                "product": {
                  "name": "SUSE Manager Proxy 4.3",
                  "product_id": "SUSE Manager Proxy 4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server 4.3",
                "product": {
                  "name": "SUSE Manager Server 4.3",
                  "product_id": "SUSE Manager Server 4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:4.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7.1",
                "product": {
                  "name": "SUSE Enterprise Storage 7.1",
                  "product_id": "SUSE Enterprise Storage 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.s390x"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.s390x"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.s390x"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.s390x"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.s390x"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Manager Proxy 4.3",
          "product_id": "SUSE Manager Proxy 4.3:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of SUSE Manager Server 4.3",
          "product_id": "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.s390x as component of SUSE Manager Server 4.3",
          "product_id": "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.s390x"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Manager Server 4.3",
          "product_id": "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.aarch64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.ppc64le"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.s390x"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "umoci-0.5.0-150000.3.15.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.x86_64"
        },
        "product_reference": "umoci-0.5.0-150000.3.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-41190",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41190"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both \"manifests\" and \"layers\" fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both \"manifests\" and \"layers\" fields or \"manifests\" and \"config\" fields if they are unable to update to version 1.0.1 of the spec.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Manager Proxy 4.3:umoci-0.5.0-150000.3.15.1.x86_64",
          "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.ppc64le",
          "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.s390x",
          "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.x86_64",
          "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.aarch64",
          "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.ppc64le",
          "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.s390x",
          "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41190",
          "url": "https://www.suse.com/security/cve/CVE-2021-41190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193273 for CVE-2021-41190",
          "url": "https://bugzilla.suse.com/1193273"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Manager Proxy 4.3:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.x86_64",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.aarch64",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.ppc64le",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.s390x",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP7:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP4-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP5-LTSS:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP4:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP5:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Manager Proxy 4.3:umoci-0.5.0-150000.3.15.1.x86_64",
            "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.ppc64le",
            "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.s390x",
            "SUSE Manager Server 4.3:umoci-0.5.0-150000.3.15.1.x86_64",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.aarch64",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.ppc64le",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.s390x",
            "openSUSE Leap 15.6:umoci-0.5.0-150000.3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-11T08:34:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41190"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for podman",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for podman fixes the following issues:\n\npodman was updated to version 4.3.1:\n\n4.3.1:\n\n* Bugfixes\n\n- Fixed a deadlock between the `podman ps` and `podman container inspect` commands\n\n* Misc\n\n- Updated the containers/image library to v5.23.1\n \n4.3.0:\n\n* Features\n\n- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.\n- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted\n- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).\n- The `podman kube play` command now supports Kubernetes secrets using Podman\u0027s secrets backend.\n- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).\n- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).\n- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml`\n- The `podman kube play` command now supports the `emptyDir` volume type\n- The `podman kube play` command now supports the `HostUsers` field in the pod spec.\n- The `podman play kube` command now supports `binaryData` in ConfigMaps.\n- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.\n- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user\n- The `podman volume create` command\u0027s `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.\n- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.\n- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge \u0027PATH=$PATH:/my/app\u0027 ...`)\n- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).\n- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container)\n- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file\n- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.\n- The `podman restart` command now supports the `--cidfile` and `--filter` options.\n- The `podman rm` command now supports the `--filter` option to select which containers will be removed.\n- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.\n- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.\n- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.\n- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility\n- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.\n- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.\n- The `podman secret create` command\u0027s `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.\n- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.\n- The `podman secret ls` command now accepts the `--quiet`/`-q` option.\n- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.\n- The `podman stats` command now accepts the `--no-trunc` option.\n- The `podman save` command now accepts the `--signature-policy` option\n- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods\n- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.\n- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set\n\n### Changes\n\n- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match\n- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.\n- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.\n- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.\n- The installer for the Windows Podman client has been improved.\n- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers)\n- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container\n- Events for containers that are part of a pod now include the ID of the pod in the event.\n- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.\n- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.\n- The `podman inspect` command on containers now includes the digest of the image used to create the container.\n- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.\n\n\nUpdate to version 4.2.0:\n\n* Features\n\n- Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.\n- A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod\n- A new command has been added, podman volume reload, to sync changes in state between Podman\u0027s database and any configured volume plugins\n- A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.\n- Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.\n- The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod\u0027s security context.\n- The podman play kube command now supports volumes with the BlockDevice and CharDevice types\n- The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto\n- The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.\n- Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod\u0027s infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube\n- The podman pod create command now allows the pod\u0027s name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.\n- The podman pod create command\u0027s --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared)\n- The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).\n- The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.\n- The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!\n- The podman create and podman run commands now include the -c short option for the --cpu-shares option.\n- The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).\n- The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.\n- The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.\n- The podman machine inspect command now prints the location of the VM\u0027s Podman API socket on the host (#14231).\n- The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).\n- Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).\n- The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).\n- Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).\n- The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).\n- Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).\n- The podman volume ls command\u0027s --filter name= option now supports regular expression matching for volume names (#14583).\n- When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.\n- The remote Podman client\u0027s podman push command now supports the --remove-signatures option (#14558).\n- The remote Podman client now supports the podman image scp command.\n- The podman image scp command now supports tagging the transferred image with a new name.\n- The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).\n- The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.\n- The podman events command now includes the -f short option for the --filter option.\n- The podman pull command now includes the -a short option for the --all-tags option.\n- The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).\n- The Podman global option --url now has two aliases: -H and --host.\n- The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.\n- Added the ability to create sigstore signatures in podman push and podman manifest push.\n- Added an option to read image signing passphrase from a file.\n\n* Changes\n\n- Paused containers can now be killed with the podman kill command.\n- The podman system prune command now removes unused networks.\n- The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.\n- If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).\n- The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).\n- All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.\n- The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.\n- Init containers created with podman play kube now default to the once type (#14877).\n- Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).\n- The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.\n- The libpod/common package has been removed as it\u0027s not used anywhere.\n- The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).\n\n\n* Misc\n\n- Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.\n- The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.\n- Podman Machine support for QEMU installations at non-default paths has been improved.\n- The podman machine ssh command no longer prints spurious warnings every time it is run.\n- When accessing the WSL prompt on Windows, the rootless user will be preferred.\n- The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.\n- The podman system prune command now no longer prints the Deleted Images header if no images were pruned.\n- The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).\n- Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)\n- Updated the containers/image library to v5.22.0\n- Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)\n- Updated the containers/common library to v0.49.1\n- Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).\n- Fixed an incorrect release note about regexp.\n- A new MacOS installer (via pkginstaller) is now supported.\n\nUpdate to version 4.1.1:\n\n* The output of the podman load command now mirrors that of docker load.\n* Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.\n* A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.\n* Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.\n* Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.\n* The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.\n* The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.\n* The podman play kube command will now set default resource limits when the provided YAML does not include them.\n* The podman play kube command now supports a new option, --annotation, to add annotations to created containers.\n* The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.\n* The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.\n* The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.\n* The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.\n* The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.\n* The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.\n* The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.\n* The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.\n* The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.\n* The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.\n* The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.\n* The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.\n* The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).\n* The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container\u0027s /etc/passwd file.\n* The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.\n* The podman volume create command\u0027s -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.\n* The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.\n* Fix CVE-2022-27191 / bsc#1197284\n\n- Require catatonit \u003e= 0.1.7 for pause functionality needed by pods\n\nUpdate to version 4.0.3:\n\n* Security\n\n  - This release fixes CVE-2022-27649, where containers run by Podman would have excess inheritable capabilities set.\n\n* Changes\n\n  - The podman machine rm --force command will now remove running machines as well (such machines are shut down first, then removed) (#13448).\n  - When a podman machine VM is started that is using a too-old VM image, it will now start in a reduced functionality mode, and provide instructions on how to recreate it (previously, VMs were effectively unusable) (#13510).\n\n  - Updated the containers/common library to v0.47.5\n\n- This release addresses CVE-2021-4024 / bsc#1193166, where the podman machine command opened the gvproxy API (used to forward ports to podman machine VMs) to the public internet on port 7777.\n- This release addresses CVE-2021-41190 / bsc#1193273, where incomplete specification of behavior regarding image manifests could lead to inconsistent decoding on different clients.\n\nUpdate to version 3.1.0: (bsc#1181961, CVE-2021-20206)\n\n- A fix for CVE-2021-20199 / bsc#1181640 is included. Podman between v1.8.0 and v2.2.1 used 127.0.0.1 as the source address for all traffic forwarded into rootless containers by a forwarded port; this has been changed to address the issue.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2023-326,SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-326,SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-326,SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-326,SUSE-SLE-Product-SLES_SAP-15-SP3-2023-326,SUSE-SUSE-MicroOS-5.1-2023-326,SUSE-SUSE-MicroOS-5.2-2023-326,SUSE-Storage-7.1-2023-326,openSUSE-Leap-Micro-5.2-2023-326",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_0326-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2023:0326-1",
        "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20230326-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2023:0326-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013710.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181640",
        "url": "https://bugzilla.suse.com/1181640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181961",
        "url": "https://bugzilla.suse.com/1181961"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193166",
        "url": "https://bugzilla.suse.com/1193166"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1193273",
        "url": "https://bugzilla.suse.com/1193273"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197672",
        "url": "https://bugzilla.suse.com/1197672"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199790",
        "url": "https://bugzilla.suse.com/1199790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1202809",
        "url": "https://bugzilla.suse.com/1202809"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-20199 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-20199/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-20206 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-20206/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-4024 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-4024/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-41190 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-41190/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-27649 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-27649/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-2989 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-2989/"
      }
    ],
    "title": "Security update for podman",
    "tracking": {
      "current_release_date": "2023-02-09T07:53:42Z",
      "generator": {
        "date": "2023-02-09T07:53:42Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2023:0326-1",
      "initial_release_date": "2023-02-09T07:53:42Z",
      "revision_history": [
        {
          "date": "2023-02-09T07:53:42Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150300.9.15.1.aarch64",
                "product": {
                  "name": "podman-4.3.1-150300.9.15.1.aarch64",
                  "product_id": "podman-4.3.1-150300.9.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150300.9.15.1.aarch64",
                "product": {
                  "name": "podman-remote-4.3.1-150300.9.15.1.aarch64",
                  "product_id": "podman-remote-4.3.1-150300.9.15.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150300.9.15.1.i586",
                "product": {
                  "name": "podman-4.3.1-150300.9.15.1.i586",
                  "product_id": "podman-4.3.1-150300.9.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150300.9.15.1.i586",
                "product": {
                  "name": "podman-remote-4.3.1-150300.9.15.1.i586",
                  "product_id": "podman-remote-4.3.1-150300.9.15.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
                "product": {
                  "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
                  "product_id": "podman-cni-config-4.3.1-150300.9.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "podman-docker-4.3.1-150300.9.15.1.noarch",
                "product": {
                  "name": "podman-docker-4.3.1-150300.9.15.1.noarch",
                  "product_id": "podman-docker-4.3.1-150300.9.15.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150300.9.15.1.ppc64le",
                "product": {
                  "name": "podman-4.3.1-150300.9.15.1.ppc64le",
                  "product_id": "podman-4.3.1-150300.9.15.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150300.9.15.1.ppc64le",
                "product": {
                  "name": "podman-remote-4.3.1-150300.9.15.1.ppc64le",
                  "product_id": "podman-remote-4.3.1-150300.9.15.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150300.9.15.1.s390x",
                "product": {
                  "name": "podman-4.3.1-150300.9.15.1.s390x",
                  "product_id": "podman-4.3.1-150300.9.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150300.9.15.1.s390x",
                "product": {
                  "name": "podman-remote-4.3.1-150300.9.15.1.s390x",
                  "product_id": "podman-remote-4.3.1-150300.9.15.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-4.3.1-150300.9.15.1.x86_64",
                "product": {
                  "name": "podman-4.3.1-150300.9.15.1.x86_64",
                  "product_id": "podman-4.3.1-150300.9.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-4.3.1-150300.9.15.1.x86_64",
                "product": {
                  "name": "podman-remote-4.3.1-150300.9.15.1.x86_64",
                  "product_id": "podman-remote-4.3.1-150300.9.15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.1",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.1",
                  "product_id": "SUSE Linux Enterprise Micro 5.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.2",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.2",
                  "product_id": "SUSE Linux Enterprise Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7.1",
                "product": {
                  "name": "SUSE Enterprise Storage 7.1",
                  "product_id": "SUSE Enterprise Storage 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap Micro 5.2",
                "product": {
                  "name": "openSUSE Leap Micro 5.2",
                  "product_id": "openSUSE Leap Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap-micro:5.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.aarch64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.aarch64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-4.3.1-150300.9.15.1.x86_64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64"
        },
        "product_reference": "podman-4.3.1-150300.9.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-4.3.1-150300.9.15.1.noarch as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        },
        "product_reference": "podman-cni-config-4.3.1-150300.9.15.1.noarch",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-20199",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-20199"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-20199",
          "url": "https://www.suse.com/security/cve/CVE-2021-20199"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181640 for CVE-2021-20199",
          "url": "https://bugzilla.suse.com/1181640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-09T07:53:42Z",
          "details": "low"
        }
      ],
      "title": "CVE-2021-20199"
    },
    {
      "cve": "CVE-2021-20206",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-20206"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the \u0027type\u0027 field in the network configuration, it is possible to use special elements such as \"../\" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as \u0027reboot\u0027. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-20206",
          "url": "https://www.suse.com/security/cve/CVE-2021-20206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181961 for CVE-2021-20206",
          "url": "https://bugzilla.suse.com/1181961"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-09T07:53:42Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-20206"
    },
    {
      "cve": "CVE-2021-4024",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-4024"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host\u0027s firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host\u0027s services by forwarding all ports to the VM.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-4024",
          "url": "https://www.suse.com/security/cve/CVE-2021-4024"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193166 for CVE-2021-4024",
          "url": "https://bugzilla.suse.com/1193166"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-09T07:53:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-4024"
    },
    {
      "cve": "CVE-2021-41190",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-41190"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both \"manifests\" and \"layers\" fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both \"manifests\" and \"layers\" fields or \"manifests\" and \"config\" fields if they are unable to update to version 1.0.1 of the spec.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-41190",
          "url": "https://www.suse.com/security/cve/CVE-2021-41190"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193273 for CVE-2021-41190",
          "url": "https://bugzilla.suse.com/1193273"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-09T07:53:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-41190"
    },
    {
      "cve": "CVE-2022-27649",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-27649"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-27649",
          "url": "https://www.suse.com/security/cve/CVE-2022-27649"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197909 for CVE-2022-27649",
          "url": "https://bugzilla.suse.com/1197909"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-09T07:53:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-27649"
    },
    {
      "cve": "CVE-2022-2989",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-2989"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
          "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
          "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-2989",
          "url": "https://www.suse.com/security/cve/CVE-2022-2989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202809 for CVE-2022-2989",
          "url": "https://bugzilla.suse.com/1202809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Enterprise Storage 7.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Enterprise Storage 7.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.3.1-150300.9.15.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.3.1-150300.9.15.1.noarch",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.aarch64",
            "openSUSE Leap Micro 5.2:podman-4.3.1-150300.9.15.1.x86_64",
            "openSUSE Leap Micro 5.2:podman-cni-config-4.3.1-150300.9.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-09T07:53:42Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-2989"
    }
  ]
}