{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-23650"
    }
  },
  "description": "BuildKit\u662f\u5e76\u53d1\u3001\u9ad8\u901f\u7f13\u5b58\u9ad8\u6548\u4e14\u4e0e Dockerfile \u65e0\u5173\u7684\u6784\u5efa\u5668\u5de5\u5177\u5305\u3002\n\nBuildKit\u5b58\u5728\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4BuildKit\u5b88\u62a4\u8fdb\u7a0b\u56e0\u6050\u614c\u800c\u5d29\u6e83\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://github.com/moby/buildkit/releases/tag/v0.12.5",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-09642",
  "openTime": "2024-02-22",
  "patchDescription": "BuildKit\u662f\u5e76\u53d1\u3001\u9ad8\u901f\u7f13\u5b58\u9ad8\u6548\u4e14\u4e0e Dockerfile \u65e0\u5173\u7684\u6784\u5efa\u5668\u5de5\u5177\u5305\u3002\r\n\r\nBuildKit\u5b58\u5728\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4BuildKit\u5b88\u62a4\u8fdb\u7a0b\u56e0\u6050\u614c\u800c\u5d29\u6e83\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "BuildKit\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "BuildKit BuildKit \u003c0.12.5"
  },
  "referenceLink": "https://cxsecurity.com/cveshow/CVE-2024-23650/",
  "serverity": "\u4e2d",
  "submitTime": "2024-02-02",
  "title": "BuildKit\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "buildkit",
          "vendor": "moby",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.12.5"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:moby:buildkit:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "buildkit",
          "vendor": "moby",
          "versions": [
            {
              "lessThan": "0.12.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AAE2F08-4E4D-4B85-8230-8D5BA7788D3D",
              "versionEndExcluding": "0.12.5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n"
    },
    {
      "lang": "es",
      "value": "BuildKit es un conjunto de herramientas para convertir c\u00f3digo fuente para crear artefactos de manera eficiente, expresiva y repetible. Un cliente o interfaz de BuildKit malicioso podr\u00eda crear una solicitud que podr\u00eda provocar que el daemon BuildKit se bloquee en p\u00e1nico. El problema se solucion\u00f3 en v0.12.5. Como workaround, evite utilizar interfaces BuildKit de fuentes que no sean de confianza."
    }
  ],
  "id": "CVE-2024-23650",
  "lastModified": "2026-06-17T07:13:18.483",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-23650",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-11-12T20:14:10.344196Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-01-31T22:15:53.990",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://github.com/moby/buildkit/pull/4601"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch",
        "Release Notes"
      ],
      "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://github.com/moby/buildkit/pull/4601"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Release Notes"
      ],
      "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-754"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/moby/buildkit"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-23650"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-754"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-01-31T22:43:54Z",
    "nvd_published_at": "2024-01-31T22:15:53Z",
    "severity": "MODERATE"
  },
  "details": "### Impact\nA malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.\n\n### Patches\nThe issue has been fixed in v0.12.5\n\n### Workarounds\nAvoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the `#syntax` line on your Dockerfile, or with `--frontend` flag when using `buildctl build` command. \n\n### References\n\n",
  "id": "GHSA-9p26-698r-w4hx",
  "modified": "2024-03-04T18:43:34Z",
  "published": "2024-01-31T22:43:54Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23650"
    },
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/pull/4601"
    },
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/commit/481d9c45f473c58537f39694a38d7995cc656987"
    },
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/commit/7718bd5c3dc8fc5cd246a30cc41766e7a53c043c"
    },
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/commit/83edaef59d545b93e2750f1f85675a3764593fee"
    },
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/commit/96663dd35bf3787d7efb1ee7fd9ac7fe533582ae"
    },
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/commit/e1924dc32da35bfb0bfdbb9d0fc7bca25e552330"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/moby/buildkit"
    },
    {
      "type": "WEB",
      "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "BuildKit vulnerable to possible panic when incorrect parameters sent from frontend"
}

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-23650"
      ],
      "details": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n",
      "id": "GSD-2024-23650",
      "modified": "2024-01-19T06:02:13.195958Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security-advisories@github.com",
        "ID": "CVE-2024-23650",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "buildkit",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "\u003c 0.12.5"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "moby"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-754",
                "lang": "eng",
                "value": "CWE-754: Improper Check for Unusual or Exceptional Conditions"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx",
            "refsource": "MISC",
            "url": "https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx"
          },
          {
            "name": "https://github.com/moby/buildkit/pull/4601",
            "refsource": "MISC",
            "url": "https://github.com/moby/buildkit/pull/4601"
          },
          {
            "name": "https://github.com/moby/buildkit/releases/tag/v0.12.5",
            "refsource": "MISC",
            "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5"
          }
        ]
      },
      "source": {
        "advisory": "GHSA-9p26-698r-w4hx",
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0AAE2F08-4E4D-4B85-8230-8D5BA7788D3D",
                    "versionEndExcluding": "0.12.5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n"
          },
          {
            "lang": "es",
            "value": "BuildKit es un conjunto de herramientas para convertir c\u00f3digo fuente para crear artefactos de manera eficiente, expresiva y repetible. Un cliente o interfaz de BuildKit malicioso podr\u00eda crear una solicitud que podr\u00eda provocar que el daemon BuildKit se bloquee en p\u00e1nico. El problema se solucion\u00f3 en v0.12.5. Como workaround, evite utilizar interfaces BuildKit de fuentes que no sean de confianza."
          }
        ],
        "id": "CVE-2024-23650",
        "lastModified": "2024-02-09T01:38:44.823",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "security-advisories@github.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2024-01-31T22:15:53.990",
        "references": [
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://github.com/moby/buildkit/pull/4601"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Patch",
              "Release Notes"
            ],
            "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-754"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-23650 BuildKit possible panic when incorrect parameters sent from frontend - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-23650.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "BuildKit possible panic when incorrect parameters sent from frontend",
    "tracking": {
      "current_release_date": "2026-02-18T14:08:46.000Z",
      "generator": {
        "date": "2026-02-21T01:47:58.657Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-23650",
      "initial_release_date": "2024-01-01T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-02-05T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2024-06-30T07:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2025-02-16T00:00:00.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added moby-engine to CBL-Mariner 2.0\nAdded moby-compose to CBL-Mariner 2.0\nAdded moby-engine to Azure Linux 3.0\nAdded docker-buildx to Azure Linux 3.0\nAdded docker-compose to Azure Linux 3.0"
        },
        {
          "date": "2026-02-18T14:08:46.000Z",
          "legacy_version": "2",
          "number": "4",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              },
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 moby-engine 24.0.9-14",
                "product": {
                  "name": "\u003ccbl2 moby-engine 24.0.9-14",
                  "product_id": "10"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 moby-engine 24.0.9-14",
                "product": {
                  "name": "cbl2 moby-engine 24.0.9-14",
                  "product_id": "17448"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 moby-engine 25.0.3-1",
                "product": {
                  "name": "\u003cazl3 moby-engine 25.0.3-1",
                  "product_id": "7"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 moby-engine 25.0.3-1",
                "product": {
                  "name": "azl3 moby-engine 25.0.3-1",
                  "product_id": "17814"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 moby-engine 24.0.9-16",
                "product": {
                  "name": "\u003ccbl2 moby-engine 24.0.9-16",
                  "product_id": "5"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 moby-engine 24.0.9-16",
                "product": {
                  "name": "cbl2 moby-engine 24.0.9-16",
                  "product_id": "19422"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 moby-engine 24.0.9-16",
                "product": {
                  "name": "\u003ccbl2 moby-engine 24.0.9-16",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 moby-engine 24.0.9-16",
                "product": {
                  "name": "cbl2 moby-engine 24.0.9-16",
                  "product_id": "19798"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 moby-engine 20.10.25-3",
                "product": {
                  "name": "\u003cazl3 moby-engine 20.10.25-3",
                  "product_id": "6"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 moby-engine 20.10.25-3",
                "product": {
                  "name": "azl3 moby-engine 20.10.25-3",
                  "product_id": "17964"
                }
              }
            ],
            "category": "product_name",
            "name": "moby-engine"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 moby-compose 2.17.3-5",
                "product": {
                  "name": "\u003ccbl2 moby-compose 2.17.3-5",
                  "product_id": "11"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 moby-compose 2.17.3-5",
                "product": {
                  "name": "cbl2 moby-compose 2.17.3-5",
                  "product_id": "17414"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 moby-compose 2.17.3-10",
                "product": {
                  "name": "\u003ccbl2 moby-compose 2.17.3-10",
                  "product_id": "4"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 moby-compose 2.17.3-10",
                "product": {
                  "name": "cbl2 moby-compose 2.17.3-10",
                  "product_id": "19794"
                }
              }
            ],
            "category": "product_name",
            "name": "moby-compose"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 docker-compose 2.27.0-1",
                "product": {
                  "name": "\u003cazl3 docker-compose 2.27.0-1",
                  "product_id": "9"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 docker-compose 2.27.0-1",
                "product": {
                  "name": "azl3 docker-compose 2.27.0-1",
                  "product_id": "17799"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 docker-compose 2.24.6-2",
                "product": {
                  "name": "\u003cazl3 docker-compose 2.24.6-2",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 docker-compose 2.24.6-2",
                "product": {
                  "name": "azl3 docker-compose 2.24.6-2",
                  "product_id": "19815"
                }
              }
            ],
            "category": "product_name",
            "name": "docker-compose"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 docker-buildx 0.14.0-1",
                "product": {
                  "name": "\u003cazl3 docker-buildx 0.14.0-1",
                  "product_id": "8"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 docker-buildx 0.14.0-1",
                "product": {
                  "name": "azl3 docker-buildx 0.14.0-1",
                  "product_id": "17801"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 docker-buildx 0.12.1-1",
                "product": {
                  "name": "\u003cazl3 docker-buildx 0.12.1-1",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 docker-buildx 0.12.1-1",
                "product": {
                  "name": "azl3 docker-buildx 0.12.1-1",
                  "product_id": "19808"
                }
              }
            ],
            "category": "product_name",
            "name": "docker-buildx"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 moby-engine 24.0.9-14 as a component of CBL Mariner 2.0",
          "product_id": "17086-10"
        },
        "product_reference": "10",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 moby-engine 24.0.9-14 as a component of CBL Mariner 2.0",
          "product_id": "17448-17086"
        },
        "product_reference": "17448",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 moby-compose 2.17.3-5 as a component of CBL Mariner 2.0",
          "product_id": "17086-11"
        },
        "product_reference": "11",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 moby-compose 2.17.3-5 as a component of CBL Mariner 2.0",
          "product_id": "17414-17086"
        },
        "product_reference": "17414",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 docker-compose 2.27.0-1 as a component of Azure Linux 3.0",
          "product_id": "17084-9"
        },
        "product_reference": "9",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 docker-compose 2.27.0-1 as a component of Azure Linux 3.0",
          "product_id": "17799-17084"
        },
        "product_reference": "17799",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 docker-buildx 0.14.0-1 as a component of Azure Linux 3.0",
          "product_id": "17084-8"
        },
        "product_reference": "8",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 docker-buildx 0.14.0-1 as a component of Azure Linux 3.0",
          "product_id": "17801-17084"
        },
        "product_reference": "17801",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 moby-engine 25.0.3-1 as a component of Azure Linux 3.0",
          "product_id": "17084-7"
        },
        "product_reference": "7",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 moby-engine 25.0.3-1 as a component of Azure Linux 3.0",
          "product_id": "17814-17084"
        },
        "product_reference": "17814",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 moby-compose 2.17.3-10 as a component of CBL Mariner 2.0",
          "product_id": "17086-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 moby-compose 2.17.3-10 as a component of CBL Mariner 2.0",
          "product_id": "19794-17086"
        },
        "product_reference": "19794",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 docker-buildx 0.12.1-1 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 docker-buildx 0.12.1-1 as a component of Azure Linux 3.0",
          "product_id": "19808-17084"
        },
        "product_reference": "19808",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 moby-engine 24.0.9-16 as a component of CBL Mariner 2.0",
          "product_id": "17086-5"
        },
        "product_reference": "5",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 moby-engine 24.0.9-16 as a component of CBL Mariner 2.0",
          "product_id": "19422-17086"
        },
        "product_reference": "19422",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 moby-engine 24.0.9-16 as a component of CBL Mariner 2.0",
          "product_id": "17086-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 moby-engine 24.0.9-16 as a component of CBL Mariner 2.0",
          "product_id": "19798-17086"
        },
        "product_reference": "19798",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 moby-engine 20.10.25-3 as a component of Azure Linux 3.0",
          "product_id": "17084-6"
        },
        "product_reference": "6",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 moby-engine 20.10.25-3 as a component of Azure Linux 3.0",
          "product_id": "17964-17084"
        },
        "product_reference": "17964",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 docker-compose 2.24.6-2 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 docker-compose 2.24.6-2 as a component of Azure Linux 3.0",
          "product_id": "19815-17084"
        },
        "product_reference": "19815",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-23650",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "general",
          "text": "GitHub_M",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "17448-17086",
          "17414-17086",
          "17799-17084",
          "17801-17084",
          "17814-17084",
          "19794-17086",
          "19808-17084",
          "19422-17086",
          "19798-17086",
          "17964-17084",
          "19815-17084"
        ],
        "known_affected": [
          "17086-10",
          "17086-11",
          "17084-9",
          "17084-8",
          "17084-7",
          "17086-4",
          "17084-2",
          "17086-5",
          "17086-3",
          "17084-6",
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-23650 BuildKit possible panic when incorrect parameters sent from frontend - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-23650.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-02-05T00:00:00.000Z",
          "details": "24.0.9-14:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-10",
            "17086-5",
            "17086-3"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2024-02-05T00:00:00.000Z",
          "details": "2.17.3-5:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-11",
            "17086-4"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2024-02-05T00:00:00.000Z",
          "details": "2.27.0-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-9",
            "17084-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2024-02-05T00:00:00.000Z",
          "details": "0.14.0-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-8",
            "17084-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2024-02-05T00:00:00.000Z",
          "details": "25.0.3-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-7",
            "17084-6"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "17086-10",
            "17086-11",
            "17084-9",
            "17084-8",
            "17084-7",
            "17086-4",
            "17084-2",
            "17086-5",
            "17086-3",
            "17084-6",
            "17084-1"
          ]
        }
      ],
      "title": "BuildKit possible panic when incorrect parameters sent from frontend"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "singularity-ce-4.1.3-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the singularity-ce-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14059",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14059-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23538 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23538/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-39237 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-39237/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21626 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21626/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23650 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23650/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23651 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23651/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23652 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23653 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23653/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "singularity-ce-4.1.3-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-20T00:00:00Z",
      "generator": {
        "date": "2024-06-20T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14059-1",
      "initial_release_date": "2024-06-20T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-20T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.aarch64",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.aarch64",
                  "product_id": "singularity-ce-4.1.3-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.ppc64le",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.ppc64le",
                  "product_id": "singularity-ce-4.1.3-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.s390x",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.s390x",
                  "product_id": "singularity-ce-4.1.3-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.x86_64",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.x86_64",
                  "product_id": "singularity-ce-4.1.3-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-23538",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23538"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirects the client to a backing S3 storage server, to perform a multi-part concurrent download. Depending on site configuration, the S3 service may be provided by a third party. An attacker with access to the S3 service may be able to extract user credentials, allowing them to impersonate the user. The vulnerable multi-part concurrent download flow, with redirect to S3, is only used when communicating with a Singularity Enterprise 1.x installation, or third party server implementing this flow. Interaction with Singularity Enterprise 2.x, and Singularity Container Services (cloud.sylabs.io), does not trigger the vulnerable flow. We encourage all users to update. Users who interact with a Singularity Enterprise 1.x installation, using a 3rd party S3 storage service, are advised to revoke and recreate their authentication tokens within Singularity Enterprise. There is no workaround available at this time.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23538",
          "url": "https://www.suse.com/security/cve/CVE-2022-23538"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23538"
    },
    {
      "cve": "CVE-2022-39237",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-39237"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. A patch is available in version \u003e= v2.8.1 of the module. Users are encouraged to upgrade. Users unable to upgrade may independently validate that the hash algorithm(s) used for metadata digest(s) and signature hash are cryptographically secure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-39237",
          "url": "https://www.suse.com/security/cve/CVE-2022-39237"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209493 for CVE-2022-39237",
          "url": "https://bugzilla.suse.com/1209493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-39237"
    },
    {
      "cve": "CVE-2024-21626",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21626"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem (\"attack 2\"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run (\"attack 1\"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes (\"attack 3a\" and \"attack 3b\"). runc 1.1.12 includes patches for this issue. ",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21626",
          "url": "https://www.suse.com/security/cve/CVE-2024-21626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218894 for CVE-2024-21626",
          "url": "https://bugzilla.suse.com/1218894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-21626"
    },
    {
      "cve": "CVE-2024-23650",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23650"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23650",
          "url": "https://www.suse.com/security/cve/CVE-2024-23650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219437 for CVE-2024-23650",
          "url": "https://bugzilla.suse.com/1219437"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23650"
    },
    {
      "cve": "CVE-2024-23651",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23651"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23651",
          "url": "https://www.suse.com/security/cve/CVE-2024-23651"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219267 for CVE-2024-23651",
          "url": "https://bugzilla.suse.com/1219267"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-23651"
    },
    {
      "cve": "CVE-2024-23652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23652",
          "url": "https://www.suse.com/security/cve/CVE-2024-23652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219268 for CVE-2024-23652",
          "url": "https://bugzilla.suse.com/1219268"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23652"
    },
    {
      "cve": "CVE-2024-23653",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23653"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23653",
          "url": "https://www.suse.com/security/cve/CVE-2024-23653"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219438 for CVE-2024-23653",
          "url": "https://bugzilla.suse.com/1219438"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23653"
    },
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "docker-stable-24.0.9_ce-6.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the docker-stable-24.0.9_ce-6.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14598",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14598-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-2365 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-2365/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23650 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23650/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-29018 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-29018/"
      }
    ],
    "title": "docker-stable-24.0.9_ce-6.1 on GA media",
    "tracking": {
      "current_release_date": "2024-12-18T00:00:00Z",
      "generator": {
        "date": "2024-12-18T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14598-1",
      "initial_release_date": "2024-12-18T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-12-18T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-6.1.aarch64",
                "product": {
                  "name": "docker-stable-24.0.9_ce-6.1.aarch64",
                  "product_id": "docker-stable-24.0.9_ce-6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.19.3-6.1.aarch64",
                "product": {
                  "name": "docker-stable-buildx-0.19.3-6.1.aarch64",
                  "product_id": "docker-stable-buildx-0.19.3-6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-6.1.ppc64le",
                "product": {
                  "name": "docker-stable-24.0.9_ce-6.1.ppc64le",
                  "product_id": "docker-stable-24.0.9_ce-6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.19.3-6.1.ppc64le",
                "product": {
                  "name": "docker-stable-buildx-0.19.3-6.1.ppc64le",
                  "product_id": "docker-stable-buildx-0.19.3-6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-6.1.s390x",
                "product": {
                  "name": "docker-stable-24.0.9_ce-6.1.s390x",
                  "product_id": "docker-stable-24.0.9_ce-6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.19.3-6.1.s390x",
                "product": {
                  "name": "docker-stable-buildx-0.19.3-6.1.s390x",
                  "product_id": "docker-stable-buildx-0.19.3-6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "docker-stable-24.0.9_ce-6.1.x86_64",
                "product": {
                  "name": "docker-stable-24.0.9_ce-6.1.x86_64",
                  "product_id": "docker-stable-24.0.9_ce-6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
                "product": {
                  "name": "docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
                  "product_id": "docker-stable-bash-completion-24.0.9_ce-6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-buildx-0.19.3-6.1.x86_64",
                "product": {
                  "name": "docker-stable-buildx-0.19.3-6.1.x86_64",
                  "product_id": "docker-stable-buildx-0.19.3-6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
                "product": {
                  "name": "docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
                  "product_id": "docker-stable-fish-completion-24.0.9_ce-6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
                "product": {
                  "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
                  "product_id": "docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64",
                "product": {
                  "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64",
                  "product_id": "docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-6.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64"
        },
        "product_reference": "docker-stable-24.0.9_ce-6.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-6.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le"
        },
        "product_reference": "docker-stable-24.0.9_ce-6.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-6.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x"
        },
        "product_reference": "docker-stable-24.0.9_ce-6.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-24.0.9_ce-6.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64"
        },
        "product_reference": "docker-stable-24.0.9_ce-6.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-6.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-6.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-bash-completion-24.0.9_ce-6.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64"
        },
        "product_reference": "docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.19.3-6.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64"
        },
        "product_reference": "docker-stable-buildx-0.19.3-6.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.19.3-6.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le"
        },
        "product_reference": "docker-stable-buildx-0.19.3-6.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.19.3-6.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x"
        },
        "product_reference": "docker-stable-buildx-0.19.3-6.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-buildx-0.19.3-6.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64"
        },
        "product_reference": "docker-stable-buildx-0.19.3-6.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-6.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-6.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-fish-completion-24.0.9_ce-6.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64"
        },
        "product_reference": "docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64"
        },
        "product_reference": "docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
        },
        "product_reference": "docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2365",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-2365"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is an unknown functionality of the file io\\fabric\\sdk\\android\\services\\network\\PinningTrustManager.java of the component SHA-1 Handler. The manipulation leads to password hash with insufficient computational effort. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-256321 was assigned to this vulnerability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-2365",
          "url": "https://www.suse.com/security/cve/CVE-2024-2365"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-12-18T00:00:00Z",
          "details": "not set"
        }
      ],
      "title": "CVE-2024-2365"
    },
    {
      "cve": "CVE-2024-23650",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23650"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23650",
          "url": "https://www.suse.com/security/cve/CVE-2024-23650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219437 for CVE-2024-23650",
          "url": "https://bugzilla.suse.com/1219437"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-12-18T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23650"
    },
    {
      "cve": "CVE-2024-29018",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-29018"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby\u0027s networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature is frequently referred to as custom networks, as each network can have a different driver, set of parameters and thus behaviors. When creating a network, the `--internal` flag is used to designate a network as _internal_. The `internal` attribute in a docker-compose.yml file may also be used to mark a network _internal_, and other API clients may specify the `internal` parameter as well.\n\nWhen containers with networking are created, they are assigned unique network interfaces and IP addresses. The host serves as a router for non-internal networks, with a gateway IP that provides SNAT/DNAT to/from container IPs.\n\nContainers on an internal network may communicate between each other, but are precluded from communicating with any networks the host has access to (LAN or WAN) as no default route is configured, and firewall rules are set up to drop all outgoing traffic. Communication with the gateway IP address (and thus appropriately configured host services) is possible, and the host may communicate with any container IP directly.\n\nIn addition to configuring the Linux kernel\u0027s various networking features to enable container networking, `dockerd` directly provides some services to container networks. Principal among these is serving as a resolver, enabling service discovery, and resolution of names from an upstream resolver.\n\nWhen a DNS request for a name that does not correspond to a container is received, the request is forwarded to the configured upstream resolver. This request is made from the container\u0027s network namespace: the level of access and routing of traffic is the same as if the request was made by the container itself.\n\nAs a consequence of this design, containers solely attached to an internal network will be unable to resolve names using the upstream resolver, as the container itself is unable to communicate with that nameserver. Only the names of containers also attached to the internal network are able to be resolved.\n\nMany systems run a local forwarding DNS resolver. As the host and any containers have separate loopback devices, a consequence of the design described above is that containers are unable to resolve names from the host\u0027s configured resolver, as they cannot reach these addresses on the host loopback device. To bridge this gap, and to allow containers to properly resolve names even when a local forwarding resolver is used on a loopback address, `dockerd` detects this scenario and instead forward DNS requests from the host namework namespace. The loopback resolver then forwards the requests to its configured upstream resolvers, as expected.\n\nBecause `dockerd` forwards DNS requests to the host loopback device, bypassing the container network namespace\u0027s normal routing semantics entirely, internal networks can unexpectedly forward DNS requests to an external nameserver. By registering a domain for which they control the authoritative nameservers, an attacker could arrange for a compromised container to exfiltrate data by encoding it in DNS queries that will eventually be answered by their nameservers.\n\nDocker Desktop is not affected, as Docker Desktop always runs an internal resolver on a RFC 1918 address.\n\nMoby releases 26.0.0, 25.0.4, and 23.0.11 are patched to prevent forwarding any DNS requests from internal networks. As a workaround, run containers intended to be solely attached to internal networks with a custom upstream address, which will force all upstream DNS queries to be resolved from the container\u0027s network namespace.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
          "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-29018",
          "url": "https://www.suse.com/security/cve/CVE-2024-29018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1234089 for CVE-2024-29018",
          "url": "https://bugzilla.suse.com/1234089"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-bash-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-buildx-0.19.3-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-fish-completion-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-rootless-extras-24.0.9_ce-6.1.x86_64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.aarch64",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.ppc64le",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.s390x",
            "openSUSE Tumbleweed:docker-stable-zsh-completion-24.0.9_ce-6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-12-18T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-29018"
    }
  ]
}