{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for apptainer",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for apptainer fixes the following issues:\n\n- Make sure, digest values handled by the Go library\n  github.com/opencontainers/go-digest and used throughout the\n  Go-implemented containers ecosystem are always validated. This\n  prevents attackers from triggering unexpected authenticated\n  registry accesses. (CVE-2024-3727, boo#1224114).\n \n\n- Updated apptainer to version 1.3.0\n  * FUSE mounts are now supported in setuid mode, enabling full\n    functionality even when kernel filesystem mounts are insecure due to\n    unprivileged users having write access to raw filesystems in\n    containers. When allow `setuid-mount extfs = no` (the default) in\n    apptainer.conf, then the fuse2fs image driver will be used to mount\n    ext3 images in setuid mode instead of the kernel driver (ext3 images\n    are primarily used for the `--overlay` feature), restoring\n    functionality that was removed by default in Apptainer 1.1.8 because\n    of the security risk.\n    The allow `setuid-mount squashfs` configuration option in\n    `apptainer.conf` now has a new default called `iflimited` which allows\n    kernel squashfs mounts only if there is at least one `limit container`\n    option set or if Execution Control Lists are activated in ecl.toml.\n    If kernel squashfs mounts are are not allowed, then the squashfuse\n    image driver will be used instead.\n    `iflimited` is the default because if one of those limits are used\n    the system administrator ensures that unprivileged users do not have\n    write access to the containers, but on the other hand using FUSE\n    would enable a user to theoretically bypass the limits via `ptrace()`\n    because the FUSE process runs as that user.\n    The `fuse-overlayfs` image driver will also now be tried in setuid\n    mode if the kernel overlayfs driver does not work (for example if\n    one of the layers is a FUSE filesystem).  In addition, if `allow\n    setuid-mount encrypted = no` then the unprivileged gocryptfs format\n    will be used for encrypting SIF files instead of the kernel\n    device-mapper. If a SIF file was encrypted using the gocryptfs\n    format, it can now be mounted in setuid mode in addition to\n    non-setuid mode.\n  * Change the default in user namespace mode to use either kernel\n    overlayfs or fuse-overlayfs instead of the underlay feature for the\n    purpose of adding bind mount points. That was already the default in\n    setuid mode; this change makes it consistent. The underlay feature\n    can still be used with the `--underlay` option, but it is deprecated\n    because the implementation is complicated and measurements have\n    shown that the performance of underlay is similar to overlayfs and\n    fuse-overlayfs.\n    For now the underlay feature can be made the default again with a\n    new `preferred` value on the `enable underlay` configuration option.\n    Also the `--underlay` option can be used in setuid mode or as the\n    root user, although it was ignored previously.\n  * Prefer again to use kernel overlayfs over fuse-overlayfs when a\n    lower layer is FUSE and there\u0027s no writable upper layer, undoing the\n    change from 1.2.0. Another workaround was found for the problem that\n    change addressed. This applies in both setuid mode and in user\n    namespace mode.\n  * `--cwd` is now the preferred form of the flag for setting the\n    container\u0027s working directory, though `--pwd` is still supported for\n    compatibility.\n  * The way `--home` is handled when running as root (e.g. sudo apptainer)\n    or with `--fakeroot` has changed. Previously, we were only modifying\n    the `HOME` environment variable in these cases, while leaving the\n    container\u0027s `/etc/passwd` file unchanged (with its homedir field\n    pointing to `/root`, regardless of the value passed to `--home`). With\n    this change, both value of HOME and the contents of `/etc/passwd` in\n    the container will reflect the value passed to `--home` if the\n    container is readonly. If the container is writable, the\n    `/etc/passwd` file is left alone because it can interfere with\n    commands that want to modify it.\n  * The `--vm` and related flags to start apptainer inside a VM have been\n    removed. This functionality was related to the retired Singularity Desktop\n    / SyOS projects.\n  * The keyserver-related commands that were under `remote` have been moved to\n    their own, dedicated `keyserver` command. Run `apptainer help keyserver`\n    for more information.\n  * The commands related to OCI/Docker registries that were under `remote` have\n    been moved to their own, dedicated `registry` command. Run\n    `apptainer help registry` for more information.\n  * The the `remote list` subcommand now outputs only remote endpoints (with\n    keyservers and OCI/Docker registries having been moved to separate\n    commands), and the output has been streamlined.\n  * Adding a new remote endpoint using the `apptainer remote add` command will\n    now set the new endpoint as default. This behavior can be suppressed by\n    supplying the `--no-default` (or `-n`) flag to `remote add`.\n  * Skip parsing build definition file template variables after comments\n    beginning with a hash symbol.\n  * The global `/tmp` directory is no longer used for gocryptfs mountpoints.\n- New Features \u0026 Functionality\n  * The `remote status` command will now print the username, realname, and\n    email of the logged-in user, if available.\n  * Add monitoring feature support, which requires the usage of an\n    additional tool named `apptheus`, this tool will put apptainer starter\n    into a newly created cgroup and collect system metrics.\n  * A new `--no-pid` flag for `apptainer run/shell/exec` disables the PID\n    namespace inferred by `--containall` and `--compat`.\n  * Added `--config` option to `keyserver` commands.\n  * Honor an optional remoteName argument to the `keyserver list` command.\n  * Added the `APPTAINER_ENCRYPTION_PEM_DATA` env var to allow for\n    encrypting and running encrypted containers without a PEM file.\n  * Adding `--sharens` mode for `apptainer exec/run/shell`, which enables to\n    run multiple apptainer instances created by the same parent using\n    the same image in the same user namespace.\n- Make \u0027gocryptfs\u0027 an optional dependency.\n- Make apptainer definition templates version dependent.\n\n- Fix \u0027apptainer build\u0027 using signed packages from the SUSE\n  Registry (boo#1221364).\n\n- Updated apptainer to version 1.2.5\n  * Added `libnvidia-nvvm` to `nvliblist.conf`. Newer NVIDIA\n    Drivers (known with \u003e= 525.85.05) require this lib to compile\n    OpenCL programs against NVIDIA GPUs, i.e. `libnvidia-opencl`\n    depends on `libnvidia-nvvm`.\n  * Disable the usage of cgroup in instance creation when\n    `--fakeroot` is passed.\n  * Disable the usage of cgroup in instance creation when `hidepid`\n    mount option on `/proc` is set.\n  * Fixed a regression introduced in 1.2.0 where the user\u0027s\n    password file information was not copied in to the container\n    when there was a parent root-mapped user namespace (as is the\n    case for example in `cvmfsexec`).\n  * Added the upcoming NVIDIA driver library `libnvidia-gpucomp.so`\n    to the list of libraries to add to NVIDIA GPU-enabled\n    containers. Fixed missing error handling during the creation\n    of an encrypted image that lead to the generation of corrupted\n    images.\n  * Use `APPTAINER_TMPDIR` for temporary files during privileged\n    image encryption.\n  * If rootless unified cgroups v2 is available when starting an\n    image but `XDG_RUNTIME_DIR` or `DBUS_SESSION_BUS_ADDRESS` is\n    not set, print an info message that stats will not be available\n    instead of exiting with a fatal error.\n  * Allow templated build arguments to definition files to have\n    empty values.\n- Package .def templates separately for different SPs.\n\n- Do not build squashfuse, require it as a dependency.\n- Replace awkward \u0027Obsoletes: singularity-*\u0027 as well as the\n  \u0027Provides: Singularity\u0027 by \u0027Conflicts:\u0027 and drop the provides -\n  the versioning scheme does not match and we do not automatically\n  migrate from one to the other.\n- Exclude platforms which do not provide all build dependencies.\n\n- updated to 1.2.3 with following changes:\n  * The apptainer push/pull commands now show a progress bar for the oras\n    protocol like there was for docker and library protocols.\n  * The --nv and --rocm flags can now be used simultaneously.\n  * Fix the use of APPTAINER_CONFIGDIR with apptainer instance start and action\n    commands that refer to instance://.\n  * Fix the issue that apptainer would not read credentials from the Docker\n    fallback path ~/.docker/config.json if missing in the apptainer\n    credentials.\n\n- updated to 1.2.2 with following changes:\n  * Fix $APPTAINER_MESSAGELEVEL to correctly set the logging level.\n  * Fix build failures when in setuid mode and unprivileged user namespaces are\n    unavailable and the --fakeroot option is not selected.\n\n- updated to 1.2.1 to fix CVE-2023-38496 although not relevant as package is \n  compiled with setuid\n\n- update to 1.2.0 with following changes:\n  * binary is built reproducible which disables plugins\n  * Create the current working directory in a container when it doesn\u0027t exist.\n    This restores behavior as it was before singularity 3.6.0. As a result,\n    using --no-mount home won\u0027t have any effect when running apptainer from a\n    home directory and will require --no-mount home,cwd to avoid mounting that\n    directory.\n  * Handle current working directory paths containing symlinks both on the host\n    and in a container but pointing to different destinations. If detected, the\n    current working directory is not mounted when the destination directory in\n    the container exists.\n  * Destination mount points are now sorted by shortest path first to ensure\n    that a user bind doesn\u0027t override a previous bind path when set in\n    arbitrary order on the CLI. This is also applied to image binds.\n  * When the kernel supports unprivileged overlay mounts in a user namespace,\n    the container will be constructed by default using an overlay instead of an\n    underlay layout for bind mounts. A new --underlay action option can be used\n    to prefer underlay instead of overlay.\n  * sessiondir maxsize in apptainer.conf now defaults to 64 MiB for new\n    installations. This is an increase from 16 MiB in prior versions.\n  * The apptainer cache is now architecture aware, so the same home directory\n    cache can be shared by machines with different architectures.\n  * Overlay is blocked on the panfs filesystem, allowing sandbox directories to\n    be run from panfs without error.\n  * Lookup and store user/group information in stage one prior to entering any\n    namespaces, to fix an issue with winbind not correctly looking up\n    user/group information when using user namespaces.\n- New features / functionalities\n  * Support for unprivileged encryption of SIF files using gocryptfs.  This is\n    not compatible with privileged encryption, so containers encrypted by root\n    need to be rebuilt by an unprivileged user.\n  * Templating support for definition files. Users can now define variables in\n    definition files via a matching pair of double curly brackets. Variables of\n    the form {{ variable }} will be replaced by a value defined either by a\n    variable=value entry in the %arguments section of the definition file or\n    through new build options --build-arg or --build-arg-file.\n  * Add a new instance run command that will execute the runscript when an\n    instance is initiated instead of executing the startscript.\n  * The sign and verify commands now support signing and verification with\n    non-PGP key material by specifying the path to a private key via the --key\n    flag.\n  * The verify command now supports verification with X.509 certificates by\n    specifying the path to a certificate via the --certificate flag. By\n    default, the system root certificate pool is used as trust anchors unless\n    overridden via the --certificate-roots flag. A pool of intermediate\n    certificates that are not trust anchors, but can be used to form a\n    certificate chain, can also be specified via the\n    --certificate-intermediates flag.\n  * Support for online verification checks of X.509 certificates using OCSP\n    protocol via the new verify --ocsp-verify option.\n  * The instance stats command displays the resource usage every second. The\n    --no-stream option disables this interactive mode and shows the\n    point-in-time usage.\n  * Instances are now started in a cgroup by default, when run as root or when\n    unified cgroups v2 with systemd as manager is configured. This allows\n    apptainer instance stats to be supported by default when possible.\n  * The instance start command now accepts an optional --app \u003cname\u003e argument\n    which invokes a start script within the %appstart \u003cname\u003e section in the\n    definition file. The instance stop command still only requires the instance\n    name.\n  * The instance name is now available inside an instance via the new\n    APPTAINER_INSTANCE environment variable.\n  * The --no-mount flag now accepts the value bind-paths to disable mounting of\n    all bind path entries in apptainer.conf.\n    Support for DOCKER_HOST parsing when using docker-daemon://\n    DOCKER_USERNAME and DOCKER_PASSWORD supported without APPTAINER_ prefix.\n    Add new Linux capabilities CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE.\n  * The remote get-login-password command allows users to retrieve a remote\u0027s\n    token. This enables piping the secret directly into docker login while\n    preventing it from showing up in a shell\u0027s history.\n  * Define EUID in %environment alongside UID.\n  * In --rocm mode, the whole of /dev/dri is now bound into the container when\n    --contain is in use. This makes /dev/dri/render devices available, required\n    for later ROCm versions.\n\n- update to 1.1.9 with following changes:\n  * Remove warning about unknown xino=on option from fuse-overlayfs, introduced\n    in 1.1.8.\n  * Ignore extraneous warning from fuse-overlayfs about a readonly /proc.\n  * Fix dropped \u0027n\u0027 characters on some platforms in definition file stored as\n    part of SIF metadata.\n  * Remove duplicated group ids.\n  * Fix not being able to handle multiple entries in LD_PRELOAD when binding\n    fakeroot into container during apptainer startup for --fakeroot with\n    fakeroot command.\n\n- Included a fix for CVE-2023-30549 which is a vulnerability in setuid-root\n  installations of Apptainer iwhich was not active in the recent openSUSE\n  packages. Still this is included for completenss. The fix adds allow\n  setuid-mount configuration options encrypted, squashfs, and extfs, and makes\n  the default for extfs be \u0027no\u0027. That disables the use of extfs mounts\n  including for overlays or binds while in the setuid-root mode, while leaving\n  it enabled for unprivileged user namespace mode. The default for encrypted\n  and squashfs is \u0027yes\u0027.\n- Other bug fixes:\n  * Fix loop device \u0027no such device or address\u0027 spurious errors when using shared\n    loop devices.\n  * Add xino=on mount option for writable kernel overlay mount points to fix\n    inode numbers consistency after kernel cache flush (not applicable to\n    fuse-overlayfs).\n \n\n- updated to 1.1.7 with following changes:\n  * Allow gpu options such as --nv to be nested by always inheriting all\n    libraries bound in to a parent container\u0027s /.singularity.d/libs.\n  * Map the user\u0027s home directory to the root home directory by default in the\n    non-subuid fakeroot mode like it was in the subuid fakeroot mode, for both\n    action commands and building containers from definition files.\n  * Make the error message more helpful in another place where a remote is\n    found to have no library client.\n  * Avoid incorrect error when requesting fakeroot network.\n  * Pass computed LD_LIBRARY_PATH to wrapped unsquashfs. Fixes issues where\n    unsquashfs on host uses libraries in non-default paths.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2024-244",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_0244-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2024:0244-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3BEJQC6TDQZLJ4YE746IHLCFJFUQ2JKQ/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2024:0244-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3BEJQC6TDQZLJ4YE746IHLCFJFUQ2JKQ/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1221364",
        "url": "https://bugzilla.suse.com/1221364"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1224114",
        "url": "https://bugzilla.suse.com/1224114"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-30549 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-30549/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-38496 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-38496/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "Security update for apptainer",
    "tracking": {
      "current_release_date": "2024-08-16T04:02:52Z",
      "generator": {
        "date": "2024-08-16T04:02:52Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:0244-1",
      "initial_release_date": "2024-08-16T04:02:52Z",
      "revision_history": [
        {
          "date": "2024-08-16T04:02:52Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apptainer-1.3.0-bp155.3.3.2.aarch64",
                "product": {
                  "name": "apptainer-1.3.0-bp155.3.3.2.aarch64",
                  "product_id": "apptainer-1.3.0-bp155.3.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libsquashfuse0-0.5.0-bp155.2.1.aarch64",
                "product": {
                  "name": "libsquashfuse0-0.5.0-bp155.2.1.aarch64",
                  "product_id": "libsquashfuse0-0.5.0-bp155.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-0.5.0-bp155.2.1.aarch64",
                "product": {
                  "name": "squashfuse-0.5.0-bp155.2.1.aarch64",
                  "product_id": "squashfuse-0.5.0-bp155.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-devel-0.5.0-bp155.2.1.aarch64",
                "product": {
                  "name": "squashfuse-devel-0.5.0-bp155.2.1.aarch64",
                  "product_id": "squashfuse-devel-0.5.0-bp155.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-tools-0.5.0-bp155.2.1.aarch64",
                "product": {
                  "name": "squashfuse-tools-0.5.0-bp155.2.1.aarch64",
                  "product_id": "squashfuse-tools-0.5.0-bp155.2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsquashfuse0-0.5.0-bp155.2.1.i586",
                "product": {
                  "name": "libsquashfuse0-0.5.0-bp155.2.1.i586",
                  "product_id": "libsquashfuse0-0.5.0-bp155.2.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-0.5.0-bp155.2.1.i586",
                "product": {
                  "name": "squashfuse-0.5.0-bp155.2.1.i586",
                  "product_id": "squashfuse-0.5.0-bp155.2.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-devel-0.5.0-bp155.2.1.i586",
                "product": {
                  "name": "squashfuse-devel-0.5.0-bp155.2.1.i586",
                  "product_id": "squashfuse-devel-0.5.0-bp155.2.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-tools-0.5.0-bp155.2.1.i586",
                "product": {
                  "name": "squashfuse-tools-0.5.0-bp155.2.1.i586",
                  "product_id": "squashfuse-tools-0.5.0-bp155.2.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apptainer-leap-1.3.0-bp155.3.3.2.noarch",
                "product": {
                  "name": "apptainer-leap-1.3.0-bp155.3.3.2.noarch",
                  "product_id": "apptainer-leap-1.3.0-bp155.3.3.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
                "product": {
                  "name": "apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
                  "product_id": "apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
                "product": {
                  "name": "apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
                  "product_id": "apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
                "product": {
                  "name": "libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
                  "product_id": "libsquashfuse0-0.5.0-bp155.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-0.5.0-bp155.2.1.ppc64le",
                "product": {
                  "name": "squashfuse-0.5.0-bp155.2.1.ppc64le",
                  "product_id": "squashfuse-0.5.0-bp155.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
                "product": {
                  "name": "squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
                  "product_id": "squashfuse-devel-0.5.0-bp155.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
                "product": {
                  "name": "squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
                  "product_id": "squashfuse-tools-0.5.0-bp155.2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsquashfuse0-0.5.0-bp155.2.1.s390x",
                "product": {
                  "name": "libsquashfuse0-0.5.0-bp155.2.1.s390x",
                  "product_id": "libsquashfuse0-0.5.0-bp155.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-0.5.0-bp155.2.1.s390x",
                "product": {
                  "name": "squashfuse-0.5.0-bp155.2.1.s390x",
                  "product_id": "squashfuse-0.5.0-bp155.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-devel-0.5.0-bp155.2.1.s390x",
                "product": {
                  "name": "squashfuse-devel-0.5.0-bp155.2.1.s390x",
                  "product_id": "squashfuse-devel-0.5.0-bp155.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-tools-0.5.0-bp155.2.1.s390x",
                "product": {
                  "name": "squashfuse-tools-0.5.0-bp155.2.1.s390x",
                  "product_id": "squashfuse-tools-0.5.0-bp155.2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apptainer-1.3.0-bp155.3.3.2.x86_64",
                "product": {
                  "name": "apptainer-1.3.0-bp155.3.3.2.x86_64",
                  "product_id": "apptainer-1.3.0-bp155.3.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libsquashfuse0-0.5.0-bp155.2.1.x86_64",
                "product": {
                  "name": "libsquashfuse0-0.5.0-bp155.2.1.x86_64",
                  "product_id": "libsquashfuse0-0.5.0-bp155.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-0.5.0-bp155.2.1.x86_64",
                "product": {
                  "name": "squashfuse-0.5.0-bp155.2.1.x86_64",
                  "product_id": "squashfuse-0.5.0-bp155.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-devel-0.5.0-bp155.2.1.x86_64",
                "product": {
                  "name": "squashfuse-devel-0.5.0-bp155.2.1.x86_64",
                  "product_id": "squashfuse-devel-0.5.0-bp155.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "squashfuse-tools-0.5.0-bp155.2.1.x86_64",
                "product": {
                  "name": "squashfuse-tools-0.5.0-bp155.2.1.x86_64",
                  "product_id": "squashfuse-tools-0.5.0-bp155.2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15 SP5",
                "product": {
                  "name": "SUSE Package Hub 15 SP5",
                  "product_id": "SUSE Package Hub 15 SP5"
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.5",
                "product": {
                  "name": "openSUSE Leap 15.5",
                  "product_id": "openSUSE Leap 15.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-bp155.3.3.2.aarch64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64"
        },
        "product_reference": "apptainer-1.3.0-bp155.3.3.2.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-bp155.3.3.2.x86_64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64"
        },
        "product_reference": "apptainer-1.3.0-bp155.3.3.2.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-leap-1.3.0-bp155.3.3.2.noarch as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch"
        },
        "product_reference": "apptainer-leap-1.3.0-bp155.3.3.2.noarch",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch"
        },
        "product_reference": "apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch"
        },
        "product_reference": "apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.aarch64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.i586 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.ppc64le as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.s390x as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.x86_64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.aarch64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.i586 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.ppc64le as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.s390x as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.x86_64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.aarch64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.i586 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.ppc64le as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.s390x as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.x86_64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.aarch64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.i586 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.ppc64le as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.s390x as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.x86_64 as component of SUSE Package Hub 15 SP5",
          "product_id": "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-bp155.3.3.2.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64"
        },
        "product_reference": "apptainer-1.3.0-bp155.3.3.2.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-bp155.3.3.2.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64"
        },
        "product_reference": "apptainer-1.3.0-bp155.3.3.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-leap-1.3.0-bp155.3.3.2.noarch as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch"
        },
        "product_reference": "apptainer-leap-1.3.0-bp155.3.3.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch"
        },
        "product_reference": "apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch"
        },
        "product_reference": "apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.i586 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsquashfuse0-0.5.0-bp155.2.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "libsquashfuse0-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.i586 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-0.5.0-bp155.2.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "squashfuse-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.i586 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-devel-0.5.0-bp155.2.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "squashfuse-devel-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.aarch64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.i586 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.ppc64le as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.s390x as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "squashfuse-tools-0.5.0-bp155.2.1.x86_64 as component of openSUSE Leap 15.5",
          "product_id": "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
        },
        "product_reference": "squashfuse-tools-0.5.0-bp155.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-30549",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-30549"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer \u003c 1.1.0 and installations that include apptainer-suid \u003c 1.1.8 on older operating systems where that CVE has not been patched. That includes Red Hat Enterprise Linux 7, Debian 10 buster (unless the linux-5.10 package is installed), Ubuntu 18.04 bionic and Ubuntu 20.04 focal. Use-after-free flaws in the kernel can be used to attack the kernel for denial of service and potentially for privilege escalation.\n\nApptainer 1.1.8 includes a patch that by default disables mounting of extfs filesystem types in setuid-root mode, while continuing to allow mounting of extfs filesystems in non-setuid \"rootless\" mode using fuse2fs.\n\nSome workarounds are possible. Either do not install apptainer-suid (for versions 1.1.0 through 1.1.7) or set `allow setuid = no` in apptainer.conf.  This requires having unprivileged user namespaces enabled and except for apptainer 1.1.x versions will disallow mounting of sif files, extfs files, and squashfs files in addition to other, less significant impacts.  (Encrypted sif files are also not supported unprivileged in apptainer 1.1.x.). Alternatively, use the `limit containers` options in apptainer.conf/singularity.conf to limit sif files to trusted users, groups, and/or paths, and set `allow container extfs = no` to disallow mounting of extfs overlay files.  The latter option by itself does not disallow mounting of extfs overlay partitions inside SIF files, so that\u0027s why the former options are also needed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
          "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
          "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
          "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
          "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-30549",
          "url": "https://www.suse.com/security/cve/CVE-2023-30549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1210859 for CVE-2023-30549",
          "url": "https://bugzilla.suse.com/1210859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T04:02:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-30549"
    },
    {
      "cve": "CVE-2023-38496",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-38496"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
          "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
          "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
          "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
          "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-38496",
          "url": "https://www.suse.com/security/cve/CVE-2023-38496"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1213659 for CVE-2023-38496",
          "url": "https://bugzilla.suse.com/1213659"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T04:02:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-38496"
    },
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
          "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
          "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
          "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
          "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
          "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
          "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "SUSE Package Hub 15 SP5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "SUSE Package Hub 15 SP5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "SUSE Package Hub 15 SP5:squashfuse-tools-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.aarch64",
            "openSUSE Leap 15.5:apptainer-1.3.0-bp155.3.3.2.x86_64",
            "openSUSE Leap 15.5:apptainer-leap-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_5-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:apptainer-sle15_6-1.3.0-bp155.3.3.2.noarch",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:libsquashfuse0-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-devel-0.5.0-bp155.2.1.x86_64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.aarch64",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.i586",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.ppc64le",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.s390x",
            "openSUSE Leap 15.5:squashfuse-tools-0.5.0-bp155.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-08-16T04:02:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "apptainer-1.3.0-2.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the apptainer-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13951",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13951-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "apptainer-1.3.0-2.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13951-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apptainer-1.3.0-2.1.aarch64",
                "product": {
                  "name": "apptainer-1.3.0-2.1.aarch64",
                  "product_id": "apptainer-1.3.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-leap-1.3.0-2.1.aarch64",
                "product": {
                  "name": "apptainer-leap-1.3.0-2.1.aarch64",
                  "product_id": "apptainer-leap-1.3.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_5-1.3.0-2.1.aarch64",
                "product": {
                  "name": "apptainer-sle15_5-1.3.0-2.1.aarch64",
                  "product_id": "apptainer-sle15_5-1.3.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_6-1.3.0-2.1.aarch64",
                "product": {
                  "name": "apptainer-sle15_6-1.3.0-2.1.aarch64",
                  "product_id": "apptainer-sle15_6-1.3.0-2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apptainer-1.3.0-2.1.ppc64le",
                "product": {
                  "name": "apptainer-1.3.0-2.1.ppc64le",
                  "product_id": "apptainer-1.3.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-leap-1.3.0-2.1.ppc64le",
                "product": {
                  "name": "apptainer-leap-1.3.0-2.1.ppc64le",
                  "product_id": "apptainer-leap-1.3.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_5-1.3.0-2.1.ppc64le",
                "product": {
                  "name": "apptainer-sle15_5-1.3.0-2.1.ppc64le",
                  "product_id": "apptainer-sle15_5-1.3.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_6-1.3.0-2.1.ppc64le",
                "product": {
                  "name": "apptainer-sle15_6-1.3.0-2.1.ppc64le",
                  "product_id": "apptainer-sle15_6-1.3.0-2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apptainer-1.3.0-2.1.s390x",
                "product": {
                  "name": "apptainer-1.3.0-2.1.s390x",
                  "product_id": "apptainer-1.3.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-leap-1.3.0-2.1.s390x",
                "product": {
                  "name": "apptainer-leap-1.3.0-2.1.s390x",
                  "product_id": "apptainer-leap-1.3.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_5-1.3.0-2.1.s390x",
                "product": {
                  "name": "apptainer-sle15_5-1.3.0-2.1.s390x",
                  "product_id": "apptainer-sle15_5-1.3.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_6-1.3.0-2.1.s390x",
                "product": {
                  "name": "apptainer-sle15_6-1.3.0-2.1.s390x",
                  "product_id": "apptainer-sle15_6-1.3.0-2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apptainer-1.3.0-2.1.x86_64",
                "product": {
                  "name": "apptainer-1.3.0-2.1.x86_64",
                  "product_id": "apptainer-1.3.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-leap-1.3.0-2.1.x86_64",
                "product": {
                  "name": "apptainer-leap-1.3.0-2.1.x86_64",
                  "product_id": "apptainer-leap-1.3.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_5-1.3.0-2.1.x86_64",
                "product": {
                  "name": "apptainer-sle15_5-1.3.0-2.1.x86_64",
                  "product_id": "apptainer-sle15_5-1.3.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apptainer-sle15_6-1.3.0-2.1.x86_64",
                "product": {
                  "name": "apptainer-sle15_6-1.3.0-2.1.x86_64",
                  "product_id": "apptainer-sle15_6-1.3.0-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-1.3.0-2.1.aarch64"
        },
        "product_reference": "apptainer-1.3.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-1.3.0-2.1.ppc64le"
        },
        "product_reference": "apptainer-1.3.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-1.3.0-2.1.s390x"
        },
        "product_reference": "apptainer-1.3.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-1.3.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-1.3.0-2.1.x86_64"
        },
        "product_reference": "apptainer-1.3.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-leap-1.3.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.aarch64"
        },
        "product_reference": "apptainer-leap-1.3.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-leap-1.3.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.ppc64le"
        },
        "product_reference": "apptainer-leap-1.3.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-leap-1.3.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.s390x"
        },
        "product_reference": "apptainer-leap-1.3.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-leap-1.3.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.x86_64"
        },
        "product_reference": "apptainer-leap-1.3.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_5-1.3.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.aarch64"
        },
        "product_reference": "apptainer-sle15_5-1.3.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_5-1.3.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.ppc64le"
        },
        "product_reference": "apptainer-sle15_5-1.3.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_5-1.3.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.s390x"
        },
        "product_reference": "apptainer-sle15_5-1.3.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_5-1.3.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.x86_64"
        },
        "product_reference": "apptainer-sle15_5-1.3.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_6-1.3.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.aarch64"
        },
        "product_reference": "apptainer-sle15_6-1.3.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_6-1.3.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.ppc64le"
        },
        "product_reference": "apptainer-sle15_6-1.3.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_6-1.3.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.s390x"
        },
        "product_reference": "apptainer-sle15_6-1.3.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apptainer-sle15_6-1.3.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.x86_64"
        },
        "product_reference": "apptainer-sle15_6-1.3.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:apptainer-1.3.0-2.1.aarch64",
          "openSUSE Tumbleweed:apptainer-1.3.0-2.1.ppc64le",
          "openSUSE Tumbleweed:apptainer-1.3.0-2.1.s390x",
          "openSUSE Tumbleweed:apptainer-1.3.0-2.1.x86_64",
          "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.aarch64",
          "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.ppc64le",
          "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.s390x",
          "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.x86_64",
          "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.aarch64",
          "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.ppc64le",
          "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.s390x",
          "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.x86_64",
          "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.aarch64",
          "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.ppc64le",
          "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.s390x",
          "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.x86_64",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.x86_64",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.x86_64",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-1.3.0-2.1.x86_64",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-leap-1.3.0-2.1.x86_64",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-sle15_5-1.3.0-2.1.x86_64",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.aarch64",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.ppc64le",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.s390x",
            "openSUSE Tumbleweed:apptainer-sle15_6-1.3.0-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "buildah-1.35.4-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the buildah-1.35.4-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13952",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13952-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-28180 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-28180/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "buildah-1.35.4-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13952-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-1.35.4-1.1.aarch64",
                "product": {
                  "name": "buildah-1.35.4-1.1.aarch64",
                  "product_id": "buildah-1.35.4-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-1.35.4-1.1.ppc64le",
                "product": {
                  "name": "buildah-1.35.4-1.1.ppc64le",
                  "product_id": "buildah-1.35.4-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-1.35.4-1.1.s390x",
                "product": {
                  "name": "buildah-1.35.4-1.1.s390x",
                  "product_id": "buildah-1.35.4-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-1.35.4-1.1.x86_64",
                "product": {
                  "name": "buildah-1.35.4-1.1.x86_64",
                  "product_id": "buildah-1.35.4-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-1.35.4-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:buildah-1.35.4-1.1.aarch64"
        },
        "product_reference": "buildah-1.35.4-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-1.35.4-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:buildah-1.35.4-1.1.ppc64le"
        },
        "product_reference": "buildah-1.35.4-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-1.35.4-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:buildah-1.35.4-1.1.s390x"
        },
        "product_reference": "buildah-1.35.4-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-1.35.4-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:buildah-1.35.4-1.1.x86_64"
        },
        "product_reference": "buildah-1.35.4-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28180",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-28180"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.aarch64",
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.ppc64le",
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.s390x",
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-28180",
          "url": "https://www.suse.com/security/cve/CVE-2024-28180"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1234984 for CVE-2024-28180",
          "url": "https://bugzilla.suse.com/1234984"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.aarch64",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.ppc64le",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.s390x",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.aarch64",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.ppc64le",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.s390x",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-28180"
    },
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.aarch64",
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.ppc64le",
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.s390x",
          "openSUSE Tumbleweed:buildah-1.35.4-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.aarch64",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.ppc64le",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.s390x",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.aarch64",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.ppc64le",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.s390x",
            "openSUSE Tumbleweed:buildah-1.35.4-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "podman-5.0.3-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the podman-5.0.3-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13960",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13960-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "podman-5.0.3-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13960-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-5.0.3-1.1.aarch64",
                "product": {
                  "name": "podman-5.0.3-1.1.aarch64",
                  "product_id": "podman-5.0.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-docker-5.0.3-1.1.aarch64",
                "product": {
                  "name": "podman-docker-5.0.3-1.1.aarch64",
                  "product_id": "podman-docker-5.0.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-5.0.3-1.1.aarch64",
                "product": {
                  "name": "podman-remote-5.0.3-1.1.aarch64",
                  "product_id": "podman-remote-5.0.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "podmansh-5.0.3-1.1.aarch64",
                "product": {
                  "name": "podmansh-5.0.3-1.1.aarch64",
                  "product_id": "podmansh-5.0.3-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-5.0.3-1.1.ppc64le",
                "product": {
                  "name": "podman-5.0.3-1.1.ppc64le",
                  "product_id": "podman-5.0.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "podman-docker-5.0.3-1.1.ppc64le",
                "product": {
                  "name": "podman-docker-5.0.3-1.1.ppc64le",
                  "product_id": "podman-docker-5.0.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-5.0.3-1.1.ppc64le",
                "product": {
                  "name": "podman-remote-5.0.3-1.1.ppc64le",
                  "product_id": "podman-remote-5.0.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "podmansh-5.0.3-1.1.ppc64le",
                "product": {
                  "name": "podmansh-5.0.3-1.1.ppc64le",
                  "product_id": "podmansh-5.0.3-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-5.0.3-1.1.s390x",
                "product": {
                  "name": "podman-5.0.3-1.1.s390x",
                  "product_id": "podman-5.0.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "podman-docker-5.0.3-1.1.s390x",
                "product": {
                  "name": "podman-docker-5.0.3-1.1.s390x",
                  "product_id": "podman-docker-5.0.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-5.0.3-1.1.s390x",
                "product": {
                  "name": "podman-remote-5.0.3-1.1.s390x",
                  "product_id": "podman-remote-5.0.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "podmansh-5.0.3-1.1.s390x",
                "product": {
                  "name": "podmansh-5.0.3-1.1.s390x",
                  "product_id": "podmansh-5.0.3-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-5.0.3-1.1.x86_64",
                "product": {
                  "name": "podman-5.0.3-1.1.x86_64",
                  "product_id": "podman-5.0.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-docker-5.0.3-1.1.x86_64",
                "product": {
                  "name": "podman-docker-5.0.3-1.1.x86_64",
                  "product_id": "podman-docker-5.0.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-5.0.3-1.1.x86_64",
                "product": {
                  "name": "podman-remote-5.0.3-1.1.x86_64",
                  "product_id": "podman-remote-5.0.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "podmansh-5.0.3-1.1.x86_64",
                "product": {
                  "name": "podmansh-5.0.3-1.1.x86_64",
                  "product_id": "podmansh-5.0.3-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-5.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-5.0.3-1.1.aarch64"
        },
        "product_reference": "podman-5.0.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-5.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-5.0.3-1.1.ppc64le"
        },
        "product_reference": "podman-5.0.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-5.0.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-5.0.3-1.1.s390x"
        },
        "product_reference": "podman-5.0.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-5.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-5.0.3-1.1.x86_64"
        },
        "product_reference": "podman-5.0.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-5.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.aarch64"
        },
        "product_reference": "podman-docker-5.0.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-5.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.ppc64le"
        },
        "product_reference": "podman-docker-5.0.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-5.0.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.s390x"
        },
        "product_reference": "podman-docker-5.0.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-5.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.x86_64"
        },
        "product_reference": "podman-docker-5.0.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-5.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.aarch64"
        },
        "product_reference": "podman-remote-5.0.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-5.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.ppc64le"
        },
        "product_reference": "podman-remote-5.0.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-5.0.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.s390x"
        },
        "product_reference": "podman-remote-5.0.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-5.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.x86_64"
        },
        "product_reference": "podman-remote-5.0.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podmansh-5.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podmansh-5.0.3-1.1.aarch64"
        },
        "product_reference": "podmansh-5.0.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podmansh-5.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podmansh-5.0.3-1.1.ppc64le"
        },
        "product_reference": "podmansh-5.0.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podmansh-5.0.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podmansh-5.0.3-1.1.s390x"
        },
        "product_reference": "podmansh-5.0.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podmansh-5.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:podmansh-5.0.3-1.1.x86_64"
        },
        "product_reference": "podmansh-5.0.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:podman-5.0.3-1.1.aarch64",
          "openSUSE Tumbleweed:podman-5.0.3-1.1.ppc64le",
          "openSUSE Tumbleweed:podman-5.0.3-1.1.s390x",
          "openSUSE Tumbleweed:podman-5.0.3-1.1.x86_64",
          "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.aarch64",
          "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.ppc64le",
          "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.s390x",
          "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.x86_64",
          "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.aarch64",
          "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.ppc64le",
          "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.s390x",
          "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.x86_64",
          "openSUSE Tumbleweed:podmansh-5.0.3-1.1.aarch64",
          "openSUSE Tumbleweed:podmansh-5.0.3-1.1.ppc64le",
          "openSUSE Tumbleweed:podmansh-5.0.3-1.1.s390x",
          "openSUSE Tumbleweed:podmansh-5.0.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:podman-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podman-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podman-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podman-5.0.3-1.1.x86_64",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.x86_64",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.x86_64",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:podman-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podman-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podman-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podman-5.0.3-1.1.x86_64",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podman-docker-5.0.3-1.1.x86_64",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podman-remote-5.0.3-1.1.x86_64",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.aarch64",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.ppc64le",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.s390x",
            "openSUSE Tumbleweed:podmansh-5.0.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "containerized-data-importer-api-1.59.0-2.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the containerized-data-importer-api-1.59.0-2.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13963",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13963-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "containerized-data-importer-api-1.59.0-2.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13963-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerized-data-importer-api-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-api-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-api-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-cloner-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-cloner-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-cloner-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-controller-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-controller-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-controller-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-importer-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-importer-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-importer-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-manifests-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-manifests-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-manifests-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-operator-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-operator-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-operator-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadserver-1.59.0-2.1.aarch64",
                "product": {
                  "name": "containerized-data-importer-uploadserver-1.59.0-2.1.aarch64",
                  "product_id": "containerized-data-importer-uploadserver-1.59.0-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "obs-service-cdi_containers_meta-1.59.0-2.1.aarch64",
                "product": {
                  "name": "obs-service-cdi_containers_meta-1.59.0-2.1.aarch64",
                  "product_id": "obs-service-cdi_containers_meta-1.59.0-2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerized-data-importer-api-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-api-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-api-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-cloner-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-cloner-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-cloner-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-controller-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-controller-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-controller-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-importer-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-importer-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-importer-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-manifests-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-manifests-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-manifests-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-operator-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-operator-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-operator-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le",
                  "product_id": "containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le",
                "product": {
                  "name": "obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le",
                  "product_id": "obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerized-data-importer-api-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-api-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-api-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-cloner-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-cloner-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-cloner-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-controller-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-controller-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-controller-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-importer-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-importer-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-importer-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-manifests-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-manifests-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-manifests-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-operator-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-operator-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-operator-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-uploadproxy-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadserver-1.59.0-2.1.s390x",
                "product": {
                  "name": "containerized-data-importer-uploadserver-1.59.0-2.1.s390x",
                  "product_id": "containerized-data-importer-uploadserver-1.59.0-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "obs-service-cdi_containers_meta-1.59.0-2.1.s390x",
                "product": {
                  "name": "obs-service-cdi_containers_meta-1.59.0-2.1.s390x",
                  "product_id": "obs-service-cdi_containers_meta-1.59.0-2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "containerized-data-importer-api-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-api-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-api-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-cloner-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-cloner-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-cloner-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-controller-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-controller-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-controller-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-importer-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-importer-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-importer-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-manifests-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-manifests-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-manifests-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-operator-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-operator-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-operator-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "containerized-data-importer-uploadserver-1.59.0-2.1.x86_64",
                "product": {
                  "name": "containerized-data-importer-uploadserver-1.59.0-2.1.x86_64",
                  "product_id": "containerized-data-importer-uploadserver-1.59.0-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "obs-service-cdi_containers_meta-1.59.0-2.1.x86_64",
                "product": {
                  "name": "obs-service-cdi_containers_meta-1.59.0-2.1.x86_64",
                  "product_id": "obs-service-cdi_containers_meta-1.59.0-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-api-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-api-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-api-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-api-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-api-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-api-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-api-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-api-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-cloner-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-cloner-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-cloner-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-cloner-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-cloner-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-cloner-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-cloner-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-cloner-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-controller-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-controller-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-controller-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-controller-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-controller-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-controller-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-controller-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-controller-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-importer-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-importer-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-importer-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-importer-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-importer-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-importer-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-importer-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-importer-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-manifests-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-manifests-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-manifests-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-manifests-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-manifests-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-manifests-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-manifests-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-manifests-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-operator-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-operator-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-operator-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-operator-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-operator-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-operator-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-operator-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-operator-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-uploadproxy-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadserver-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.aarch64"
        },
        "product_reference": "containerized-data-importer-uploadserver-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le"
        },
        "product_reference": "containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadserver-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.s390x"
        },
        "product_reference": "containerized-data-importer-uploadserver-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "containerized-data-importer-uploadserver-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.x86_64"
        },
        "product_reference": "containerized-data-importer-uploadserver-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "obs-service-cdi_containers_meta-1.59.0-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.aarch64"
        },
        "product_reference": "obs-service-cdi_containers_meta-1.59.0-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le"
        },
        "product_reference": "obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "obs-service-cdi_containers_meta-1.59.0-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.s390x"
        },
        "product_reference": "obs-service-cdi_containers_meta-1.59.0-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "obs-service-cdi_containers_meta-1.59.0-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.x86_64"
        },
        "product_reference": "obs-service-cdi_containers_meta-1.59.0-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.x86_64",
          "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.aarch64",
          "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le",
          "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.s390x",
          "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-api-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-cloner-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-controller-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-importer-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-manifests-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-operator-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-uploadproxy-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:containerized-data-importer-uploadserver-1.59.0-2.1.x86_64",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.aarch64",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.ppc64le",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.s390x",
            "openSUSE Tumbleweed:obs-service-cdi_containers_meta-1.59.0-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "warewulf4-4.5.2-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the warewulf4-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13975",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13975-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "warewulf4-4.5.2-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13975-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "warewulf4-4.5.2-1.1.aarch64",
                "product": {
                  "name": "warewulf4-4.5.2-1.1.aarch64",
                  "product_id": "warewulf4-4.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-man-4.5.2-1.1.aarch64",
                "product": {
                  "name": "warewulf4-man-4.5.2-1.1.aarch64",
                  "product_id": "warewulf4-man-4.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-4.5.2-1.1.aarch64",
                "product": {
                  "name": "warewulf4-overlay-4.5.2-1.1.aarch64",
                  "product_id": "warewulf4-overlay-4.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-slurm-4.5.2-1.1.aarch64",
                "product": {
                  "name": "warewulf4-overlay-slurm-4.5.2-1.1.aarch64",
                  "product_id": "warewulf4-overlay-slurm-4.5.2-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "warewulf4-4.5.2-1.1.ppc64le",
                "product": {
                  "name": "warewulf4-4.5.2-1.1.ppc64le",
                  "product_id": "warewulf4-4.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-man-4.5.2-1.1.ppc64le",
                "product": {
                  "name": "warewulf4-man-4.5.2-1.1.ppc64le",
                  "product_id": "warewulf4-man-4.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-4.5.2-1.1.ppc64le",
                "product": {
                  "name": "warewulf4-overlay-4.5.2-1.1.ppc64le",
                  "product_id": "warewulf4-overlay-4.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-slurm-4.5.2-1.1.ppc64le",
                "product": {
                  "name": "warewulf4-overlay-slurm-4.5.2-1.1.ppc64le",
                  "product_id": "warewulf4-overlay-slurm-4.5.2-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "warewulf4-4.5.2-1.1.s390x",
                "product": {
                  "name": "warewulf4-4.5.2-1.1.s390x",
                  "product_id": "warewulf4-4.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-man-4.5.2-1.1.s390x",
                "product": {
                  "name": "warewulf4-man-4.5.2-1.1.s390x",
                  "product_id": "warewulf4-man-4.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-4.5.2-1.1.s390x",
                "product": {
                  "name": "warewulf4-overlay-4.5.2-1.1.s390x",
                  "product_id": "warewulf4-overlay-4.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-slurm-4.5.2-1.1.s390x",
                "product": {
                  "name": "warewulf4-overlay-slurm-4.5.2-1.1.s390x",
                  "product_id": "warewulf4-overlay-slurm-4.5.2-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "warewulf4-4.5.2-1.1.x86_64",
                "product": {
                  "name": "warewulf4-4.5.2-1.1.x86_64",
                  "product_id": "warewulf4-4.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-man-4.5.2-1.1.x86_64",
                "product": {
                  "name": "warewulf4-man-4.5.2-1.1.x86_64",
                  "product_id": "warewulf4-man-4.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-4.5.2-1.1.x86_64",
                "product": {
                  "name": "warewulf4-overlay-4.5.2-1.1.x86_64",
                  "product_id": "warewulf4-overlay-4.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "warewulf4-overlay-slurm-4.5.2-1.1.x86_64",
                "product": {
                  "name": "warewulf4-overlay-slurm-4.5.2-1.1.x86_64",
                  "product_id": "warewulf4-overlay-slurm-4.5.2-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-4.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.aarch64"
        },
        "product_reference": "warewulf4-4.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-4.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.ppc64le"
        },
        "product_reference": "warewulf4-4.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-4.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.s390x"
        },
        "product_reference": "warewulf4-4.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-4.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.x86_64"
        },
        "product_reference": "warewulf4-4.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-man-4.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.aarch64"
        },
        "product_reference": "warewulf4-man-4.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-man-4.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.ppc64le"
        },
        "product_reference": "warewulf4-man-4.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-man-4.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.s390x"
        },
        "product_reference": "warewulf4-man-4.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-man-4.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.x86_64"
        },
        "product_reference": "warewulf4-man-4.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-4.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.aarch64"
        },
        "product_reference": "warewulf4-overlay-4.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-4.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.ppc64le"
        },
        "product_reference": "warewulf4-overlay-4.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-4.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.s390x"
        },
        "product_reference": "warewulf4-overlay-4.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-4.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.x86_64"
        },
        "product_reference": "warewulf4-overlay-4.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-slurm-4.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.aarch64"
        },
        "product_reference": "warewulf4-overlay-slurm-4.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-slurm-4.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.ppc64le"
        },
        "product_reference": "warewulf4-overlay-slurm-4.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-slurm-4.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.s390x"
        },
        "product_reference": "warewulf4-overlay-slurm-4.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "warewulf4-overlay-slurm-4.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.x86_64"
        },
        "product_reference": "warewulf4-overlay-slurm-4.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.s390x",
          "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.s390x",
          "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.s390x",
          "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.s390x",
          "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-4.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-man-4.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-overlay-4.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.s390x",
            "openSUSE Tumbleweed:warewulf4-overlay-slurm-4.5.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "skopeo-1.15.1-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the skopeo-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14019",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14019-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "skopeo-1.15.1-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14019-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-1.15.1-1.1.aarch64",
                "product": {
                  "name": "skopeo-1.15.1-1.1.aarch64",
                  "product_id": "skopeo-1.15.1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-bash-completion-1.15.1-1.1.aarch64",
                "product": {
                  "name": "skopeo-bash-completion-1.15.1-1.1.aarch64",
                  "product_id": "skopeo-bash-completion-1.15.1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-fish-completion-1.15.1-1.1.aarch64",
                "product": {
                  "name": "skopeo-fish-completion-1.15.1-1.1.aarch64",
                  "product_id": "skopeo-fish-completion-1.15.1-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-zsh-completion-1.15.1-1.1.aarch64",
                "product": {
                  "name": "skopeo-zsh-completion-1.15.1-1.1.aarch64",
                  "product_id": "skopeo-zsh-completion-1.15.1-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-1.15.1-1.1.ppc64le",
                "product": {
                  "name": "skopeo-1.15.1-1.1.ppc64le",
                  "product_id": "skopeo-1.15.1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-bash-completion-1.15.1-1.1.ppc64le",
                "product": {
                  "name": "skopeo-bash-completion-1.15.1-1.1.ppc64le",
                  "product_id": "skopeo-bash-completion-1.15.1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-fish-completion-1.15.1-1.1.ppc64le",
                "product": {
                  "name": "skopeo-fish-completion-1.15.1-1.1.ppc64le",
                  "product_id": "skopeo-fish-completion-1.15.1-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-zsh-completion-1.15.1-1.1.ppc64le",
                "product": {
                  "name": "skopeo-zsh-completion-1.15.1-1.1.ppc64le",
                  "product_id": "skopeo-zsh-completion-1.15.1-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-1.15.1-1.1.s390x",
                "product": {
                  "name": "skopeo-1.15.1-1.1.s390x",
                  "product_id": "skopeo-1.15.1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-bash-completion-1.15.1-1.1.s390x",
                "product": {
                  "name": "skopeo-bash-completion-1.15.1-1.1.s390x",
                  "product_id": "skopeo-bash-completion-1.15.1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-fish-completion-1.15.1-1.1.s390x",
                "product": {
                  "name": "skopeo-fish-completion-1.15.1-1.1.s390x",
                  "product_id": "skopeo-fish-completion-1.15.1-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-zsh-completion-1.15.1-1.1.s390x",
                "product": {
                  "name": "skopeo-zsh-completion-1.15.1-1.1.s390x",
                  "product_id": "skopeo-zsh-completion-1.15.1-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-1.15.1-1.1.x86_64",
                "product": {
                  "name": "skopeo-1.15.1-1.1.x86_64",
                  "product_id": "skopeo-1.15.1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-bash-completion-1.15.1-1.1.x86_64",
                "product": {
                  "name": "skopeo-bash-completion-1.15.1-1.1.x86_64",
                  "product_id": "skopeo-bash-completion-1.15.1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-fish-completion-1.15.1-1.1.x86_64",
                "product": {
                  "name": "skopeo-fish-completion-1.15.1-1.1.x86_64",
                  "product_id": "skopeo-fish-completion-1.15.1-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-zsh-completion-1.15.1-1.1.x86_64",
                "product": {
                  "name": "skopeo-zsh-completion-1.15.1-1.1.x86_64",
                  "product_id": "skopeo-zsh-completion-1.15.1-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-1.15.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-1.15.1-1.1.aarch64"
        },
        "product_reference": "skopeo-1.15.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-1.15.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-1.15.1-1.1.ppc64le"
        },
        "product_reference": "skopeo-1.15.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-1.15.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-1.15.1-1.1.s390x"
        },
        "product_reference": "skopeo-1.15.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-1.15.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-1.15.1-1.1.x86_64"
        },
        "product_reference": "skopeo-1.15.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-bash-completion-1.15.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.aarch64"
        },
        "product_reference": "skopeo-bash-completion-1.15.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-bash-completion-1.15.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.ppc64le"
        },
        "product_reference": "skopeo-bash-completion-1.15.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-bash-completion-1.15.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.s390x"
        },
        "product_reference": "skopeo-bash-completion-1.15.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-bash-completion-1.15.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.x86_64"
        },
        "product_reference": "skopeo-bash-completion-1.15.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-fish-completion-1.15.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.aarch64"
        },
        "product_reference": "skopeo-fish-completion-1.15.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-fish-completion-1.15.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.ppc64le"
        },
        "product_reference": "skopeo-fish-completion-1.15.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-fish-completion-1.15.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.s390x"
        },
        "product_reference": "skopeo-fish-completion-1.15.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-fish-completion-1.15.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.x86_64"
        },
        "product_reference": "skopeo-fish-completion-1.15.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-zsh-completion-1.15.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.aarch64"
        },
        "product_reference": "skopeo-zsh-completion-1.15.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-zsh-completion-1.15.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.ppc64le"
        },
        "product_reference": "skopeo-zsh-completion-1.15.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-zsh-completion-1.15.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.s390x"
        },
        "product_reference": "skopeo-zsh-completion-1.15.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-zsh-completion-1.15.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.x86_64"
        },
        "product_reference": "skopeo-zsh-completion-1.15.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:skopeo-1.15.1-1.1.aarch64",
          "openSUSE Tumbleweed:skopeo-1.15.1-1.1.ppc64le",
          "openSUSE Tumbleweed:skopeo-1.15.1-1.1.s390x",
          "openSUSE Tumbleweed:skopeo-1.15.1-1.1.x86_64",
          "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.aarch64",
          "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.ppc64le",
          "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.s390x",
          "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.x86_64",
          "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.aarch64",
          "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.ppc64le",
          "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.s390x",
          "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.x86_64",
          "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.aarch64",
          "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.ppc64le",
          "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.s390x",
          "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.x86_64",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.x86_64",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.x86_64",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-1.15.1-1.1.x86_64",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-bash-completion-1.15.1-1.1.x86_64",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-fish-completion-1.15.1-1.1.x86_64",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.aarch64",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.ppc64le",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.s390x",
            "openSUSE Tumbleweed:skopeo-zsh-completion-1.15.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "singularity-ce-4.1.3-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the singularity-ce-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14059",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14059-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23538 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23538/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-39237 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-39237/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21626 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21626/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23650 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23650/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23651 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23651/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23652 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-23653 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-23653/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      }
    ],
    "title": "singularity-ce-4.1.3-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-20T00:00:00Z",
      "generator": {
        "date": "2024-06-20T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14059-1",
      "initial_release_date": "2024-06-20T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-20T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.aarch64",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.aarch64",
                  "product_id": "singularity-ce-4.1.3-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.ppc64le",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.ppc64le",
                  "product_id": "singularity-ce-4.1.3-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.s390x",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.s390x",
                  "product_id": "singularity-ce-4.1.3-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "singularity-ce-4.1.3-1.1.x86_64",
                "product": {
                  "name": "singularity-ce-4.1.3-1.1.x86_64",
                  "product_id": "singularity-ce-4.1.3-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "singularity-ce-4.1.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        },
        "product_reference": "singularity-ce-4.1.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-23538",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23538"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirects the client to a backing S3 storage server, to perform a multi-part concurrent download. Depending on site configuration, the S3 service may be provided by a third party. An attacker with access to the S3 service may be able to extract user credentials, allowing them to impersonate the user. The vulnerable multi-part concurrent download flow, with redirect to S3, is only used when communicating with a Singularity Enterprise 1.x installation, or third party server implementing this flow. Interaction with Singularity Enterprise 2.x, and Singularity Container Services (cloud.sylabs.io), does not trigger the vulnerable flow. We encourage all users to update. Users who interact with a Singularity Enterprise 1.x installation, using a 3rd party S3 storage service, are advised to revoke and recreate their authentication tokens within Singularity Enterprise. There is no workaround available at this time.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23538",
          "url": "https://www.suse.com/security/cve/CVE-2022-23538"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23538"
    },
    {
      "cve": "CVE-2022-39237",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-39237"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "syslabs/sif is the Singularity Image Format (SIF) reference implementation. In versions prior to 2.8.1the `github.com/sylabs/sif/v2/pkg/integrity` package did not verify that the hash algorithm(s) used are cryptographically secure when verifying digital signatures. A patch is available in version \u003e= v2.8.1 of the module. Users are encouraged to upgrade. Users unable to upgrade may independently validate that the hash algorithm(s) used for metadata digest(s) and signature hash are cryptographically secure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-39237",
          "url": "https://www.suse.com/security/cve/CVE-2022-39237"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209493 for CVE-2022-39237",
          "url": "https://bugzilla.suse.com/1209493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-39237"
    },
    {
      "cve": "CVE-2024-21626",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21626"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem (\"attack 2\"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run (\"attack 1\"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes (\"attack 3a\" and \"attack 3b\"). runc 1.1.12 includes patches for this issue. ",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21626",
          "url": "https://www.suse.com/security/cve/CVE-2024-21626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218894 for CVE-2024-21626",
          "url": "https://bugzilla.suse.com/1218894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-21626"
    },
    {
      "cve": "CVE-2024-23650",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23650"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23650",
          "url": "https://www.suse.com/security/cve/CVE-2024-23650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219437 for CVE-2024-23650",
          "url": "https://bugzilla.suse.com/1219437"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23650"
    },
    {
      "cve": "CVE-2024-23651",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23651"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23651",
          "url": "https://www.suse.com/security/cve/CVE-2024-23651"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219267 for CVE-2024-23651",
          "url": "https://bugzilla.suse.com/1219267"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-23651"
    },
    {
      "cve": "CVE-2024-23652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23652",
          "url": "https://www.suse.com/security/cve/CVE-2024-23652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219268 for CVE-2024-23652",
          "url": "https://bugzilla.suse.com/1219268"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23652"
    },
    {
      "cve": "CVE-2024-23653",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-23653"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources. \n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-23653",
          "url": "https://www.suse.com/security/cve/CVE-2024-23653"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219438 for CVE-2024-23653",
          "url": "https://bugzilla.suse.com/1219438"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-23653"
    },
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
          "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.aarch64",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.ppc64le",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.s390x",
            "openSUSE Tumbleweed:singularity-ce-4.1.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the govulncheck-vulndb-0.0.20250130T185858-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-14728",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14728-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-10846 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-10846/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-13484 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-13484/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-0750 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-0750/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-24369 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-24369/"
      }
    ],
    "title": "govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-02-04T00:00:00Z",
      "generator": {
        "date": "2025-02-04T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:14728-1",
      "initial_release_date": "2025-02-04T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-02-04T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                "product": {
                  "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
                  "product_id": "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                "product": {
                  "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
                  "product_id": "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                "product": {
                  "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
                  "product_id": "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
                "product": {
                  "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
                  "product_id": "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64"
        },
        "product_reference": "govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le"
        },
        "product_reference": "govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x"
        },
        "product_reference": "govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
        },
        "product_reference": "govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-10846",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-10846"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles while parsing YAML, such as used by Docker Compose from versions  v2.27.0 to v2.29.7 included",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-10846",
          "url": "https://www.suse.com/security/cve/CVE-2024-10846"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1236335 for CVE-2024-10846",
          "url": "https://bugzilla.suse.com/1236335"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-10846"
    },
    {
      "cve": "CVE-2024-13484",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-13484"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wide when the label is applied.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-13484",
          "url": "https://www.suse.com/security/cve/CVE-2024-13484"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-13484"
    },
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    },
    {
      "cve": "CVE-2025-0750",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-0750"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-0750",
          "url": "https://www.suse.com/security/cve/CVE-2025-0750"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1236479 for CVE-2025-0750",
          "url": "https://bugzilla.suse.com/1236479"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-0750"
    },
    {
      "cve": "CVE-2025-24369",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-24369"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce (such as 42069), and then passes the challenge with difficulty zero. Commit e09d0226a628f04b1d80fd83bee777894a45cd02 fixes this behavior by not using a client-specified difficulty value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
          "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-24369",
          "url": "https://www.suse.com/security/cve/CVE-2025-24369"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.aarch64",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.ppc64le",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.s390x",
            "openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250130T185858-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-04T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-24369"
    }
  ]
}