RHSA-2022:7457
Vulnerability from csaf_opensuse - Published: 2022-11-08 00:00 - Updated: 2026-09-20 11:23Summary
security update for aardvark-dns
Severity
Moderate
Notes
Title of the patch: security update for aardvark-dns
Description of the patch: This security update provides a functional equivalent of RHSA-2022:7457.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2022:7457.
Patchnames: RHSA-2022:7457
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 | — |
Vendor Fix
|
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2021-36221
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2021-36221
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
34 products, the same list as for
CVE-2021-36221
Threats
Impact
important
4 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2021-36221
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2021-36221
Threats
Impact
moderate
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for aardvark-dns",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2022:7457.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2022:7457.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2022:7457",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_7457.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-36221 page",
"url": "https://www.suse.com/security/cve/CVE-2021-36221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-41190 page",
"url": "https://www.suse.com/security/cve/CVE-2021-41190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1708 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-27191 page",
"url": "https://www.suse.com/security/cve/CVE-2022-27191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-29162 page",
"url": "https://www.suse.com/security/cve/CVE-2022-29162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-2990 page",
"url": "https://www.suse.com/security/cve/CVE-2022-2990/"
}
],
"title": "security update for aardvark-dns",
"tracking": {
"current_release_date": "2026-09-20T11:23:47Z",
"generator": {
"date": "2022-11-08T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2022:7457",
"initial_release_date": "2022-11-08T00:00:00Z",
"revision_history": [
{
"date": "2022-11-08T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:23:47Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product": {
"name": "cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch (container-tools:rhel8)",
"product_id": "cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/cockpit-podman@53-1.module+el8.7.0+16772+33343656?arch=noarch\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026upstream=cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product": {
"name": "container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch (container-tools:rhel8)",
"product_id": "container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/container-selinux@2.189.0-1.module+el8.7.0+16772+33343656?arch=noarch\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=2\u0026upstream=container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product": {
"name": "podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch (container-tools:rhel8)",
"product_id": "podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:podman_project:podman:4.2.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/podman-docker@4.2.0-1.module+el8.7.0+16772+33343656?arch=noarch\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3\u0026upstream=podman-3:4.2.0-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product": {
"name": "python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch (container-tools:rhel8)",
"product_id": "python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-podman@4.2.0-1.module+el8.7.0+16772+33343656?arch=noarch\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product": {
"name": "udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch (container-tools:rhel8)",
"product_id": "udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/udica@0.2.6-3.module+el8.7.0+16772+33343656?arch=noarch\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026upstream=udica-0:0.2.6-3.module+el8.7.0+16772+33343656.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:containers:aardvark-dns:1.1.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/aardvark-dns@1.1.0-4.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=2\u0026upstream=aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:buildah_project:buildah:1.27.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/buildah@1.27.0-2.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=1\u0026upstream=buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/buildah-tests@1.27.0-2.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/conmon@2.1.4-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3\u0026upstream=conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/containernetworking-plugins@1.1.1-3.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/containers-common@1-40.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/crit@3.15-3.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:criu:checkpoint\\/restore_in_userspace:3.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/criu@3.15-3.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/criu-devel@3.15-3.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/criu-libs@3.15-3.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:crun_project:crun:1.5:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/crun@1.5-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026upstream=crun-0:1.5-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/fuse-overlayfs@1.9-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026upstream=fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libslirp_project:libslirp:4.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libslirp@4.4.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libslirp_project:libslirp:4.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libslirp-devel@4.4.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026upstream=libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/netavark@1.1.0-6.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=2\u0026upstream=netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/oci-seccomp-bpf-hook@1.2.6-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:podman_project:podman:4.2.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/podman@4.2.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3\u0026upstream=podman-3:4.2.0-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/podman-catatonit@4.2.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/podman-gvproxy@4.2.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/podman-plugins@4.2.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:podman_project:podman:4.2.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/podman-remote@4.2.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3\u0026upstream=podman-3:4.2.0-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/podman-tests@4.2.0-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=3"
}
}
},
{
"category": "product_version",
"name": "python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-criu@3.15-3.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
},
{
"category": "product_version",
"name": "runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linuxfoundation:runc:1.1.4:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/runc@1.1.4-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=1\u0026upstream=runc-1:1.1.4-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/skopeo@1.9.2-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=2\u0026upstream=skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/skopeo-tests@1.9.2-1.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"cpe": "cpe:2.3:a:libslirp_project:libslirp:1.2.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/slirp4netns@1.2.0-2.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026upstream=slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/toolbox@0.0.99.3-0.6.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8\u0026upstream=toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.src.rpm"
}
}
},
{
"category": "product_version",
"name": "toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product": {
"name": "toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64 (container-tools:rhel8)",
"product_id": "toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/suse/toolbox-tests@0.0.99.3-0.6.module+el8.7.0+16772+33343656?arch=x86_64\u0026rpmmod=container-tools:rhel8:8070020221108161706:rhel8"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
},
"product_reference": "cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
},
"product_reference": "container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
},
"product_reference": "podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
},
"product_reference": "python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
},
"product_reference": "udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-36221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-36221"
}
],
"notes": [
{
"category": "general",
"text": "Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-36221",
"url": "https://www.suse.com/security/cve/CVE-2021-36221"
},
{
"category": "external",
"summary": "SUSE Bug 1189162 for CVE-2021-36221",
"url": "https://bugzilla.suse.com/1189162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-36221"
},
{
"cve": "CVE-2021-41190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-41190"
}
],
"notes": [
{
"category": "general",
"text": "The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both \"manifests\" and \"layers\" fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both \"manifests\" and \"layers\" fields or \"manifests\" and \"config\" fields if they are unable to update to version 1.0.1 of the spec.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-41190",
"url": "https://www.suse.com/security/cve/CVE-2021-41190"
},
{
"category": "external",
"summary": "SUSE Bug 1193273 for CVE-2021-41190",
"url": "https://bugzilla.suse.com/1193273"
},
{
"category": "external",
"summary": "SUSE Bug 1243388 for CVE-2021-41190",
"url": "https://bugzilla.suse.com/1243388"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-41190"
},
{
"cve": "CVE-2022-1708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1708"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1708",
"url": "https://www.suse.com/security/cve/CVE-2022-1708"
},
{
"category": "external",
"summary": "SUSE Bug 1200285 for CVE-2022-1708",
"url": "https://bugzilla.suse.com/1200285"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-1708"
},
{
"cve": "CVE-2022-27191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-27191"
}
],
"notes": [
{
"category": "general",
"text": "The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-27191",
"url": "https://www.suse.com/security/cve/CVE-2022-27191"
},
{
"category": "external",
"summary": "SUSE Bug 1197284 for CVE-2022-27191",
"url": "https://bugzilla.suse.com/1197284"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-08T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-27191"
},
{
"cve": "CVE-2022-29162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-29162"
}
],
"notes": [
{
"category": "general",
"text": "runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container\u0027s bounding set. This bug has been fixed in runc 1.1.2. This fix changes `runc exec --cap` behavior such that the additional capabilities granted to the process being executed (as specified via `--cap` arguments) do not include inheritable capabilities. In addition, `runc spec` is changed to not set any inheritable capabilities in the created example OCI spec (`config.json`) file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-29162",
"url": "https://www.suse.com/security/cve/CVE-2022-29162"
},
{
"category": "external",
"summary": "SUSE Bug 1199460 for CVE-2022-29162",
"url": "https://bugzilla.suse.com/1199460"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-29162"
},
{
"cve": "CVE-2022-2990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-2990"
}
],
"notes": [
{
"category": "general",
"text": "An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-2990",
"url": "https://www.suse.com/security/cve/CVE-2022-2990"
},
{
"category": "external",
"summary": "SUSE Bug 1202812 for CVE-2022-2990",
"url": "https://bugzilla.suse.com/1202812"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:aardvark-dns-2:1.1.0-4.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:buildah-tests-1:1.27.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:cockpit-podman-0:53-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:conmon-3:2.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:container-selinux-2:2.189.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:containernetworking-plugins-1:1.1.1-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:containers-common-2:1-40.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crit-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-devel-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:criu-libs-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:crun-0:1.5-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:fuse-overlayfs-0:1.9-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:libslirp-devel-0:4.4.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:netavark-2:1.1.0-6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-catatonit-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-docker-3:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-gvproxy-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-plugins-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-remote-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:podman-tests-3:4.2.0-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-criu-0:3.15-3.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:python3-podman-0:4.2.0-1.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8",
"SUSE Liberty Linux 8:runc-1:1.1.4-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:skopeo-tests-2:1.9.2-1.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:slirp4netns-0:1.2.0-2.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:toolbox-tests-0:0.0.99.3-0.6.module+el8.7.0+16772+33343656.x86_64::container-tools:rhel8",
"SUSE Liberty Linux 8:udica-0:0.2.6-3.module+el8.7.0+16772+33343656.noarch::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-08T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-2990"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…