{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for govulncheck-vulndb",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for govulncheck-vulndb fixes the following issues:\n\nUpdate to version 0.0.20241030T212825 2024-10-30T21:28:25Z ( jsc#PED-11136 )\n\n- Go CVE Numbering Authority IDs added or updated with aliases:\n\n  * GO-2024-3230 CVE-2024-48921 GHSA-qjvc-p88j-j9rm\n  * GO-2024-3232 CVE-2024-10241 GHSA-6mvp-gh77-7vwh\n\n- Go CVE Numbering Authority IDs added or updated with aliases:\n\n  * GO-2024-3226 CVE-2024-47827 GHSA-ghjw-32xw-ffwr\n  * GO-2024-3227 CVE-2024-10214 GHSA-hm57-h27x-599c\n  * GO-2024-3228 GHSA-wcx9-ccpj-hx3c\n\n- Go CVE Numbering Authority IDs added or updated with aliases:\n\n  * GO-2024-3207 GHSA-p5wf-cmr4-xrwr\n  * GO-2024-3208 CVE-2024-47825 GHSA-3wwx-63fv-pfq6\n  * GO-2024-3210 CVE-2024-8901\n  * GO-2024-3211 CVE-2024-50312\n  * GO-2024-3212 GHSA-rjfv-pjvx-mjgv\n  * GO-2024-3213 CVE-2024-49380\n  * GO-2024-3214 CVE-2024-49381\n  * GO-2024-3215 CVE-2024-9264 GHSA-q99m-qcv4-fpm7\n  * GO-2024-3216 CVE-2024-49753 GHSA-6cf5-w9h3-4rqv\n  * GO-2024-3217 CVE-2024-49757 GHSA-3rmw-76m6-4gjc\n  * GO-2024-3219 GHSA-7h65-4p22-39j6\n  * GO-2024-3220 CVE-2023-32197 GHSA-7h8m-pvw3-5gh4\n  * GO-2024-3221 CVE-2024-22036 GHSA-h99m-6755-rgwc\n  * GO-2024-3222 GHSA-x7xj-jvwp-97rv\n  * GO-2024-3223 CVE-2022-45157 GHSA-xj7w-r753-vj8v\n  * GO-2024-3224 CVE-2024-39223 GHSA-8wxx-35qc-vp6r\n\n- Go CVE Numbering Authority IDs added or updated with aliases:\n\n  * GO-2024-3189 CVE-2024-38365 GHSA-27vh-h6mc-q6g8\n  * GO-2024-3203 CVE-2024-9486\n  * GO-2024-3204 CVE-2024-9594\n\n- Go CVE Numbering Authority IDs added or updated with aliases:\n\n  * GO-2024-3189 CVE-2024-38365 GHSA-27vh-h6mc-q6g8\n  * GO-2024-3196 CVE-2024-47877 GHSA-8rm2-93mq-jqhc\n  * GO-2024-3199 GHSA-vv6c-69r6-chg9\n  * GO-2024-3200 CVE-2024-48909 GHSA-3c32-4hq9-6wgj\n  * GO-2024-3201 CVE-2023-22644\n- Go CVE Numbering Authority IDs added or updated with aliases:\n\n  * GO-2024-3166 CVE-2024-47534 GHSA-4f8r-qqr9-fq8j\n  * GO-2024-3171 CVE-2024-9341 GHSA-mc76-5925-c5p6\n\n- Go CVE Numbering Authority IDs added or updated with aliases:\n\n  * GO-2024-3161 CVE-2024-22030 GHSA-h4h5-9833-v2p4\n  * GO-2024-3162 CVE-2024-7594 GHSA-jg74-mwgw-v6x3\n  * GO-2024-3163 CVE-2024-47182\n  * GO-2024-3164 CVE-2024-47003 GHSA-59hf-mpf8-pqjh\n  * GO-2024-3166 CVE-2024-47534 GHSA-4f8r-qqr9-fq8j\n  * GO-2024-3167 CVE-2024-9355 GHSA-3h3x-2hwv-hr52\n  * GO-2024-3168 CVE-2024-8975 GHSA-chqx-36rm-rf8h\n  * GO-2024-3169 CVE-2024-9407 GHSA-fhqq-8f65-5xfc\n  * GO-2024-3170 CVE-2024-8996 GHSA-m5gv-m5f9-wgv4\n  * GO-2024-3172 CVE-2024-33662 GHSA-9mjw-79r6-c9m8\n  * GO-2024-3173 CVE-2024-7558 GHSA-mh98-763h-m9v4\n  * GO-2024-3174 CVE-2024-8037 GHSA-8v4w-f4r9-7h6x\n  * GO-2024-3175 CVE-2024-8038 GHSA-xwgj-vpm9-q2rq\n  * GO-2024-3179 CVE-2024-47616 GHSA-r7rh-jww5-5fjr\n  * GO-2024-3181 CVE-2024-9313 GHSA-x5q3-c8rm-w787\n  * GO-2024-3182 GHSA-wpr2-j6gr-pjw9\n  * GO-2024-3184 CVE-2024-36814 GHSA-9cp9-8gw2-8v7m\n  * GO-2024-3185 CVE-2024-47832\n  * GO-2024-3186 CVE-2024-9675 GHSA-586p-749j-fhwp\n  * GO-2024-3188 CVE-2024-9312 GHSA-4gfw-wf7c-w6g2\n  * GO-2024-3190 CVE-2024-47067 GHSA-8pph-gfhp-w226\n  * GO-2024-3191 CVE-2024-9180 GHSA-rr8j-7w34-xp5j",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2024-3911,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3911,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3911,openSUSE-SLE-15.5-2024-3911,openSUSE-SLE-15.6-2024-3911",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3911-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2024:3911-1",
            url: "https://www.suse.com/support/update/announcement/2024/suse-su-20243911-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2024:3911-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-November/019776.html",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-45157 page",
            url: "https://www.suse.com/security/cve/CVE-2022-45157/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-22644 page",
            url: "https://www.suse.com/security/cve/CVE-2023-22644/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-32197 page",
            url: "https://www.suse.com/security/cve/CVE-2023-32197/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-10214 page",
            url: "https://www.suse.com/security/cve/CVE-2024-10214/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-10241 page",
            url: "https://www.suse.com/security/cve/CVE-2024-10241/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-22030 page",
            url: "https://www.suse.com/security/cve/CVE-2024-22030/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-22036 page",
            url: "https://www.suse.com/security/cve/CVE-2024-22036/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-33662 page",
            url: "https://www.suse.com/security/cve/CVE-2024-33662/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-36814 page",
            url: "https://www.suse.com/security/cve/CVE-2024-36814/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-38365 page",
            url: "https://www.suse.com/security/cve/CVE-2024-38365/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-39223 page",
            url: "https://www.suse.com/security/cve/CVE-2024-39223/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47003 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47003/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47067 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47067/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47182 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47182/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47534 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47534/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47616 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47616/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47825 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47825/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47827 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47827/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47832 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47832/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47877 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47877/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-48909 page",
            url: "https://www.suse.com/security/cve/CVE-2024-48909/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-48921 page",
            url: "https://www.suse.com/security/cve/CVE-2024-48921/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-49380 page",
            url: "https://www.suse.com/security/cve/CVE-2024-49380/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-49381 page",
            url: "https://www.suse.com/security/cve/CVE-2024-49381/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-49753 page",
            url: "https://www.suse.com/security/cve/CVE-2024-49753/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-49757 page",
            url: "https://www.suse.com/security/cve/CVE-2024-49757/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-50312 page",
            url: "https://www.suse.com/security/cve/CVE-2024-50312/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-7558 page",
            url: "https://www.suse.com/security/cve/CVE-2024-7558/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-7594 page",
            url: "https://www.suse.com/security/cve/CVE-2024-7594/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-8037 page",
            url: "https://www.suse.com/security/cve/CVE-2024-8037/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-8038 page",
            url: "https://www.suse.com/security/cve/CVE-2024-8038/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-8901 page",
            url: "https://www.suse.com/security/cve/CVE-2024-8901/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-8975 page",
            url: "https://www.suse.com/security/cve/CVE-2024-8975/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-8996 page",
            url: "https://www.suse.com/security/cve/CVE-2024-8996/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9180 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9180/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9264 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9264/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9312 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9312/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9313 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9313/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9341 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9341/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9355 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9355/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9407 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9407/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9486 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9486/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9594 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9594/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-9675 page",
            url: "https://www.suse.com/security/cve/CVE-2024-9675/",
         },
      ],
      title: "Security update for govulncheck-vulndb",
      tracking: {
         current_release_date: "2024-11-05T07:45:02Z",
         generator: {
            date: "2024-11-05T07:45:02Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2024:3911-1",
         initial_release_date: "2024-11-05T07:45:02Z",
         revision_history: [
            {
               date: "2024-11-05T07:45:02Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                        product: {
                           name: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                           product_id: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                           product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:packagehub:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                        product: {
                           name: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                           product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:packagehub:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.5",
                        product: {
                           name: "openSUSE Leap 15.5",
                           product_id: "openSUSE Leap 15.5",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.6",
                        product: {
                           name: "openSUSE Leap 15.6",
                           product_id: "openSUSE Leap 15.6",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.6",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            },
            product_reference: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            },
            product_reference: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            },
            product_reference: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            },
            product_reference: "govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-45157",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-45157",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Container Storage Interface) credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext object inside Rancher. This vulnerability is only applicable to users that deploy clusters in vSphere environments.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-45157",
               url: "https://www.suse.com/security/cve/CVE-2022-45157",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231677 for CVE-2022-45157",
               url: "https://bugzilla.suse.com/1231677",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "critical",
            },
         ],
         title: "CVE-2022-45157",
      },
      {
         cve: "CVE-2023-22644",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-22644",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-22644",
               url: "https://www.suse.com/security/cve/CVE-2023-22644",
            },
            {
               category: "external",
               summary: "SUSE Bug 1207199 for CVE-2023-22644",
               url: "https://bugzilla.suse.com/1207199",
            },
            {
               category: "external",
               summary: "SUSE Bug 1209434 for CVE-2023-22644",
               url: "https://bugzilla.suse.com/1209434",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "critical",
            },
         ],
         title: "CVE-2023-22644",
      },
      {
         cve: "CVE-2023-32197",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-32197",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-32197",
               url: "https://www.suse.com/security/cve/CVE-2023-32197",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222643 for CVE-2023-32197",
               url: "https://bugzilla.suse.com/1222643",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222681 for CVE-2023-32197",
               url: "https://bugzilla.suse.com/1222681",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2023-32197",
      },
      {
         cve: "CVE-2024-10214",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-10214",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Mattermost versions 9.11.X <= 9.11.1, 9.5.x <= 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-10214",
               url: "https://www.suse.com/security/cve/CVE-2024-10214",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.5,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "low",
            },
         ],
         title: "CVE-2024-10214",
      },
      {
         cve: "CVE-2024-10241",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-10241",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Mattermost versions 9.5.x <= 9.5.9 fail to properly filter the channel data when ElasticSearch is enabled which allows a user to get  private channel names by using cmd+K/ctrl+K.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-10241",
               url: "https://www.suse.com/security/cve/CVE-2024-10241",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-10241",
      },
      {
         cve: "CVE-2024-22030",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-22030",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability has been identified within Rancher that can be exploited\n in narrow circumstances through a man-in-the-middle (MITM) attack. An \nattacker would need to have control of an expired domain or execute a \nDNS spoofing/hijacking attack against the domain to exploit this \nvulnerability. The targeted domain is the one used as the Rancher URL.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-22030",
               url: "https://www.suse.com/security/cve/CVE-2024-22030",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219982 for CVE-2024-22030",
               url: "https://bugzilla.suse.com/1219982",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-22030",
      },
      {
         cve: "CVE-2024-22036",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-22036",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-22036",
               url: "https://www.suse.com/security/cve/CVE-2024-22036",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231280 for CVE-2024-22036",
               url: "https://bugzilla.suse.com/1231280",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-22036",
      },
      {
         cve: "CVE-2024-33662",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-33662",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-33662",
               url: "https://www.suse.com/security/cve/CVE-2024-33662",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-33662",
      },
      {
         cve: "CVE-2024-36814",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-36814",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-36814",
               url: "https://www.suse.com/security/cve/CVE-2024-36814",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-36814",
      },
      {
         cve: "CVE-2024-38365",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-38365",
            },
         ],
         notes: [
            {
               category: "general",
               text: "btcd is an alternative full node bitcoin implementation written in Go (golang). The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's \"FindAndDelete()\" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can lead to btcd clients accepting an invalid Bitcoin block (or rejecting a valid one). This consensus failure can be leveraged to cause a chain split (accepting an invalid Bitcoin block) or be exploited to DoS the btcd nodes (rejecting a valid Bitcoin block). An attacker can create a standard transaction where FindAndDelete doesn't return a match but removeOpCodeByData does making btcd get a different sighash, leading to a chain split. Importantly, this vulnerability can be exploited remotely by any Bitcoin user and does not require any hash power. This is because the difference in behavior can be triggered by a \"standard\" Bitcoin transaction, that is a transaction which gets relayed through the P2P network before it gets included in a Bitcoin block. `removeOpcodeByData(script []byte, dataToRemove []byte)` removes any data pushes from `script` that contain `dataToRemove`. However, `FindAndDelete` only removes exact matches. So for example, with `script = \"<data> <data||foo>\"` and `dataToRemove = \"data\"` btcd will remove both data pushes but Bitcoin Core's `FindAndDelete` only removes the first `<data>` push. This has been patched in btcd version v0.24.2. Users are advised to upgrade. There are no known workarounds for this issue.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-38365",
               url: "https://www.suse.com/security/cve/CVE-2024-38365",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-38365",
      },
      {
         cve: "CVE-2024-39223",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-39223",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-39223",
               url: "https://www.suse.com/security/cve/CVE-2024-39223",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "critical",
            },
         ],
         title: "CVE-2024-39223",
      },
      {
         cve: "CVE-2024-47003",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47003",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string,  which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47003",
               url: "https://www.suse.com/security/cve/CVE-2024-47003",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47003",
      },
      {
         cve: "CVE-2024-47067",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47067",
            },
         ],
         notes: [
            {
               category: "general",
               text: "AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an application/xml response, opening it up to HTML tags via XHTML and thus leading to a XSS vulnerability. This vulnerability is fixed in 3.29.0.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47067",
               url: "https://www.suse.com/security/cve/CVE-2024-47067",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47067",
      },
      {
         cve: "CVE-2024-47182",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47182",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version 8.5.3.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47182",
               url: "https://www.suse.com/security/cve/CVE-2024-47182",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-47182",
      },
      {
         cve: "CVE-2024-47534",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47534",
            },
         ],
         notes: [
            {
               category: "general",
               text: "go-tuf is a Go implementation of The Update Framework (TUF). The go-tuf client inconsistently traces the delegations. For example, if targets delegate to \"A\", and to \"B\", and \"B\" delegates to \"C\", then the client should trace the delegations in the order \"A\" then \"B\" then \"C\" but it may incorrectly trace the delegations \"B\"->\"C\"->\"A\". This vulnerability is fixed in 2.0.1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47534",
               url: "https://www.suse.com/security/cve/CVE-2024-47534",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-47534",
      },
      {
         cve: "CVE-2024-47616",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47616",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the databroker service API are authorized by the presence of a JSON Web Token (JWT) signed by a key known by all Pomerium services in the same deployment. However, incomplete validation of this JWT meant that some service account access tokens would incorrectly be treated as valid for the purpose of databroker API authorization. Improper access to the databroker API could allow exfiltration of user info, spoofing of user sessions, or tampering with Pomerium routes, policies, and other settings. A Pomerium deployment is susceptible to this issue if all of the following conditions are met, you have issued a service account access token using Pomerium Zero or Pomerium Enterprise, the access token has an explicit expiration date in the future, and the core Pomerium databroker gRPC API is not otherwise secured by network access controls. This vulnerability is fixed in 0.27.1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47616",
               url: "https://www.suse.com/security/cve/CVE-2024-47616",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47616",
      },
      {
         cve: "CVE-2024-47825",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47825",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47825",
               url: "https://www.suse.com/security/cve/CVE-2024-47825",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-47825",
      },
      {
         cve: "CVE-2024-47827",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47827",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerability is fixed in 3.6.0-rc2.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47827",
               url: "https://www.suse.com/security/cve/CVE-2024-47827",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47827",
      },
      {
         cve: "CVE-2024-47832",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47832",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ssoready is a single sign on provider implemented via docker. Affected versions are vulnerable to XML signature bypass attacks. An attacker can carry out signature bypass if you have access to certain IDP-signed messages. The underlying mechanism exploits differential behavior between XML parsers. Users of https://ssoready.com, the public hosted instance of SSOReady, are unaffected. We advise folks who self-host SSOReady to upgrade to 7f92a06 or later. Do so by updating your SSOReady Docker images from sha-... to sha-7f92a06. There are no known workarounds for this vulnerability.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47832",
               url: "https://www.suse.com/security/cve/CVE-2024-47832",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "critical",
            },
         ],
         title: "CVE-2024-47832",
      },
      {
         cve: "CVE-2024-47877",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47877",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Extract is aA Go library to extract archives in zip, tar.gz or tar.bz2 formats. A maliciously crafted archive may allow an attacker to create a symlink outside the extraction target directory. This vulnerability is fixed in 4.0.0. If you're using the Extractor.FS interface, then upgrading to /v4 will require to implement the new methods that have been added.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47877",
               url: "https://www.suse.com/security/cve/CVE-2024-47877",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47877",
      },
      {
         cve: "CVE-2024-48909",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-48909",
            },
         ],
         notes: [
            {
               category: "general",
               text: "SpiceDB is an open source database for scalably storing and querying fine-grained authorization data. Starting in version 1.35.0 and prior to version 1.37.1, clients that have enabled `LookupResources2` and have caveats in the evaluation path for their requests can return a permissionship of `CONDITIONAL` with context marked as missing, even then the context was supplied. LookupResources2 is the new default in SpiceDB 1.37.0 and has been opt-in since SpiceDB 1.35.0. The bug is patched as part of SpiceDB 1.37.1. As a workaround, disable LookupResources2 via the `--enable-experimental-lookup-resources` flag by setting it to `false`.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-48909",
               url: "https://www.suse.com/security/cve/CVE-2024-48909",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.4,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "low",
            },
         ],
         title: "CVE-2024-48909",
      },
      {
         cve: "CVE-2024-48921",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-48921",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Kyverno is a policy engine designed for Kubernetes. A kyverno ClusterPolicy, ie. \"disallow-privileged-containers,\" can be overridden by the creation of a PolicyException in a random namespace. By design, PolicyExceptions are consumed from any namespace. Administrators may not recognize that this allows users with privileges to non-kyverno namespaces to create exceptions. This vulnerability is fixed in 1.13.0.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-48921",
               url: "https://www.suse.com/security/cve/CVE-2024-48921",
            },
            {
               category: "external",
               summary: "SUSE Bug 1232557 for CVE-2024-48921",
               url: "https://bugzilla.suse.com/1232557",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-48921",
      },
      {
         cve: "CVE-2024-49380",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-49380",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the vulnerability.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-49380",
               url: "https://www.suse.com/security/cve/CVE-2024-49380",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-49380",
      },
      {
         cve: "CVE-2024-49381",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-49381",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerability.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-49381",
               url: "https://www.suse.com/security/cve/CVE-2024-49381",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-49381",
      },
      {
         cve: "CVE-2024-49753",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-49753",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Zitadel is open-source identity infrastructure software. Versions prior to 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 have a flaw in the URL validation mechanism of Zitadel actions allows bypassing restrictions intended to block requests to localhost (127.0.0.1). The isHostBlocked check, designed to prevent such requests, can be circumvented by creating a DNS record that resolves to 127.0.0.1. This enables actions to send requests to localhost despite the intended security measures. This vulnerability potentially allows unauthorized access to unsecured internal endpoints, which may contain sensitive information or functionalities. Versions 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 contain a patch. No known workarounds are available.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-49753",
               url: "https://www.suse.com/security/cve/CVE-2024-49753",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-49753",
      },
      {
         cve: "CVE-2024-49757",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-49757",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the \"User Registration allowed\" option only hid the registration button on the login page. Users could bypass this restriction by directly accessing the registration URL (/ui/login/loginname) and register a user that way. Versions 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 contain a patch. No known workarounds are available.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-49757",
               url: "https://www.suse.com/security/cve/CVE-2024-49757",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-49757",
      },
      {
         cve: "CVE-2024-50312",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-50312",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-50312",
               url: "https://www.suse.com/security/cve/CVE-2024-50312",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-50312",
      },
      {
         cve: "CVE-2024-7558",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-7558",
            },
         ],
         notes: [
            {
               category: "general",
               text: "JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJU_CONTEXT_ID value. This gives the unprivileged user access to the same information and tools as the Juju charm.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-7558",
               url: "https://www.suse.com/security/cve/CVE-2024-7558",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-7558",
      },
      {
         cve: "CVE-2024-7594",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-7594",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Vault's SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_principals and default_user fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault's SSH secrets engine could be used to authenticate as any user on the host. Fixed in Vault Community Edition 1.17.6, and in Vault Enterprise 1.17.6, 1.16.10, and 1.15.15.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-7594",
               url: "https://www.suse.com/security/cve/CVE-2024-7594",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-7594",
      },
      {
         cve: "CVE-2024-8037",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-8037",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and perform actions that are normally reserved to a juju charm.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-8037",
               url: "https://www.suse.com/security/cve/CVE-2024-8037",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-8037",
      },
      {
         cve: "CVE-2024-8038",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-8038",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-8038",
               url: "https://www.suse.com/security/cve/CVE-2024-8038",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-8038",
      },
      {
         cve: "CVE-2024-8901",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-8901",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The  AWS ALB Route Directive Adapter For Istio repo https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio/tree/master  provides an OIDC authentication mechanism that was integrated into the open source Kubeflow project. The adapter uses JWT for authentication, but lacks proper signer and issuer validation. In deployments of ALB that ignore security best practices, where ALB targets are directly exposed to internet traffic, an actor can provide a JWT signed by an untrusted entity in order to spoof OIDC-federated sessions and successfully bypass authentication.\n\n\n\nThe repository/package has been deprecated, is end of life, and is no longer supported. As a security best practice, ensure that your ELB targets (e.g. EC2 Instances, Fargate Tasks etc.) do not have public IP addresses. Ensure any forked or derivative code validate that the signer  attribute in the JWT match the ARN of the Application Load Balancer that the service is configured to use.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-8901",
               url: "https://www.suse.com/security/cve/CVE-2024-8901",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-8901",
      },
      {
         cve: "CVE-2024-8975",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-8975",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM\nThis issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-8975",
               url: "https://www.suse.com/security/cve/CVE-2024-8975",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-8975",
      },
      {
         cve: "CVE-2024-8996",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-8996",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM\nThis issue affects Agent Flow: before 0.43.2",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-8996",
               url: "https://www.suse.com/security/cve/CVE-2024-8996",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-8996",
      },
      {
         cve: "CVE-2024-9180",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9180",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A privileged Vault operator with write permissions to the root namespace's identity endpoint could escalate their own or another user's privileges to Vault's root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9180",
               url: "https://www.suse.com/security/cve/CVE-2024-9180",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-9180",
      },
      {
         cve: "CVE-2024-9264",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9264",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack.  The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9264",
               url: "https://www.suse.com/security/cve/CVE-2024-9264",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231844 for CVE-2024-9264",
               url: "https://bugzilla.suse.com/1231844",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.9,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "critical",
            },
         ],
         title: "CVE-2024-9264",
      },
      {
         cve: "CVE-2024-9312",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9312",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9312",
               url: "https://www.suse.com/security/cve/CVE-2024-9312",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-9312",
      },
      {
         cve: "CVE-2024-9313",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9313",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9313",
               url: "https://www.suse.com/security/cve/CVE-2024-9313",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-9313",
      },
      {
         cve: "CVE-2024-9341",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9341",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9341",
               url: "https://www.suse.com/security/cve/CVE-2024-9341",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231230 for CVE-2024-9341",
               url: "https://bugzilla.suse.com/1231230",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-9341",
      },
      {
         cve: "CVE-2024-9355",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9355",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.   It is also possible to force a derived key to be all zeros instead of an unpredictable value.   This may have follow-on implications for the Go TLS stack.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9355",
               url: "https://www.suse.com/security/cve/CVE-2024-9355",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-9355",
      },
      {
         cve: "CVE-2024-9407",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9407",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories from the host into a container during the build process and, in some cases, modify the contents of those mounted files. Even if SELinux is used, this vulnerability can bypass its protection by allowing the source directory to be relabeled to give the container access to host files.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9407",
               url: "https://www.suse.com/security/cve/CVE-2024-9407",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231208 for CVE-2024-9407",
               url: "https://bugzilla.suse.com/1231208",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-9407",
      },
      {
         cve: "CVE-2024-9486",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9486",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nodes using the resulting images may be accessible via these default credentials. The credentials can be used to gain root access. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project with its Proxmox provider.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9486",
               url: "https://www.suse.com/security/cve/CVE-2024-9486",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "critical",
            },
         ],
         title: "CVE-2024-9486",
      },
      {
         cve: "CVE-2024-9594",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9594",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process  when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusion of the image build process. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project. Because these images were vulnerable during the image build process, they are affected only if an attacker was able to reach the VM where the image build was happening and used the vulnerability to modify the image at the time the image build was occurring.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9594",
               url: "https://www.suse.com/security/cve/CVE-2024-9594",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "important",
            },
         ],
         title: "CVE-2024-9594",
      },
      {
         cve: "CVE-2024-9675",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-9675",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-9675",
               url: "https://www.suse.com/security/cve/CVE-2024-9675",
            },
            {
               category: "external",
               summary: "SUSE Bug 1231499 for CVE-2024-9675",
               url: "https://bugzilla.suse.com/1231499",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.5:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
                  "openSUSE Leap 15.6:govulncheck-vulndb-0.0.20241030T212825-150000.1.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-05T07:45:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-9675",
      },
   ],
}