{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for podman, slirp4netns and libcontainers-common",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n  \nThis is a version update for podman to version 1.4.4 (bsc#1143386).\n\nAdditional changes by SUSE on top:\n\n- Remove fuse-overlayfs because it\u0027s (currently) an unsatisfied dependency on\n  SLE (bsc#1143386)\n- Update libpod.conf to use correct infra_command\n- Update libpod.conf to use better versioned pause container\n- Update libpod.conf to use official kubic pause container\n- Update libpod.conf to match latest features set:\n  detach_keys, lock_type, runtime_supports_json\n- Add podman-remote varlink client\n\nVersion update podman to v1.4.4:\n\n- Features\n\n  - Podman now has greatly improved support for containers using multiple OCI\n    runtimes. Containers now remember if they were created with a different\n    runtime using --runtime and will always use that runtime\n  - The cached and delegated options for volume mounts are now allowed for\n    Docker compatability (#3340)\n  - The podman diff command now supports the --latest flag\n\n- Bugfixes\n\n  - Fixed a bug where rootless Podman would attempt to use the entire root\n    configuration if no rootless configuration was present for the user,\n    breaking rootless Podman for new installations\n  - Fixed a bug where rootless Podman\u0027s pause process would block SIGTERM,\n    preventing graceful system shutdown and hanging until the system\u0027s init\n    send SIGKILL\n  - Fixed a bug where running Podman as root with sudo -E would not work after\n    running rootless Podman at least once\n  - Fixed a bug where options for tmpfs volumes added with the --tmpfs flag\n    were being ignored\n  - Fixed a bug where images with no layers could not properly be displayed\n    and removed by Podman\n  - Fixed a bug where locks were not properly freed on failure to create a\n    container or pod\n  - Fixed a bug where podman cp on a single file would create a directory at\n    the target and place the file in it (#3384)\n  - Fixed a bug where podman inspect --format \u0027{{.Mounts}}\u0027 would print a\n    hexadecimal address instead of a container\u0027s mounts\n  - Fixed a bug where rootless Podman would not add an entry to container\u0027s\n    /etc/hosts files for their own hostname (#3405)\n  - Fixed a bug where podman ps --sync would segfault (#3411)\n  - Fixed a bug where podman generate kube would produce an invalid ports\n    configuration (#3408)\n\n- Misc\n\n  - Updated containers/storage to v1.12.13\n  - Podman now performs much better on systems with heavy I/O load\n  - The --cgroup-manager flag to podman now shows the correct default setting\n    in help if the default was overridden by libpod.conf\n  - For backwards compatability, setting --log-driver=json-file in podman run\n    is now supported as an alias for --log-driver=k8s-file. This is considered\n    deprecated, and json-file will be moved to a new implementation in the\n    future ([#3363](https://github.com/containers/libpo\\\n    d/issues/3363))\n  - Podman\u0027s default libpod.conf file now allows the crun OCI runtime to be\n    used if it is installed\n\nUpdate podman to v1.4.2:\n\n- Fixed a bug where Podman could not run containers using an older version of\n  Systemd as init\n- Updated vendored Buildah to v1.9.0 to resolve a critical bug with\n  Dockerfile RUN instructions\n- The error message for running podman kill on containers that are not\n  running has been improved\n- Podman remote client can now log to a file if syslog is not available\n- The podman exec command now sets its error code differently based on\n  whether the container does not exist, and the command in the container does\n  not exist\n- The podman inspect command on containers now outputs Mounts JSON that matches\n  that of docker inspect, only including user-specified volumes and\n  differentiating bind mounts and named volumes\n- The podman inspect command now reports the path to a container\u0027s OCI spec\n  with the OCIConfigPath key (only included when the container is initialized\n  or running)\n- The podman run --mount command now supports the bind-nonrecursive option for\n  bind mounts\n- Fixed a bug where podman play kube would fail to create containers due to an\n  unspecified log driver\n- Fixed a bug where Podman would fail to build with musl libc\n- Fixed a bug where rootless Podman using slirp4netns networking in an\n  environment with no nameservers on the host other than localhost would\n  result in nonfunctional networking\n- Fixed a bug where podman import would not properly set environment\n  variables, discarding their values and retaining only keys\n- Fixed a bug where Podman would fail to run when built with Apparmor support\n  but run on systems without the Apparmor kernel module loaded\n- Remote Podman will now default the username it uses to log in to remote\n  systems to the username of the current user\n- Podman now uses JSON logging with OCI runtimes that support it, allowing for\n  better error reporting\n- Updated vendored containers/image to v2.0\n- Update conmon to v0.3.0\n- Support OOM Monitor under cgroup V2\n- Add config binary and make target for configuring conmon with a go library\n  for importing values\n\nUpdated podman to version 1.4.0 (bsc#1137860) and (bsc#1135460) \n\n- Podman checkpoint and podman restore commands can now be\n  used to migrate containers between Podman installations on\n  different systems.\n- The podman cp now supports pause flag.\n- The remote client now supports a configuration file for\n  pre-configuring connections to remote Podman installations\n- CVE-2019-10152: Fixed an iproper dereference of symlinks of the\n  the podman cp command which introduced in version 1.1.0 (bsc#1136974).\n- Fixed a bug where podman commit could improperly set environment variables \n  that contained = characters\n- Fixed a bug where rootless podman would sometimes fail to start\n  containers with forwarded ports\n- Fixed a bug where podman version on the remote client could\n  segfault\n- Fixed a bug where podman container runlabel would use /proc/self/exe instead of \n  the path of the Podman command when printing the command being executed\n- Fixed a bug where filtering images by label did not work\n- Fixed a bug where specifying a bing mount or tmpfs mount over\n  an image volume would cause a container to be unable to start\n- Fixed a bug where podman generate kube did not work with\n  containers with named volumes\n- Fixed a bug where rootless podman would receive permission\n  denied errors accessing conmon.pid\n- Fixed a bug where podman cp with a folder specified as target\n  would replace the folder, as opposed to copying into it\n- Fixed a bug where rootless Podman commands could double-unlock\n  a lock, causing a crash\n- Fixed a bug where podman incorrectly set tmpcopyup on /dev/\n  mounts, causing errors when using the Kata containers runtime\n- Fixed a bug where podman exec would fail on older kernels\n- Podman commit command is now usable with the Podman remote client\n- Signature-policy flag has been deprecated\n- Updated vendored containers/storage and containers/image libraries \n  with numerous bugfixes\n- Updated vendored Buildah to v1.8.3\n- Podman now requires Conmon v0.2.0\n- The podman cp command is now aliased as podman container cp\n- Rootless podman will now default init_path using root Podman\u0027s\n  configuration files (/etc/containers/libpod.conf and\n  /usr/share/containers/libpod.conf) if not overridden in the\n  rootless configuration\n- Added fuse-overlayfs dependency to support overlay based rootless image\n  manipulations\n- The podman cp command can now read input redirected to STDIN, and output to\n  STDOUT instead of a file, using - instead of an argument.\n- The podman remote client now displays version information from both the\n  client and server in podman version\n- The podman unshare command has been added, allowing easy entry into the\n  user namespace set up by rootless Podman (allowing the removal of files\n  created by rootless podman, among other things)\n- Fixed a bug where Podman containers with the --rm flag were removing\n  created volumes when they were automatically removed\n- Fixed a bug where container and pod locks were incorrectly marked as\n  released after a system reboot, causing errors on container and pod removal\n- Fixed a bug where Podman pods could not be removed if any container in the\n  pod encountered an error during removal\n- Fixed a bug where Podman pods run with the cgroupfs CGroup driver would encounter \n  a race condition during removal, potentially failing to remove the pod CGroup\n- Fixed a bug where the podman container checkpoint and podman container\n  restore commands were not visible in the remote client\n- Fixed a bug where podman remote ps --ns would not print the container\u0027s namespaces\n- Fixed a bug where removing stopped containers with healthchecks could cause an error\n- Fixed a bug where the default libpod.conf file was causing parsing errors\n- Fixed a bug where pod locks were not being freed when pods were removed,\n  potentially leading to lock exhaustion\n- Fixed a bug where \u0027podman run\u0027 with SD_NOTIFY set could, on short-running\n  containers, create an inconsistent state rendering the container unusable\n- The remote Podman client now uses the Varlink bridge to establish remote\n  connections by default\n- Fixed an issue with apparmor_parser (bsc#1123387)\n\n- Update to libpod v1.4.0 (bsc#1137860):\n- The podman checkpoint and podman restore commands can now be\n  used to migrate containers between Podman installations on\n  different systems\n- The podman cp command now supports a pause flag to pause\n  containers while copying into them\n- The remote client now supports a configuration file for\n  pre-configuring connections to remote Podman installations\n- Fixed CVE-2019-10152 - The podman cp command improperly\n  dereferenced symlinks in host context\n- Fixed a bug where podman commit could improperly set\n  environment variables that contained = characters\n- Fixed a bug where rootless Podman would sometimes fail to start\n  containers with forwarded ports\n- Fixed a bug where podman version on the remote client could\n  segfault\n- Fixed a bug where podman container runlabel would use\n  /proc/self/exe instead of the path of the Podman command when\n  printing the command being executed\n- Fixed a bug where filtering images by label did not work\n- Fixed a bug where specifying a bing mount or tmpfs mount over\n  an image volume would cause a container to be unable to start\n- Fixed a bug where podman generate kube did not work with\n  containers with named volumes\n- Fixed a bug where rootless Podman would receive permission\n  denied errors accessing conmon.pid\n- Fixed a bug where podman cp with a folder specified as target\n  would replace the folder, as opposed to copying into it\n- Fixed a bug where rootless Podman commands could double-unlock\n  a lock, causing a crash\n- Fixed a bug where Podman incorrectly set tmpcopyup on /dev/\n  mounts, causing errors when using the Kata containers runtime\n- Fixed a bug where podman exec would fail on older kernels\n- The podman commit command is now usable with the Podman remote\n  client\n- The --signature-policy flag (used with several image-related\n  commands) has been deprecated\n- The podman unshare command now defines two environment\n  variables in the spawned shell: CONTAINERS_RUNROOT and\n  CONTAINERS_GRAPHROOT, pointing to temporary and permanent\n  storage for rootless containers\n- Updated vendored containers/storage and containers/image\n  libraries with numerous bugfixes\n- Updated vendored Buildah to v1.8.3\n- Podman now requires Conmon v0.2.0\n- The podman cp command is now aliased as podman container cp\n- Rootless Podman will now default init_path using root Podman\u0027s\n  configuration files (/etc/containers/libpod.conf and\n  /usr/share/containers/libpod.conf) if not overridden in the\n  rootless configuration\n\n- Update to image v1.5.1\n- Vendor in latest containers/storage\n- docker/docker_client: Drop redundant Domain(ref.ref) call\n- pkg/blobinfocache: Split implementations into subpackages\n- copy: progress bar: show messages on completion\n- docs: rename manpages to *.5.command\n- add container-certs.d.md manpage\n- pkg/docker/config: Bring auth tests from\n  docker/docker_client_test\n- Don\u0027t allocate a sync.Mutex separately\n\nUpdate to storage v1.12.10:\n\n- Add function to parse out mount options from graphdriver\n- Merge the disparate parts of all of the Unix-like lockfiles\n- Fix unix-but-not-Linux compilation\n- Return XDG_RUNTIME_DIR as RootlessRuntimeDir if set\n- Cherry-pick moby/moby #39292 for CVE-2018-15664 fixes\n- lockfile: add RecursiveLock() API\n- Update generated files\n- Fix crash on tesing of aufs code\n- Let consumers know when Layers and Images came from read-only stores\n- chown: do not change owner for the mountpoint\n- locks: correctly mark updates to the layers list\n- CreateContainer: don\u0027t worry about mapping layers unless necessary\n- docs: fix manpage for containers-storage.conf\n- docs: sort configuration options alphabetically\n- docs: document OSTree file deduplication\n- Add missing options to man page for containers-storage\n- overlay: use the layer idmapping if present\n- vfs: prefer layer custom idmappings\n- layers: propagate down the idmapping settings\n- Recreate symlink when not found\n- docs: fix manpage for configuration file\n- docs: add special handling for manpages in sect 5\n- overlay: fix single-lower test\n- Recreate symlink when not found\n- overlay: propagate errors from mountProgram\n- utils: root in a userns uses global conf file\n- Fix handling of additional stores\n- Correctly check permissions on rootless directory\n- Fix possible integer overflow on 32bit builds\n- Evaluate device path for lvm\n- lockfile test: make concurrent RW test determinisitc\n- lockfile test: make concurrent read tests deterministic\n- drivers.DirCopy: fix filemode detection\n- storage: move the logic to detect rootless into utils.go\n- Don\u0027t set (struct flock).l_pid\n- Improve documentation of getLockfile\n- Rename getLockFile to createLockerForPath, and document it\n- Add FILES section to containers-storage.5 man page\n- add digest locks\n- drivers/copy: add a non-cgo fallback\n\nslirp4netns was updated to 0.3.0:\n\n- CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() (bsc#1123156)\n\nThis update also includes:\n\n- fuse3 and fuse-overlayfs to support rootless containers.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-2223,SUSE-SLE-Module-Basesystem-15-SP1-2019-2223,SUSE-SLE-Module-Containers-15-SP1-2019-2223",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_2223-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:2223-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192223-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:2223-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-August/005844.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1096726",
        "url": "https://bugzilla.suse.com/1096726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1123156",
        "url": "https://bugzilla.suse.com/1123156"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1123387",
        "url": "https://bugzilla.suse.com/1123387"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135460",
        "url": "https://bugzilla.suse.com/1135460"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136974",
        "url": "https://bugzilla.suse.com/1136974"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137860",
        "url": "https://bugzilla.suse.com/1137860"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1143386",
        "url": "https://bugzilla.suse.com/1143386"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-15664 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-15664/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10152 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10152/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-6778 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-6778/"
      }
    ],
    "title": "Security update for podman, slirp4netns and libcontainers-common",
    "tracking": {
      "current_release_date": "2019-08-27T13:43:02Z",
      "generator": {
        "date": "2019-08-27T13:43:02Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:2223-1",
      "initial_release_date": "2019-08-27T13:43:02Z",
      "revision_history": [
        {
          "date": "2019-08-27T13:43:02Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "fuse-overlayfs-0.4.1-3.3.8.aarch64",
                "product": {
                  "name": "fuse-overlayfs-0.4.1-3.3.8.aarch64",
                  "product_id": "fuse-overlayfs-0.4.1-3.3.8.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-3.6.1-3.3.8.aarch64",
                "product": {
                  "name": "fuse3-3.6.1-3.3.8.aarch64",
                  "product_id": "fuse3-3.6.1-3.3.8.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-devel-3.6.1-3.3.8.aarch64",
                "product": {
                  "name": "fuse3-devel-3.6.1-3.3.8.aarch64",
                  "product_id": "fuse3-devel-3.6.1-3.3.8.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-doc-3.6.1-3.3.8.aarch64",
                "product": {
                  "name": "fuse3-doc-3.6.1-3.3.8.aarch64",
                  "product_id": "fuse3-doc-3.6.1-3.3.8.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libfuse3-3-3.6.1-3.3.8.aarch64",
                "product": {
                  "name": "libfuse3-3-3.6.1-3.3.8.aarch64",
                  "product_id": "libfuse3-3-3.6.1-3.3.8.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-1.4.4-4.8.1.aarch64",
                "product": {
                  "name": "podman-1.4.4-4.8.1.aarch64",
                  "product_id": "podman-1.4.4-4.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "slirp4netns-0.3.0-3.3.3.aarch64",
                "product": {
                  "name": "slirp4netns-0.3.0-3.3.3.aarch64",
                  "product_id": "slirp4netns-0.3.0-3.3.3.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libfuse3-3-64bit-3.6.1-3.3.8.aarch64_ilp32",
                "product": {
                  "name": "libfuse3-3-64bit-3.6.1-3.3.8.aarch64_ilp32",
                  "product_id": "libfuse3-3-64bit-3.6.1-3.3.8.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "fuse-overlayfs-0.4.1-3.3.8.i586",
                "product": {
                  "name": "fuse-overlayfs-0.4.1-3.3.8.i586",
                  "product_id": "fuse-overlayfs-0.4.1-3.3.8.i586"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-3.6.1-3.3.8.i586",
                "product": {
                  "name": "fuse3-3.6.1-3.3.8.i586",
                  "product_id": "fuse3-3.6.1-3.3.8.i586"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-devel-3.6.1-3.3.8.i586",
                "product": {
                  "name": "fuse3-devel-3.6.1-3.3.8.i586",
                  "product_id": "fuse3-devel-3.6.1-3.3.8.i586"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-doc-3.6.1-3.3.8.i586",
                "product": {
                  "name": "fuse3-doc-3.6.1-3.3.8.i586",
                  "product_id": "fuse3-doc-3.6.1-3.3.8.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libfuse3-3-3.6.1-3.3.8.i586",
                "product": {
                  "name": "libfuse3-3-3.6.1-3.3.8.i586",
                  "product_id": "libfuse3-3-3.6.1-3.3.8.i586"
                }
              },
              {
                "category": "product_version",
                "name": "slirp4netns-0.3.0-3.3.3.i586",
                "product": {
                  "name": "slirp4netns-0.3.0-3.3.3.i586",
                  "product_id": "slirp4netns-0.3.0-3.3.3.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcontainers-common-20190401-3.3.5.noarch",
                "product": {
                  "name": "libcontainers-common-20190401-3.3.5.noarch",
                  "product_id": "libcontainers-common-20190401-3.3.5.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "podman-cni-config-1.4.4-4.8.1.noarch",
                "product": {
                  "name": "podman-cni-config-1.4.4-4.8.1.noarch",
                  "product_id": "podman-cni-config-1.4.4-4.8.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "fuse-overlayfs-0.4.1-3.3.8.ppc64le",
                "product": {
                  "name": "fuse-overlayfs-0.4.1-3.3.8.ppc64le",
                  "product_id": "fuse-overlayfs-0.4.1-3.3.8.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-3.6.1-3.3.8.ppc64le",
                "product": {
                  "name": "fuse3-3.6.1-3.3.8.ppc64le",
                  "product_id": "fuse3-3.6.1-3.3.8.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-devel-3.6.1-3.3.8.ppc64le",
                "product": {
                  "name": "fuse3-devel-3.6.1-3.3.8.ppc64le",
                  "product_id": "fuse3-devel-3.6.1-3.3.8.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-doc-3.6.1-3.3.8.ppc64le",
                "product": {
                  "name": "fuse3-doc-3.6.1-3.3.8.ppc64le",
                  "product_id": "fuse3-doc-3.6.1-3.3.8.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libfuse3-3-3.6.1-3.3.8.ppc64le",
                "product": {
                  "name": "libfuse3-3-3.6.1-3.3.8.ppc64le",
                  "product_id": "libfuse3-3-3.6.1-3.3.8.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "podman-1.4.4-4.8.1.ppc64le",
                "product": {
                  "name": "podman-1.4.4-4.8.1.ppc64le",
                  "product_id": "podman-1.4.4-4.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "slirp4netns-0.3.0-3.3.3.ppc64le",
                "product": {
                  "name": "slirp4netns-0.3.0-3.3.3.ppc64le",
                  "product_id": "slirp4netns-0.3.0-3.3.3.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "fuse-overlayfs-0.4.1-3.3.8.s390x",
                "product": {
                  "name": "fuse-overlayfs-0.4.1-3.3.8.s390x",
                  "product_id": "fuse-overlayfs-0.4.1-3.3.8.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-3.6.1-3.3.8.s390x",
                "product": {
                  "name": "fuse3-3.6.1-3.3.8.s390x",
                  "product_id": "fuse3-3.6.1-3.3.8.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-devel-3.6.1-3.3.8.s390x",
                "product": {
                  "name": "fuse3-devel-3.6.1-3.3.8.s390x",
                  "product_id": "fuse3-devel-3.6.1-3.3.8.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-doc-3.6.1-3.3.8.s390x",
                "product": {
                  "name": "fuse3-doc-3.6.1-3.3.8.s390x",
                  "product_id": "fuse3-doc-3.6.1-3.3.8.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libfuse3-3-3.6.1-3.3.8.s390x",
                "product": {
                  "name": "libfuse3-3-3.6.1-3.3.8.s390x",
                  "product_id": "libfuse3-3-3.6.1-3.3.8.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "podman-1.4.4-4.8.1.s390x",
                "product": {
                  "name": "podman-1.4.4-4.8.1.s390x",
                  "product_id": "podman-1.4.4-4.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "slirp4netns-0.3.0-3.3.3.s390x",
                "product": {
                  "name": "slirp4netns-0.3.0-3.3.3.s390x",
                  "product_id": "slirp4netns-0.3.0-3.3.3.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "fuse-overlayfs-0.4.1-3.3.8.x86_64",
                "product": {
                  "name": "fuse-overlayfs-0.4.1-3.3.8.x86_64",
                  "product_id": "fuse-overlayfs-0.4.1-3.3.8.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-3.6.1-3.3.8.x86_64",
                "product": {
                  "name": "fuse3-3.6.1-3.3.8.x86_64",
                  "product_id": "fuse3-3.6.1-3.3.8.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-devel-3.6.1-3.3.8.x86_64",
                "product": {
                  "name": "fuse3-devel-3.6.1-3.3.8.x86_64",
                  "product_id": "fuse3-devel-3.6.1-3.3.8.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "fuse3-doc-3.6.1-3.3.8.x86_64",
                "product": {
                  "name": "fuse3-doc-3.6.1-3.3.8.x86_64",
                  "product_id": "fuse3-doc-3.6.1-3.3.8.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfuse3-3-3.6.1-3.3.8.x86_64",
                "product": {
                  "name": "libfuse3-3-3.6.1-3.3.8.x86_64",
                  "product_id": "libfuse3-3-3.6.1-3.3.8.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libfuse3-3-32bit-3.6.1-3.3.8.x86_64",
                "product": {
                  "name": "libfuse3-3-32bit-3.6.1-3.3.8.x86_64",
                  "product_id": "libfuse3-3-32bit-3.6.1-3.3.8.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "podman-1.4.4-4.8.1.x86_64",
                "product": {
                  "name": "podman-1.4.4-4.8.1.x86_64",
                  "product_id": "podman-1.4.4-4.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "slirp4netns-0.3.0-3.3.3.x86_64",
                "product": {
                  "name": "slirp4netns-0.3.0-3.3.3.x86_64",
                  "product_id": "slirp4netns-0.3.0-3.3.3.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Containers 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Containers 15 SP1",
                  "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-containers:15:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcontainers-common-20190401-3.3.5.noarch as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch"
        },
        "product_reference": "libcontainers-common-20190401-3.3.5.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse-overlayfs-0.4.1-3.3.8.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64"
        },
        "product_reference": "fuse-overlayfs-0.4.1-3.3.8.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse-overlayfs-0.4.1-3.3.8.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le"
        },
        "product_reference": "fuse-overlayfs-0.4.1-3.3.8.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse-overlayfs-0.4.1-3.3.8.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x"
        },
        "product_reference": "fuse-overlayfs-0.4.1-3.3.8.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse-overlayfs-0.4.1-3.3.8.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64"
        },
        "product_reference": "fuse-overlayfs-0.4.1-3.3.8.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse3-3.6.1-3.3.8.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64"
        },
        "product_reference": "fuse3-3.6.1-3.3.8.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse3-3.6.1-3.3.8.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le"
        },
        "product_reference": "fuse3-3.6.1-3.3.8.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse3-3.6.1-3.3.8.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x"
        },
        "product_reference": "fuse3-3.6.1-3.3.8.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "fuse3-3.6.1-3.3.8.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64"
        },
        "product_reference": "fuse3-3.6.1-3.3.8.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfuse3-3-3.6.1-3.3.8.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64"
        },
        "product_reference": "libfuse3-3-3.6.1-3.3.8.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfuse3-3-3.6.1-3.3.8.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le"
        },
        "product_reference": "libfuse3-3-3.6.1-3.3.8.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfuse3-3-3.6.1-3.3.8.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x"
        },
        "product_reference": "libfuse3-3-3.6.1-3.3.8.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libfuse3-3-3.6.1-3.3.8.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64"
        },
        "product_reference": "libfuse3-3-3.6.1-3.3.8.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-1.4.4-4.8.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64"
        },
        "product_reference": "podman-1.4.4-4.8.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-1.4.4-4.8.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le"
        },
        "product_reference": "podman-1.4.4-4.8.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-1.4.4-4.8.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x"
        },
        "product_reference": "podman-1.4.4-4.8.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-1.4.4-4.8.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64"
        },
        "product_reference": "podman-1.4.4-4.8.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-cni-config-1.4.4-4.8.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch"
        },
        "product_reference": "podman-cni-config-1.4.4-4.8.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slirp4netns-0.3.0-3.3.3.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64"
        },
        "product_reference": "slirp4netns-0.3.0-3.3.3.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slirp4netns-0.3.0-3.3.3.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le"
        },
        "product_reference": "slirp4netns-0.3.0-3.3.3.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slirp4netns-0.3.0-3.3.3.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x"
        },
        "product_reference": "slirp4netns-0.3.0-3.3.3.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "slirp4netns-0.3.0-3.3.3.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
        },
        "product_reference": "slirp4netns-0.3.0-3.3.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-15664",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-15664"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Docker through 18.06.1-ce-rc2, the API endpoints behind the \u0027docker cp\u0027 command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-15664",
          "url": "https://www.suse.com/security/cve/CVE-2018-15664"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1096726 for CVE-2018-15664",
          "url": "https://bugzilla.suse.com/1096726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1139649 for CVE-2018-15664",
          "url": "https://bugzilla.suse.com/1139649"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-27T13:43:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-15664"
    },
    {
      "cve": "CVE-2019-10152",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10152"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when an administrator tries to copy a file from/to the container.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10152",
          "url": "https://www.suse.com/security/cve/CVE-2019-10152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136974 for CVE-2019-10152",
          "url": "https://bugzilla.suse.com/1136974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-27T13:43:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-10152"
    },
    {
      "cve": "CVE-2019-6778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-6778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
          "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-6778",
          "url": "https://www.suse.com/security/cve/CVE-2019-6778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123156 for CVE-2019-6778",
          "url": "https://bugzilla.suse.com/1123156"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123157 for CVE-2019-6778",
          "url": "https://bugzilla.suse.com/1123157"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2019-6778",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common-20190401-3.3.5.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.4.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:fuse3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:libfuse3-3-3.6.1-3.3.8.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.8.1.x86_64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.8.1.noarch",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.aarch64",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.ppc64le",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.s390x",
            "SUSE Linux Enterprise Module for Containers 15 SP1:slirp4netns-0.3.0-3.3.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-08-27T13:43:02Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-6778"
    }
  ]
}