{"id":"CVE-2024-3727","aliases":["ALSA-2024:5258","ALSA-2024:9097","ALSA-2024:9098","AZL-42315","AZL-42318","AZL-42319","AZL-42327","AZL-42330","AZL-42331","AZL-42340","AZL-42343","AZL-43492","AZL-43510","AZL-44565","AZL-44970","AZL-45243","BELL-CVE-2024-3727","CLSA-2025-1762421840","DEBIAN-CVE-2024-3727","EUVD-2024-1469","GHSA-6wvf-f2vw-3425","GO-2024-2842","MGASA-2024-0343","OESA-2025-2221","OESA-2025-2225","OESA-2025-2233","RHSA-2024:0045","RHSA-2024:4159","RHSA-2024:5258","RHSA-2024:7182","RHSA-2024:7187","RHSA-2024:7941","RHSA-2024:9097","RHSA-2024:9098","RHSA-2024:9102","RLSA-2024:5258","RLSA-2024:9102","SUSE-SU-2024:1838-1","SUSE-SU-2024:1987-1","SUSE-SU-2024:1987-2","SUSE-SU-2024:1988-1","SUSE-SU-2024:1989-1","SUSE-SU-2024:2031-1","SUSE-SU-2024:2050-1","SUSE-SU-2024:2050-2","SUSE-SU-2024:2090-1","SUSE-SU-2024:2383-1","SUSE-SU-2024:2548-1","SUSE-SU-2024:3120-1","SUSE-SU-2024:3151-1","SUSE-SU-2024:3186-1","SUSE-SU-2025:0313-1","SUSE-SU-2025:0429-1","SUSE-SU-2025:20013-1","SUSE-SU-2025:20019-1","SUSE-SU-2025:20055-1","SUSE-SU-2025:20279-1","UBUNTU-CVE-2024-3727","openSUSE-SU-2024:0244-1","openSUSE-SU-2024:13951-1","openSUSE-SU-2024:13952-1","openSUSE-SU-2024:13960-1","openSUSE-SU-2024:13963-1","openSUSE-SU-2024:13975-1","openSUSE-SU-2024:14019-1","openSUSE-SU-2024:14059-1","openSUSE-SU-2025:14728-1","openSUSE-SU-2026:11054-1","openSUSE-SU-2026:11074-1","openSUSE-SU-2026:20730-1"],"status":"published","title":"Containers/image: digest type does not guarantee valid type","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01279,"percentile":0.70195,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-354"],"published":"2024-05-09T14:57:21Z","modified":"2026-11-05T21:16:03Z","fixes":[{"ecosystem":"Go","package":"github.com/containers/image","fixed_in":["5.30.1"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"github.com/containers/image/v5","fixed_in":["5.30.1","5.29.3"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:3","package":"libcontainers-common","fixed_in":["20240213-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"containerized-data-importer","fixed_in":["1.57.0-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"containerized-data-importer","fixed_in":["1.55.0-19"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"skopeo","fixed_in":["1.14.4-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ig","fixed_in":["0.29.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"skopeo","fixed_in":["1.14.2-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cri-o","fixed_in":["1.22.3-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libcontainers-common","fixed_in":["20210626-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"podman","fixed_in":["5.6.1-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"buildah","fixed_in":["1.41.4-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"buildah","fixed_in":["1.37.5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"podman","fixed_in":["5.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"buildah","fixed_in":["1.35.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"podman","fixed_in":["5.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"skopeo","fixed_in":["1.15.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"golang-github-containers-image","fixed_in":["5.29.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-github-containers-image","fixed_in":["5.29.3-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP5","package":"warewulf4","fixed_in":["4.5.2-150500.6.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"warewulf4","fixed_in":["4.5.2-150500.6.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"warewulf4","fixed_in":["4.5.2-150500.6.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"warewulf4","fixed_in":["4.5.2-150500.6.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"containerized-data-importer","fixed_in":["1.58.0-150500.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"containerized-data-importer","fixed_in":["1.58.0-150500.6.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"containerized-data-importer","fixed_in":["1.58.0-150500.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"containerized-data-importer","fixed_in":["1.58.0-150600.3.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"containerized-data-importer","fixed_in":["1.58.0-150600.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"skopeo","fixed_in":["0.1.41-150000.4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"skopeo","fixed_in":["0.1.41-150000.4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"skopeo","fixed_in":["0.1.41-150000.4.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"podman","fixed_in":["2.1.1-150100.4.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"podman","fixed_in":["2.1.1-150100.4.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"podman","fixed_in":["2.1.1-150100.4.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"containerized-data-importer","fixed_in":["1.60.1-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"apptainer","fixed_in":["1.3.0-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"podman","fixed_in":["5.0.3-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"skopeo","fixed_in":["1.15.1-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"containerized-data-importer-1.65","fixed_in":["1.65.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"containerized-data-importer1.65","fixed_in":["1.65.0-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.30.1"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/image/v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.30.0"},{"fixed":"5.30.1"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/image/v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.29.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module_el8.10.0+3792+03eaed9c"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"84.1-1.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module_el8.10.0+3845+87b84552"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-5.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3845+87b84552"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3845+87b84552"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3845+87b84552"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-1.module_el8.10.0+3859+6ae70a0e"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-1.module_el8.10.0+3792+03eaed9c"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.module_el8.10.0+3792+03eaed9c"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-2.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-4.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.5-3.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.5-3.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.module_el8.10.0+3845+87b84552"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.5-2.module_el8.10.0+3845+87b84552"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.5-2.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.5-2.module_el8.10.0+3876+e55593a8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.5-2.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.5-2.module_el8.10.0+3845+87b84552"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-21.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.37.2-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.37.2-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Azure Linux:3","package":"libcontainers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240213-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.57.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.55.0-19"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.3-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libcontainers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210626-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1-26"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.18.0-29"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.4-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.30.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.28.0-r1"},{"fixed":"1.37.5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.1-r0"},{"fixed":"5.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.31.0-r0"},{"fixed":"1.35.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.1-r1"},{"fixed":"5.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0-r1"},{"fixed":"1.15.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"golang-github-containers-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.23.1+git20230116+3d22f4e96c53-1","5.23.1-4","5.25.0-1","5.25.0-10","5.25.0-11","5.25.0-12","5.25.0-2","5.25.0-3","5.25.0-4","5.25.0-5","5.25.0-6","5.25.0-7","5.25.0-8","5.25.0-9","5.26.1-1","5.26.1-2","5.26.1-2~bpo12+1","5.28.0-1","5.28.0-2","5.28.0-3","5.28.0-4","5.29.0-1","5.29.0-2","5.29.0-3","5.29.1-1","5.29.1-2","5.29.2-1","5.29.2-2","5.29.2-3","5.29.3-1","5.29.4-1","5.30.0-1","5.30.2-1","5.30.2-2","5.32.0-1","5.32.0-2","5.32.1-2","5.32.1-3","5.32.2-3","5.32.2-4","5.32.2-5","5.33.0-1","5.33.0-2","5.33.1-1","5.34.0-1","5.34.2-1","5.36.1-1","5.36.2-2","5.38.0+ds2-1","5.38.0+ds2-2","5.39.1-2","5.39.1-3","5.39.2-1","5.39.2-2","5.39.2-3","5.39.2-3~exp1","5.41.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"golang-github-containers-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.29.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"golang-github-containers-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.29.3-1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/image","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.30.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/image/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"5.30.0"},{"fixed":"5.30.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/image/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.29.3"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/image/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.29.3"},{"introduced":"5.30.0"},{"fixed":"5.30.1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.4-1.mga9"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-1.mga9"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.1-1.mga9"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-6.oe2403sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-6.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-6.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.16::el9","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.1-6.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.16::el9","package":"python3-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.1-6.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kube-apiserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kube-controller-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kube-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kubelet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"ose-azure-acr-image-credential-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202404301345.p0.g0e95532.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kube-apiserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kube-controller-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kube-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kubelet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ose-azure-acr-image-credential-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202404301345.p0.g0e95532.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.0-1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.0-1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"butane-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.0-1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"butane-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.0-1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-5.rhaos4.16.git7032128.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-5.rhaos4.16.git7032128.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-5.rhaos4.16.git7032128.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.0-3.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.0-3.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.0-3.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"ose-aws-ecr-image-credential-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202405311136.p0.ga53e9de.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"ose-gcp-gcr-image-credential-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202404181812.p0.g26b43df.assembly.stream.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-5.rhaos4.16.git7032128.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-5.rhaos4.16.git7032128.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-5.rhaos4.16.git7032128.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.0-3.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.0-3.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.0-3.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.0-15.2.gitd5383c5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.0-15.2.gitd5383c5.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ose-aws-ecr-image-credential-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202405311136.p0.ga53e9de.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ose-gcp-gcr-image-credential-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202404181812.p0.g26b43df.assembly.stream.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-5.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.4-1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.4-1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.4-1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.4-1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.4-1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.4-1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-3.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-3.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-3.1.rhaos4.16.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-3.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-3.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-3.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.0-2.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.0-2.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.0-2.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.0-2.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.0-2.1.rhaos4.16.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-7.rhaos4.16.git7db4ada.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-7.rhaos4.16.git7db4ada.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-7.rhaos4.16.git7db4ada.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-7.rhaos4.16.git7db4ada.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-7.rhaos4.16.git7db4ada.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.5-7.rhaos4.16.git7db4ada.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kube-apiserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kube-controller-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kube-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el8","package":"openshift-kubelet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-64k-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-rt-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"kernel-zfcpdump-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"libperf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kube-apiserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kube-controller-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kube-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"openshift-kubelet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.16::el9","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-427.24.1.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-4.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.5-3.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.5-3.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+22202+761b9a65"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-30.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-4.rhaos4.15.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.15::el9","package":"python-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.15::el9","package":"python3-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-19.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.14.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.14::el9","package":"python-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.14::el9","package":"python3-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-13.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-14.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.3-3.rhaos4.13.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python3-webob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.8-2.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"openstack-ironic-dnsmasq-tftp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python3-ironic-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.3.1-0.20240911165036.c0d61d0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.37.2-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.37.2-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.37.2-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.37.2-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.37.2-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.16.1-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.8-4.module+el8.10.0+1843+6892ab28"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-5.module+el8.10.0+1843+6892ab28"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+1843+6892ab28"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-12.module+el8.10.0+1843+6892ab28"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-2.module+el8.10.0+1843+6892ab28"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-4.module+el8.10.0+1843+6892ab28"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.5-3.module+el8.10.0+1843+6892ab28"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1815+5fe7415e"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.2.2-13.el9_5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP5","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-150500.6.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-150500.6.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-150500.6.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"warewulf4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-150500.6.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-150300.11.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58.0-150500.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58.0-150500.6.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58.0-150500.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58.0-150600.3.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58.0-150600.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.41-150000.4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.41-150000.4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.41-150000.4.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-150100.4.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-150100.4.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-150100.4.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150300.8.25.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.6_ce-150000.207.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150500.3.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150500.3.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150500.3.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150500.3.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150400.3.30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150400.3.30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150400.3.30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-150400.3.30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-150600.4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-150600.4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250207T224745-150000.1.32.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250207T224745-150000.1.32.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60.1-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-slfo.1.1_1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-github-opencontainers-go-digest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0~rc1-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-github-opencontainers-go-digest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0~rc1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-github-opencontainers-go-digest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"golang-github-opencontainers-go-digest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"golang-github-opencontainers-go-digest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"golang-github-opencontainers-go-digest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"golang-github-opencontainers-go-digest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.0-2"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-bp155.3.3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"squashfuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-bp155.2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-bp155.3.3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"squashfuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-bp155.2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apptainer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.4-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"singularity-ce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250130T185858-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"containerized-data-importer-1.65","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.65.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"containerized-data-importer1.65","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.65.0-1.1"}]}]}],"products":[{"vendor":"red hat","product":"multicluster engine for kubernetes"},{"vendor":"red hat","product":"oadp-1.3-rhel-9"},{"vendor":"red hat","product":"openshift developer tools and services"},{"vendor":"red hat","product":"openshift serverless"},{"vendor":"red hat","product":"openshift source-to-image (s2i)"},{"vendor":"red hat","product":"red hat advanced cluster management for kubernetes 2"},{"vendor":"red hat","product":"red hat advanced cluster security 3"},{"vendor":"red hat","product":"red hat advanced cluster security 4.4"},{"vendor":"red hat","product":"red hat advanced cluster security 4.5"},{"vendor":"red hat","product":"red hat ansible automation platform 1.2"},{"vendor":"red hat","product":"red hat ansible automation platform 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat migration toolkit for containers 1.8"},{"vendor":"red hat","product":"red hat openshift container platform 3.11"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform assisted installer 1"},{"vendor":"red hat","product":"red hat openshift dev spaces"},{"vendor":"red hat","product":"red hat openshift sandboxed containers"},{"vendor":"red hat","product":"red hat openshift virtualization 4"},{"vendor":"red hat","product":"red hat openstack platform 16.2"},{"vendor":"red hat","product":"red hat quay 3"},{"vendor":"red hat","product":"rhel-9-cnv-4.15"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0045","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3718","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4159","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4613","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4850","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4960","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5258","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5951","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6054","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6122","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6708","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6818","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6824","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7164","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7174","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7182","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7187","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7922","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7941","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8260","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8425","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9097","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9098","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9102","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9960","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3727","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","report","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274767","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN/","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3727","tags":["web","advisory"]},{"url":"https://github.com/containers/image/releases/tag/v5.30.1","tags":["web"]},{"url":"https://github.com/containers/image/commit/132678b47bae29c710589012668cb85859d88385","tags":["web","fix"]},{"url":"https://github.com/containers/image/commit/e8948046055060605bd68289d406ce149590c33a","tags":["web"]},{"url":"https://github.com/containers/image/releases/tag/v5.29.3","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ","tags":["web"]},{"url":"https://github.com/advisories/GHSA-6wvf-f2vw-3425","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45290","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1394","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24783","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24784","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24789","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-37298","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-6104","tags":["report"]},{"url":"https://bugzilla.redhat.com/2262921","tags":["report"]},{"url":"https://bugzilla.redhat.com/2268017","tags":["report"]},{"url":"https://bugzilla.redhat.com/2268019","tags":["report"]},{"url":"https://bugzilla.redhat.com/2268021","tags":["report"]},{"url":"https://bugzilla.redhat.com/2274767","tags":["report"]},{"url":"https://bugzilla.redhat.com/2292668","tags":["report"]},{"url":"https://bugzilla.redhat.com/2294000","tags":["report"]},{"url":"https://bugzilla.redhat.com/2295010","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-5258.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-37891.html","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24791","tags":["report"]},{"url":"https://bugzilla.redhat.com/2295310","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9097.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24788","tags":["report"]},{"url":"https://bugzilla.redhat.com/2279814","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9098.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-3727","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762421840.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3727.json","tags":["advisory"]},{"url":"https://github.com/containers/image","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-3727","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0343.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33036","tags":["report"]},{"url":"https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf","tags":["advisory"]},{"url":"https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3","tags":["advisory"]},{"url":"https://lwn.net/Articles/978101/","tags":["web"]},{"url":"https://lwn.net/Articles/978102/","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2024-July/018858.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/PJ4RBOYLRKSRUVS77S4OAZ7SQJWH36K2/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/MYMA7BZJZTURAPGKHV2ACU3HBJTKVYMK/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47907","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2225","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2233","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274520","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0045.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29483","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29483","tags":["advisory"]},{"url":"https://www.dnspython.org/news/2.6.0rc1/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45289","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45290","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45290","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/08/4","tags":["article"]},{"url":"https://go.dev/cl/569341","tags":["article"]},{"url":"https://go.dev/issue/65383","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2599","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240329-0004","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3727","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24783","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3q2c-pvp5-3cqp","tags":["advisory"]},{"url":"https://go.dev/cl/569339","tags":["article"]},{"url":"https://go.dev/issue/65390","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2598","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240329-0005","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24784","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24785","tags":["advisory"]},{"url":"https://go.dev/cl/564196","tags":["article"]},{"url":"https://go.dev/issue/65697","tags":["article"]},{"url":"https://vuln.go.dev/ID/GO-2024-2610.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24786","tags":["advisory"]},{"url":"https://go.dev/cl/569356","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28176","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28176","tags":["advisory"]},{"url":"https://github.com/panva/jose/security/advisories/GHSA-hhhv-q57g-882q","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4159.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5154","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-j9hf-98c3-wrm8","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2295010","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-40800","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-40801","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5258.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1394","tags":["advisory"]},{"url":"https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136","tags":["article"]},{"url":"https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6","tags":["article"]},{"url":"https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2660","tags":["advisory"]},{"url":"https://vuln.go.dev/ID/GO-2024-2660.json","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-6104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6104","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24789","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-37298","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37298","tags":["advisory"]},{"url":"https://github.com/gorilla/schema/blob/main/decoder.go#L223","tags":["article"]},{"url":"https://github.com/gorilla/schema/commit/cd59f2f12cbdfa9c06aa63e425d1fe4a806967ff","tags":["article"]},{"url":"https://github.com/gorilla/schema/security/advisories/GHSA-3669-72x9-r9p3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-37891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292788","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-37891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37891","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7182.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-42353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-42353","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42353","tags":["advisory"]},{"url":"https://github.com/Pylons/webob","tags":["article"]},{"url":"https://github.com/Pylons/webob/commit/f689bcf4f0a1f64f1735b1d5069aef5be6974b5b","tags":["article"]},{"url":"https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7187.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2309331","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7941.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44082","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2295310","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-29278","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-40808","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9097.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24791","tags":["advisory"]},{"url":"https://go.dev/cl/591255","tags":["article"]},{"url":"https://go.dev/issue/67555","tags":["article"]},{"url":"https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279814","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-29277","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-40812","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9098.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24788","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24788","tags":["advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2824","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144983","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-17776","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-18987","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-24333","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-27171","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-28803","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-29763","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3092","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-32599","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-40811","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-45979","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-48760","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-48917","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-54361","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9102.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4122","tags":["advisory"]},{"url":"https://github.com/containers/podman/pull/16315","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:5258","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9102","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241838-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216994","tags":["report"]},{"url":"https://bugzilla.suse.com/1224124","tags":["report"]},{"url":"https://bugzilla.suse.com/1225402","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3727","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241987-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224123","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28180","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241987-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241988-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224119","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241989-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242031-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224122","tags":["report"]},{"url":"https://bugzilla.suse.com/1226136","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24786","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242050-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242050-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242090-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242383-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242548-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243120-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214855","tags":["report"]},{"url":"https://bugzilla.suse.com/1219267","tags":["report"]},{"url":"https://bugzilla.suse.com/1219268","tags":["report"]},{"url":"https://bugzilla.suse.com/1219438","tags":["report"]},{"url":"https://bugzilla.suse.com/1221243","tags":["report"]},{"url":"https://bugzilla.suse.com/1221677","tags":["report"]},{"url":"https://bugzilla.suse.com/1221916","tags":["report"]},{"url":"https://bugzilla.suse.com/1223409","tags":["report"]},{"url":"https://bugzilla.suse.com/1224117","tags":["report"]},{"url":"https://bugzilla.suse.com/1228324","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41110","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243151-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243186-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250313-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236528","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250429-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-47930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-13484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24884","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520013-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227052","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6104","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520019-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219563","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520055-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520279-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224112","tags":["report"]},{"url":"https://bugzilla.suse.com/1231208","tags":["report"]},{"url":"https://bugzilla.suse.com/1236270","tags":["report"]},{"url":"https://bugzilla.suse.com/1236507","tags":["report"]},{"url":"https://bugzilla.suse.com/1237641","tags":["report"]},{"url":"https://bugzilla.suse.com/1239330","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27144","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-3727","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3BEJQC6TDQZLJ4YE746IHLCFJFUQ2JKQ/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1221364","tags":["report"]},{"url":"https://bugzilla.suse.com/1224114","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-30549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38496","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23650","tags":["web"]},{"url":"https://bugzilla.suse.com/1234595","tags":["report"]},{"url":"https://bugzilla.suse.com/1234794","tags":["report"]},{"url":"https://bugzilla.suse.com/1235211","tags":["report"]},{"url":"https://bugzilla.suse.com/1237679","tags":["report"]},{"url":"https://bugzilla.suse.com/1238611","tags":["report"]},{"url":"https://bugzilla.suse.com/1239341","tags":["report"]},{"url":"https://bugzilla.suse.com/1253924","tags":["report"]},{"url":"https://bugzilla.suse.com/1255462","tags":["report"]},{"url":"https://bugzilla.suse.com/1258047","tags":["report"]},{"url":"https://bugzilla.suse.com/1258048","tags":["report"]},{"url":"https://bugzilla.suse.com/1260311","tags":["report"]},{"url":"https://bugzilla.suse.com/1262956","tags":["report"]},{"url":"https://bugzilla.suse.com/1264177","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-3727","title":"Containers/image: digest type does not guarantee valid type","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-09T14:57:21.327Z","modified":"2026-11-10T04:18:34.481Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-354"],"updated_at":"2026-11-10T05:37:08.449625Z"}],"euvd":[{"id":"EUVD-2024-1469","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-09T14:57:21Z","modified":"2026-11-10T04:18:34Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-10T05:19:59.129782Z"}],"ghsa":[{"id":"GHSA-6wvf-f2vw-3425","title":"github.com/containers/image allows unexpected authenticated registry accesses","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T18:30:52Z","modified":"2025-02-25T18:39:26Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-354"],"updated_at":"2026-11-02T14:38:33.163519Z"}],"nvd":[{"id":"CVE-2024-3727","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07.06Z","modified":"2026-11-10T05:17:25.627Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-354"],"updated_at":"2026-11-10T07:18:18.276089Z"}],"osv":[{"id":"BELL-CVE-2024-3727","status":"published","published":"2024-05-10T05:56:27.525257Z","modified":"2026-01-26T09:42:56.784184Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:19.923987Z"},{"id":"CVE-2024-3727","title":"Containers/image: digest type does not guarantee valid type","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-09T14:57:21.327Z","modified":"2026-11-07T02:31:01.995015951Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-354"],"updated_at":"2026-11-07T03:07:53.435916Z"},{"id":"DEBIAN-CVE-2024-3727","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07.06Z","modified":"2026-11-10T09:47:39.01838965Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-10T10:26:30.347596Z"},{"id":"GHSA-6wvf-f2vw-3425","title":"github.com/containers/image allows unexpected authenticated registry accesses","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T18:30:52Z","modified":"2026-09-10T03:50:13.395116265Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-354"],"updated_at":"2026-11-02T15:46:40.308826Z"},{"id":"OESA-2025-2221","title":"skopeo security update","description":"A command line utility that performs various operations on container images and image repositories\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.(CVE-2024-3727)\n\nGo JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code used strings.Split(token, \u0026quot;.\u0026quot;) to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters.  An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters.(CVE-2025-27144)\n\nCancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.(CVE-2025-47907)","status":"published","published":"2025-09-05T11:09:17Z","modified":"2026-08-18T01:18:11.208033165Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2225","title":"skopeo security update","description":"A command line utility that performs various operations on container images and image repositories\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.(CVE-2024-3727)\n\nGo JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code used strings.Split(token, \u0026quot;.\u0026quot;) to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters.  An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters.(CVE-2025-27144)\n\nCancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.(CVE-2025-47907)","status":"published","published":"2025-09-05T11:09:18Z","modified":"2026-08-18T01:18:11.318187083Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2233","title":"skopeo security update","description":"A command line utility that performs various operations on container images and image repositories\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.(CVE-2024-3727)\n\nGo JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code used strings.Split(token, \u0026quot;.\u0026quot;) to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters.  An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters.(CVE-2025-27144)\n\nCancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.(CVE-2025-47907)","status":"published","published":"2025-09-12T11:09:18Z","modified":"2026-08-18T01:18:11.205522152Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2024:0045","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security update","status":"published","published":"2024-10-02T11:03:00Z","modified":"2026-10-20T10:02:28Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:4159","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.1 packages and security update","status":"published","published":"2024-10-02T11:04:12Z","modified":"2026-10-14T10:04:18Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:5258","title":"Red Hat Security Advisory: container-tools:rhel8 security update","status":"published","published":"2024-10-21T17:28:01Z","modified":"2026-10-16T10:05:06Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:7182","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.35 packages and security update","status":"published","published":"2024-10-02T11:07:27Z","modified":"2026-10-14T10:05:12Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:7187","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.38 security update","status":"published","published":"2024-10-03T12:33:17Z","modified":"2026-10-14T10:05:13Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:7941","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update","status":"published","published":"2024-10-17T00:27:10Z","modified":"2026-10-14T10:05:16Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9097","title":"Red Hat Security Advisory: buildah security update","status":"published","published":"2024-11-15T20:27:53Z","modified":"2026-10-16T10:05:39Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9098","title":"Red Hat Security Advisory: skopeo security update","status":"published","published":"2024-11-15T20:28:03Z","modified":"2026-10-16T10:05:39Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9102","title":"Red Hat Security Advisory: podman security update","status":"published","published":"2024-11-15T20:28:15Z","modified":"2026-10-16T10:05:40Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"UBUNTU-CVE-2024-3727","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:00Z","modified":"2026-10-17T12:56:38.139821251Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:54.69008Z"},{"id":"ALSA-2024:5258","title":"Important: container-tools:rhel8 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)\n* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)\n* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)\n* golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)\n* go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)\n* gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-08-13T00:00:00Z","modified":"2026-10-29T11:12:03.279617945Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:9097","title":"Moderate: buildah security update","description":"The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.   \n\nSecurity Fix(es):  \n\n  * containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:50.641586574Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2024:9098","title":"Moderate: skopeo security update","description":"The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files.   \n\nSecurity Fix(es):  \n\n  * containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n  * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)\n  * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104)\n  * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:50.576394151Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-42315","title":"CVE-2024-3727 affecting package libcontainers-common for versions less than 20240213-2","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"AZL-42318","title":"CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.57.0-2","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:52:27.872624Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42319","title":"CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.55.0-19","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:29:30.442603Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42327","title":"CVE-2024-3727 affecting package skopeo for versions less than 1.14.4-1","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"AZL-42330","title":"CVE-2024-3727 affecting package ig for versions less than 0.29.0-1","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:54:54.244419Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42331","title":"CVE-2024-3727 affecting package skopeo for versions less than 1.14.2-4","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:29:30.826834Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42340","title":"CVE-2024-3727 affecting package cri-o for versions less than 1.22.3-3","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:29:31.923321Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-42343","title":"CVE-2024-3727 affecting package libcontainers-common for versions less than 20210626-7","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:29:32.138079Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-43492","title":"CVE-2024-3727 affecting package podman 4.1.1-26","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:31:01.135989Z","updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-43510","title":"CVE-2024-3727 affecting package buildah 1.18.0-29","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:31:02.143079Z","updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44565","title":"CVE-2024-3727 affecting package podman for versions less than 5.6.1-2","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-04-21T04:53:04.785262Z","updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44970","title":"CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"AZL-45243","title":"CVE-2024-3727 affecting package cri-o 1.30.1-1","description":"A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-14T15:42:07Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"CLSA-2025-1762421840","title":"skopeo: Fix of 2 CVEs","description":"- CVE-2024-3727: fix path traversal vulnerability with full digest\n  validation in all containers/image transports\n- CVE-2025-27144: fix excessive memory consumption vulnerability\n  in github.com/go-jose/go-jose/v3 library","status":"published","published":"2025-11-06T09:37:26Z","modified":"2026-06-01T00:31:15.698469805Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"GO-2024-2842","title":"Unexpected authenticated registry accesses in github.com/containers/image/v5","description":"An attacker may trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.","status":"published","published":"2024-05-20T19:45:51Z","modified":"2026-02-04T03:01:49.774401Z","updated_at":"2026-11-02T15:47:01.453823Z"},{"id":"MGASA-2024-0343","title":"Updated buildah, podman, skopeo packages fix security vulnerabilities","description":"A flaw was found in Buildah (and subsequently Podman Build) which allows\ncontainers to mount arbitrary locations on the host filesystem into\nbuild containers. A malicious Containerfile can use a dummy image with a\nsymbolic link to the root filesystem as a mount source and cause the\nmount operation to mount the host root filesystem inside the RUN step.\nThe commands inside the RUN step will then have read-write access to the\nhost filesystem, allowing for full container escape at build time.\n(CVE-2024-1753)\nA flaw was found in the github.com/containers/image library. This flaw\nallows attackers to trigger unexpected authenticated registry accesses\non behalf of a victim user, causing resource exhaustion, local path\ntraversal, and other attacks. (CVE-2024-3727)\nWhen parsing a multipart form (either explicitly with\nRequest.ParseMultipartForm or implicitly with Request.FormValue,\nRequest.PostFormValue, or Request.FormFile), limits on the total size of\nthe parsed form were not applied to the memory consumed while reading a\nsingle form line. This permits a maliciously crafted input containing\nvery long lines to cause allocation of arbitrarily large amounts of\nmemory, potentially leading to memory exhaustion. With fix, the\nParseMultipartForm function now correctly limits the maximum size of\nform lines. (CVE-2023-45290)\nPackage jose aims to provide an implementation of the Javascript Object\nSigning and Encryption set of standards. An attacker could send a JWE\ncontaining compressed data that used large amounts of memory and CPU\nwhen decompressed by Decrypt or DecryptMulti. Those functions now return\nan error if the decompressed data would exceed 250kB or 10x the\ncompressed size (whichever is larger). This vulnerability has been\npatched in versions 4.0.1, 3.0.3 and 2.6.3. (CVE-2024-28180)\njose is JavaScript module for JSON Object Signing and Encryption,\nproviding support for JSON Web Tokens (JWT), JSON Web Signature (JWS),\nJSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS),\nand more. A vulnerability has been identified in the JSON Web Encryption\n(JWE) decryption interfaces, specifically related to the support for\ndecompressing plaintext after its decryption. Under certain conditions\nit is possible to have the user's environment consume unreasonable\namount of CPU time or memory during JWE Decryption operations. This\nissue has been patched in versions 2.0.7 and 4.15.5. (CVE-2024-28176)\nA flaw was found in Go. When FIPS mode is enabled on a system, container\nruntimes may incorrectly handle certain file paths due to improper\nvalidation in the containers/common Go library. This flaw allows an\nattacker to exploit symbolic links and trick the system into mounting\nsensitive host directories inside a container. This issue also allows\nattackers to access critical host files, bypassing the intended\nisolation between containers and the host system. (CVE-2024-9341)\ngo-retryablehttp prior to 0.7.7 did not sanitize urls when writing them\nto its log file. This could lead to go-retryablehttp writing sensitive\nHTTP basic auth credentials to its log file. This vulnerability,\nCVE-2024-6104, was fixed in go-retryablehttp 0.7.7. (CVE-2024-6104)\nA vulnerability exists in the bind-propagation option of the Dockerfile\nRUN --mount instruction. The system does not properly validate the input\npassed to this option, allowing users to pass arbitrary parameters to\nthe mount instruction. This issue can be exploited to mount sensitive\ndirectories from the host into a container during the build process and,\nin some cases, modify the contents of those mounted files. Even if\nSELinux is used, this vulnerability can bypass its protection by\nallowing the source directory to be relabeled to give the container\naccess to host files. (CVE-2024-9407)\n","status":"published","published":"2024-11-01T17:26:56Z","modified":"2026-04-16T04:42:47.733556802Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:0244-1","title":"Security update for apptainer","description":"This update for apptainer fixes the following issues:\n\n- Make sure, digest values handled by the Go library\n  github.com/opencontainers/go-digest and used throughout the\n  Go-implemented containers ecosystem are always validated. This\n  prevents attackers from triggering unexpected authenticated\n  registry accesses. (CVE-2024-3727, boo#1224114).\n \n\n- Updated apptainer to version 1.3.0\n  * FUSE mounts are now supported in setuid mode, enabling full\n    functionality even when kernel filesystem mounts are insecure due to\n    unprivileged users having write access to raw filesystems in\n    containers. When allow `setuid-mount extfs = no` (the default) in\n    apptainer.conf, then the fuse2fs image driver will be used to mount\n    ext3 images in setuid mode instead of the kernel driver (ext3 images\n    are primarily used for the `--overlay` feature), restoring\n    functionality that was removed by default in Apptainer 1.1.8 because\n    of the security risk.\n    The allow `setuid-mount squashfs` configuration option in\n    `apptainer.conf` now has a new default called `iflimited` which allows\n    kernel squashfs mounts only if there is at least one `limit container`\n    option set or if Execution Control Lists are activated in ecl.toml.\n    If kernel squashfs mounts are are not allowed, then the squashfuse\n    image driver will be used instead.\n    `iflimited` is the default because if one of those limits are used\n    the system administrator ensures that unprivileged users do not have\n    write access to the containers, but on the other hand using FUSE\n    would enable a user to theoretically bypass the limits via `ptrace()`\n    because the FUSE process runs as that user.\n    The `fuse-overlayfs` image driver will also now be tried in setuid\n    mode if the kernel overlayfs driver does not work (for example if\n    one of the layers is a FUSE filesystem).  In addition, if `allow\n    setuid-mount encrypted = no` then the unprivileged gocryptfs format\n    will be used for encrypting SIF files instead of the kernel\n    device-mapper. If a SIF file was encrypted using the gocryptfs\n    format, it can now be mounted in setuid mode in addition to\n    non-setuid mode.\n  * Change the default in user namespace mode to use either kernel\n    overlayfs or fuse-overlayfs instead of the underlay feature for the\n    purpose of adding bind mount points. That was already the default in\n    setuid mode; this change makes it consistent. The underlay feature\n    can still be used with the `--underlay` option, but it is deprecated\n    because the implementation is complicated and measurements have\n    shown that the performance of underlay is similar to overlayfs and\n    fuse-overlayfs.\n    For now the underlay feature can be made the default again with a\n    new `preferred` value on the `enable underlay` configuration option.\n    Also the `--underlay` option can be used in setuid mode or as the\n    root user, although it was ignored previously.\n  * Prefer again to use kernel overlayfs over fuse-overlayfs when a\n    lower layer is FUSE and there's no writable upper layer, undoing the\n    change from 1.2.0. Another workaround was found for the problem that\n    change addressed. This applies in both setuid mode and in user\n    namespace mode.\n  * `--cwd` is now the preferred form of the flag for setting the\n    container's working directory, though `--pwd` is still supported for\n    compatibility.\n  * The way `--home` is handled when running as root (e.g. sudo apptainer)\n    or with `--fakeroot` has changed. Previously, we were only modifying\n    the `HOME` environment variable in these cases, while leaving the\n    container's `/etc/passwd` file unchanged (with its homedir field\n    pointing to `/root`, regardless of the value passed to `--home`). With\n    this change, both value of HOME and the contents of `/etc/passwd` in\n    the container will reflect the value passed to `--home` if the\n    container is readonly. If the container is writable, the\n    `/etc/passwd` file is left alone because it can interfere with\n    commands that want to modify it.\n  * The `--vm` and related flags to start apptainer inside a VM have been\n    removed. This functionality was related to the retired Singularity Desktop\n    / SyOS projects.\n  * The keyserver-related commands that were under `remote` have been moved to\n    their own, dedicated `keyserver` command. Run `apptainer help keyserver`\n    for more information.\n  * The commands related to OCI/Docker registries that were under `remote` have\n    been moved to their own, dedicated `registry` command. Run\n    `apptainer help registry` for more information.\n  * The the `remote list` subcommand now outputs only remote endpoints (with\n    keyservers and OCI/Docker registries having been moved to separate\n    commands), and the output has been streamlined.\n  * Adding a new remote endpoint using the `apptainer remote add` command will\n    now set the new endpoint as default. This behavior can be suppressed by\n    supplying the `--no-default` (or `-n`) flag to `remote add`.\n  * Skip parsing build definition file template variables after comments\n    beginning with a hash symbol.\n  * The global `/tmp` directory is no longer used for gocryptfs mountpoints.\n- New Features \u0026 Functionality\n  * The `remote status` command will now print the username, realname, and\n    email of the logged-in user, if available.\n  * Add monitoring feature support, which requires the usage of an\n    additional tool named `apptheus`, this tool will put apptainer starter\n    into a newly created cgroup and collect system metrics.\n  * A new `--no-pid` flag for `apptainer run/shell/exec` disables the PID\n    namespace inferred by `--containall` and `--compat`.\n  * Added `--config` option to `keyserver` commands.\n  * Honor an optional remoteName argument to the `keyserver list` command.\n  * Added the `APPTAINER_ENCRYPTION_PEM_DATA` env var to allow for\n    encrypting and running encrypted containers without a PEM file.\n  * Adding `--sharens` mode for `apptainer exec/run/shell`, which enables to\n    run multiple apptainer instances created by the same parent using\n    the same image in the same user namespace.\n- Make 'gocryptfs' an optional dependency.\n- Make apptainer definition templates version dependent.\n\n- Fix 'apptainer build' using signed packages from the SUSE\n  Registry (boo#1221364).\n\n- Updated apptainer to version 1.2.5\n  * Added `libnvidia-nvvm` to `nvliblist.conf`. Newer NVIDIA\n    Drivers (known with \u003e= 525.85.05) require this lib to compile\n    OpenCL programs against NVIDIA GPUs, i.e. `libnvidia-opencl`\n    depends on `libnvidia-nvvm`.\n  * Disable the usage of cgroup in instance creation when\n    `--fakeroot` is passed.\n  * Disable the usage of cgroup in instance creation when `hidepid`\n    mount option on `/proc` is set.\n  * Fixed a regression introduced in 1.2.0 where the user's\n    password file information was not copied in to the container\n    when there was a parent root-mapped user namespace (as is the\n    case for example in `cvmfsexec`).\n  * Added the upcoming NVIDIA driver library `libnvidia-gpucomp.so`\n    to the list of libraries to add to NVIDIA GPU-enabled\n    containers. Fixed missing error handling during the creation\n    of an encrypted image that lead to the generation of corrupted\n    images.\n  * Use `APPTAINER_TMPDIR` for temporary files during privileged\n    image encryption.\n  * If rootless unified cgroups v2 is available when starting an\n    image but `XDG_RUNTIME_DIR` or `DBUS_SESSION_BUS_ADDRESS` is\n    not set, print an info message that stats will not be available\n    instead of exiting with a fatal error.\n  * Allow templated build arguments to definition files to have\n    empty values.\n- Package .def templates separately for different SPs.\n\n- Do not build squashfuse, require it as a dependency.\n- Replace awkward 'Obsoletes: singularity-*' as well as the\n  'Provides: Singularity' by 'Conflicts:' and drop the provides -\n  the versioning scheme does not match and we do not automatically\n  migrate from one to the other.\n- Exclude platforms which do not provide all build dependencies.\n\n- updated to 1.2.3 with following changes:\n  * The apptainer push/pull commands now show a progress bar for the oras\n    protocol like there was for docker and library protocols.\n  * The --nv and --rocm flags can now be used simultaneously.\n  * Fix the use of APPTAINER_CONFIGDIR with apptainer instance start and action\n    commands that refer to instance://.\n  * Fix the issue that apptainer would not read credentials from the Docker\n    fallback path ~/.docker/config.json if missing in the apptainer\n    credentials.\n\n- updated to 1.2.2 with following changes:\n  * Fix $APPTAINER_MESSAGELEVEL to correctly set the logging level.\n  * Fix build failures when in setuid mode and unprivileged user namespaces are\n    unavailable and the --fakeroot option is not selected.\n\n- updated to 1.2.1 to fix CVE-2023-38496 although not relevant as package is \n  compiled with setuid\n\n- update to 1.2.0 with following changes:\n  * binary is built reproducible which disables plugins\n  * Create the current working directory in a container when it doesn't exist.\n    This restores behavior as it was before singularity 3.6.0. As a result,\n    using --no-mount home won't have any effect when running apptainer from a\n    home directory and will require --no-mount home,cwd to avoid mounting that\n    directory.\n  * Handle current working directory paths containing symlinks both on the host\n    and in a container but pointing to different destinations. If detected, the\n    current working directory is not mounted when the destination directory in\n    the container exists.\n  * Destination mount points are now sorted by shortest path first to ensure\n    that a user bind doesn't override a previous bind path when set in\n    arbitrary order on the CLI. This is also applied to image binds.\n  * When the kernel supports unprivileged overlay mounts in a user namespace,\n    the container will be constructed by default using an overlay instead of an\n    underlay layout for bind mounts. A new --underlay action option can be used\n    to prefer underlay instead of overlay.\n  * sessiondir maxsize in apptainer.conf now defaults to 64 MiB for new\n    installations. This is an increase from 16 MiB in prior versions.\n  * The apptainer cache is now architecture aware, so the same home directory\n    cache can be shared by machines with different architectures.\n  * Overlay is blocked on the panfs filesystem, allowing sandbox directories to\n    be run from panfs without error.\n  * Lookup and store user/group information in stage one prior to entering any\n    namespaces, to fix an issue with winbind not correctly looking up\n    user/group information when using user namespaces.\n- New features / functionalities\n  * Support for unprivileged encryption of SIF files using gocryptfs.  This is\n    not compatible with privileged encryption, so containers encrypted by root\n    need to be rebuilt by an unprivileged user.\n  * Templating support for definition files. Users can now define variables in\n    definition files via a matching pair of double curly brackets. Variables of\n    the form {{ variable }} will be replaced by a value defined either by a\n    variable=value entry in the %arguments section of the definition file or\n    through new build options --build-arg or --build-arg-file.\n  * Add a new instance run command that will execute the runscript when an\n    instance is initiated instead of executing the startscript.\n  * The sign and verify commands now support signing and verification with\n    non-PGP key material by specifying the path to a private key via the --key\n    flag.\n  * The verify command now supports verification with X.509 certificates by\n    specifying the path to a certificate via the --certificate flag. By\n    default, the system root certificate pool is used as trust anchors unless\n    overridden via the --certificate-roots flag. A pool of intermediate\n    certificates that are not trust anchors, but can be used to form a\n    certificate chain, can also be specified via the\n    --certificate-intermediates flag.\n  * Support for online verification checks of X.509 certificates using OCSP\n    protocol via the new verify --ocsp-verify option.\n  * The instance stats command displays the resource usage every second. The\n    --no-stream option disables this interactive mode and shows the\n    point-in-time usage.\n  * Instances are now started in a cgroup by default, when run as root or when\n    unified cgroups v2 with systemd as manager is configured. This allows\n    apptainer instance stats to be supported by default when possible.\n  * The instance start command now accepts an optional --app \u003cname\u003e argument\n    which invokes a start script within the %appstart \u003cname\u003e section in the\n    definition file. The instance stop command still only requires the instance\n    name.\n  * The instance name is now available inside an instance via the new\n    APPTAINER_INSTANCE environment variable.\n  * The --no-mount flag now accepts the value bind-paths to disable mounting of\n    all bind path entries in apptainer.conf.\n    Support for DOCKER_HOST parsing when using docker-daemon://\n    DOCKER_USERNAME and DOCKER_PASSWORD supported without APPTAINER_ prefix.\n    Add new Linux capabilities CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE.\n  * The remote get-login-password command allows users to retrieve a remote's\n    token. This enables piping the secret directly into docker login while\n    preventing it from showing up in a shell's history.\n  * Define EUID in %environment alongside UID.\n  * In --rocm mode, the whole of /dev/dri is now bound into the container when\n    --contain is in use. This makes /dev/dri/render devices available, required\n    for later ROCm versions.\n\n- update to 1.1.9 with following changes:\n  * Remove warning about unknown xino=on option from fuse-overlayfs, introduced\n    in 1.1.8.\n  * Ignore extraneous warning from fuse-overlayfs about a readonly /proc.\n  * Fix dropped 'n' characters on some platforms in definition file stored as\n    part of SIF metadata.\n  * Remove duplicated group ids.\n  * Fix not being able to handle multiple entries in LD_PRELOAD when binding\n    fakeroot into container during apptainer startup for --fakeroot with\n    fakeroot command.\n\n- Included a fix for CVE-2023-30549 which is a vulnerability in setuid-root\n  installations of Apptainer iwhich was not active in the recent openSUSE\n  packages. Still this is included for completenss. The fix adds allow\n  setuid-mount configuration options encrypted, squashfs, and extfs, and makes\n  the default for extfs be 'no'. That disables the use of extfs mounts\n  including for overlays or binds while in the setuid-root mode, while leaving\n  it enabled for unprivileged user namespace mode. The default for encrypted\n  and squashfs is 'yes'.\n- Other bug fixes:\n  * Fix loop device 'no such device or address' spurious errors when using shared\n    loop devices.\n  * Add xino=on mount option for writable kernel overlay mount points to fix\n    inode numbers consistency after kernel cache flush (not applicable to\n    fuse-overlayfs).\n \n\n- updated to 1.1.7 with following changes:\n  * Allow gpu options such as --nv to be nested by always inheriting all\n    libraries bound in to a parent container's /.singularity.d/libs.\n  * Map the user's home directory to the root home directory by default in the\n    non-subuid fakeroot mode like it was in the subuid fakeroot mode, for both\n    action commands and building containers from definition files.\n  * Make the error message more helpful in another place where a remote is\n    found to have no library client.\n  * Avoid incorrect error when requesting fakeroot network.\n  * Pass computed LD_LIBRARY_PATH to wrapped unsquashfs. Fixes issues where\n    unsquashfs on host uses libraries in non-default paths.\n","status":"published","published":"2024-08-16T04:02:52Z","modified":"2026-02-04T02:25:58.505237Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:13951-1","title":"apptainer-1.3.0-2.1 on GA media","description":"These are all security issues fixed in the apptainer-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:39.587811Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13952-1","title":"buildah-1.35.4-1.1 on GA media","description":"These are all security issues fixed in the buildah-1.35.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:59:34.076214Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13960-1","title":"podman-5.0.3-1.1 on GA media","description":"These are all security issues fixed in the podman-5.0.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:22:37.655613Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13963-1","title":"containerized-data-importer-api-1.59.0-2.1 on GA media","description":"These are all security issues fixed in the containerized-data-importer-api-1.59.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:52:04.960778Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13975-1","title":"warewulf4-4.5.2-1.1 on GA media","description":"These are all security issues fixed in the warewulf4-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:16:06.836313Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14019-1","title":"skopeo-1.15.1-1.1 on GA media","description":"These are all security issues fixed in the skopeo-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:05:39.458221Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14059-1","title":"singularity-ce-4.1.3-1.1 on GA media","description":"These are all security issues fixed in the singularity-ce-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-20T00:00:00Z","modified":"2026-02-04T03:45:11.359436Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2025:14728-1","title":"govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250130T185858-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-04T00:00:00Z","modified":"2026-02-04T03:12:18.270116Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2026:11054-1","title":"containerized-data-importer-1.65-api-1.65.0-1.1 on GA media","description":"These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-18T00:00:00Z","modified":"2026-06-19T08:15:07.134489781Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11074-1","title":"containerized-data-importer1.65-api-1.65.0-1.1 on GA media","description":"These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-06-24T09:00:20.018497782Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20730-1","title":"Security update for apptainer","description":"This update for apptainer fixes the following issues:\n\nChanges in apptainer:\n\n- Fix CVE-2026-34986 (bsc#1262956)\n      * github.com/go-jose/go-jose/v4@v4.1.4\n      CVE-2026-33186 GO-2026-4762 (bsc#1260311)\n      * google.golang.org/grpc@v1.79.3\n      CVE-2026-24137 GO-2026-4358 (bsc#1264177)\n      * github.com/sigstore/sigstore@v1.10.4\n        Fix fallout:\n\tgithub.com/moby/go-archive@v0.1.0\n\tgithub.com/containers/image/v5=github.com/containers/image/v5@v5.36.0\n\n- Fix HTML parser misimplementation of a part of the HTML\n  specification for table related tags (CVE-2025-58190,\n  GO-2026-4441, bsc#1258048).\n- Fix issue where the HTML parser takes a very long time or\n  even never returns (CVE-2025-47911, GO-2026-4440, bsc#1258047).\n\n- Update ot 1.4.5\n  * Fix for moderate severity GO-2025-4176 / CVE-2025-65105 /\n    GHSA-j3rw-fx6g-q46j (bsc#1255462):\n    Ineffective application of selinux / apparmor --security option.\n    Updates of a few dependent go libraries for related security fixes.\n  * Other fix\n    Run FUSE processes in a separate process group. This detaches them\n    from the main process so they don't receive signals such as interrupts\n    sent to a terminal there. This was not a problem with interactive\n    shells because they start their own group, but was a problem with\n    some programs with interactive Read/Eval/Print/Loops such as python.\n    An interrupt there would kill the FUSE processes.\n- From 1.4.4\n  * By applying patches to the bundled fuse2fs, allow again the possibility\n    of using a non-writable ext3 image file as an overlay. Fixes regression\n    introduced in 1.4.3.\n  * If an overlay or bound data image is asked to be mounted writable but\n    the user has no write access to the image, show a warning message\n    instead of silently switching to readonly.\n  * Avoid a fatal error when starting fakeroot from suid mode while\n    in an NFS directory.\n  * Fix 32-bit builds which were accidentally broken by a library\n    upgrade that was done for a minor security issue.\n- Fix CVEs:\n  * GO-2025-4135 - CVE-2025-47914\n    Malformed constraint may cause denial of service in\n    golang.org/x/crypto/ssh/agent.\n  * GO-2025-4134 - CVE-2025-58181 - bsc#1253924\n    Unbounded memory consumption in golang.org/x/crypto/ssh.\n  * GO-2025-4116 - CVE-2025-47913\n    Potential denial of service in golang.org/x/crypto/ssh/agent.\n  * GO-2025-3595 - CVE-2025-22872\n   Incorrect Neutralization of Input During Web Page Generation\n   in x/net.\n  * GO-2025-3503 - CVE-2025-22870\n    HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net.\n  * GO-2025-3487 - CVE-2025-22869\n    Potential denial of service in golang.org/x/crypto.\n  * GO-2025-3485 - CVE-2025-27144\n    DoS in go-jose Parsing in github.com/go-jose/go-jose.\n  * GO-2025-3754 - CVE-2025-8556\n    CIRCL-Fourq: Missing and wrong validation can lead to\n    incorrect results in github.com/cloudflare/circl.\n\n- No need for binutils-gold for aarch64\n\n- Update to 1.4.3\n  * Corrected the mconfig -s option for statically building apptainer\n    and starter binaries.\n  * Resolved an issue where the Makefile generated by mconfig -b\n    failed when the build directory was not a subdirectory of the\n    Apptainer source code.\n  * Fixed %files in definition files to correctly copy symlinks\n    pointing above the destination directory but within the\n    destination stage root filesystem.\n  * Addressed a typo in nvliblist.conf ( libnvoptix.so.1 was\n    corrected to libnvoptix.so).\n  * Prevented timeouts during cleanup after building\n    gocryptfs-encrypted SIF files.\n  * Fixed a bug that prevented build with --passphrase or --pem-path\n    (without --encrypt) from implying fakeroot.\n  * Resolved a hang when copying files between build stages while\n    using suid mode without user namespaces.\n  * Fixed issues with running and building containers of different\n    architectures than the host via binfmt_misc when using rootless\n    fakeroot.\n  * Corrected \"target: no such file or directory\" errors when\n    extracting layers from certain OCI images that manipulate hard\n    links across layers.\n  * Fixed a crash when executing a privilege-encrypted container as\n    root.\n  * Improved documentation for the remote list command.\n  * Removed the fakerootcallback functionality.\n  * Updated the default pacman confURL for Bootstrap: arch container\n    builds.\n  * Updated bundled fuse programs to their latest releases.\n  * Changed the default message level from silent to normal in\n    nested apptainer executions of a build's %post section, and\n    suppressed an unnecessary warning.\n  * Invalid environment variables are now ignored when pulling\n    oci/docker containers.\n- Add definition file for SLE 16 (SLE-16.def).\n- Remove definition files for SLE15 SP5 (SLE-15SP5.def) and\n  SP6 (SLE-15SP6.def).\n\n- Update to 1.4.2\n  * Restore looking for registry mirrors in /etc/containers/registry.conf\n    and related files. This had been inadvertently dropped beginning in 1.4.0.\n  * Fix use of the image cache when the home directory contains @ characters.\n    Previously it would assume that it was the start of a digest in the oci-dir.\n  * Fix signature verification failures on unsigned images.\n  * Add additional .deb packages to the release assets that include the label\n    trixie+ to indicate that they are for installing on Debian 13 or later.\n    Those packages are necessary to work with the new libfuse3 library in\n    Debian13. They also support libsubid, unlike the default packages because\n    they are built on Debian 11 which doesn't have that library.\n  * Add automatic triggering of Ubuntu PPA builds whenever there's a new\n    apptainer release.\n\n- Update to 1.4.1\n  * Fix the use of libsubid which had been broken by the revision\n    applied in 1.4.0-rc.2.\n  * Fix a bug introduced in 1.4.0 that caused arm64 to be\n    mis-converted to arm64v8 and resulted in a failure when pulling\n    OCI containers.\n  * Fix user database lookup in master process preventing instance\n    from starting correctly on systems using winbind.\n  * Check for existence of `/run/systemd/system` when verifying\n    cgroups can be used via systemd manager.\n  * Add a clear error message if someone tries to use privileged\n    network options while not using setuid mode.\n  * Allow multi-arch oci-archive files that have a nested index\n    with the manifest. This is the default format (both for Docker\n    and OCI) when using `nerdctl save`.\n  * Test if docker-archive is actually an oci-archive (since Docker\n    version 25), and if it is oci then use the OCI parser to avoid\n    bugs in the Docker parser. Save the daemon-daemon references\n    to a temporary docker-archive, to benefit from the same\n    improvements also for those references. Parse as oci-archive.\n\n- New Features \u0026 Functionality in from ineherited 1.4.0\n  * Add new build option `--mksquashfs-args` to pass additional\n    arguments to the `mksquashfs` command when building SIF files.\n    If a compression method other than gzip is selected, the SIF\n    file might not work with older installations of Apptainer\n    or Singularity, so an INFO message about that is printed. On\n    the other hand, an INFO message that was printed (twice) when\n    running an image with non-gzip compression has been removed.\n  * If the `mksquashfs` version is new enough (version 4.6 in\n    Leaep 16.0), then show a percentage progress bar (with ETA)\n    during SIF creation in the default log level. If the `mksquashfs`\n    version is older, then in verbose or debug log level show the\n    output of mksquashfs with its own progress bar.\n  * Statistics are now normally available for instances that are\n    started by non-root users on cgroups v2 systems. The instance\n    will be started in the current cgroup. Information about\n    configuration issues that prevent collection of statistics are\n    displayed as INFO messages by default.\n  * Add a `--sandbox` option to `apptainer pull`.\n  * Add configuration file binding to the `--nv` option. Files\n    that are recognized in the NVIDIA Container Toolkit, including\n    files for EGL ICD, were added to the default `nvliblist.conf`.\n  * It is now possible to use multiple environment variable files\n    using the `--env-file` flag. Files can be specified as a\n    comma-separated list or by using the flag multiple times.\n    Variables defined in later files take precedence over earlier\n    files.\n  * The registry login and registry logout commands now support a\n    `--authfile \u003cpath\u003e` option, which causes OCI credentials to be\n    written to / removed from a custom file located at `\u003cpath\u003e`\n    instead of the default location (`$HOME/.apptainer/docker-config.json`).\n    The commands `pull`, `push`, `run`, `exec`, `shell` and\n    instance start can now also be passed a `--authfile \u003cpath\u003e`\n    option, to read OCI registry credentials from this custom file.\n  * A new `--netns-path` option takes a path to a network\n    namespace to join when starting a container. The root user\n    may join any network namespace. An unprivileged user can only\n    join a network namespace specified in the new `allow netns\n    paths` directive in `apptainer.conf`, if they are also listed\n    in `allow net users` / `allow net groups` and apptainer is\n    installed with setuid privileges. Not supported with\n    `--fakeroot`.\n  * `apptainer.conf` now accepts setting the following options:\n        `allow ipc ns` -- Default value is `yes`; when set to `no`,\n\tit will disable the use of the `--ipc` flag.\n        `allow uts ns` -- Default value is `yes`; when set to `no`,\n\tit will invalidate the use of the `--uts` and `--hostname`\n\tflags.\n        `allow user ns` -- Default value is `yes`; when set to\n\t`no`, it will disable creation of user namespaces. Note\n\tthat this will prevent execution of containers with the\n\t`--userns` or `--fakeroot` flags and with unprivileged\n\tinstallations of Apptainer.\n- Changed defaults / behaviours\n  * Label the starter process seen in `ps` with the image filename,\n    for example: Apptainer runtime parent: `example.sif`.\n  * Remove runtime and compute libraries from `rocmliblist.conf`.\n    They should instead be provided by the container image.\n  * Allow overriding the build architecture with `--arch` and\n    `--arch-variant`, to build images for another architecture\n    than the current host arch. This requires that the host has\n    been set up to support multiple architectures (`binfmt_misc`).\n  * Complete the previously partial support for the riscv64\n    architecture.\n  * Show a warning message if changing directory to the cwd\n    fails, instead of silently switching to the home directory\n    or `/`.\n  * Write starter messages to stderr when an instance fails to\n    start. Previously they were incorrectly written to stdout.\n  * Skip attempting to bind inaccessible mount points when\n    handling the `mount hostfs = yes` configuration option.\n  * Fix storage of credentials for `docker.io` to behave the same\n    as for `index.docker.io`.\n  * Change message log level from warning to debug when environment\n    variables set inside a container or by `APPTAINERENV` have a\n    different value than the environment variable on the host.\n  * Change the default message level from silent to the normal\n    level in the nested apptainer that executes a build's `%post`\n    section, and suppress an unnecessary warning message.\n  * Ignore invalid environment variables when pulling oci/docker\n    containers.\n  * Remove the little-known `fakerootcallback` functionality.\n  * Update the default pacman confURL for `Bootstrap: arch`\n    container builds.\n  * Update the bundled fuse programs to their latest releases.\n- Bug fixes\n  * Fix the `mconfig -s` option to build the apptainer and starter\n    binaries statically as documented.\n  * `%files from` in a definition file will now correctly copy\n    symlinks that `%point` to a target above the destination\n    directory but inside the `%destination` stage root filesystem.\n  * Fixed typo in `nvliblist.conf` (`libnvoptix.so.1` -\u003e `libnvoptix.so`).\n  * Avoid timeouts when cleaning up from building gocryptfs-encrypted\n    SIF files.\n  * Fix bug that prevented build with `--passphrase` or\n    `--pem-path` but without `--encrypt` from implying fakeroot.\n  * Fix hang when copying files between build stages while using\n    suid mode without user namespaces.\n  * Fix running and building containers of different architectures\n    than the host via binfmt_misc when using rootless fakeroot.\n  * Fix `target: no such file or directory` error when extracting\n    layers from certain OCI images that manipulate hard links\n    across layers.\n  * Fix the crash that happened when executing a privilege-encrypted\n    container as root.\n\n- Fix CVE-2024-45338, CVE-2025-22870, CVE-2024-45337, CVE-2025-22869, CVE-2025-27144 CVE-2024-41110\n  * GO-2024-3333 CVE-2024-45338 (bsc#1234794)\n    GO-2025-3503 CVE-2025-22870 (bsc#1238611):\n    Update to: golang.org/x/net@v0.36.0\n  * GO-2024-3321 CVE-2024-45337 (bsc#1234595)\n    GO-2025-3487 CVE-2025-22869 (bsc#1239341):\n    Update to: golang.org/x/crypto@v0.35.0\n  * GO-2025-3485 CVE-2025-27144 (bsc#1237679):\n    Update to: github.com/go-jose/go-jose/v3@v3.0.4\n  * GO-2024-3005 CVE-2024-41110 (bsc#1228324):\n    Update to: github.com/docker/docker@v25.0.6+incompatible\n\n- Update golang.org/x/net to v0.23 to fix CVE-2023-45288 (bnc#1236528).\n\n- Update to version 1.3.6\n  * Avoid using kernel overlayfs when the lower layer is a sandbox\n    on an incompatible filesystem type such as GPFS or Lustre.\n    For those cases use fuse-overlayfs instead. This fixes a\n    regression introduced in 1.3.0. The regression didn't much\n    impact Lustre because kernel overlayfs refused to try to use\n    it and Apptainer proceeded to use fuse-overlayfs anyway, but\n    with GPFS the kernel overlayfs allowed mounting but returned\n    stale file handle errors.\n\n- Version 1.3.5\n  * Fix a regression introduced in 1.3.4 that overwrote existing\n    standard `/.singularity.d` files such as `runscript` in\n    container images even if they had been modified.\n  * Skip attempting to bind inaccessible mount points when\n    handling the `mount hostfs = yes` configuration option.\n  * Support parsing nested variables defined inside `%arguments`\n    section of definition files.\n  * Ignore invalid environment variables when pulling oci/docker\n    containers.\n\n- Version 1.3.4\n  * Fixed sif-embedded overlay partitions for containers that are\n    larger than 2 gigabytes.\n  * Fixed the failure when starting apptainer with\n    `instance --fakeroot`.\n  * `apptainer build -B ...` can now be used to mount custom\n    resolv.conf and hosts files from non-standard outside locations.\n    This can be used to run `apptainer build` in a nix-build sandbox\n    that has no `/etc/resolv.conf`.\n  * Fixed failing builds from local images that have symbolic links\n    for paths that are part of the base container environment (e.g.\n    /var/tmp -\u003e /tmp).\n  * Show info messages suggesting to use\n    `enable underlay = preferred` or the `--underlay` flag when\n    overlay is implied for bind mounts but the kernel is too old\n    to support fuse mounts in user namespaces and so tries to use\n    fusermount.\n  * When someone uses a `yum` bootstrap to build a container\n    without using subuid-based fakeroot or root, warn that it is\n    unlikely to work.\n  * Allow a writable `--overlay` to be used with `--nvccli` instead\n    of `--writable-tmpfs`.\n  * If an error \"no descriptor found for reference\" is seen while\n    getting an oci container, retry the operation up to five times.\n  * Make fakeroot Recommended for SUSE rpms instead of Required.\n  * Allow bind mounts onto existing files on r/o NFS filesystems.\n  * If an error is seen in the %post section when building a\n    container using fakeroot mode 3 (with the fakeroot command)\n    then show a message suggesting using `--ignore-fakeroot-command`\n    and referring to the documentation about how to install and use\n    it inside the container definition file.\n  * Show a more helpful error message when using fakeroot in suid\n    mode and there's an `/etc/subuid` mapping even though user\n    namespaces are not available (user namespaces are required for\n    `/etc/subuid` mapping).\n\n- Version 1.3.3\n  * Added libcudadebugger.so to nvliblist.conf to support cuda-gdb\n    in CUDA 12+.\n  * Ensure opened/kept file descriptors in stage 1 are not closed\n    during the Go garbage collection to avoid \"bad file descriptor\"\n    errors at startup.\n  * Fixed a segmentation violation issue when running Apptainer\n    checkpoint.\n  * Fixed an issue that Apptainer won't read default docker\n    credentials.\n\n- Version 1.3.2\n  * Fix for\n    [CVE-2024-3727](https://bugzilla.suse.com/show_bug.cgi?id=1224114)\n    in a dependent library which describes a flaw that can allow\n    attackers to trigger unexpected authenticated registry accesses\n    due to object digest values not being validated in all cases.\n  * Fixed the issue when nesting `apptainer instance start` inside\n    a container on cgroups-v2 capable host.\n  * Fixed the issue that oras download progress bar gets stuck\n    when downloading large images.\n\n- Version 1.3.1\n  * Make 'apptainer build' work with signed Docker containers.\n  * Fixed regression introduced in 1.3.0 that prevented closing\n    cryptsetup and the corresponding loop device after running\n    an encrypted sif container file in suid mode.\n  * Stopped binding over the default timezone in the container\n    with the host's timezone, which led to unexpected behavior if\n    the application changed timezones.\n  * Added progress bars for `oras://` push and pull.\n  * Hide `Instance stats will not be available` message under\n    `--sharens` mode.\n  * Fix problem where credentials locally stored with\n    `registry login` command were not usable in some execution\n    flows. Run `registry login` again with latest version to ensure\n    credentials are stored correctly.\n  * Make runscript timeout configurable.\n  * Return invalid bind path mount options during bind path\n    parsing.\n  * Make the INFO message more helpful when a running background\n    process at exit time causes a FUSE mount to not shut down\n    cleanly.\n  * Fixed the wrong mediaType in the oras push manifest.\n- Add Apptainer definition template for SLE15-SP7.\n\n- Make sure, build is reproducible by setting the GNU build ID to one\n  derived from the Go one. See https://pkg.go.dev/cmd/link.\n\n- Use go-jose version with fix for CVE-2024-28180 (bsc#1235211).\n","status":"published","published":"2026-05-14T16:09:31Z","modified":"2026-05-16T08:19:17.133144Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"RLSA-2024:5258","title":"Important: container-tools:rhel8 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)\n\n* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)\n\n* golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)\n\n* golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)\n\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n\n* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)\n\n* go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)\n\n* gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-08-21T14:52:31.100489Z","modified":"2026-02-05T15:15:07.780624Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2024:9102","title":"Moderate: podman security update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* podman: Symlink error leads to information disclosure (CVE-2022-4122)\n\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n\n* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)\n\n* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2025-03-17T20:16:49.937392Z","modified":"2026-02-05T09:30:13.30793Z","updated_at":"2026-11-02T15:53:24.923365Z"}]},"sources_more":{"osv":20}}