CVE-2024-6104

Upstream information

CVE-2024-6104 at MITRE

Description

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

---

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having moderate severity.

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	5.5	6
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Attack Vector	Local	Local
Attack Complexity	Low	Low
Privileges Required	Low	High
User Interaction	None	None
Scope	Unchanged	Changed
Confidentiality Impact	High	High
Integrity Impact	None	None
Availability Impact	None	None
CVSSv3 Version	3.1	3.1

SUSE Bugzilla entry: 1227024 [NEW]

SUSE Security Advisories:

• RHSA-2024:6194, published Thu Sep 12 08:51:13 UTC 2024
• RHSA-2024:9098, published Thu Nov 21 16:06:17 UTC 2024
• RHSA-2024:9115, published Thu Nov 21 16:06:18 UTC 2024
• SUSE-SU-2024:2273-1, published Tue Jul 2 12:30:03 UTC 2024
• SUSE-SU-2024:2273-2, published Tue Aug 6 12:30:24 UTC 2024
• SUSE-SU-2024:2286-1, published Wed Jul 3 08:30:11 UTC 2024
• SUSE-SU-2024:3062-1, published Fri Aug 30 12:30:05 UTC 2024
• SUSE-SU-2024:3266-1, published Tue Sep 17 08:32:33 UTC 2024
• SUSE-SU-2024:3267-1, published Tue Sep 17 08:32:12 UTC 2024
• SUSE-SU-2024:3288-1, published Tue Sep 17 08:30:09 UTC 2024
• SUSE-SU-2024:3546-1, published 2024-10-08T14:04:55Z
• openSUSE-SU-2024:0226-1, published Sat Aug 24 14:48:34 2024
• openSUSE-SU-2024:0227-1, published Sat Jul 27 10:49:34 2024

List of released packages

Product(s)	Fixed package version(s)	References
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-4.10 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE	podman >= 4.9.5-2.1
Container suse/sle-micro/5.5:2.0.4-5.5.160	podman >= 4.9.5-150500.3.18.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE	podman >= 4.9.5-150500.3.15.1
SUSE Enterprise Storage 7.1	podman >= 4.9.5-150300.9.34.1	Patchnames: SUSE-Storage-7.1-2024-3062
SUSE Liberty Linux 8	aardvark-dns >= 1.10.0-1.module+el8.10.0+22202+761b9a65 buildah >= 1.33.8-4.module+el8.10.0+22202+761b9a65 buildah-tests >= 1.33.8-4.module+el8.10.0+22202+761b9a65 cockpit-podman >= 84.1-1.module+el8.10.0+22202+761b9a65 conmon >= 2.1.10-1.module+el8.10.0+22202+761b9a65 container-selinux >= 2.229.0-2.module+el8.10.0+22202+761b9a65 containernetworking-plugins >= 1.4.0-5.module+el8.10.0+22202+761b9a65 containers-common >= 1-82.module+el8.10.0+22202+761b9a65 crit >= 3.18-5.module+el8.10.0+22202+761b9a65 criu >= 3.18-5.module+el8.10.0+22202+761b9a65 criu-devel >= 3.18-5.module+el8.10.0+22202+761b9a65 criu-libs >= 3.18-5.module+el8.10.0+22202+761b9a65 crun >= 1.14.3-2.module+el8.10.0+22202+761b9a65 fuse-overlayfs >= 1.13-1.module+el8.10.0+22202+761b9a65 libslirp >= 4.4.0-2.module+el8.10.0+22202+761b9a65 libslirp-devel >= 4.4.0-2.module+el8.10.0+22202+761b9a65 netavark >= 1.10.3-1.module+el8.10.0+22202+761b9a65 oci-seccomp-bpf-hook >= 1.2.10-1.module+el8.10.0+22202+761b9a65 podman >= 4.9.4-12.module+el8.10.0+22202+761b9a65 podman-catatonit >= 4.9.4-12.module+el8.10.0+22202+761b9a65 podman-docker >= 4.9.4-12.module+el8.10.0+22202+761b9a65 podman-gvproxy >= 4.9.4-12.module+el8.10.0+22202+761b9a65 podman-plugins >= 4.9.4-12.module+el8.10.0+22202+761b9a65 podman-remote >= 4.9.4-12.module+el8.10.0+22202+761b9a65 podman-tests >= 4.9.4-12.module+el8.10.0+22202+761b9a65 python3-criu >= 3.18-5.module+el8.10.0+22202+761b9a65 python3-podman >= 4.9.0-2.module+el8.10.0+22202+761b9a65 runc >= 1.1.12-4.module+el8.10.0+22202+761b9a65 skopeo >= 1.14.5-3.module+el8.10.0+22202+761b9a65 skopeo-tests >= 1.14.5-3.module+el8.10.0+22202+761b9a65 slirp4netns >= 1.2.3-1.module+el8.10.0+22202+761b9a65 toolbox >= 0.0.99.5-2.module+el8.10.0+22202+761b9a65 toolbox-tests >= 0.0.99.5-2.module+el8.10.0+22202+761b9a65 udica >= 0.2.6-21.module+el8.10.0+22202+761b9a65	Patchnames: RHSA-2024:5258
SUSE Liberty Linux 9	grafana >= 10.2.6-4.el9 grafana-selinux >= 10.2.6-4.el9 podman >= 4.9.4-10.el9_4 podman-docker >= 4.9.4-10.el9_4 podman-plugins >= 4.9.4-10.el9_4 podman-remote >= 4.9.4-10.el9_4 podman-tests >= 4.9.4-10.el9_4 skopeo >= 1.16.1-1.el9 skopeo-tests >= 1.16.1-1.el9	Patchnames: RHSA-2024:6194 RHSA-2024:9098 RHSA-2024:9115
SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5	podman >= 4.9.5-150500.3.18.1 podman-docker >= 4.9.5-150500.3.18.1 podman-remote >= 4.9.5-150500.3.18.1 podmansh >= 4.9.5-150500.3.18.1	Patchnames: SUSE-SLE-Module-Containers-15-SP5-2024-2286 SUSE-SLE-Module-Containers-15-SP5-2024-3546
SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6	podman >= 4.9.5-150500.3.18.1 podman-docker >= 4.9.5-150500.3.18.1 podman-remote >= 4.9.5-150500.3.18.1 podmansh >= 4.9.5-150500.3.18.1	Patchnames: SUSE-SLE-Module-Containers-15-SP6-2024-2286 SUSE-SLE-Module-Containers-15-SP6-2024-3546
SUSE Linux Enterprise Micro 5.1	podman >= 4.9.5-150300.9.34.1 podman-remote >= 4.9.5-150300.9.34.1	Patchnames: SUSE-SUSE-MicroOS-5.1-2024-3062
SUSE Linux Enterprise Micro 5.2	podman >= 4.9.5-150300.9.34.1 podman-remote >= 4.9.5-150300.9.34.1	Patchnames: SUSE-SUSE-MicroOS-5.2-2024-3062
SUSE Linux Enterprise Micro 5.3	podman >= 4.9.5-150400.4.30.1 podman-remote >= 4.9.5-150400.4.30.1	Patchnames: SUSE-SLE-Micro-5.3-2024-2273
SUSE Linux Enterprise Micro 5.4	podman >= 4.9.5-150400.4.30.1 podman-remote >= 4.9.5-150400.4.30.1	Patchnames: SUSE-SLE-Micro-5.4-2024-2273
SUSE Linux Enterprise Micro 5.5	podman >= 4.9.5-150500.3.18.1 podman-docker >= 4.9.5-150500.3.18.1 podman-remote >= 4.9.5-150500.3.18.1 podmansh >= 4.9.5-150500.3.18.1	Patchnames: SUSE-SLE-Micro-5.5-2024-2286 SUSE-SLE-Micro-5.5-2024-3546
SUSE Linux Enterprise Module for Package Hub 15 SP5	golang-github-prometheus-prometheus >= 2.45.6-150100.4.20.1	Patchnames: SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-3288
SUSE Linux Enterprise Module for Package Hub 15 SP6	golang-github-prometheus-prometheus >= 2.45.6-150100.4.20.1	Patchnames: SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3288
SUSE Linux Micro 6.0	podman >= 4.9.5-2.1 podman-docker >= 4.9.5-2.1 podman-remote >= 4.9.5-2.1	Patchnames: SUSE-SLE-Micro-6.0-46 SUSE-SLE-Micro-6.0-95
SUSE Manager Client Tools 12	golang-github-prometheus-prometheus >= 2.45.6-1.53.1 mgrctl >= 0.1.21-1.8.1 mgrctl-bash-completion >= 0.1.21-1.8.1 mgrctl-zsh-completion >= 0.1.21-1.8.1 python2-rhnlib >= 5.0.4-21.52.1 spacecmd >= 5.0.9-38.147.1	Patchnames: SUSE-SLE-Manager-Tools-12-2024-3266
SUSE Manager Client Tools 15	firewalld-prometheus-config >= 0.1-150000.3.56.1 golang-github-prometheus-prometheus >= 2.45.6-150000.3.56.1 mgrctl >= 0.1.21-150000.1.8.2 mgrctl-bash-completion >= 0.1.21-150000.1.8.2 mgrctl-lang >= 0.1.21-150000.1.8.2 mgrctl-zsh-completion >= 0.1.21-150000.1.8.2 python3-rhnlib >= 5.0.4-150000.3.46.1 spacecmd >= 5.0.9-150000.3.124.1	Patchnames: SUSE-SLE-Manager-Tools-15-2024-3267
SUSE Manager Client Tools for SLE Micro 5	mgrctl >= 0.1.21-150000.1.8.2 mgrctl-bash-completion >= 0.1.21-150000.1.8.2 mgrctl-lang >= 0.1.21-150000.1.8.2 mgrctl-zsh-completion >= 0.1.21-150000.1.8.2	Patchnames: SUSE-SLE-Manager-Tools-For-Micro-5-2024-3267
SUSE Manager Proxy Module 4.3	golang-github-prometheus-prometheus >= 2.45.6-150100.4.20.1	Patchnames: SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-3288
SUSE Package Hub 15 SP5	gh >= 2.53.0-bp155.2.12.1 gh-bash-completion >= 2.53.0-bp155.2.12.1 gh-fish-completion >= 2.53.0-bp155.2.12.1 gh-zsh-completion >= 2.53.0-bp155.2.12.1	Patchnames: openSUSE-2024-227
SUSE Package Hub 15 SP6	docker-machine-driver-kvm2 >= 1.34.0-bp156.2.3.1 gh >= 2.53.0-bp156.2.6.1 gh-bash-completion >= 2.53.0-bp156.2.6.1 gh-fish-completion >= 2.53.0-bp156.2.6.1 gh-zsh-completion >= 2.53.0-bp156.2.6.1 minikube >= 1.34.0-bp156.2.3.1 minikube-bash-completion >= 1.34.0-bp156.2.3.1	Patchnames: openSUSE-2024-226 openSUSE-2024-399
openSUSE Leap 15.5	firewalld-prometheus-config >= 0.1-150100.4.20.1 gh >= 2.53.0-bp155.2.12.1 gh-bash-completion >= 2.53.0-bp155.2.12.1 gh-fish-completion >= 2.53.0-bp155.2.12.1 gh-zsh-completion >= 2.53.0-bp155.2.12.1 golang-github-prometheus-prometheus >= 2.45.6-150100.4.20.1 podman >= 4.9.5-150500.3.18.1 podman-docker >= 4.9.5-150500.3.18.1 podman-remote >= 4.9.5-150500.3.18.1 podmansh >= 4.9.5-150500.3.18.1 spacecmd >= 5.0.9-150000.3.124.1	Patchnames: openSUSE-2024-227 openSUSE-SLE-15.5-2024-2286 openSUSE-SLE-15.5-2024-3267 openSUSE-SLE-15.5-2024-3288 openSUSE-SLE-15.5-2024-3546
openSUSE Leap 15.6	docker-machine-driver-kvm2 >= 1.34.0-bp156.2.3.1 firewalld-prometheus-config >= 0.1-150100.4.20.1 gh >= 2.53.0-bp156.2.6.1 gh-bash-completion >= 2.53.0-bp156.2.6.1 gh-fish-completion >= 2.53.0-bp156.2.6.1 gh-zsh-completion >= 2.53.0-bp156.2.6.1 golang-github-prometheus-prometheus >= 2.45.6-150100.4.20.1 minikube >= 1.34.0-bp156.2.3.1 minikube-bash-completion >= 1.34.0-bp156.2.3.1 podman >= 4.9.5-150500.3.18.1 podman-docker >= 4.9.5-150500.3.18.1 podman-remote >= 4.9.5-150500.3.18.1 podmansh >= 4.9.5-150500.3.18.1 spacecmd >= 5.0.9-150000.3.124.1	Patchnames: openSUSE-2024-226 openSUSE-2024-399 openSUSE-SLE-15.6-2024-2286 openSUSE-SLE-15.6-2024-3267 openSUSE-SLE-15.6-2024-3288 openSUSE-SLE-15.6-2024-3546
openSUSE Leap Micro 5.5	podman >= 4.9.5-150500.3.18.1 podman-docker >= 4.9.5-150500.3.18.1 podman-remote >= 4.9.5-150500.3.18.1 podmansh >= 4.9.5-150500.3.18.1	Patchnames: openSUSE-Leap-Micro-5.5-2024-2286 openSUSE-Leap-Micro-5.5-2024-3546
openSUSE Tumbleweed	gh >= 2.53.0-1.1 gh-bash-completion >= 2.53.0-1.1 gh-fish-completion >= 2.53.0-1.1 gh-zsh-completion >= 2.53.0-1.1 golang-github-prometheus-prometheus >= 2.53.0-2.1 podman >= 5.1.1-2.1 podman-docker >= 5.1.1-2.1 podman-remote >= 5.1.1-2.1 podmansh >= 5.1.1-2.1 teleport >= 15.4.7-1.1 teleport-fdpass-teleport >= 15.4.7-1.1 teleport-tbot >= 15.4.7-1.1 teleport-tctl >= 15.4.7-1.1 teleport-tsh >= 15.4.7-1.1 traefik >= 3.1.2-1.1 traefik2 >= 2.11.8-1.1	Patchnames: openSUSE-Tumbleweed-2024-14092 openSUSE-Tumbleweed-2024-14102 openSUSE-Tumbleweed-2024-14105 openSUSE-Tumbleweed-2024-14211 openSUSE-Tumbleweed-2024-14257 openSUSE-Tumbleweed-2024-14258

---

First public cloud image revisions this CVE is fixed in:

• amazon/suse-sle-micro-6-0-byos-v20240913-hvm-ssd-x86_64
• amazon/suse-sle-micro-6-0-byos-v20241204-hvm-ssd-arm64
• amazon/suse-sle-micro-6-0-byos-v20241204-hvm-ssd-x86_64
• amazon/suse-sle-micro-6-0-v20240913-hvm-ssd-arm64-llc
• amazon/suse-sle-micro-6-0-v20240922-hvm-ssd-arm64-ltd
• amazon/suse-sle-micro-6-0-v20240922-hvm-ssd-x86_64-llc
• amazon/suse-sle-micro-6-0-v20240922-hvm-ssd-x86_64-ltd
• amazon/suse-sle-micro-6-0-v20241204-hvm-ssd-arm64-llc
• amazon/suse-sle-micro-6-0-v20241204-hvm-ssd-arm64-ltd
• amazon/suse-sle-micro-6-0-v20241204-hvm-ssd-x86_64-llc
• amazon/suse-sle-micro-6-0-v20241204-hvm-ssd-x86_64-ltd
• google/sle-micro-6-0-byos-v20240913-arm64
• google/sle-micro-6-0-byos-v20241204-arm64
• google/sle-micro-6-0-byos-v20241204-x86-64
• microsoft/suse-sle-micro-6-0-v20241204-arm64-llc
• microsoft/suse-sle-micro-6-0-v20241204-arm64-ltd
• microsoft/suse-sle-micro-6-0-v20241204-x86_64-llc
• microsoft/suse-sle-micro-6-0-v20241204-x86_64-ltd

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s)	Source package	State
Products under general support and receiving all security fixes.
SUSE Linux Enterprise Desktop 15 SP5	cosign	Affected
SUSE Linux Enterprise Desktop 15 SP5	rekor	Affected
SUSE Linux Enterprise Desktop 15 SP5	skopeo	Affected
SUSE Linux Enterprise Desktop 15 SP6	cosign	Affected
SUSE Linux Enterprise Desktop 15 SP6	rekor	Affected
SUSE Linux Enterprise Desktop 15 SP6	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	podman	Released
SUSE Linux Enterprise High Performance Computing 15 SP5	rekor	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	rekor	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	podman	Released
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	rekor	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP6	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP6	podman	Released
SUSE Linux Enterprise High Performance Computing 15 SP6	rekor	Affected
SUSE Linux Enterprise High Performance Computing 15 SP6	skopeo	Affected
SUSE Linux Enterprise Micro 5.1	podman	Released
SUSE Linux Enterprise Micro 5.2	podman	Released
SUSE Linux Enterprise Micro 5.3	podman	Released
SUSE Linux Enterprise Micro 5.4	podman	Released
SUSE Linux Enterprise Micro 5.5	podman	Released
SUSE Linux Enterprise Micro 5.5	skopeo	Affected
SUSE Linux Enterprise Micro for Rancher 5.2	podman	Released
SUSE Linux Enterprise Micro for Rancher 5.3	podman	Released
SUSE Linux Enterprise Micro for Rancher 5.4	podman	Released
SUSE Linux Enterprise Module for Basesystem 15 SP5	cosign	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5	rekor	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5	skopeo	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6	cosign	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6	rekor	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6	skopeo	Affected
SUSE Linux Enterprise Module for Containers 15 SP5	podman	Released
SUSE Linux Enterprise Module for Containers 15 SP6	podman	Released
SUSE Linux Enterprise Module for Package Hub 15 SP5	golang-github-prometheus-prometheus	Released
SUSE Linux Enterprise Module for Package Hub 15 SP6	golang-github-prometheus-prometheus	Released
SUSE Linux Enterprise Server 15 SP5	cosign	Affected
SUSE Linux Enterprise Server 15 SP5	podman	Released
SUSE Linux Enterprise Server 15 SP5	rekor	Affected
SUSE Linux Enterprise Server 15 SP5	skopeo	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	cosign	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	podman	Released
SUSE Linux Enterprise Server 15 SP5-LTSS	rekor	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	skopeo	Affected
SUSE Linux Enterprise Server 15 SP6	cosign	Affected
SUSE Linux Enterprise Server 15 SP6	podman	Released
SUSE Linux Enterprise Server 15 SP6	rekor	Affected
SUSE Linux Enterprise Server 15 SP6	skopeo	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	cosign	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	podman	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5	rekor	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	skopeo	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	cosign	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	podman	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP6	rekor	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	skopeo	Affected
SUSE Linux Micro 6.0	buildkit	Affected
SUSE Linux Micro 6.0	podman	Released
SUSE Linux Micro 6.0	skopeo	Affected
SUSE Linux Micro 6.1	buildkit	Affected
SUSE Linux Micro 6.1	podman	Released
SUSE Linux Micro 6.1	skopeo	Affected
SUSE Manager Client Tools 12	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 12	rhnlib	Released
SUSE Manager Client Tools 12	spacecmd	Released
SUSE Manager Client Tools 12	uyuni-tools	Released
SUSE Manager Client Tools 12-BETA	golang-github-prometheus-prometheus	Affected
SUSE Manager Client Tools 15	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 15	rhnlib	Released
SUSE Manager Client Tools 15	spacecmd	Released
SUSE Manager Client Tools 15	uyuni-tools	Released
SUSE Manager Client Tools 15-BETA	golang-github-prometheus-prometheus	Affected
SUSE Manager Client Tools Beta for SLE 12	golang-github-prometheus-prometheus	Affected
SUSE Manager Client Tools Beta for SLE 15	golang-github-prometheus-prometheus	Affected
SUSE Manager Client Tools for SLE 12	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools for SLE 15	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools for SLE Micro 5	uyuni-tools	Released
SUSE Manager Proxy 4.3	cosign	Affected
SUSE Manager Proxy 4.3	podman	Affected
SUSE Manager Proxy 4.3	rekor	Affected
SUSE Manager Proxy 4.3	skopeo	Affected
SUSE Manager Proxy Module 4.3	golang-github-prometheus-prometheus	Released
SUSE Manager Retail Branch Server 4.3	cosign	Affected
SUSE Manager Retail Branch Server 4.3	podman	Affected
SUSE Manager Retail Branch Server 4.3	rekor	Affected
SUSE Manager Retail Branch Server 4.3	skopeo	Affected
SUSE Manager Server 4.3	cosign	Affected
SUSE Manager Server 4.3	podman	Affected
SUSE Manager Server 4.3	rekor	Affected
SUSE Manager Server 4.3	skopeo	Affected
SUSE Package Hub 15 SP5	gh	Released
SUSE Package Hub 15 SP6	gh	Released
SUSE Package Hub 15 SP6	minikube	Released
openSUSE Leap 15.5	cosign	Affected
openSUSE Leap 15.5	golang-github-prometheus-prometheus	Released
openSUSE Leap 15.5	podman	Released
openSUSE Leap 15.5	rekor	Affected
openSUSE Leap 15.5	skopeo	Affected
openSUSE Leap 15.6	cosign	Affected
openSUSE Leap 15.6	golang-github-prometheus-prometheus	Released
openSUSE Leap 15.6	podman	Released
openSUSE Leap 15.6	rekor	Affected
openSUSE Leap 15.6	skopeo	Affected
openSUSE Leap Micro 5.5	podman	Released
openSUSE Leap Micro 5.5	skopeo	Affected
Products under Long Term Service Pack support and receiving important and critical security fixes.
SUSE Linux Enterprise Desktop 15 SP4	cosign	Affected
SUSE Linux Enterprise Desktop 15 SP4	rekor	Affected
SUSE Linux Enterprise Desktop 15 SP4	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	rekor	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	rekor	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	rekor	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	skopeo	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP3	skopeo	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP4	cosign	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP4	rekor	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP4	skopeo	Affected
SUSE Linux Enterprise Module for Containers 15 SP2	podman	Affected
SUSE Linux Enterprise Module for Containers 15 SP3	podman	Affected
SUSE Linux Enterprise Module for Containers 15 SP4	podman	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP2	skopeo	Affected
SUSE Linux Enterprise Server 15 SP2	podman	Affected
SUSE Linux Enterprise Server 15 SP2	skopeo	Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	podman	Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	skopeo	Affected
SUSE Linux Enterprise Server 15 SP3	podman	Affected
SUSE Linux Enterprise Server 15 SP3	skopeo	Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	podman	Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	skopeo	Affected
SUSE Linux Enterprise Server 15 SP4	cosign	Affected
SUSE Linux Enterprise Server 15 SP4	podman	Affected
SUSE Linux Enterprise Server 15 SP4	rekor	Affected
SUSE Linux Enterprise Server 15 SP4	skopeo	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	cosign	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	podman	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	rekor	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	skopeo	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	podman	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	skopeo	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	podman	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	skopeo	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	cosign	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	podman	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	rekor	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	skopeo	Affected
Products past their end of life and not receiving proactive updates anymore.
SUSE CaaS Platform 4.0	podman	Affected
SUSE CaaS Platform 4.0	skopeo	Affected
SUSE Enterprise Storage 6	golang-github-prometheus-prometheus	Affected
SUSE Enterprise Storage 6	podman	Affected
SUSE Enterprise Storage 6	skopeo	Affected
SUSE Enterprise Storage 7	podman	Affected
SUSE Enterprise Storage 7	skopeo	Affected
SUSE Enterprise Storage 7.1	podman	Released
SUSE Enterprise Storage 7.1	rook	Affected
SUSE Enterprise Storage 7.1	skopeo	Affected
SUSE Linux Enterprise Desktop 15 SP3	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	podman	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15-ESPOS	skopeo	Affected
SUSE Linux Enterprise High Performance Computing 15-LTSS	skopeo	Affected
SUSE Linux Enterprise Micro 5.0	podman	Affected
SUSE Linux Enterprise Module for Containers 15 SP1	podman	Affected
SUSE Linux Enterprise Module for Server Applications 15	skopeo	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP1	skopeo	Affected
SUSE Linux Enterprise Real Time 15 SP2	skopeo	Affected
SUSE Linux Enterprise Real Time 15 SP3	skopeo	Affected
SUSE Linux Enterprise Real Time 15 SP4	cosign	Affected
SUSE Linux Enterprise Real Time 15 SP4	rekor	Affected
SUSE Linux Enterprise Real Time 15 SP4	skopeo	Affected
SUSE Linux Enterprise Server 15	skopeo	Affected
SUSE Linux Enterprise Server 15 SP1	podman	Affected
SUSE Linux Enterprise Server 15 SP1	skopeo	Affected
SUSE Linux Enterprise Server 15 SP1-BCL	podman	Affected
SUSE Linux Enterprise Server 15 SP1-BCL	skopeo	Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	podman	Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	skopeo	Affected
SUSE Linux Enterprise Server 15 SP2-BCL	podman	Affected
SUSE Linux Enterprise Server 15 SP2-BCL	skopeo	Affected
SUSE Linux Enterprise Server 15 SP3-BCL	podman	Affected
SUSE Linux Enterprise Server 15 SP3-BCL	skopeo	Affected
SUSE Linux Enterprise Server 15-LTSS	skopeo	Affected
SUSE Linux Enterprise Server for SAP Applications 15	skopeo	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	podman	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	skopeo	Affected
SUSE Manager Proxy 4.0	podman	Affected
SUSE Manager Proxy 4.0	skopeo	Affected
SUSE Manager Proxy 4.1	podman	Affected
SUSE Manager Proxy 4.1	skopeo	Affected
SUSE Manager Proxy 4.2	podman	Affected
SUSE Manager Proxy 4.2	skopeo	Affected
SUSE Manager Proxy Module 4.1	golang-github-prometheus-prometheus	Affected
SUSE Manager Proxy Module 4.2	golang-github-prometheus-prometheus	Affected
SUSE Manager Retail Branch Server 4.0	podman	Affected
SUSE Manager Retail Branch Server 4.0	skopeo	Affected
SUSE Manager Retail Branch Server 4.1	podman	Affected
SUSE Manager Retail Branch Server 4.1	skopeo	Affected
SUSE Manager Retail Branch Server 4.2	podman	Affected
SUSE Manager Retail Branch Server 4.2	skopeo	Affected
SUSE Manager Server 4.0	podman	Affected
SUSE Manager Server 4.0	skopeo	Affected
SUSE Manager Server 4.1	podman	Affected
SUSE Manager Server 4.1	skopeo	Affected
SUSE Manager Server 4.2	podman	Affected
SUSE Manager Server 4.2	skopeo	Affected
openSUSE Leap 15.3	golang-github-prometheus-prometheus	Affected
openSUSE Leap 15.3	podman	Released
openSUSE Leap 15.4	cosign	Affected
openSUSE Leap 15.4	golang-github-prometheus-prometheus	Affected
openSUSE Leap 15.4	podman	Released
openSUSE Leap 15.4	rekor	Affected
openSUSE Leap 15.4	skopeo	Affected
openSUSE Leap Micro 5.2	podman	Affected
openSUSE Leap Micro 5.3	podman	Affected
openSUSE Leap Micro 5.4	podman	Affected
Products at an unknown state of their lifecycle.
SUSE Manager Tools 15 SP1	golang-github-prometheus-prometheus	Released
Container Status
suse/cosign	cosign	Affected
ses/7.1/ceph/prometheus-server ses/7/ceph/prometheus-server	golang-github-prometheus-prometheus	In progress
suse/sle-micro/5.5	podman	Released
rancher/elemental-teal-rt/5.4 rancher/elemental-teal/5.4	podman	In progress
ses/7.1/rook/ceph	rook	Affected
suse/sles/15.3/cdi-importer:1.37.1 suse/sles/15.4/cdi-importer:1.43.0 suse/sles/15.5/cdi-importer:1.55.0	skopeo	Affected

---

SUSE Timeline for this CVE

CVE page created: Mon Jun 24 20:00:06 2024
CVE page last modified: Sat Dec 21 00:19:23 2024