CVE-2024-51744

Upstream information

CVE-2024-51744 at MITRE

Description

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by `ParseWithClaims` return both error codes. If users only check for the `jwt.ErrTokenExpired ` using `error.Is`, they will ignore the embedded `jwt.ErrTokenSignatureInvalid` and thus potentially accept invalid tokens. A fix has been back-ported with the error handling logic from the `v5` branch to the `v4` branch. In this logic, the `ParseWithClaims` function will immediately return in "dangerous" situations (e.g., an invalid signature), limiting the combined errors only to situations where the signature is valid, but further validation failed (e.g., if the signature is valid, but is expired AND has the wrong audience). This fix is part of the 4.5.1 release. We are aware that this changes the behaviour of an established function and is not 100 % backwards compatible, so updating to 4.5.1 might break your code. In case you cannot update to 4.5.0, please make sure that you are properly checking for all errors ("dangerous" ones first), so that you are not running in the case detailed above.

---

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having moderate severity.

CVSS v3 Scores

	CNA (GitHub)	SUSE
Base Score	3.1	3.1
Vector	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack Vector	Network	Network
Attack Complexity	High	High
Privileges Required	None	None
User Interaction	Required	Required
Scope	Unchanged	Unchanged
Confidentiality Impact	Low	Low
Integrity Impact	None	None
Availability Impact	None	None
CVSSv3 Version	3.1	3.1

CVSS v4 Scores

	SUSE
Base Score	2.1
Vector	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Attack Vector	Network
Attack Complexity	High
Attack Requirements	Present
Privileges Required	None
User Interaction	Active
Vulnerable System Confidentiality Impact	Low
Vulnerable System Integrity Impact	None
Vulnerable System Availability Impact	None
Subsequent System Confidentiality Impact	None
Subsequent System Integrity Impact	None
Subsequent System Availability Impact	None
CVSSv4 Version	4.0

SUSE Bugzilla entry: 1232936 [NEW]

SUSE Security Advisories:

• SUSE-SU-2024:4042-1, published 2024-11-22T10:44:15Z
• SUSE-SU-2025:01985-1, published 2025-06-18T02:07:51Z
• SUSE-SU-2025:0524-1, published 2025-02-14T07:16:37Z
• SUSE-SU-2025:0525-1, published 2025-02-14T07:19:20Z
• SUSE-SU-2025:0546-1, published 2025-02-14T07:24:45Z
• SUSE-SU-2025:1333-1, published 2025-04-17T01:38:48Z
• openSUSE-SU-2024:14481-1, published Sun Nov 10 18:50:07 2024
• openSUSE-SU-2024:14495-1, published Fri Nov 15 18:49:10 2024
• openSUSE-SU-2024:14517-1, published Fri Nov 22 18:51:26 2024
• openSUSE-SU-2024:14522-1, published Mon Nov 25 18:50:12 2024
• openSUSE-SU-2025:0131-1, published Sun Apr 20 04:50:08 2025
• openSUSE-SU-2025:14663-1, published Sat Jan 18 18:49:59 2025
• openSUSE-SU-2025:14768-1, published Thu Feb 13 18:51:15 2025
• openSUSE-SU-2025:14988-1, published Tue Apr 15 18:50:22 2025

List of released packages

Product(s)	Fixed package version(s)	References
Container suse/cosign:2.5.0-7.1	cosign >= 2.5.0-150400.3.27.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest	supportutils-plugin-salt >= 1.2.3-150000.3.16.1
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.2	less >= 633-3.1
Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE	release-notes-susemanager >= 4.3.15.2-150400.3.133.1
SUSE Enterprise Storage 7.1	supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-Storage-7.1-2025-525
SUSE Linux Enterprise Desktop 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2025-1333 SUSE-SLE-Module-Basesystem-15-SP6-2025-525
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7	cosign >= 2.5.0-150400.3.27.1 cosign-bash-completion >= 2.5.0-150400.3.27.1 cosign-zsh-completion >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE Linux Enterprise Module for Basesystem 15 SP7 GA cosign-2.5.0-150400.3.27.1 SUSE Linux Enterprise Module for Basesystem 15 SP7 GA supportutils-plugin-salt-1.2.3-150000.3.16.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-525
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1333 SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-525
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1333 SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-525
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1333 SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-525
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1333 SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-525
SUSE Linux Enterprise Module for Package Hub 15 SP6	golang-github-prometheus-prometheus >= 2.53.3-150100.4.23.1 golang-github-prometheus-promu >= 0.17.0-150000.3.24.1	Patchnames: SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4042 SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-525 SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-546
SUSE Linux Enterprise Module for Package Hub 15 SP7	golang-github-prometheus-prometheus >= 2.53.3-150100.4.23.1 golang-github-prometheus-promu >= 0.17.0-150000.3.24.1	Patchnames: SUSE Linux Enterprise Module for Package Hub 15 SP7 GA golang-github-prometheus-prometheus-2.53.3-150100.4.23.1 SUSE Linux Enterprise Module for Package Hub 15 SP7 GA golang-github-prometheus-promu-0.17.0-150000.3.24.1
SUSE Linux Enterprise Server 15 SP3-LTSS	supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-525
SUSE Linux Enterprise Server 15 SP4-LTSS	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1333 SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-525
SUSE Linux Enterprise Server 15 SP5-LTSS	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1333 SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-525
SUSE Linux Enterprise Server for SAP Applications 15 SP3	supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP3-2025-525
SUSE Linux Enterprise Server for SAP Applications 15 SP4	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1333 SUSE-SLE-Product-SLES_SAP-15-SP4-2025-525
SUSE Linux Enterprise Server for SAP Applications 15 SP5	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1333 SUSE-SLE-Product-SLES_SAP-15-SP5-2025-525
SUSE Manager Client Tools 12	golang-github-prometheus-prometheus >= 2.53.3-1.56.1 golang-github-prometheus-promu >= 0.17.0-1.24.1 grafana >= 10.4.13-1.66.2 mgrctl >= 0.1.28-1.16.1 mgrctl-bash-completion >= 0.1.28-1.16.1 mgrctl-zsh-completion >= 0.1.28-1.16.1 spacecmd >= 5.0.11-38.153.1 supportutils-plugin-salt >= 1.2.3-6.25.1 supportutils-plugin-susemanager-client >= 5.0.4-6.33.1	Patchnames: SUSE-SLE-Manager-Tools-12-2025-524
SUSE Manager Client Tools 15	dracut-saltboot >= 0.1.1728559936.c16d4fb-150000.1.56.1 firewalld-prometheus-config >= 0.1-150000.3.59.1 golang-github-prometheus-prometheus >= 2.53.3-150000.3.59.1 grafana >= 10.4.13-150000.1.66.1 mgrctl >= 0.1.28-150000.1.16.1 mgrctl-bash-completion >= 0.1.28-150000.1.16.1 mgrctl-lang >= 0.1.28-150000.1.16.1 mgrctl-zsh-completion >= 0.1.28-150000.1.16.1 spacecmd >= 5.0.11-150000.3.130.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1 supportutils-plugin-susemanager-client >= 5.0.4-150000.3.27.1	Patchnames: SUSE-SLE-Manager-Tools-15-2025-525
SUSE Manager Client Tools for SLE Micro 5	dracut-saltboot >= 0.1.1728559936.c16d4fb-150000.1.56.1 mgrctl >= 0.1.28-150000.1.16.1 mgrctl-bash-completion >= 0.1.28-150000.1.16.1 mgrctl-lang >= 0.1.28-150000.1.16.1 mgrctl-zsh-completion >= 0.1.28-150000.1.16.1	Patchnames: SUSE-SLE-Manager-Tools-For-Micro-5-2025-525
SUSE Manager Proxy 4.3	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1333 SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-525
SUSE Manager Proxy Module 4.3	golang-github-prometheus-prometheus >= 2.53.3-150100.4.23.1	Patchnames: SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2025-546
SUSE Manager Retail Branch Server 4.3	cosign >= 2.5.0-150400.3.27.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2025-1333 SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2025-525
SUSE Manager Server 4.3	cosign >= 2.5.0-150400.3.27.1 release-notes-susemanager >= 4.3.15.2-150400.3.133.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1333 SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1985 SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-525
SUSE Package Hub 15 SP6	coredns >= 1.12.1-bp156.4.6.5 coredns-extras >= 1.12.1-bp156.4.6.5 rclone >= 1.69.3-bp156.2.3.2 rclone-bash-completion >= 1.69.3-bp156.2.3.2 rclone-zsh-completion >= 1.69.3-bp156.2.3.2 system-user-velociraptor >= 1.0.0-bp156.3.3.1 trivy >= 0.64.1-bp156.2.12.1 velociraptor >= 0.7.0.4.git142.862ef23-bp156.3.3.1 velociraptor-client >= 0.7.0.4.git142.862ef23-bp156.3.3.1	Patchnames: openSUSE-2025-131 openSUSE-2025-178 openSUSE-2025-303 openSUSE-2025-31
openSUSE Leap 15.6	coredns >= 1.12.1-bp156.4.6.5 coredns-extras >= 1.12.1-bp156.4.6.5 cosign >= 2.5.0-150400.3.27.1 dracut-saltboot >= 0.1.1728559936.c16d4fb-150000.1.56.1 firewalld-prometheus-config >= 0.1-150100.4.23.1 golang-github-prometheus-prometheus >= 2.53.3-150100.4.23.1 golang-github-prometheus-promu >= 0.17.0-150000.3.24.1 rclone >= 1.69.3-bp156.2.3.2 rclone-bash-completion >= 1.69.3-bp156.2.3.2 rclone-zsh-completion >= 1.69.3-bp156.2.3.2 spacecmd >= 5.0.11-150000.3.130.1 supportutils-plugin-salt >= 1.2.3-150000.3.16.1 supportutils-plugin-susemanager-client >= 5.0.4-150000.3.27.1 system-user-velociraptor >= 1.0.0-bp156.3.3.1 trivy >= 0.64.1-bp156.2.12.1 velociraptor >= 0.7.0.4.git142.862ef23-bp156.3.3.1 velociraptor-client >= 0.7.0.4.git142.862ef23-bp156.3.3.1	Patchnames: openSUSE-2025-131 openSUSE-2025-178 openSUSE-2025-303 openSUSE-2025-31 openSUSE-SLE-15.6-2024-4042 openSUSE-SLE-15.6-2025-1333 openSUSE-SLE-15.6-2025-525 openSUSE-SLE-15.6-2025-546
openSUSE Tumbleweed	coredns >= 1.11.3+git129.387f34d-1.1 coredns-extras >= 1.11.3+git129.387f34d-1.1 cosign >= 2.5.0-1.1 cosign-bash-completion >= 2.5.0-1.1 cosign-fish-completion >= 2.5.0-1.1 cosign-zsh-completion >= 2.5.0-1.1 govulncheck-vulndb >= 0.0.20241112T145010-1.1 grafana >= 11.5.1-1.1 rclone >= 1.68.1-2.1 rclone-bash-completion >= 1.68.1-2.1 rclone-zsh-completion >= 1.68.1-2.1 traefik >= 3.2.1-1.1 traefik2 >= 2.11.14-1.1 trivy >= 0.59.1-1.1 velociraptor >= 0.7.0.4.git142.862ef23-1.1	Patchnames: openSUSE-Tumbleweed-2024-14481 openSUSE-Tumbleweed-2024-14484 openSUSE-Tumbleweed-2024-14495 openSUSE-Tumbleweed-2024-14517 openSUSE-Tumbleweed-2024-14522 openSUSE-Tumbleweed-2025-14663 openSUSE-Tumbleweed-2025-14768 openSUSE-Tumbleweed-2025-14840 openSUSE-Tumbleweed-2025-14988

---

First public cloud image revisions this CVE is fixed in:

• amazon/suse-manager-server-4-3-byos-v20250725-hvm-ssd-x86_64
• google/suse-manager-server-4-3-byos-v20250725-x86-64
• microsoft/suse-manager-server-4-3-byos-v20250725-x86_64

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s)	Source package	State
Products under general support and receiving all security fixes.
SLES15-SP5-CHOST-BYOS-SAP-CCloud	docker	Already fixed
SLES15-SP6-CHOST-BYOS	docker	Already fixed
SLES15-SP6-CHOST-BYOS-Aliyun	docker	Already fixed
SLES15-SP6-CHOST-BYOS-Azure	docker	Already fixed
SLES15-SP6-CHOST-BYOS-EC2	docker	Already fixed
SLES15-SP6-CHOST-BYOS-GCE	docker	Already fixed
SLES15-SP6-CHOST-BYOS-GDC	docker	Already fixed
SLES15-SP6-CHOST-BYOS-SAP-CCloud	docker	Already fixed
SLES15-SP7-CHOST-BYOS-Aliyun	docker	Already fixed
SLES15-SP7-CHOST-BYOS-Azure	docker	Already fixed
SLES15-SP7-CHOST-BYOS-EC2	docker	Already fixed
SLES15-SP7-CHOST-BYOS-GCE	docker	Already fixed
SLES15-SP7-CHOST-BYOS-GDC	docker	Already fixed
SLES15-SP7-CHOST-BYOS-SAP-CCloud	docker	Already fixed
SUSE Linux Enterprise Desktop 15 SP6	cosign	Released
SUSE Linux Enterprise Desktop 15 SP6	supportutils-plugin-salt	Released
SUSE Linux Enterprise Desktop 15 SP7	cosign	Affected
SUSE Linux Enterprise Desktop 15 SP7	docker	Already fixed
SUSE Linux Enterprise Desktop 15 SP7	supportutils-plugin-salt	Released
SUSE Linux Enterprise High Performance Computing 12	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 12	kubernetes	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6	amber-cli	Affected
SUSE Linux Enterprise High Performance Computing 15 SP6	cosign	Released
SUSE Linux Enterprise High Performance Computing 15 SP6	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP6	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP6	kubernetes1.25	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6	kubernetes1.26	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6	kubernetes1.27	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6	kubernetes1.28	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP6	supportutils-plugin-salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP7	amber-cli	Affected
SUSE Linux Enterprise High Performance Computing 15 SP7	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP7	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP7	supportutils-plugin-salt	Released
SUSE Linux Enterprise Micro 5.1	docker	Already fixed
SUSE Linux Enterprise Micro 5.2	docker	Already fixed
SUSE Linux Enterprise Micro 5.3	docker	Already fixed
SUSE Linux Enterprise Micro 5.4	docker	Already fixed
SUSE Linux Enterprise Micro 5.5	docker	Already fixed
SUSE Linux Enterprise Module for Basesystem 15 SP6	cosign	Released
SUSE Linux Enterprise Module for Basesystem 15 SP6	supportutils-plugin-salt	Released
SUSE Linux Enterprise Module for Basesystem 15 SP7	cosign	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7	docker	Already fixed
SUSE Linux Enterprise Module for Basesystem 15 SP7	supportutils-plugin-salt	Released
SUSE Linux Enterprise Module for Containers 15 SP6	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15 SP6	docker-stable	Affected
SUSE Linux Enterprise Module for Containers 15 SP6	kubernetes1.25	Not affected
SUSE Linux Enterprise Module for Containers 15 SP6	kubernetes1.26	Not affected
SUSE Linux Enterprise Module for Containers 15 SP6	kubernetes1.27	Not affected
SUSE Linux Enterprise Module for Containers 15 SP6	kubernetes1.28	Not affected
SUSE Linux Enterprise Module for Containers 15 SP7	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15 SP7	docker-stable	Affected
SUSE Linux Enterprise Module for Package Hub 15 SP5	golang-github-prometheus-prometheus	Affected
SUSE Linux Enterprise Module for Package Hub 15 SP5	govulncheck-vulndb	Released
SUSE Linux Enterprise Module for Package Hub 15 SP5	grafana	Affected
SUSE Linux Enterprise Module for Package Hub 15 SP6	golang-github-prometheus-prometheus	Released
SUSE Linux Enterprise Module for Package Hub 15 SP6	golang-github-prometheus-promu	Released
SUSE Linux Enterprise Module for Package Hub 15 SP6	govulncheck-vulndb	Released
SUSE Linux Enterprise Module for Package Hub 15 SP6	grafana	Already fixed
SUSE Linux Enterprise Module for Package Hub 15 SP7	golang-github-prometheus-prometheus	Released
SUSE Linux Enterprise Module for Package Hub 15 SP7	golang-github-prometheus-promu	Released
SUSE Linux Enterprise Module for Package Hub 15 SP7	grafana	Already fixed
SUSE Linux Enterprise Module for Server Applications 15 SP6	amber-cli	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP7	amber-cli	Affected
SUSE Linux Enterprise Server 15 SP6	amber-cli	Affected
SUSE Linux Enterprise Server 15 SP6	cosign	Released
SUSE Linux Enterprise Server 15 SP6	docker	Already fixed
SUSE Linux Enterprise Server 15 SP6	docker-stable	Affected
SUSE Linux Enterprise Server 15 SP6	kubernetes1.25	Not affected
SUSE Linux Enterprise Server 15 SP6	kubernetes1.26	Not affected
SUSE Linux Enterprise Server 15 SP6	kubernetes1.27	Not affected
SUSE Linux Enterprise Server 15 SP6	kubernetes1.28	Not affected
SUSE Linux Enterprise Server 15 SP6	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server 15 SP7	amber-cli	Affected
SUSE Linux Enterprise Server 15 SP7	cosign	Affected
SUSE Linux Enterprise Server 15 SP7	docker	Already fixed
SUSE Linux Enterprise Server 15 SP7	docker-stable	Affected
SUSE Linux Enterprise Server 15 SP7	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server 16.0	buildkit	Affected
SUSE Linux Enterprise Server 16.0	cosign	Not affected
SUSE Linux Enterprise Server 16.0	docker	Already fixed
SUSE Linux Enterprise Server 16.0	docker-compose	Affected
SUSE Linux Enterprise Server 16.0	docker-stable	Affected
SUSE Linux Enterprise Server 16.0	golang-github-prometheus-prometheus	Released
SUSE Linux Enterprise Server 16.0	govulncheck-vulndb	Released
SUSE Linux Enterprise Server 16.0	velociraptor	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP6	amber-cli	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	cosign	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP6	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP6	docker-stable	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	kubernetes1.25	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	kubernetes1.26	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	kubernetes1.27	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	kubernetes1.28	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP7	amber-cli	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7	cosign	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP7	docker-stable	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server for SAP Applications 16.0	buildkit	Affected
SUSE Linux Enterprise Server for SAP Applications 16.0	cosign	Not affected
SUSE Linux Enterprise Server for SAP Applications 16.0	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 16.0	docker-compose	Affected
SUSE Linux Enterprise Server for SAP Applications 16.0	docker-stable	Affected
SUSE Linux Enterprise Server for SAP Applications 16.0	golang-github-prometheus-prometheus	Affected
SUSE Linux Enterprise Server for SAP Applications 16.0	govulncheck-vulndb	Affected
SUSE Linux Enterprise Server for SAP Applications 16.0	velociraptor	Affected
SUSE Linux Micro 6.0	buildkit	Affected
SUSE Linux Micro 6.0	docker	Already fixed
SUSE Linux Micro 6.0	docker-compose	Affected
SUSE Linux Micro 6.1	buildkit	Affected
SUSE Linux Micro 6.1	docker	Already fixed
SUSE Linux Micro 6.1	docker-compose	Affected
SUSE Linux Micro 6.2	docker	Already fixed
SUSE Linux Micro 6.2	docker-compose	Affected
SUSE Manager Client Tools 12	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 12	golang-github-prometheus-promu	Released
SUSE Manager Client Tools 12	grafana	Released
SUSE Manager Client Tools 12	spacecmd	Released
SUSE Manager Client Tools 12	supportutils-plugin-salt	Released
SUSE Manager Client Tools 12	supportutils-plugin-susemanager-client	Released
SUSE Manager Client Tools 12	uyuni-tools	Released
SUSE Manager Client Tools 12-BETA	golang-github-prometheus-prometheus	Ignore
SUSE Manager Client Tools 12-BETA	grafana	Ignore
SUSE Manager Client Tools 15	dracut-saltboot	Released
SUSE Manager Client Tools 15	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 15	grafana	Released
SUSE Manager Client Tools 15	spacecmd	Released
SUSE Manager Client Tools 15	supportutils-plugin-salt	Released
SUSE Manager Client Tools 15	supportutils-plugin-susemanager-client	Released
SUSE Manager Client Tools 15	uyuni-tools	Released
SUSE Manager Client Tools 15-BETA	golang-github-prometheus-prometheus	Ignore
SUSE Manager Client Tools 15-BETA	grafana	Ignore
SUSE Manager Client Tools for SLE 12	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools for SLE 15	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools for SLE Micro 5	dracut-saltboot	Released
SUSE Manager Client Tools for SLE Micro 5	uyuni-tools	Released
SUSE Manager Proxy Module 4.3	golang-github-prometheus-prometheus	Released
SUSE Package Hub 15 SP6	coredns	Released
SUSE Package Hub 15 SP6	rclone	Released
SUSE Package Hub 15 SP6	trivy	Released
SUSE Package Hub 15 SP6	velociraptor	Released
SUSE Package Hub 15 SP6	velociraptor-client	Released
openSUSE Leap 15.6	amber-cli	Affected
openSUSE Leap 15.6	cosign	Released
openSUSE Leap 15.6	docker	Already fixed
openSUSE Leap 15.6	docker-stable	Affected
openSUSE Leap 15.6	etcd	Already fixed
openSUSE Leap 15.6	golang-github-prometheus-prometheus	Released
openSUSE Leap 15.6	govulncheck-vulndb	Released
openSUSE Leap 15.6	grafana	Already fixed
openSUSE Leap 15.6	kubernetes1.18	Unsupported
openSUSE Leap 15.6	kubernetes1.23	Unsupported
openSUSE Leap 15.6	kubernetes1.24	Not affected
openSUSE Leap 15.6	kubernetes1.25	Not affected
openSUSE Leap 15.6	kubernetes1.26	Not affected
openSUSE Leap 15.6	kubernetes1.27	Not affected
openSUSE Leap 15.6	kubernetes1.28	Not affected
Products under Long Term Service Pack support and receiving important and critical security fixes.
SLES15-EC2-CHOST-HVM-BYOS	docker	Already fixed
SLES15-SP1-CHOST-BYOS-Azure	docker	Already fixed
SLES15-SP1-CHOST-BYOS-EC2	docker	Already fixed
SLES15-SP1-CHOST-BYOS-GCE	docker	Already fixed
SLES15-SP2-CHOST-BYOS-Aliyun	docker	Already fixed
SLES15-SP2-CHOST-BYOS-Azure	docker	Already fixed
SLES15-SP2-CHOST-BYOS-EC2	docker	Already fixed
SLES15-SP2-CHOST-BYOS-GCE	docker	Already fixed
SLES15-SP3-CHOST-BYOS-Aliyun	docker	Already fixed
SLES15-SP3-CHOST-BYOS-Azure	docker	Already fixed
SLES15-SP3-CHOST-BYOS-EC2	docker	Already fixed
SLES15-SP3-CHOST-BYOS-GCE	docker	Already fixed
SLES15-SP3-CHOST-BYOS-SAP-CCloud	docker	Already fixed
SLES15-SP4-CHOST-BYOS	docker	Already fixed
SLES15-SP4-CHOST-BYOS-Aliyun	docker	Already fixed
SLES15-SP4-CHOST-BYOS-Azure	docker	Already fixed
SLES15-SP4-CHOST-BYOS-EC2	docker	Already fixed
SLES15-SP4-CHOST-BYOS-GCE	docker	Already fixed
SLES15-SP4-CHOST-BYOS-SAP-CCloud	docker	Already fixed
SLES15-SP5-CHOST-BYOS-Aliyun	docker	Already fixed
SLES15-SP5-CHOST-BYOS-Azure	docker	Already fixed
SLES15-SP5-CHOST-BYOS-EC2	docker	Already fixed
SLES15-SP5-CHOST-BYOS-GCE	docker	Already fixed
SLES15-SP5-CHOST-BYOS-GDC	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP3	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP3	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	supportutils-plugin-salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP4	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP4	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4	kubernetes1.25	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4	kubernetes1.26	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4	kubernetes1.27	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4	kubernetes1.28	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	cosign	Released
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kubernetes1.25	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kubernetes1.26	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kubernetes1.27	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kubernetes1.28	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	supportutils-plugin-salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP5	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP5	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5	kubernetes1.25	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5	kubernetes1.26	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5	kubernetes1.27	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5	kubernetes1.28	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	cosign	Released
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kubernetes1.25	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kubernetes1.26	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kubernetes1.27	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kubernetes1.28	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	supportutils-plugin-salt	Released
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	cosign	Released
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kubernetes1.25	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kubernetes1.26	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kubernetes1.27	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kubernetes1.28	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	supportutils-plugin-salt	Released
SUSE Linux Enterprise Module for Basesystem 15 SP4	cosign	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5	cosign	Affected
SUSE Linux Enterprise Module for Containers 15 SP3	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15 SP3	kubernetes1.18	Unsupported
SUSE Linux Enterprise Module for Containers 15 SP3	kubernetes1.23	Unsupported
SUSE Linux Enterprise Module for Containers 15 SP4	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15 SP4	kubernetes1.18	Unsupported
SUSE Linux Enterprise Module for Containers 15 SP4	kubernetes1.23	Unsupported
SUSE Linux Enterprise Module for Containers 15 SP4	kubernetes1.24	Not affected
SUSE Linux Enterprise Module for Containers 15 SP4	kubernetes1.25	Not affected
SUSE Linux Enterprise Module for Containers 15 SP4	kubernetes1.26	Not affected
SUSE Linux Enterprise Module for Containers 15 SP4	kubernetes1.27	Not affected
SUSE Linux Enterprise Module for Containers 15 SP4	kubernetes1.28	Not affected
SUSE Linux Enterprise Module for Containers 15 SP5	docker	Affected
SUSE Linux Enterprise Module for Containers 15 SP5	docker-stable	Affected
SUSE Linux Enterprise Module for Containers 15 SP5	kubernetes1.23	Unsupported
SUSE Linux Enterprise Module for Containers 15 SP5	kubernetes1.24	Not affected
SUSE Linux Enterprise Module for Containers 15 SP5	kubernetes1.25	Not affected
SUSE Linux Enterprise Module for Containers 15 SP5	kubernetes1.26	Not affected
SUSE Linux Enterprise Module for Containers 15 SP5	kubernetes1.27	Not affected
SUSE Linux Enterprise Module for Containers 15 SP5	kubernetes1.28	Not affected
SUSE Linux Enterprise Module for Public Cloud 12	kubernetes	Not affected
SUSE Linux Enterprise Server 12 SP5	docker	Already fixed
SUSE Linux Enterprise Server 12 SP5	kubernetes	Not affected
SUSE Linux Enterprise Server 12 SP5-LTSS	docker	Already fixed
SUSE Linux Enterprise Server 12 SP5-LTSS	docker-stable	Affected
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security	docker	Already fixed
SUSE Linux Enterprise Server 15 SP3	docker	Already fixed
SUSE Linux Enterprise Server 15 SP3	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP3	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server 15 SP3-LTSS	docker	Already fixed
SUSE Linux Enterprise Server 15 SP3-LTSS	docker-stable	Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP3-LTSS	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server 15 SP3-LTSS	kubernetes1.24	Not affected
SUSE Linux Enterprise Server 15 SP3-LTSS	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server 15 SP4	cosign	Affected
SUSE Linux Enterprise Server 15 SP4	docker	Already fixed
SUSE Linux Enterprise Server 15 SP4	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP4	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server 15 SP4	kubernetes1.24	Not affected
SUSE Linux Enterprise Server 15 SP4	kubernetes1.25	Not affected
SUSE Linux Enterprise Server 15 SP4	kubernetes1.26	Not affected
SUSE Linux Enterprise Server 15 SP4	kubernetes1.27	Not affected
SUSE Linux Enterprise Server 15 SP4	kubernetes1.28	Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS	cosign	Released
SUSE Linux Enterprise Server 15 SP4-LTSS	docker	Already fixed
SUSE Linux Enterprise Server 15 SP4-LTSS	docker-stable	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP4-LTSS	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server 15 SP4-LTSS	kubernetes1.24	Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS	kubernetes1.25	Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS	kubernetes1.26	Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS	kubernetes1.27	Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS	kubernetes1.28	Not affected
SUSE Linux Enterprise Server 15 SP4-LTSS	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server 15 SP5	cosign	Affected
SUSE Linux Enterprise Server 15 SP5	docker	Affected
SUSE Linux Enterprise Server 15 SP5	docker-stable	Affected
SUSE Linux Enterprise Server 15 SP5	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server 15 SP5	kubernetes1.24	Not affected
SUSE Linux Enterprise Server 15 SP5	kubernetes1.25	Not affected
SUSE Linux Enterprise Server 15 SP5	kubernetes1.26	Not affected
SUSE Linux Enterprise Server 15 SP5	kubernetes1.27	Not affected
SUSE Linux Enterprise Server 15 SP5	kubernetes1.28	Not affected
SUSE Linux Enterprise Server 15 SP5-LTSS	cosign	Released
SUSE Linux Enterprise Server 15 SP5-LTSS	docker	Already fixed
SUSE Linux Enterprise Server 15 SP5-LTSS	docker-stable	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server 15 SP5-LTSS	kubernetes1.24	Not affected
SUSE Linux Enterprise Server 15 SP5-LTSS	kubernetes1.25	Not affected
SUSE Linux Enterprise Server 15 SP5-LTSS	kubernetes1.26	Not affected
SUSE Linux Enterprise Server 15 SP5-LTSS	kubernetes1.27	Not affected
SUSE Linux Enterprise Server 15 SP5-LTSS	kubernetes1.28	Not affected
SUSE Linux Enterprise Server 15 SP5-LTSS	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	docker	Already fixed
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	docker-stable	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP5	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 12 SP5	kubernetes	Not affected
SUSE Manager Proxy 4.3	cosign	Released
SUSE Manager Proxy 4.3	docker	Already fixed
SUSE Manager Proxy 4.3	kubernetes1.18	Unsupported
SUSE Manager Proxy 4.3	kubernetes1.23	Unsupported
SUSE Manager Proxy 4.3	kubernetes1.24	Not affected
SUSE Manager Proxy 4.3	kubernetes1.25	Not affected
SUSE Manager Proxy 4.3	kubernetes1.26	Not affected
SUSE Manager Proxy 4.3	kubernetes1.27	Not affected
SUSE Manager Proxy 4.3	kubernetes1.28	Not affected
SUSE Manager Proxy 4.3	supportutils-plugin-salt	Released
SUSE Manager Proxy LTS 4.3	cosign	Released
SUSE Manager Proxy LTS 4.3	golang-github-prometheus-prometheus	Released
SUSE Manager Retail Branch Server 4.3	cosign	Released
SUSE Manager Retail Branch Server 4.3	docker	Already fixed
SUSE Manager Retail Branch Server 4.3	kubernetes1.18	Unsupported
SUSE Manager Retail Branch Server 4.3	kubernetes1.23	Unsupported
SUSE Manager Retail Branch Server 4.3	kubernetes1.24	Not affected
SUSE Manager Retail Branch Server 4.3	kubernetes1.25	Not affected
SUSE Manager Retail Branch Server 4.3	kubernetes1.26	Not affected
SUSE Manager Retail Branch Server 4.3	kubernetes1.27	Not affected
SUSE Manager Retail Branch Server 4.3	kubernetes1.28	Not affected
SUSE Manager Retail Branch Server 4.3	supportutils-plugin-salt	Released
SUSE Manager Retail Branch Server LTS 4.3	cosign	Released
SUSE Manager Server 4.3	cosign	Released
SUSE Manager Server 4.3	docker	Already fixed
SUSE Manager Server 4.3	kubernetes1.18	Unsupported
SUSE Manager Server 4.3	kubernetes1.23	Unsupported
SUSE Manager Server 4.3	kubernetes1.24	Not affected
SUSE Manager Server 4.3	kubernetes1.25	Not affected
SUSE Manager Server 4.3	kubernetes1.26	Not affected
SUSE Manager Server 4.3	kubernetes1.27	Not affected
SUSE Manager Server 4.3	kubernetes1.28	Not affected
SUSE Manager Server 4.3	release-notes-susemanager	Released
SUSE Manager Server 4.3	supportutils-plugin-salt	Released
SUSE Manager Server LTS 4.3	cosign	Released
SUSE Manager Server LTS 4.3	release-notes-susemanager	Released
Products past their end of life and not receiving proactive updates anymore.
SUSE CaaS Platform 3.0	docker	Already fixed
SUSE CaaS Platform 4.0	docker	Already fixed
SUSE CaaS Platform 4.0	kubernetes	Not affected
SUSE Enterprise Storage 6	docker	Already fixed
SUSE Enterprise Storage 6	golang-github-prometheus-prometheus	Affected
SUSE Enterprise Storage 6	kubernetes	Not affected
SUSE Enterprise Storage 7	docker	Already fixed
SUSE Enterprise Storage 7	kubernetes1.18	Unsupported
SUSE Enterprise Storage 7.1	docker	Already fixed
SUSE Enterprise Storage 7.1	docker-stable	Affected
SUSE Enterprise Storage 7.1	kubernetes1.18	Unsupported
SUSE Enterprise Storage 7.1	kubernetes1.23	Unsupported
SUSE Enterprise Storage 7.1	kubernetes1.24	Not affected
SUSE Enterprise Storage 7.1	rook	Affected
SUSE Enterprise Storage 7.1	supportutils-plugin-salt	Released
SUSE Linux Enterprise Desktop 15 SP4	cosign	Affected
SUSE Linux Enterprise Desktop 15 SP5	cosign	Affected
SUSE Linux Enterprise High Performance Computing 15	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP1	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP1	kubernetes	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	kubernetes	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	kubernetes	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP2	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP2	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	cosign	Released
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	docker	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	docker-stable	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kubernetes1.18	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kubernetes1.23	Unsupported
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kubernetes1.24	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kubernetes1.25	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kubernetes1.26	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kubernetes1.27	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kubernetes1.28	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	supportutils-plugin-salt	Released
SUSE Linux Enterprise High Performance Computing 15-ESPOS	docker	Already fixed
SUSE Linux Enterprise High Performance Computing 15-LTSS	docker	Already fixed
SUSE Linux Enterprise Micro 5.0	docker	Already fixed
SUSE Linux Enterprise Module for Containers 12	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15 SP1	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15 SP1	kubernetes	Not affected
SUSE Linux Enterprise Module for Containers 15 SP2	docker	Already fixed
SUSE Linux Enterprise Module for Containers 15 SP2	kubernetes1.18	Unsupported
SUSE Linux Enterprise Module for Package Hub 15 SP4	grafana	Already fixed
SUSE Linux Enterprise Real Time 15 SP4	cosign	Affected
SUSE Linux Enterprise Server 12	docker	Already fixed
SUSE Linux Enterprise Server 12	kubernetes	Not affected
SUSE Linux Enterprise Server 12 SP3	docker	Already fixed
SUSE Linux Enterprise Server 12 SP3	kubernetes	Not affected
SUSE Linux Enterprise Server 12 SP4	docker	Already fixed
SUSE Linux Enterprise Server 12 SP4	kubernetes	Not affected
SUSE Linux Enterprise Server 15	docker	Already fixed
SUSE Linux Enterprise Server 15 SP1	docker	Already fixed
SUSE Linux Enterprise Server 15 SP1	kubernetes	Not affected
SUSE Linux Enterprise Server 15 SP1-BCL	docker	Already fixed
SUSE Linux Enterprise Server 15 SP1-BCL	kubernetes	Not affected
SUSE Linux Enterprise Server 15 SP1-LTSS	docker	Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	kubernetes	Not affected
SUSE Linux Enterprise Server 15 SP2	docker	Already fixed
SUSE Linux Enterprise Server 15 SP2	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP2-BCL	docker	Already fixed
SUSE Linux Enterprise Server 15 SP2-BCL	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP2-LTSS	docker	Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP3-BCL	docker	Already fixed
SUSE Linux Enterprise Server 15 SP3-BCL	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server 15 SP3-BCL	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server 15-LTSS	docker	Affected
SUSE Linux Enterprise Server for SAP Applications 12	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 12	kubernetes	Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kubernetes	Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 12 SP4	kubernetes	Not affected
SUSE Linux Enterprise Server for SAP Applications 15	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP1	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP1	kubernetes	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	docker	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP3	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP3	docker-stable	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP3	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP3	kubernetes1.24	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	cosign	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	docker	Already fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP4	docker-stable	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kubernetes1.18	Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kubernetes1.24	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kubernetes1.25	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kubernetes1.26	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kubernetes1.27	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kubernetes1.28	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	supportutils-plugin-salt	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5	cosign	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5	docker	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	docker-stable	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kubernetes1.23	Unsupported
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kubernetes1.24	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kubernetes1.25	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kubernetes1.26	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kubernetes1.27	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kubernetes1.28	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	supportutils-plugin-salt	Released
SUSE Manager Proxy 4.0	docker	Already fixed
SUSE Manager Proxy 4.0	kubernetes	Not affected
SUSE Manager Proxy 4.1	docker	Already fixed
SUSE Manager Proxy 4.1	kubernetes1.18	Unsupported
SUSE Manager Proxy 4.2	docker	Already fixed
SUSE Manager Proxy 4.2	kubernetes1.18	Unsupported
SUSE Manager Proxy 4.2	kubernetes1.23	Unsupported
SUSE Manager Proxy Module 4.1	golang-github-prometheus-prometheus	Affected
SUSE Manager Proxy Module 4.2	golang-github-prometheus-prometheus	Affected
SUSE Manager Retail Branch Server 4.0	docker	Already fixed
SUSE Manager Retail Branch Server 4.0	kubernetes	Not affected
SUSE Manager Retail Branch Server 4.1	docker	Already fixed
SUSE Manager Retail Branch Server 4.1	kubernetes1.18	Unsupported
SUSE Manager Retail Branch Server 4.2	docker	Already fixed
SUSE Manager Retail Branch Server 4.2	kubernetes1.18	Unsupported
SUSE Manager Retail Branch Server 4.2	kubernetes1.23	Unsupported
SUSE Manager Server 4.0	docker	Already fixed
SUSE Manager Server 4.0	kubernetes	Not affected
SUSE Manager Server 4.1	docker	Already fixed
SUSE Manager Server 4.1	kubernetes1.18	Unsupported
SUSE Manager Server 4.2	docker	Already fixed
SUSE Manager Server 4.2	kubernetes1.18	Unsupported
SUSE Manager Server 4.2	kubernetes1.23	Unsupported
SUSE OpenStack Cloud 6	docker	Already fixed
SUSE OpenStack Cloud 6-LTSS	docker	Already fixed
openSUSE Leap 15.3	docker	Already fixed
openSUSE Leap 15.3	etcd	Already fixed
openSUSE Leap 15.3	golang-github-prometheus-prometheus	Affected
openSUSE Leap 15.3	grafana	Already fixed
openSUSE Leap 15.3	kubernetes1.18	Unsupported
openSUSE Leap 15.4	cosign	Released
openSUSE Leap 15.4	docker	Already fixed
openSUSE Leap 15.4	etcd	Already fixed
openSUSE Leap 15.4	golang-github-prometheus-prometheus	Affected
openSUSE Leap 15.4	grafana	Already fixed
openSUSE Leap 15.4	kubernetes1.18	Unsupported
openSUSE Leap 15.4	kubernetes1.24	Not affected
openSUSE Leap 15.4	kubernetes1.25	Not affected
openSUSE Leap 15.4	kubernetes1.26	Not affected
openSUSE Leap 15.4	kubernetes1.27	Not affected
openSUSE Leap 15.4	kubernetes1.28	Not affected
openSUSE Leap 15.4	release-notes-susemanager	Released
openSUSE Leap 15.5	cosign	Affected
openSUSE Leap 15.5	docker	Affected
openSUSE Leap 15.5	docker-stable	Affected
openSUSE Leap 15.5	etcd	Affected
openSUSE Leap 15.5	golang-github-prometheus-prometheus	Affected
openSUSE Leap 15.5	govulncheck-vulndb	Released
openSUSE Leap 15.5	grafana	Affected
openSUSE Leap 15.5	kubernetes1.18	Unsupported
openSUSE Leap 15.5	kubernetes1.23	Unsupported
openSUSE Leap 15.5	kubernetes1.24	Not affected
openSUSE Leap 15.5	kubernetes1.25	Not affected
openSUSE Leap 15.5	kubernetes1.26	Not affected
openSUSE Leap 15.5	kubernetes1.27	Not affected
openSUSE Leap 15.5	kubernetes1.28	Not affected
openSUSE Leap Micro 5.2	docker	Already fixed
openSUSE Leap Micro 5.3	docker	Already fixed
openSUSE Leap Micro 5.4	docker	Already fixed
openSUSE Leap Micro 5.5	docker	Already fixed
Products at an unknown state of their lifecycle.
Products	trivy	Affected
SUSE Manager Tools 15 SP1	golang-github-prometheus-prometheus	Released
SUSE Multi Linux Manager Tools Beta SLE-12	golang-github-prometheus-prometheus	Affected
SUSE Multi Linux Manager Tools Beta SLE-12	grafana	Already fixed
SUSE Multi Linux Manager Tools Beta SLE-15	golang-github-prometheus-prometheus	Affected
SUSE Multi Linux Manager Tools Beta SLE-15	grafana	Already fixed
Container Status
suse/cosign	cosign	Released
containers/milvus:2.4	etcd	Already fixed
ses/7.1/ceph/prometheus-server ses/7/ceph/prometheus-server	golang-github-prometheus-prometheus	In progress
ses/7.1/ceph/grafana ses/7/ceph/grafana	grafana	Already fixed
ses/7.1/rook/ceph	rook	Affected
private-registry/harbor-trivy-adapter	trivy	In progress

---

SUSE Timeline for this CVE

CVE page created: Tue Nov 5 00:01:12 2024
CVE page last modified: Fri Sep 12 12:32:16 2025