{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2025-47290","title":"Title"},{"category":"description","text":"containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0.  Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2025-47290","url":"https://www.suse.com/security/cve/CVE-2025-47290"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1243392 for CVE-2025-47290","url":"https://bugzilla.suse.com/1243392"},{"category":"external","summary":"Advisory link for openSUSE-SU-2025:15146-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XU3W2GRJSEQXIANJXID5YIYCJA4B3VKT/"},{"category":"external","summary":"Advisory link for openSUSE-SU-2025:15159-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBVOKYMJCE2HZLSF5W3H3Q7KEHMMOQR3/"}],"title":"SUSE CVE CVE-2025-47290","tracking":{"current_release_date":"2026-01-23T00:31:46Z","generator":{"date":"2025-05-22T01:34:04Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2025-47290","initial_release_date":"2025-05-22T01:34:04Z","revision_history":[{"date":"2025-05-22T01:34:04Z","number":"2","summary":"Current version"},{"date":"2025-05-23T01:50:32Z","number":"3","summary":"Current version"},{"date":"2025-05-24T03:27:45Z","number":"4","summary":"Current version"},{"date":"2025-05-27T01:10:46Z","number":"5","summary":"Current version"},{"date":"2025-05-28T03:20:18Z","number":"6","summary":"Current version"},{"date":"2025-06-26T23:22:08Z","number":"7","summary":"Current version"},{"date":"2025-07-01T23:22:05Z","number":"8","summary":"Current version"},{"date":"2025-09-19T23:23:35Z","number":"9","summary":"Current version"},{"date":"2025-11-02T03:55:10Z","number":"10","summary":"Current version"},{"date":"2026-01-23T00:31:46Z","number":"11","summary":"unknown changes"}],"status":"interim","version":"11"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"SLES-LTSS-TERADATA 15 SP2","product":{"name":"SLES-LTSS-TERADATA 15 SP2","product_id":"SLES-LTSS-TERADATA 15 SP2","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss-teradata:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Desktop 15 SP7","product":{"name":"SUSE Linux Enterprise Desktop 15 SP7","product_id":"SUSE Linux Enterprise Desktop 15 SP7","product_identification_helper":{"cpe":"cpe:/o:suse:sled:15:sp7"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc-ltss:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc-ltss:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc-espos:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc-ltss:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP6","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP6","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP6","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc:15:sp6"}}},{"category":"product_name","name":"SUSE Linux Enterprise High Performance Computing 15 SP7","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP7","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP7","product_identification_helper":{"cpe":"cpe:/o:suse:sle_hpc:15:sp7"}}},{"category":"product_name","name":"SUSE Linux Enterprise Micro 5.1","product":{"name":"SUSE Linux Enterprise Micro 5.1","product_id":"SUSE Linux Enterprise Micro 5.1","product_identification_helper":{"cpe":"cpe:/o:suse:suse-microos:5.1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Micro 5.2","product":{"name":"SUSE Linux Enterprise Micro 5.2","product_id":"SUSE Linux Enterprise Micro 5.2","product_identification_helper":{"cpe":"cpe:/o:suse:suse-microos:5.2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Micro 5.3","product":{"name":"SUSE Linux Enterprise Micro 5.3","product_id":"SUSE Linux Enterprise Micro 5.3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-micro:5.3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Micro 5.4","product":{"name":"SUSE Linux Enterprise Micro 5.4","product_id":"SUSE Linux Enterprise Micro 5.4","product_identification_helper":{"cpe":"cpe:/o:suse:sle-micro:5.4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Micro 5.5","product":{"name":"SUSE Linux Enterprise Micro 5.5","product_id":"SUSE Linux Enterprise Micro 5.5","product_identification_helper":{"cpe":"cpe:/o:suse:sle-micro:5.5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Basesystem 15 SP7","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP7","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP7","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-basesystem:15:sp7"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Containers 15 SP6","product":{"name":"SUSE Linux Enterprise Module for Containers 15 SP6","product_id":"SUSE Linux Enterprise Module for Containers 15 SP6","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-containers:15:sp6"}}},{"category":"product_name","name":"SUSE Linux Enterprise Module for Containers 15 SP7","product":{"name":"SUSE Linux Enterprise Module for Containers 15 SP7","product_id":"SUSE Linux Enterprise Module for Containers 15 SP7","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-containers:15:sp7"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP5-LTSS","product":{"name":"SUSE Linux Enterprise Server 12 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP5-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:12:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security","product":{"name":"SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security","product_id":"SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss-extended-security:12:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP1-LTSS","product":{"name":"SUSE Linux Enterprise Server 15 SP1-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP1-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:15:sp1"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP2-LTSS","product":{"name":"SUSE Linux Enterprise Server 15 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP2-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:15:sp2"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP3-LTSS","product":{"name":"SUSE Linux Enterprise Server 15 SP3-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP3-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:15:sp3"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP4-LTSS","product":{"name":"SUSE Linux Enterprise Server 15 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP4-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP5-LTSS","product":{"name":"SUSE Linux Enterprise Server 15 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP5-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:15:sp5"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP6","product":{"name":"SUSE Linux Enterprise Server 15 SP6","product_id":"SUSE Linux Enterprise Server 15 SP6","product_identification_helper":{"cpe":"cpe:/o:suse:sles:15:sp6"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15 SP7","product":{"name":"SUSE Linux Enterprise Server 15 SP7","product_id":"SUSE Linux Enterprise Server 15 SP7","product_identification_helper":{"cpe":"cpe:/o:suse:sles:15:sp7"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 15-LTSS","product":{"name":"SUSE Linux Enterprise Server 15-LTSS","product_id":"SUSE Linux Enterprise Server 15-LTSS","product_identification_helper":{"cpe":"cpe:/o:suse:sles-ltss:15"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server 16.0","product":{"name":"SUSE Linux Enterprise Server 16.0","product_id":"SUSE Linux Enterprise Server 16.0","product_identification_helper":{"cpe":"cpe:/o:suse:sles:16:16.0:server"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server Teradata 15 SP4","product":{"name":"SUSE Linux Enterprise Server Teradata 15 SP4","product_id":"SUSE Linux Enterprise Server Teradata 15 SP4","product_identification_helper":{"cpe":"cpe:/o:suse:sles_teradata:15:sp4"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:15:sp6"}}},{"category":"product_name","name":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP7","product_identification_helper":{"cpe":"cpe:/o:suse:sles_sap:15:sp7"}}},{"category":"product_name","name":"SUSE Linux Micro 6.0","product":{"name":"SUSE Linux Micro 6.0","product_id":"SUSE Linux Micro 6.0","product_identification_helper":{"cpe":"cpe:/o:suse:sl-micro:6.0"}}},{"category":"product_name","name":"SUSE Linux Micro 6.1","product":{"name":"SUSE Linux Micro 6.1","product_id":"SUSE Linux Micro 6.1","product_identification_helper":{"cpe":"cpe:/o:suse:sl-micro:6.1"}}},{"category":"product_name","name":"openSUSE Leap 15.6","product":{"name":"openSUSE Leap 15.6","product_id":"openSUSE Leap 15.6","product_identification_helper":{"cpe":"cpe:/o:opensuse:leap:15.6"}}},{"category":"product_name","name":"openSUSE Tumbleweed","product":{"name":"openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed","product_identification_helper":{"cpe":"cpe:/o:opensuse:tumbleweed"}}},{"category":"product_version","name":"containerd","product":{"name":"containerd","product_id":"containerd","product_identification_helper":{"cpe":"cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/containerd@?upstream=containerd.src.rpm"}}},{"category":"product_version","name":"containerd-ctr","product":{"name":"containerd-ctr","product_id":"containerd-ctr","product_identification_helper":{"cpe":"cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/containerd-ctr@?upstream=containerd.src.rpm"}}},{"category":"product_version","name":"containerd-devel","product":{"name":"containerd-devel","product_id":"containerd-devel","product_identification_helper":{"cpe":"cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/containerd-devel@?upstream=containerd.src.rpm"}}},{"category":"product_version","name":"containerd-test","product":{"name":"containerd-test","product_id":"containerd-test","product_identification_helper":{"cpe":"cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*","purl":"pkg:rpm/suse/containerd-test@?upstream=containerd.src.rpm"}}},{"category":"product_version","name":"govulncheck-vulndb-0.0.20250523T151856-1.1","product":{"name":"govulncheck-vulndb-0.0.20250523T151856-1.1","product_id":"govulncheck-vulndb-0.0.20250523T151856-1.1","product_identification_helper":{"purl":"pkg:rpm/suse/govulncheck-vulndb@0.0.20250523T151856-1.1?upstream=govulncheck-vulndb-0.0.20250523T151856-1.1.src.rpm"}}},{"category":"product_version","name":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","product":{"name":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","product_id":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","product_identification_helper":{"purl":"pkg:rpm/suse/govulncheck-vulndb@0.0.20250814T182633-160000.1.2?upstream=govulncheck-vulndb-0.0.20250814T182633-160000.1.2.src.rpm"}}},{"category":"product_version","name":"kind-0.29.0-1.1","product":{"name":"kind-0.29.0-1.1","product_id":"kind-0.29.0-1.1","product_identification_helper":{"purl":"pkg:rpm/suse/kind@0.29.0-1.1"}}},{"category":"product_version","name":"kind-bash-completion-0.29.0-1.1","product":{"name":"kind-bash-completion-0.29.0-1.1","product_id":"kind-bash-completion-0.29.0-1.1","product_identification_helper":{"purl":"pkg:rpm/suse/kind-bash-completion@0.29.0-1.1"}}},{"category":"product_version","name":"kind-fish-completion-0.29.0-1.1","product":{"name":"kind-fish-completion-0.29.0-1.1","product_id":"kind-fish-completion-0.29.0-1.1","product_identification_helper":{"purl":"pkg:rpm/suse/kind-fish-completion@0.29.0-1.1"}}},{"category":"product_version","name":"kind-zsh-completion-0.29.0-1.1","product":{"name":"kind-zsh-completion-0.29.0-1.1","product_id":"kind-zsh-completion-0.29.0-1.1","product_identification_helper":{"purl":"pkg:rpm/suse/kind-zsh-completion@0.29.0-1.1"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2 as component of SUSE Linux Enterprise Server 16.0","product_id":"SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2"},"product_reference":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","relates_to_product_reference":"SUSE Linux Enterprise Server 16.0"},{"category":"default_component_of","full_product_name":{"name":"govulncheck-vulndb-0.0.20250523T151856-1.1 as component of openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250523T151856-1.1"},"product_reference":"govulncheck-vulndb-0.0.20250523T151856-1.1","relates_to_product_reference":"openSUSE Tumbleweed"},{"category":"default_component_of","full_product_name":{"name":"kind-0.29.0-1.1 as component of openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed:kind-0.29.0-1.1"},"product_reference":"kind-0.29.0-1.1","relates_to_product_reference":"openSUSE Tumbleweed"},{"category":"default_component_of","full_product_name":{"name":"kind-bash-completion-0.29.0-1.1 as component of openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed:kind-bash-completion-0.29.0-1.1"},"product_reference":"kind-bash-completion-0.29.0-1.1","relates_to_product_reference":"openSUSE Tumbleweed"},{"category":"default_component_of","full_product_name":{"name":"kind-fish-completion-0.29.0-1.1 as component of openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed:kind-fish-completion-0.29.0-1.1"},"product_reference":"kind-fish-completion-0.29.0-1.1","relates_to_product_reference":"openSUSE Tumbleweed"},{"category":"default_component_of","full_product_name":{"name":"kind-zsh-completion-0.29.0-1.1 as component of openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed:kind-zsh-completion-0.29.0-1.1"},"product_reference":"kind-zsh-completion-0.29.0-1.1","relates_to_product_reference":"openSUSE Tumbleweed"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SLES-LTSS-TERADATA 15 SP2","product_id":"SLES-LTSS-TERADATA 15 SP2:containerd"},"product_reference":"containerd","relates_to_product_reference":"SLES-LTSS-TERADATA 15 SP2"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Micro 5.1","product_id":"SUSE Linux Enterprise Micro 5.1:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Micro 5.1"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Micro 5.2","product_id":"SUSE Linux Enterprise Micro 5.2:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Micro 5.2"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Micro 5.3","product_id":"SUSE Linux Enterprise Micro 5.3:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Micro 5.3"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Micro 5.4","product_id":"SUSE Linux Enterprise Micro 5.4:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Micro 5.4"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Micro 5.5","product_id":"SUSE Linux Enterprise Micro 5.5:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Micro 5.5"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15 SP7","product_id":"SUSE Linux Enterprise Server 15 SP7:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Desktop 15 SP7","product_id":"SUSE Linux Enterprise Desktop 15 SP7:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Desktop 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP7:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise High Performance Computing 15 SP7","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP7:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Module for Basesystem 15 SP7","product_id":"SUSE Linux Enterprise Module for Basesystem 15 SP7:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Module for Basesystem 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15 SP6","product_id":"SUSE Linux Enterprise Server 15 SP6:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15 SP6","product_id":"SUSE Linux Enterprise Server 15 SP6:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Server 15 SP6","product_id":"SUSE Linux Enterprise Server 15 SP6:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP6:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP6:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP6:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise High Performance Computing 15 SP6","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP6:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise High Performance Computing 15 SP6","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP6:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP6","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP6:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Module for Containers 15 SP6","product_id":"SUSE Linux Enterprise Module for Containers 15 SP6:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Module for Containers 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Module for Containers 15 SP6","product_id":"SUSE Linux Enterprise Module for Containers 15 SP6:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Module for Containers 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Module for Containers 15 SP6","product_id":"SUSE Linux Enterprise Module for Containers 15 SP6:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Module for Containers 15 SP6"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15 SP7","product_id":"SUSE Linux Enterprise Server 15 SP7:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Server 15 SP7","product_id":"SUSE Linux Enterprise Server 15 SP7:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP7:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7","product_id":"SUSE Linux Enterprise Server for SAP Applications 15 SP7:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Server for SAP Applications 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise High Performance Computing 15 SP7","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP7:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP7","product_id":"SUSE Linux Enterprise High Performance Computing 15 SP7:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise High Performance Computing 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Module for Containers 15 SP7","product_id":"SUSE Linux Enterprise Module for Containers 15 SP7:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Module for Containers 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Module for Containers 15 SP7","product_id":"SUSE Linux Enterprise Module for Containers 15 SP7:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Module for Containers 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Module for Containers 15 SP7","product_id":"SUSE Linux Enterprise Module for Containers 15 SP7:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Module for Containers 15 SP7"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 12 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP5-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 12 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP5-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Server 12 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 12 SP5-LTSS:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security","product_id":"SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15 SP1-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP1-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP1-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15 SP1-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP1-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP1-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP2-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15 SP2-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP2-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP2-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15 SP3-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP3-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP3-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15 SP3-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP3-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP3-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP4-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP4-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Server 15 SP4-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP4-LTSS:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP4-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP5-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP5-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of SUSE Linux Enterprise Server 15 SP5-LTSS","product_id":"SUSE Linux Enterprise Server 15 SP5-LTSS:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"SUSE Linux Enterprise Server 15 SP5-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server 15-LTSS","product_id":"SUSE Linux Enterprise Server 15-LTSS:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server 15-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of SUSE Linux Enterprise Server 15-LTSS","product_id":"SUSE Linux Enterprise Server 15-LTSS:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"SUSE Linux Enterprise Server 15-LTSS"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Enterprise Server Teradata 15 SP4","product_id":"SUSE Linux Enterprise Server Teradata 15 SP4:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Enterprise Server Teradata 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Micro 6.0","product_id":"SUSE Linux Micro 6.0:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Micro 6.0"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of SUSE Linux Micro 6.1","product_id":"SUSE Linux Micro 6.1:containerd"},"product_reference":"containerd","relates_to_product_reference":"SUSE Linux Micro 6.1"},{"category":"default_component_of","full_product_name":{"name":"containerd as component of openSUSE Leap 15.6","product_id":"openSUSE Leap 15.6:containerd"},"product_reference":"containerd","relates_to_product_reference":"openSUSE Leap 15.6"},{"category":"default_component_of","full_product_name":{"name":"containerd-ctr as component of openSUSE Leap 15.6","product_id":"openSUSE Leap 15.6:containerd-ctr"},"product_reference":"containerd-ctr","relates_to_product_reference":"openSUSE Leap 15.6"},{"category":"default_component_of","full_product_name":{"name":"containerd-devel as component of openSUSE Leap 15.6","product_id":"openSUSE Leap 15.6:containerd-devel"},"product_reference":"containerd-devel","relates_to_product_reference":"openSUSE Leap 15.6"},{"category":"default_component_of","full_product_name":{"name":"containerd-test as component of openSUSE Leap 15.6","product_id":"openSUSE Leap 15.6:containerd-test"},"product_reference":"containerd-test","relates_to_product_reference":"openSUSE Leap 15.6"}]},"vulnerabilities":[{"cve":"CVE-2025-47290","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2025-47290"}],"notes":[{"category":"general","text":"containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0.  Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","title":"CVE description"}],"product_status":{"known_not_affected":["SLES-LTSS-TERADATA 15 SP2:containerd","SUSE Linux Enterprise Desktop 15 SP7:containerd","SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:containerd","SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:containerd-ctr","SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:containerd","SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:containerd-ctr","SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:containerd-devel","SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:containerd","SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:containerd-ctr","SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:containerd-devel","SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:containerd","SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:containerd-ctr","SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:containerd-devel","SUSE Linux Enterprise High Performance Computing 15 SP6:containerd","SUSE Linux Enterprise High Performance Computing 15 SP6:containerd-ctr","SUSE Linux Enterprise High Performance Computing 15 SP6:containerd-devel","SUSE Linux Enterprise High Performance Computing 15 SP7:containerd","SUSE Linux Enterprise High Performance Computing 15 SP7:containerd-ctr","SUSE Linux Enterprise High Performance Computing 15 SP7:containerd-devel","SUSE Linux Enterprise Micro 5.1:containerd","SUSE Linux Enterprise Micro 5.2:containerd","SUSE Linux Enterprise Micro 5.3:containerd","SUSE Linux Enterprise Micro 5.4:containerd","SUSE Linux Enterprise Micro 5.5:containerd","SUSE Linux Enterprise Module for Basesystem 15 SP7:containerd","SUSE Linux Enterprise Module for Containers 15 SP6:containerd","SUSE Linux Enterprise Module for Containers 15 SP6:containerd-ctr","SUSE Linux Enterprise Module for Containers 15 SP6:containerd-devel","SUSE Linux Enterprise Module for Containers 15 SP7:containerd","SUSE Linux Enterprise Module for Containers 15 SP7:containerd-ctr","SUSE Linux Enterprise Module for Containers 15 SP7:containerd-devel","SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:containerd","SUSE Linux Enterprise Server 12 SP5-LTSS:containerd","SUSE Linux Enterprise Server 12 SP5-LTSS:containerd-ctr","SUSE Linux Enterprise Server 12 SP5-LTSS:containerd-devel","SUSE Linux Enterprise Server 15 SP1-LTSS:containerd","SUSE Linux Enterprise Server 15 SP1-LTSS:containerd-ctr","SUSE Linux Enterprise Server 15 SP2-LTSS:containerd","SUSE Linux Enterprise Server 15 SP2-LTSS:containerd-ctr","SUSE Linux Enterprise Server 15 SP3-LTSS:containerd","SUSE Linux Enterprise Server 15 SP3-LTSS:containerd-ctr","SUSE Linux Enterprise Server 15 SP4-LTSS:containerd","SUSE Linux Enterprise Server 15 SP4-LTSS:containerd-ctr","SUSE Linux Enterprise Server 15 SP4-LTSS:containerd-devel","SUSE Linux Enterprise Server 15 SP5-LTSS:containerd","SUSE Linux Enterprise Server 15 SP5-LTSS:containerd-ctr","SUSE Linux Enterprise Server 15 SP5-LTSS:containerd-devel","SUSE Linux Enterprise Server 15 SP6:containerd","SUSE Linux Enterprise Server 15 SP6:containerd-ctr","SUSE Linux Enterprise Server 15 SP6:containerd-devel","SUSE Linux Enterprise Server 15 SP7:containerd","SUSE Linux Enterprise Server 15 SP7:containerd-ctr","SUSE Linux Enterprise Server 15 SP7:containerd-devel","SUSE Linux Enterprise Server 15-LTSS:containerd","SUSE Linux Enterprise Server 15-LTSS:containerd-ctr","SUSE Linux Enterprise Server Teradata 15 SP4:containerd","SUSE Linux Enterprise Server for SAP Applications 15 SP6:containerd","SUSE Linux Enterprise Server for SAP Applications 15 SP6:containerd-ctr","SUSE Linux Enterprise Server for SAP Applications 15 SP6:containerd-devel","SUSE Linux Enterprise Server for SAP Applications 15 SP7:containerd","SUSE Linux Enterprise Server for SAP Applications 15 SP7:containerd-ctr","SUSE Linux Enterprise Server for SAP Applications 15 SP7:containerd-devel","SUSE Linux Micro 6.0:containerd","SUSE Linux Micro 6.1:containerd","openSUSE Leap 15.6:containerd","openSUSE Leap 15.6:containerd-ctr","openSUSE Leap 15.6:containerd-devel","openSUSE Leap 15.6:containerd-test"],"recommended":["SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2","openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250523T151856-1.1","openSUSE Tumbleweed:kind-0.29.0-1.1","openSUSE Tumbleweed:kind-bash-completion-0.29.0-1.1","openSUSE Tumbleweed:kind-fish-completion-0.29.0-1.1","openSUSE Tumbleweed:kind-zsh-completion-0.29.0-1.1"]},"references":[{"category":"external","summary":"CVE-2025-47290","url":"https://www.suse.com/security/cve/CVE-2025-47290"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1243392 for CVE-2025-47290","url":"https://bugzilla.suse.com/1243392"},{"category":"external","summary":"Advisory link for openSUSE-SU-2025:15146-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XU3W2GRJSEQXIANJXID5YIYCJA4B3VKT/"},{"category":"external","summary":"Advisory link for openSUSE-SU-2025:15159-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBVOKYMJCE2HZLSF5W3H3Q7KEHMMOQR3/"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2","openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250523T151856-1.1","openSUSE Tumbleweed:kind-0.29.0-1.1","openSUSE Tumbleweed:kind-bash-completion-0.29.0-1.1","openSUSE Tumbleweed:kind-fish-completion-0.29.0-1.1","openSUSE Tumbleweed:kind-zsh-completion-0.29.0-1.1"]}],"scores":[{"cvss_v3":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2","openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250523T151856-1.1","openSUSE Tumbleweed:kind-0.29.0-1.1","openSUSE Tumbleweed:kind-bash-completion-0.29.0-1.1","openSUSE Tumbleweed:kind-fish-completion-0.29.0-1.1","openSUSE Tumbleweed:kind-zsh-completion-0.29.0-1.1"]}],"threats":[{"category":"impact","date":"2025-05-20T20:01:55Z","details":"important"}],"title":"CVE-2025-47290"}]}