How to reproduce the issue:
Vulnerability ID Package Severity Fix CVE Refs Vulnerability URL Type Feed Group Package Path
ELSA-2022-4803 rsyslog-8.24.0-57.0.1.el7_9.3 High 0:8.24.0-57.0.4.el7_9.3 CVE-2022-24903 https://linux.oracle.com/errata/ELSA-2022-4803.html rpm ol:7 pkgdb
Is this a request for help?:
Is this a BUG REPORT or a FEATURE REQUEST? (choose one):
Version of Anchore Engine and Anchore CLI if applicable: v1.1.0
What happened: Reported ELSA-2022-4803 against rsyslog-8.24.0-57.0.1.el7_9.3 which is the fixed version https://linux.oracle.com/errata/ELSA-2022-4803.html
What did you expect to happen:
Any relevant log output from /var/log/anchore:
What docker images are you using: v1.1.0
How to reproduce the issue: Vulnerability ID Package Severity Fix CVE Refs Vulnerability URL Type Feed Group Package Path ELSA-2022-4803 rsyslog-8.24.0-57.0.1.el7_9.3 High 0:8.24.0-57.0.4.el7_9.3 CVE-2022-24903 https://linux.oracle.com/errata/ELSA-2022-4803.html rpm ol:7 pkgdb
Anything else we need to know: