Vulnerability update in gcr.io/atomist-container-registry/dotnettest (branch main)

atomist[bot] commented 3 years ago

Vulnerabilities

Following vulnerability changes detected in image gcr.io/atomist-container-registry/dotnettest from branch main:

Vulnerability updates

CVE	Severity	CVSS	Packages	Line
Base image `undefined`
CVE-2019-1010022	critical	~~`7.5`~~ > `9.8`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2019-9893	critical	~~`7.5`~~ > `9.8`	`libseccomp2` _2.3.3-4	32
CVE-2019-1010023	high	~~`6.8`~~ > `8.8`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2019-13115	high	~~`5.8`~~ > `8.1`	`libssh2-1` _1.8.0-2.1	32
CVE-2019-9923	high	~~`5`~~ > `7.5`	`tar` _1.30+dfsg-6	32
CVE-2019-9192	high	~~`5`~~ > `7.5`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2018-1000021	high	~~`6.8`~~ > `8.8`	`git` _{1:2.20.1-2+deb10u3} `git-man` _{1:2.20.1-2+deb10u3}	32
CVE-2018-20796	high	~~`5`~~ > `7.5`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2018-12886	high	~~`6.8`~~ > `8.1`	`gcc-8-base` _8.3.0-6 `libgcc1` _1:8.3.0-6 `libgcc1` _8.3.0-6 `libstdc++6` _8.3.0-6	32
CVE-2018-6829	high	~~`5`~~ > `7.5`	`libgcrypt20` _{1.8.4-5+deb10u1}	32
CVE-2018-5709	high	~~`5`~~ > `7.5`	`libgssapi-krb5-2` _{1.17-3+deb10u2} `libk5crypto3` _{1.17-3+deb10u2} `libkrb5-3` _{1.17-3+deb10u2} `libkrb5support0` _{1.17-3+deb10u2}	32
CVE-2017-17740	high	~~`5`~~ > `7.5`	`libldap-2.4-2` _{2.4.47+dfsg-3+deb10u6} `libldap-common` _{2.4.47+dfsg-3+deb10u6}	32
CVE-2017-17522	high	~~`6.8`~~ > `8.8`	`libpython2.7-minimal` _{2.7.16-2+deb10u1} `libpython2.7-stdlib` _{2.7.16-2+deb10u1} `python2.7` _{2.7.16-2+deb10u1} `python2.7-minimal` _{2.7.16-2+deb10u1}	32
CVE-2017-11164	high	~~`7.8`~~ > `7.5`	`libpcre3` _2:8.39-12	32
CVE-2017-7246	high	~~`6.8`~~ > `7.8`	`libpcre3` _2:8.39-12	32
CVE-2017-7245	high	~~`6.8`~~ > `7.8`	`libpcre3` _2:8.39-12	32

Details

_{Commit 848a5d55b4d9c74e419e7e0fee1daa998bfdb4dd

Image gcr.io/atomist-container-registry/dotnettest

Tag rolling

Digest sha256:e9d39c002cab7b0fa7371ca73d971ed80e87e1559efb3c252f5f315cae78e747

Scanned October 20, 2021, 12:01 AM UTC}

atomist[bot] commented 2 years ago

Vulnerabilities

Following vulnerability changes detected in image gcr.io/atomist-container-registry/dotnettest from branch main:

Vulnerability updates

CVE	Severity	CVSS	Packages	Line
Base image `undefined`
CVE-2019-1010022	critical	~~`7.5`~~ > `9.8`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2019-9893	critical	~~`7.5`~~ > `9.8`	`libseccomp2` _2.3.3-4	32
CVE-2019-1010023	high	~~`6.8`~~ > `8.8`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2019-9923	high	~~`5`~~ > `7.5`	`tar` _1.30+dfsg-6	32
CVE-2019-9192	high	~~`5`~~ > `7.5`	`libc-bin` _2.28-10 `libc6` _2.28-10	32

Details

_{Commit 848a5d55b4d9c74e419e7e0fee1daa998bfdb4dd

Image gcr.io/atomist-container-registry/dotnettest

Tag rolling

Digest sha256:e9d39c002cab7b0fa7371ca73d971ed80e87e1559efb3c252f5f315cae78e747

Scanned October 25, 2021, 12:01 AM UTC}

atomist[bot] commented 2 years ago

Vulnerabilities

Following vulnerability changes detected in image gcr.io/atomist-container-registry/dotnettest from branch main:

Vulnerability updates

CVE	Severity	CVSS	Packages	Line
Base image `undefined`
CVE-2019-1010022	critical	~~`7.5`~~ > `9.8`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2019-9893	critical	~~`7.5`~~ > `9.8`	`libseccomp2` _2.3.3-4	32
CVE-2019-1010023	high	~~`6.8`~~ > `8.8`	`libc-bin` _2.28-10 `libc6` _2.28-10	32
CVE-2019-9923	high	~~`5`~~ > `7.5`	`tar` _1.30+dfsg-6	32
CVE-2019-9192	high	~~`5`~~ > `7.5`	`libc-bin` _2.28-10 `libc6` _2.28-10	32

Details

_{Commit 848a5d55b4d9c74e419e7e0fee1daa998bfdb4dd

Image gcr.io/atomist-container-registry/dotnettest

Tag rolling

Digest sha256:e9d39c002cab7b0fa7371ca73d971ed80e87e1559efb3c252f5f315cae78e747

Scanned October 25, 2021, 12:02 AM UTC}

atomist[bot] commented 2 years ago

Vulnerabilities

Following vulnerability change detected in image gcr.io/atomist-container-registry/dotnettest from branch main:

Vulnerability update

CVE	Severity	CVSS	Packages	Fix	Line
Base image `undefined`
CVE-2020-16156	~~medium~~ > high	~~`n/a`~~ > `7.8`	`perl` _{5.28.1-6+deb10u1}		32

Details

_{Commit 848a5d55b4d9c74e419e7e0fee1daa998bfdb4dd

Image gcr.io/atomist-container-registry/dotnettest

Tag rolling

Digest sha256:e9d39c002cab7b0fa7371ca73d971ed80e87e1559efb3c252f5f315cae78e747

Scanned December 21, 2021, 9:28 AM UTC}

atomist[bot] commented 2 years ago

Vulnerabilities

Following vulnerability changes detected in image gcr.io/atomist-container-registry/dotnettest from branch main:

New vulnerabilities

CVE	Severity	CVSS	Packages	Line
Base image `undefined`
CVE-2022-22824	critical	`9.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2022-22823	critical	`9.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2022-22822	critical	`9.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2022-23219	high	`n/a`	`glibc` _2.28-10	32
CVE-2022-23218	high	`n/a`	`glibc` _2.28-10	32
CVE-2022-22827	high	`8.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2022-22826	high	`8.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2022-22825	high	`8.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2021-46143	high	`7.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2021-45960	high	`7.5`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2021-3999	high	`n/a`	`glibc` _2.28-10	32

Details

_{Commit 848a5d55b4d9c74e419e7e0fee1daa998bfdb4dd

Image gcr.io/atomist-container-registry/dotnettest

Tag rolling

Digest sha256:a186c47ca7971d6d0b5fa86585d4a1c12e774fd53dcdacf103a44f92f9d12172

Scanned January 20, 2022, 9:05 AM UTC}

atomist[bot] commented 2 years ago

Vulnerabilities

Following vulnerability changes detected in image gcr.io/atomist-container-registry/dotnettest from branch main:

New vulnerabilities

CVE	Severity	CVSS	Packages	Line
Base image `undefined`
CVE-2022-23990	critical	`9.8`	`expat` _{2.2.6-2+deb10u1}	32
CVE-2022-23852	critical	`9.8`	`expat` _{2.2.6-2+deb10u1}	32

Vulnerability updates

CVE	Severity	CVSS	Packages	Line
Base image `undefined`
CVE-2022-23219	~~high~~ > critical	~~`n/a`~~ > `9.8`	`glibc` _2.28-10	32
CVE-2022-23218	~~high~~ > critical	~~`n/a`~~ > `9.8`	`glibc` _2.28-10	32

Details

_{Commit 848a5d55b4d9c74e419e7e0fee1daa998bfdb4dd

Image gcr.io/atomist-container-registry/dotnettest

Tag rolling

Digest sha256:e9d39c002cab7b0fa7371ca73d971ed80e87e1559efb3c252f5f315cae78e747

Scanned February 2, 2022, 12:16 AM UTC}

atomist-playground / dotnettest