CVEs found in openshift-install, client

[yyuanxin]

Hi, our team is running a trivy scan on our custom image that contains only openshift-install, openshift-client and From the trivy scan, we found the following CVEs:

• CVE-2023-48795
• CVE-2022-41723
• CVE-2023-39325
• CVE-2023-3978
• CVE-2023-44487
• CVE-2023-45288
• CVE-2023-45289
• CVE-2023-45290
• CVE-2023-49568
• CVE-2023-49569
• CVE-2024-21626
• CVE-2024-23650
• CVE-2024-23651
• CVE-2024-23652
• CVE-2024-23653
• CVE-2024-24557
• CVE-2024-24783
• CVE-2024-24784
• CVE-2024-24786
• CVE-2024-28180
• GHSA-7ww5-4wqc-m92c Attached includes details regarding the respective CVEs. We are using openshift-install-linux 4.15.14 and openshift-client-linux-4.15.14.

We would like to seek any advice on the status of the CVEs found openshift-installer-cves.xlsx . Thank you!

[openshift-bot]

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close. Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

[openshift-bot]

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten. Rotten issues close after an additional 30d of inactivity. Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten /remove-lifecycle stale