Grokzen / Grokzen/docker-redis-cluster
multiple critical CVEs in the image
- Dominant language
- Shell
- Stars
- 1.5k
- Forks
- 558
- PR merge metrics
- No merged PRs in 30d
Description
### Hello,
### We are trying to use the image grokzen/redis-cluster:7.0.10 but it contains several CVEs any plan to upgrade the packages used ? Thank you
----
| Vulnerability | Severity | CVSS3 Score | Package | Current Version | Fixed in Version | Listed In CVE Allowlist |
|---------------|----------|-------------|---------|-----------------|------------------|-------------------------|
| [CVE-2022-1664](https://avd.aquasec.com/nvd/cve-2022-1664) | Critical | 9.8 | dpkg | 1.19.7 | 1.19.8 | No |
| [CVE-2021-33574](https://avd.aquasec.com/nvd/cve-2021-33574) | Critical | 9.8 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2021-35942](https://avd.aquasec.com/nvd/cve-2021-35942) | Critical | 9.1 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2022-23218](https://avd.aquasec.com/nvd/cve-2022-23218) | Critical | 9.8 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2022-23219](https://avd.aquasec.com/nvd/cve-2022-23219) | Critical | 9.8 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2021-3520](https://avd.aquasec.com/nvd/cve-2021-3520) | Critical | 9.8 | liblz4-1 | 1.8.3-1 | 1.8.3-1+deb10u1 | No |
| [CVE-2022-1586](https://avd.aquasec.com/nvd/cve-2022-1586) | Critical | 9.1 | libpcre2-8-0 | 10.32-5 | 10.32-5+deb10u1 | No |
| [CVE-2022-1587](https://avd.aquasec.com/nvd/cve-2022-1587) | Critical | 9.1 | libpcre2-8-0 | 10.32-5 | 10.32-5+deb10u1 | No |
| [CVE-2021-3177](https://avd.aquasec.com/nvd/cve-2021-3177) | Critical | 9.8 | libpython2.7-minimal | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2021-46848](https://avd.aquasec.com/nvd/cve-2021-46848) | Critical | 9.1 | libtasn1-6 | 4.13-3 | 4.13-3+deb10u1 | No |
| [CVE-2021-3177](https://avd.aquasec.com/nvd/cve-2021-3177) | Critical | 9.8 | python2.7 | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2022-37434](https://avd.aquasec.com/nvd/cve-2022-37434) | Critical | 9.8 | zlib1g | 1:1.2.11.dfsg-1 | 1:1.2.11.dfsg-1+deb10u2 | No |
| [CVE-2022-48565](https://avd.aquasec.com/nvd/cve-2022-48565) | Critical | 9.8 | libpython2.7-minimal | 2.7.16-2+deb10u1 | None | No |
| [CVE-2021-20231](https://avd.aquasec.com/nvd/cve-2021-20231) | Critical | 9.8 | libgnutls30 | 3.6.7-4+deb10u3 | 3.6.7-4+deb10u7 | No |
| [CVE-2021-20232](https://avd.aquasec.com/nvd/cve-2021-20232) | Critical | 9.8 | libgnutls30 | 3.6.7-4+deb10u3 | 3.6.7-4+deb10u7 | No |
| [CVE-2021-3711](https://avd.aquasec.com/nvd/cve-2021-3711) | Critical | 9.8 | libssl1.1 | 1.1.1d-0+deb10u3 | 1.1.1d-0+deb10u7 | Yes |
| [CVE-2022-1292](https://avd.aquasec.com/nvd/cve-2022-1292) | Critical | 9.8 | libssl1.1 | 1.1.1d-0+deb10u3 | 1.1.1n-0+deb10u2 | No |
| [CVE-2022-2068](https://avd.aquasec.com/nvd/cve-2022-2068) | Critical | 9.8 | libssl1.1 | 1.1.1d-0+deb10u3 | 1.1.1n-0+deb10u3 | No |
| [CVE-2023-25775](https://avd.aquasec.com/nvd/cve-2023-25775) | Critical | 9.8 | linux-libc-dev | 4.19.260-1 | 4.19.304-1 | No |
| [CVE-2022-1271](https://avd.aquasec.com/nvd/cve-2022-1271) | High | 8.8 | gzip | 1.9-3 | 1.9-3+deb10u1 | No |
| [CVE-2020-1752](https://avd.aquasec.com/nvd/cve-2020-1752) | High | 7.0 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2020-6096](https://avd.aquasec.com/nvd/cve-2020-6096) | High | 8.1 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2021-3326](https://avd.aquasec.com/nvd/cve-2021-3326) | High | 7.5 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2021-3999](https://avd.aquasec.com/nvd/cve-2021-3999) | High | 7.8 | libc-bin | 2.28-10 | 2.28-10+deb10u2 | No |
| [CVE-2021-43618](https://avd.aquasec.com/nvd/cve-2021-43618) | High | 7.5 | libgmp10 | 2:6.1.2+dfsg-4 | 2:6.1.2+dfsg-4+deb10u1 | No |
| [CVE-2021-20305](https://avd.aquasec.com/nvd/cve-2021-20305) | High | 8.1 | libhogweed4 | 3.4.1-1 | 3.4.1-1+deb10u1 | Yes |
| [CVE-2021-3580](https://avd.aquasec.com/nvd/cve-2021-3580) | High | 7.5 | libhogweed4 | 3.4.1-1 | 3.4.1-1+deb10u1 | No |
| [CVE-2022-1271](https://avd.aquasec.com/nvd/cve-2022-1271) | High | 8.8 | liblzma5 | 5.2.4-1 | 5.2.4-1+deb10u1 | No |
| [CVE-2021-20305](https://avd.aquasec.com/nvd/cve-2021-20305) | High | 8.1 | libnettle6 | 3.4.1-1 | 3.4.1-1+deb10u1 | Yes |
| [CVE-2021-3580](https://avd.aquasec.com/nvd/cve-2021-3580) | High | 7.5 | libnettle6 | 3.4.1-1 | 3.4.1-1+deb10u1 | No |
| [CVE-2019-20454](https://avd.aquasec.com/nvd/cve-2019-20454) | High | 7.5 | libpcre2-8-0 | 10.32-5 | 10.32-5+deb10u1 | No |
| [CVE-2015-20107](https://avd.aquasec.com/nvd/cve-2015-20107) | High | 7.6 | libpython2.7-minimal | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2019-20907](https://avd.aquasec.com/nvd/cve-2019-20907) | High | 7.5 | libpython2.7-minimal | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2020-26116](https://avd.aquasec.com/nvd/cve-2020-26116) | High | 7.2 | libpython2.7-minimal | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2021-3737](https://avd.aquasec.com/nvd/cve-2021-3737) | High | 7.5 | libpython2.7-minimal | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2022-0391](https://avd.aquasec.com/nvd/cve-2022-0391) | High | 7.5 | libpython2.7-minimal | 2.7.16-2+deb10u1 | None | No |
| [CVE-2022-45061](https://avd.aquasec.com/nvd/cve-2022-45061) | High | 7.5 | libpython2.7-minimal | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2023-24329](https://avd.aquasec.com/nvd/cve-2023-24329) | High | 7.5 | libpython2.7-minimal | 2.7.16-2+deb10u1 | None | No |
| [CVE-2015-20107](https://avd.aquasec.com/nvd/cve-2015-20107) | High | 7.6 | libpython2.7-stdlib | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2019-20907](https://avd.aquasec.com/nvd/cve-2019-20907) | High | 7.5 | libpython2.7-stdlib | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2020-26116](https://avd.aquasec.com/nvd/cve-2020-26116) | High | 7.2 | libpython2.7-stdlib | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2021-3737](https://avd.aquasec.com/nvd/cve-2021-3737) | High | 7.5 | libpython2.7-stdlib | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2022-0391](https://avd.aquasec.com/nvd/cve-2022-0391) | High | 7.5 | libpython2.7-stdlib | 2.7.16-2+deb10u1 | None | No |
| [CVE-2022-45061](https://avd.aquasec.com/nvd/cve-2022-45061) | High | 7.5 | libpython2.7-stdlib | 2.7.16-2+deb10u1 | 2.7.16-2+deb10u2 | No |
| [CVE-2023-24329](https://avd.aquasec.com/nvd/cve-2023-24329) | High | 7.5 | libpython2.7-stdlib | 2.7.16-2+deb10u1 | None | No |
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.