chore(findings): gitlab/gitlab/gitlab-sidekiq

Summary

gitlab/gitlab/gitlab-sidekiq has 61 new findings discovered during continuous monitoring.

More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=gitlab/gitlab/gitlab-sidekiq&tag=17.11.0&branch=master

id	source	severity	package	impact	workaround
320a97c6816565eedf3545833df99dd0	Anchore Compliance	Low
34de21e516c0ca50a96e5386f163f8bf	Anchore Compliance	Low
3e5fad1c039f3ecfd1dcdc94d2f1f9a0	Anchore Compliance	Low
463a9a24225c26f7a5bf3f38908e5cb3	Anchore Compliance	Low
639f6f1177735759703e928c14714a59	Anchore Compliance	Low
698044205a9c4a6d48b7937e66a6bf4f	Anchore Compliance	Low
CCE-83563-7	OSCAP Compliance	Medium
CCE-83564-5	OSCAP Compliance	Medium
CCE-83565-2	OSCAP Compliance	Medium
CCE-83566-0	OSCAP Compliance	Medium
CCE-83567-8	OSCAP Compliance	Medium
CCE-83568-6	OSCAP Compliance	Medium
CCE-83570-2	OSCAP Compliance	Medium
CCE-83575-1	OSCAP Compliance	Medium
CCE-83579-3	OSCAP Compliance	Medium
CCE-83583-5	OSCAP Compliance	Medium
CCE-83587-6	OSCAP Compliance	Medium
CCE-83588-4	OSCAP Compliance	Medium
CCE-83589-2	OSCAP Compliance	Medium
CCE-83606-4	OSCAP Compliance	Medium
CCE-83610-6	OSCAP Compliance	Medium
CCE-83615-5	OSCAP Compliance	Medium
CCE-83621-3	OSCAP Compliance	Medium
CCE-83627-0	OSCAP Compliance	Medium
CCE-83635-3	OSCAP Compliance	Medium
CCE-83641-1	OSCAP Compliance	Low
CCE-83647-8	OSCAP Compliance	Medium
CCE-83980-3	OSCAP Compliance	Medium
CCE-86068-4	OSCAP Compliance	Medium
CCE-86356-3	OSCAP Compliance	Medium
CCE-88413-0	OSCAP Compliance	Medium
CVE-2016-20012	Anchore CVE	Low	openssh-clients-8.7p1-43.el9
CVE-2016-20012	Anchore CVE	Low	openssh-8.7p1-43.el9
CVE-2019-2708	Twistlock CVE	Low	libdb-5.3.28-54.el9
CVE-2023-51767	Twistlock CVE	Medium	openssh-8.7p1-43.el9
CVE-2023-51767	Anchore CVE	Medium	openssh-8.7p1-43.el9
CVE-2023-51767	Anchore CVE	Medium	openssh-clients-8.7p1-43.el9
CVE-2024-10963	Twistlock CVE	High	pam-1.5.1-22.el9_5
CVE-2024-13176	Anchore CVE	Low	openssl-1:3.2.2-6.el9_5.1
CVE-2024-3220	Anchore CVE	Low	python-3.9.22
CVE-2024-3220	Anchore CVE	Low	python-3.9.22
CVE-2024-41996	Anchore CVE	Low	openssl-1:3.2.2-6.el9_5.1
CVE-2024-5642	Anchore CVE	Medium	python-3.9.22
CVE-2024-5642	Anchore CVE	Medium	python-3.9.22
CVE-2024-56433	Anchore CVE	Low	shadow-utils-2:4.9-10.el9_5
CVE-2024-6387	Twistlock CVE	High	openssh-8.7p1-43.el9
CVE-2025-0938	Anchore CVE	Low	python-3.9.22
CVE-2025-0938	Anchore CVE	Low	python-3.9.22
CVE-2025-1795	Anchore CVE	Low	python-3.9.22
CVE-2025-1795	Anchore CVE	Low	python-3.9.22
CVE-2025-22871	Anchore CVE	Critical	stdlib-go1.23.6
CVE-2025-26465	Twistlock CVE	Medium	openssh-8.7p1-43.el9
CVE-2025-26465	Anchore CVE	Medium	openssh-8.7p1-43.el9
CVE-2025-26465	Anchore CVE	Medium	openssh-clients-8.7p1-43.el9
CVE-2025-32728	Twistlock CVE	Medium	openssh-8.7p1-43.el9
CVE-2025-32728	Anchore CVE	Medium	openssh-clients-8.7p1-43.el9
CVE-2025-32728	Anchore CVE	Medium	openssh-8.7p1-43.el9
abb121e9621abdd452f65844954cf1c1	Anchore Compliance	Low
addbb93c22e9b0988b8b40392a4538cb	Anchore Compliance	Low
c2e44319ae5b3b040044d8ae116d1c2f	Anchore Compliance	Low
e7573262736ef52353cde3bae2617782	Anchore Compliance	Low

More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=gitlab/gitlab/gitlab-sidekiq&tag=17.11.0&branch=master

Tasks

Contributor:

• Provide justifications for findings in the VAT (docs)
• Apply the StatusVerification label to this issue and wait for feedback

Iron Bank:

• Review findings and justifications

Note: If the above process is rejected for any reason, the Verification label will be removed and the issue will be sent back to Open. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add the Verification label.

Questions?

Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.

Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.

changed due date to October 20, 2024

added ContainerNew Findings SeverityHigh StatusTo-Do labels

set weight to 59

The labels for this issue have been adjusted because one or more labels were identified as being incorrectly set.

added OwnerVendor PRIORITY1 labels

This Chore ticket was re-run and everything is up to date.

assigned to @sterhar

This Chore ticket was re-run and everything is up to date.

changed the description

changed weight to 58 from 59

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

changed the description

changed weight to 60 from 58

This Chore ticket was re-run and everything is up to date.

changed the description

changed weight to 61 from 60

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

changed the description

changed weight to 62 from 61

This Chore ticket was re-run and everything is up to date.

changed the description

changed weight to 61 from 62

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

changed the description

changed weight to 45 from 61

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

changed the description

changed weight to 46 from 45

This Chore ticket was re-run and everything is up to date.

changed the description

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

This Chore ticket was re-run and everything is up to date.

changed the description

This Chore ticket was re-run and everything is up to date.