chore(findings): lockheed-martin/replicator
Summary
lockheed-martin/replicator has 25 new findings discovered during continuous monitoring.
id | source | package |
---|---|---|
CVE-2020-12401 | twistlock_cve | nss-util-3.67.0-7.el8_5 |
CVE-2020-12413 | twistlock_cve | nss-util-3.67.0-7.el8_5 |
CVE-2020-12401 | twistlock_cve | nss-softokn-3.67.0-7.el8_5 |
CVE-2020-12413 | twistlock_cve | nss-softokn-3.67.0-7.el8_5 |
CVE-2020-12401 | twistlock_cve | nss-3.67.0-7.el8_5 |
CVE-2020-12413 | twistlock_cve | nss-3.67.0-7.el8_5 |
CVE-2020-12401 | twistlock_cve | nss-softokn-freebl-3.67.0-7.el8_5 |
CVE-2020-12413 | twistlock_cve | nss-softokn-freebl-3.67.0-7.el8_5 |
CVE-2020-12401 | twistlock_cve | nss-sysinit-3.67.0-7.el8_5 |
CVE-2020-12413 | twistlock_cve | nss-sysinit-3.67.0-7.el8_5 |
CVE-2020-12401 | anchore_cve | nss-3.67.0-7.el8_5 |
CVE-2020-12401 | anchore_cve | nss-softokn-freebl-3.67.0-7.el8_5 |
CVE-2020-12401 | anchore_cve | nss-softokn-3.67.0-7.el8_5 |
CVE-2020-12401 | anchore_cve | nss-util-3.67.0-7.el8_5 |
CVE-2020-12401 | anchore_cve | nss-sysinit-3.67.0-7.el8_5 |
CVE-2018-20839 | twistlock_cve | systemd-pam-239-51.el8_5.3 |
CVE-2018-20839 | twistlock_cve | systemd-libs-239-51.el8_5.3 |
CVE-2018-20839 | twistlock_cve | systemd-239-51.el8_5.3 |
CVE-2019-20386 | twistlock_cve | systemd-239-51.el8_5.3 |
CVE-2021-3712 | twistlock_cve | openssl-libs-1.1.1k-5.el8_5 |
CVE-2021-23841 | twistlock_cve | openssl-libs-1.1.1k-5.el8_5 |
CVE-2021-3712 | twistlock_cve | openssl-1.1.1k-5.el8_5 |
CVE-2021-23841 | twistlock_cve | openssl-1.1.1k-5.el8_5 |
CVE-2021-39293 | twistlock_cve | go-1.16.7 |
CVE-2020-1712 | twistlock_cve | systemd-239-51.el8_5.3 |
More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/lockheed-martin/replicator/-/jobs/9112590
Definition of Done
Justifications:
-
All findings have been justified -
Justifications have been provided to the container hardening team
Approval Process:
-
Findings Approver has reviewed and approved all justifications -
Approval request has been sent to Authorizing Official -
Approval request has been processed by Authorizing Official