chore(findings): rancher-federal/rke2/klipper-helm
Summary
rancher-federal/rke2/klipper-helm has 53 new findings discovered during continuous monitoring.
id | source | package |
---|---|---|
CVE-2021-41617 | twistlock_cve | openssh-8.0p1-6.el8_4.2 |
CVE-2021-39537 | twistlock_cve | ncurses-6.1-7.20180224.el8 |
CVE-2021-40330 | twistlock_cve | git-2.27.0-1.el8 |
CVE-2021-40330 | anchore_cve | git-2.27.0-1.el8 |
CVE-2021-40330 | anchore_cve | git-core-doc-2.27.0-1.el8 |
CVE-2021-41617 | anchore_cve | openssh-clients-8.0p1-6.el8_4.2 |
CVE-2021-40330 | anchore_cve | git-core-2.27.0-1.el8 |
CVE-2021-40330 | anchore_cve | perl-Git-2.27.0-1.el8 |
CVE-2021-39537 | anchore_cve | ncurses-6.1-7.20180224.el8 |
CVE-2021-41617 | anchore_cve | openssh-8.0p1-6.el8_4.2 |
CCE-80788-3 | oscap_comp | Uninherited |
CCE-83478-8 | oscap_comp | Uninherited |
CCE-83480-4 | oscap_comp | Uninherited |
CCE-80668-7 | oscap_comp | Uninherited |
CCE-82046-4 | oscap_comp | Uninherited |
CCE-80647-1 | oscap_comp | Uninherited |
CCE-80648-9 | oscap_comp | Uninherited |
CCE-84037-1 | oscap_comp | Uninherited |
CCE-82888-9 | oscap_comp | Uninherited |
CCE-83497-8 | oscap_comp | Uninherited |
CCE-86519-6 | oscap_comp | Uninherited |
CCE-80806-3 | oscap_comp | Uninherited |
CVE-2020-14145 | twistlock_cve | openssh-8.0p1-6.el8_4.2 |
CVE-2019-17594 | anchore_cve | ncurses-6.1-7.20180224.el8 |
CVE-2020-14145 | anchore_cve | openssh-clients-8.0p1-6.el8_4.2 |
CVE-2019-17595 | anchore_cve | ncurses-6.1-7.20180224.el8 |
CVE-2020-14145 | anchore_cve | openssh-8.0p1-6.el8_4.2 |
CVE-2019-19246 | anchore_cve | oniguruma-6.8.2-2.el8 |
CVE-2018-15919 | twistlock_cve | openssh-clients-8.0p1-6.el8_4.2 |
CVE-2019-6110 | twistlock_cve | openssh-clients-8.0p1-6.el8_4.2 |
CVE-2020-14145 | twistlock_cve | openssh-clients-8.0p1-6.el8_4.2 |
CVE-2021-41617 | twistlock_cve | openssh-clients-8.0p1-6.el8_4.2 |
CVE-2018-1000021 | twistlock_cve | git-2.27.0-1.el8 |
CVE-2021-21300 | twistlock_cve | git-2.27.0-1.el8 |
CVE-2019-13224 | twistlock_cve | oniguruma-6.8.2-2.el8 |
CVE-2019-16163 | twistlock_cve | oniguruma-6.8.2-2.el8 |
CVE-2019-19012 | twistlock_cve | oniguruma-6.8.2-2.el8 |
CVE-2019-19203 | twistlock_cve | oniguruma-6.8.2-2.el8 |
CVE-2019-19204 | twistlock_cve | oniguruma-6.8.2-2.el8 |
CVE-2018-15919 | twistlock_cve | openssh-8.0p1-6.el8_4.2 |
CVE-2019-6110 | twistlock_cve | openssh-8.0p1-6.el8_4.2 |
CVE-2018-1000021 | twistlock_cve | git-core-2.27.0-1.el8 |
CVE-2021-21300 | twistlock_cve | git-core-2.27.0-1.el8 |
CVE-2021-40330 | twistlock_cve | git-core-2.27.0-1.el8 |
CVE-2018-19211 | twistlock_cve | ncurses-6.1-7.20180224.el8 |
CVE-2019-17594 | twistlock_cve | ncurses-6.1-7.20180224.el8 |
CVE-2019-17595 | twistlock_cve | ncurses-6.1-7.20180224.el8 |
CVE-2018-1000021 | twistlock_cve | perl-Git-2.27.0-1.el8 |
CVE-2021-21300 | twistlock_cve | perl-Git-2.27.0-1.el8 |
CVE-2021-33197 | twistlock_cve | perl-Git-2.27.0-1.el8 |
CVE-2021-40330 | twistlock_cve | perl-Git-2.27.0-1.el8 |
CVE-2016-4074 | twistlock_cve | jq-1.5-12.el8 |
CVE-2021-39293 | twistlock_cve | go-1.16.5 |
More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/rancher-federal/rke2/klipper-helm/-/jobs/7843028
Definition of Done
Justifications:
-
All findings have been justified -
Justifications have been provided to the container hardening team
Approval Process:
-
Findings Approver has reviewed and approved all justifications -
Approval request has been sent to Authorizing Official -
Approval request has been processed by Authorizing Official