CVE-2022-25255

High

Advisory

Published 16 Feb 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 10; of 17,781 indexed, latest versions
Container images: 12; deployed by those charts
Fix available: 2 of 3; affected packages

Red Hat Security Advisory: qt5 security, bug fix, and enhancement update

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 12 images.

Affected package	Affected versions	Fixed in	Images
qt5rpm	5.12.5-3.el8	0:5.15.3-1.el8	8
qtbase-opensource-srcdeb	5.12.8+dfsg-0ubuntu1, 5.12.8+dfsg-0ubuntu2.1	5.12.8+dfsg-0ubuntu2.1+esm3	3
qt6-basedeb	6.4.2+dfsg-21.1build5	no fix listed	1

OSV records: RHSA-2022:7482 UBUNTU-CVE-2022-25255
Also known as: USN-8076-1

Charts affected

10 by stars

Chart

Latest

Affected images

Radar Score

games-on-whalesgeek-cookbook

1.8.2

1 of 7 See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	qtbase-opensource-src@5.12.8+dfsg-0ubuntu1	5.12.8+dfsg-0ubuntu2.1+esm3

Open the chart page →

35,305

mumblesyntaxerror404

1.0.4

1 of 1 See more

mumble syntaxerror404 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
ghcr.io/mumble-voip/mumble-server :v1.6.870	02fd613b6a35	qt6-base@6.4.2+dfsg-21.1build5	no fix listed

Open the chart page →

2,099

games-on-whalesangelnu

2.0.0

1 of 7 See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	qtbase-opensource-src@5.12.8+dfsg-0ubuntu1	5.12.8+dfsg-0ubuntu2.1+esm3

Open the chart page →

42,126

developer-dashboardcloud-native-toolkit

1.4.1

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	qt5@5.12.5-3.el8	0:5.15.3-1.el8

Open the chart page →

25,456

business-api-ecosystemfiware

1.1.0

1 of 4 See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	qtbase-opensource-src@5.12.8+dfsg-0ubuntu2.1	5.12.8+dfsg-0ubuntu2.1+esm3

Open the chart page →

64,489

xtevegeek-cookbook

8.4.2

1 of 1 See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	qtbase-opensource-src@5.12.8+dfsg-0ubuntu2.1	5.12.8+dfsg-0ubuntu2.1+esm3

Open the chart page →

17,929

iofoghelm-charts

0.1.1

1 of 3 See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	qt5@5.12.5-3.el8	0:5.15.3-1.el8

Open the chart page →

24,161

streamsheetshelm-charts

0.2.3

5 of 8 See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
ghcr.io/ctron/streamsheets-base :2.4.0	0cf25ed621e2	qt5@5.12.5-3.el8	0:5.15.3-1.el8
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	qt5@5.12.5-3.el8	0:5.15.3-1.el8
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	qt5@5.12.5-3.el8	0:5.15.3-1.el8
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	qt5@5.12.5-3.el8	0:5.15.3-1.el8
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	qt5@5.12.5-3.el8	0:5.15.3-1.el8

Open the chart page →

89,959

mumble-serverjuniorjpdj

0.1.41

1 of 1 See more

mumble-server juniorjpdj 0.1.41

1 of the 1 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
ghcr.io/mumble-voip/mumble-server :v1.6.870	02fd613b6a35	qt6-base@6.4.2+dfsg-21.1build5	no fix listed

Open the chart page →

2,099

seldon-deployseldon

1.4.0

1 of 2 See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2022-25255.

Container image	Digest	Package	Fixed in
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	qt5@5.12.5-3.el8	0:5.15.3-1.el8

Open the chart page →

21,997

Container images carrying it

12 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	qtbase-opensource-src@5.12.8+dfsg-0ubuntu1	5.12.8+dfsg-0ubuntu2.1+esm3	2
ghcr.io/mumble-voip/mumble-server :v1.6.870	02fd613b6a35	qt6-base@6.4.2+dfsg-21.1build5	no fix listed	2
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	qtbase-opensource-src@5.12.8+dfsg-0ubuntu2.1	5.12.8+dfsg-0ubuntu2.1+esm3	1
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1
ghcr.io/ctron/streamsheets-base :2.4.0	0cf25ed621e2	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	qtbase-opensource-src@5.12.8+dfsg-0ubuntu2.1	5.12.8+dfsg-0ubuntu2.1+esm3	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	qt5@5.12.5-3.el8	0:5.15.3-1.el8	1