CVE-2022-34903
MediumAdvisory
Published 1 Jul 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.028
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 917
- of 17,787 indexed, latest versions
- Container images
- 832
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: gnupg2 security update
Carried by container images the latest versions of 917 of 17,787 indexed charts deploy, on 832 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnupg2deb | 2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+10 more | 2.1.11-6ubuntu2.1+esm1, 2.2.4-1ubuntu1.6, 2.2.12-1+deb10u2, 2.2.19-3ubuntu2.2+2 more | 670 |
| gnupgdeb | 1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more | 1.4.16-1ubuntu2.6+esm1, 1.4.20-1ubuntu3.3+esm2 | 76 |
| gnupgapk | 2.2.27-r0, 2.2.31-r0, 2.2.31-r1 | 2.2.31-r1, 2.2.31-r2 | 5 |
| gnupg2rpm | 2.2.9-1.el8, 2.2.20-2.el8 | 0:2.2.20-3.el8_6 | 72 |
| gpg2rpm | 2.2.5-4.14.4, 2.2.5-lp151.6.3.1 | 2.2.5-150000.4.22.1, 2.3.7-1.1 | 10 |
- OSV records
- ALPINE-CVE-2022-34903RHSA-2022:6463UBUNTU-CVE-2022-34903DSA-5174-1openSUSE-SU-2024:12215-1SUSE-SU-2022:3144-1
- Also known as
- USN-5503-1, USN-5503-2
Charts affected
917 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| tool-widarwbstack | 0.4.0 | 1 of 1See more | 1,480 |
| wbaas-backupwbstack | 0.1.0 | 1 of 1See more | 9,748 |
| weather-chartweather-web-app | 0.1.0 | 1 of 1See more | 2,671 |
| sonarqubewebencryptor | 6.7.3 | 1 of 3See more | 5,462 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,420 |
| webhookie-allwebhookie | 0.1.2 | 2 of 3See more | 28,699 |
| webresourcecataloguswebresourcecatalogus | 1.1.0 | 1 of 4See more | 7,552 |
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 10,857 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,287 |
| miniowenerme | 8.0.10 | 1 of 1See more | 6,915 |
| minio-standalonewenerme | 1.0.2 | 1 of 1See more | 6,138 |
| workshop-pipelinesworkshop-pipelines | 0.1.6 | 1 of 2See more | 11,592 |
| myfirstchartww-helm-charts-repo | 0.1.0 | 1 of 1See more | 1,138 |
| myfirstchartzikilabVerified publisher | 0.2.0 | 1 of 1See more | 1,138 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,250 |
| grafana-matrix-forwarderzloi-space | 1.0.0 | 1 of 2See more | 1,636 |
Container images carrying it
832 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| omecproject/ | 24a389a0a4fe | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| omecproject/ | 5715e5648aa0 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| omecproject/ | 64776cb9edb3 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| omecproject/ | d109a8e57e71 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| onosproject/ | 44914a8d4b3f | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| oomk8s/ | 3adf3d21ad3b | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| opendatacube/ | 5d810e8504b8 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| opendatacube/ | 91870111837c | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| opendatacube/ | 1b90cdf68831 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| openelevation/ | 82fb21612e86 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| openhab/ | d0aa4af452c1 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| openproject/ | 734743d11094 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| openwhisk/ | 63dc3d2a0904 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| openwhisk/ | c80dba0de3aa | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| openzaak/ | 2e65313b9b10 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| openzaak/ | 2ca2ea6e0ae9 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| opsmx11/ | 5c50ca123d88 | gnupg | 1.4.16-1ubuntu2.6+esm1 | 1 |
| oscarsotosanchez/ | 730c00a099b8 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| oxfordsemantic/ | db17910eb855 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| oxfordsemantic/ | baf570ff968d | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| patrickhulce/ | 74b4b6a3954d | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| pecan/ | eaa878d57ef2 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| pecan/ | 73b2074f3fec | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| pecan/ | 814d678c5550 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| phntom/ | 85a2dfb83b11 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| phntom/ | e8b9ac93a3dd | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| phntom/ | f881ea5fbbf1 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| phntom/ | 49ce665acb59 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| phntom/ | c318dc90a4bf | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| photoprism/ | 2954334adbda | gnupg2 | 2.2.27-3ubuntu2.1 | 1 |
| phpmyadmin/ | 38437e021deb | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| pietrom/ | 061a84362926 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| platform9community/ | de3fa9b70df1 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| platform9community/ | 40a4970de568 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| platform9community/ | 2089811e5cc6 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| platform9community/ | d1165c94dfb3 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| platform9community/ | 8d11b50368c6 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| plexinc/ | 46ea59b96f2b | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| plexinc/ | b598abb134ad | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| plumdog/ | 0c2fa2db0357 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| pnnlmiscscripts/ | 155131891741 | gnupg2 | 0:2.2.20-3.el8_6 | 1 |
| pozetroninc/ | 53ae64f29da8 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| pozetroninc/ | 6b06a098f994 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| pposkrobko/ | eaf260341dba | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| project2team4/ | 3ff031a08887 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| prom/ | fc4b9b9f5e15 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| proxysql/ | 8d710e80c77b | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| ptthanh1511/ | 5741cbde85ab | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| puppet/ | 0b6fd9a6b7da | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| qoveryrd/ | b30a9398a83c | gnupg2 | 2.2.12-1+deb10u2 | 1 |