CVE-2022-34903
MediumAdvisory
Published 1 Jul 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.028
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 913
- of 17,781 indexed, latest versions
- Container images
- 828
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: gnupg2 security update
Carried by container images the latest versions of 913 of 17,781 indexed charts deploy, on 828 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnupg2deb | 2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+10 more | 2.1.11-6ubuntu2.1+esm1, 2.2.4-1ubuntu1.6, 2.2.12-1+deb10u2, 2.2.19-3ubuntu2.2+2 more | 667 |
| gnupgdeb | 1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more | 1.4.16-1ubuntu2.6+esm1, 1.4.20-1ubuntu3.3+esm2 | 76 |
| gnupgapk | 2.2.27-r0, 2.2.31-r0, 2.2.31-r1 | 2.2.31-r1, 2.2.31-r2 | 4 |
| gnupg2rpm | 2.2.9-1.el8, 2.2.20-2.el8 | 0:2.2.20-3.el8_6 | 72 |
| gpg2rpm | 2.2.5-4.14.4, 2.2.5-lp151.6.3.1 | 2.2.5-150000.4.22.1, 2.3.7-1.1 | 10 |
- OSV records
- ALPINE-CVE-2022-34903RHSA-2022:6463UBUNTU-CVE-2022-34903DSA-5174-1openSUSE-SU-2024:12215-1SUSE-SU-2022:3144-1
- Also known as
- USN-5503-1, USN-5503-2
Charts affected
913 by stars
Container images carrying it
828 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| geoservercloud/ | 99540eef78ad | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| geoservercloud/ | 5c254c53a357 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| geoservercloud/ | c687b1cbc891 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| geoservercloud/ | 5288f320cf36 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| geoservercloud/ | a30a60ac6cd0 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| grafana/ | a136c6208aa3 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| hjacobs/ | 58221b57d4d2 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| honestica/ | a393242fb939 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| hookiesolutions/ | 0629694246ba | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| hyperledger/ | a674d35eec9a | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| interlayhq/ | c3e311de67da | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| iomesh/ | f03148764f38 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| istio/ | 40e8aba77c1b | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| istio/ | ee156b8aefd6 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| istio/ | e86d247b7ac2 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| istio/ | eab80bcd2132 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| istio/ | 1e37fca43550 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| istio/ | e454cab754cf | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| istio/ | dbb7726d1bf0 | gnupg2 | 2.2.4-1ubuntu1.6 | 2 |
| istio/ | a78b7a165744 | gnupg2 | 2.2.4-1ubuntu1.6 | 2 |
| larribas/ | 05ccb0b46bfb | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| library/ | 5aa8400b4b3b | gnupg2 | 2.2.4-1ubuntu1.6 | 2 |
| library/ | b422509b1648 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| library/ | 5e6ac15bf6a5 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| library/ | 58b25d51baa1 | gnupg2 | 2.2.4-1ubuntu1.6 | 2 |
| library/ | 32f9d9a069f7 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| library/ | 9643e9fbd633 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| library/ | 6fff55753e3b | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| library/ | 1f1a2d56de1d | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| library/ | 80ad2170ad62 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| lightstep/ | 11c5569aaf3b | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| lncm/ | 36eaa06f99f4 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| martinaif/ | 43bc40a3da0e | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| martinaif/ | f07fbe15e5b5 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| matrixdotorg/ | ba6a587fa508 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| mesosphere/ | 073db43d0b8b | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| minio/ | 54393e03f3b2 | gnupg2 | 0:2.2.20-3.el8_6 | 2 |
| ncsa/ | abf6300b57b7 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| ngick8stesting/ | 1e764eab77b4 | gnupg2 | 2.2.4-1ubuntu1.6 | 2 |
| obsidiandynamics/ | 5337c9e0e2de | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| omecproject/ | cfdb566dd949 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| openmf/ | 496b60a51f28 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| osixia/ | ccd95cc6e61e | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| passbolt/ | 655547e17263 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| pecan/ | f825d480cd62 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| radondb/ | 801ef77b5b87 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| radondb/ | bcfb7f67c6f5 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| scorpiobroker/ | 01e11d800459 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | 3f05a113a4be | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | 5073ceef2fa0 | gnupg2 | 2.2.27-2+deb11u2 | 2 |