CVE-2022-34903
MediumAdvisory
Published 1 Jul 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.028
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 913
- of 17,781 indexed, latest versions
- Container images
- 828
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: gnupg2 security update
Carried by container images the latest versions of 913 of 17,781 indexed charts deploy, on 828 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnupg2deb | 2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+10 more | 2.1.11-6ubuntu2.1+esm1, 2.2.4-1ubuntu1.6, 2.2.12-1+deb10u2, 2.2.19-3ubuntu2.2+2 more | 667 |
| gnupgdeb | 1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more | 1.4.16-1ubuntu2.6+esm1, 1.4.20-1ubuntu3.3+esm2 | 76 |
| gnupgapk | 2.2.27-r0, 2.2.31-r0, 2.2.31-r1 | 2.2.31-r1, 2.2.31-r2 | 4 |
| gnupg2rpm | 2.2.9-1.el8, 2.2.20-2.el8 | 0:2.2.20-3.el8_6 | 72 |
| gpg2rpm | 2.2.5-4.14.4, 2.2.5-lp151.6.3.1 | 2.2.5-150000.4.22.1, 2.3.7-1.1 | 10 |
- OSV records
- ALPINE-CVE-2022-34903RHSA-2022:6463UBUNTU-CVE-2022-34903DSA-5174-1openSUSE-SU-2024:12215-1SUSE-SU-2022:3144-1
- Also known as
- USN-5503-1, USN-5503-2
Charts affected
913 by stars
Container images carrying it
828 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| scorpiobroker/ | 62dae3dd0eeb | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | a2cfcf0947fd | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | b742a53b2803 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | b7fe27a06ff5 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | c46c1517e523 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | e08036670d66 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| scorpiobroker/ | f02e8a429a08 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| stakater/ | 954d2be66e95 | gnupg2 | 0:2.2.20-3.el8_6 | 2 |
| svtechnmaa/ | b2987abe57d3 | gnupg2 | 2.2.27-3ubuntu2.1 | 2 |
| ujamii/ | 6243197349e1 | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| weblate/ | 69c160d37a3c | gnupg2 | 2.2.12-1+deb10u2 | 2 |
| wurstmeister/ | 7a7fd44a7210 | gnupg | 1.4.16-1ubuntu2.6+esm1 | 2 |
| xelalex/ | 574054e1c417 | gnupg | 2.2.31-r2 | 2 |
| gcr.io/ | fbe12aa24de6 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 2 |
| ghcr.io/ | f34f98405c10 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| ghcr.io/ | 103fbcec2314 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| ghcr.io/ | 9b6105be7ad0 | gnupg2 | 2.2.19-3ubuntu2.2 | 2 |
| ghcr.io/ | 4ee0764310e7 | gnupg2 | 2.2.4-1ubuntu1.6 | 2 |
| ghcr.io/ | 03fd01b4f56e | gnupg2 | 2.2.27-3ubuntu2.1 | 2 |
| quay.io/ | 28cb0630cb85 | gnupg2 | 2.2.27-2+deb11u2 | 2 |
| quay.io/ | 68f9f38c8f30 | gnupg2 | 0:2.2.20-3.el8_6 | 2 |
| quay.io/ | d8c631a6dc43 | gnupg2 | 0:2.2.20-3.el8_6 | 2 |
| quay.io/ | 464a3af4dfe0 | gnupg2 | 0:2.2.20-3.el8_6 | 2 |
| quay.io/ | bb5e052770e5 | gnupg2 | 0:2.2.20-3.el8_6 | 2 |
| a10networks/ | 8dc58d434d71 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| adagber/ | e5c1ed097752 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| adityaprasadpathak/ | 7e3b9777362c | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| adolfintel/ | 1f828fe83374 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| adwerx/ | 840d2b078682 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| afrank/ | d463c37b08d7 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| airsonicadvanced/ | f7cbafac2806 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| alerta/ | 4786b9eaa606 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| allegroai/ | 772827a01bb5 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| amartinm82/ | 1184353ff57b | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| amundsendev/ | 69e7915e61c1 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| amundsendev/ | 4d98eb21f5f9 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| amundsendev/ | 99dda9502c3e | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| anchore/ | bde9eedf639d | gnupg2 | 0:2.2.20-3.el8_6 | 1 |
| anchore/ | ed9b3badd17c | gnupg2 | 0:2.2.20-3.el8_6 | 1 |
| aolde/ | dc61ee713720 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| apache/ | 8647309f95d1 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| apache/ | 090b7f87ec7f | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| apache/ | 974efa2f21da | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| apachepinot/ | 0018bb04ced7 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| apachepulsar/ | 4db6ff0b4045 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| apachepulsar/ | d056c89b7131 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| apachepulsar/ | d538416d5afe | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| apache/ | b4ec8c18d079 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| apache/ | 80530f0308a5 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |