CVE-2022-34903
MediumAdvisory
Published 1 Jul 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.028
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 917
- of 17,787 indexed, latest versions
- Container images
- 832
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: gnupg2 security update
Carried by container images the latest versions of 917 of 17,787 indexed charts deploy, on 832 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gnupg2deb | 2.1.11-6ubuntu2.1, 2.2.4-1ubuntu1, 2.2.4-1ubuntu1.1, 2.2.4-1ubuntu1.2+10 more | 2.1.11-6ubuntu2.1+esm1, 2.2.4-1ubuntu1.6, 2.2.12-1+deb10u2, 2.2.19-3ubuntu2.2+2 more | 670 |
| gnupgdeb | 1.4.16-1ubuntu2.1, 1.4.16-1ubuntu2.4, 1.4.16-1ubuntu2.6, 1.4.20-1ubuntu3.1+2 more | 1.4.16-1ubuntu2.6+esm1, 1.4.20-1ubuntu3.3+esm2 | 76 |
| gnupgapk | 2.2.27-r0, 2.2.31-r0, 2.2.31-r1 | 2.2.31-r1, 2.2.31-r2 | 5 |
| gnupg2rpm | 2.2.9-1.el8, 2.2.20-2.el8 | 0:2.2.20-3.el8_6 | 72 |
| gpg2rpm | 2.2.5-4.14.4, 2.2.5-lp151.6.3.1 | 2.2.5-150000.4.22.1, 2.3.7-1.1 | 10 |
- OSV records
- ALPINE-CVE-2022-34903RHSA-2022:6463UBUNTU-CVE-2022-34903DSA-5174-1openSUSE-SU-2024:12215-1SUSE-SU-2022:3144-1
- Also known as
- USN-5503-1, USN-5503-2
Charts affected
917 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| tool-widarwbstack | 0.4.0 | 1 of 1See more | 1,480 |
| wbaas-backupwbstack | 0.1.0 | 1 of 1See more | 9,748 |
| weather-chartweather-web-app | 0.1.0 | 1 of 1See more | 2,671 |
| sonarqubewebencryptor | 6.7.3 | 1 of 3See more | 5,462 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,420 |
| webhookie-allwebhookie | 0.1.2 | 2 of 3See more | 28,699 |
| webresourcecataloguswebresourcecatalogus | 1.1.0 | 1 of 4See more | 7,552 |
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 10,857 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,287 |
| miniowenerme | 8.0.10 | 1 of 1See more | 6,915 |
| minio-standalonewenerme | 1.0.2 | 1 of 1See more | 6,138 |
| workshop-pipelinesworkshop-pipelines | 0.1.6 | 1 of 2See more | 11,592 |
| myfirstchartww-helm-charts-repo | 0.1.0 | 1 of 1See more | 1,138 |
| myfirstchartzikilabVerified publisher | 0.2.0 | 1 of 1See more | 1,138 |
| alertmanager-matrix-forwarderzloi-space | 1.0.1 | 1 of 2See more | 3,118 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,250 |
| grafana-matrix-forwarderzloi-space | 1.0.0 | 1 of 2See more | 1,636 |
Container images carrying it
832 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ethereumex/ | a7603aa8df4c | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| eventstore/ | c82d2479f468 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| expediagroup/ | 4f2cf61e7de9 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| fanzynoodle/ | 5f9916c1a287 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| fireflyiii/ | 2f4283bd0cf7 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| fiware/ | 92a3c5cf43c0 | gnupg2 | 0:2.2.20-3.el8_6 | 1 |
| fiware/ | efc6793388cc | gnupg2 | 0:2.2.20-3.el8_6 | 1 |
| fjvela/ | 70cebf67bd66 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| flag5/ | 4ad5748bfcc6 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| flagsmith/ | fd58556339a4 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| flofree/ | 6b6486c5f81e | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| fluent/ | 0717111a3362 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| fluent/ | 19a8f0662241 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| fluent/ | 3933cae61054 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| fluent/ | 656423b5fabb | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| foldingathome/ | 5ef7742d1eb4 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| fonoster/ | 2ca65af17cbc | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| forchaladtest/ | 5909cf64ef53 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| foundationdb/ | 9ceb2f948c9f | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| frankescobar/ | 8a4d7e9308de | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| frankescobar/ | cafa03b94dac | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| franrobles8/ | 99985392d63c | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| frappe/ | 2095767a9e82 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| free5gmano/ | 36f806935519 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| galaxy/ | 0267bad550e6 | gnupg | 1.4.16-1ubuntu2.6+esm1 | 1 |
| galaxy/ | 8e577a626dfd | gnupg | 1.4.16-1ubuntu2.6+esm1 | 1 |
| geoscienceaustralia/ | f4039b45572a | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| geoservercloud/ | ca58b74529cd | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| geoservercloud/ | 5dc0c93a1710 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| geoservercloud/ | 8c70ee06d5ab | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| geoservercloud/ | 42775ba6a4da | gnupg2 | 2.2.19-3ubuntu2.2 | 1 |
| gethue/ | 5702b2c37ff9 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| gethue/ | 07f00f7c7903 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| gitea/ | b0bdf102b485 | gnupg | 2.2.31-r1 | 1 |
| gollumorg/ | 7cd5305a3cf7 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| gopinatht/ | 632cb2e9c399 | gnupg | 1.4.20-1ubuntu3.3+esm2 | 1 |
| gotify/ | 09c79bc1e403 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| gotson/ | 9b15ea6bfc30 | gnupg2 | 2.2.4-1ubuntu1.6 | 1 |
| gradiant/ | e3bf364fe713 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| grafana/ | 825c09373d27 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| gristlabs/ | 6e71b1914a7e | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| guacamole/ | 739cb6820ae8 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| guacamole/ | 2288530a4d1c | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| guacamole/ | 49d43948140f | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| ha33ona/ | 6affdfc644d0 | gnupg2 | 2.2.27-2+deb11u2 | 1 |
| halkeye/ | 1ddae9d0f1c7 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| halkeye/ | 3c734dde4052 | gnupg2 | 2.2.12-1+deb10u2 | 1 |
| hashicorp/ | fb70bd9210ff | gnupg | 2.2.31-r1 | 1 |