CVE-2022-47629

Critical

Advisory

Published 20 Dec 2022In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.015; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 409; of 17,781 indexed, latest versions
Container images: 407; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: libksba security update

Carried by container images the latest versions of 409 of 17,781 indexed charts deploy, on 407 images.

Affected package	Affected versions	Fixed in	Images
libksbadeb	1.3.3-1ubuntu0.16.04.1, 1.3.5-2, 1.3.5-2+deb10u1, 1.3.5-2ubuntu0.18.04.1+5 more	1.3.3-1ubuntu0.16.04.1+esm2, 1.3.5-2+deb10u2, 1.3.5-2ubuntu0.18.04.2, 1.3.5-2ubuntu0.20.04.2+2 more	263
libksbaapk	1.5.1-r0, 1.6.0-r0	1.5.1-r1, 1.6.3-r0	8
libksbarpm	1.3.5-2.14, 1.3.5-7.el8, 1.3.5-8.el8_6, 1.3.5-9.el8_2+4 more	0:1.3.5-9.el8_1, 0:1.3.5-9.el8_2, 0:1.3.5-9.el8_4, 0:1.3.5-9.el8_6+4 more	136

OSV records: ALPINE-CVE-2022-47629 UBUNTU-CVE-2022-47629 RHSA-2023:0592 RHSA-2023:0593 RHSA-2023:0594 RHSA-2023:0624 RHSA-2023:0625 RHSA-2023:0626 DLA-3248-1 DSA-5305-1 openSUSE-SU-2024:12595-1 SUSE-SU-2023:0056-2
Also known as: USN-5787-1, USN-5787-2

Charts affected

409 by stars

Chart

Latest

Affected images

Radar Score

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	libksba@1.3.5-2	1.3.5-2+deb10u2

Open the chart page →

2,670

sonarqubewebencryptor

6.7.3

1 of 3 See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	libksba@1.3.5-2	1.3.5-2+deb10u2

Open the chart page →

5,460

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	libksba@1.3.5-7.el8	0:1.3.5-9.el8_4

Open the chart page →

28,605

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7

Open the chart page →

6,138

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libksba@1.3.5-8.el8_6	0:1.3.5-9.el8_7

Open the chart page →

6,016

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2

Open the chart page →

9,207

Container images carrying it

407 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ibmcom/opencontent-common-utils :1.1.2	cd5065df7304	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	libksba@1.5.0-3	1.5.0-3+deb11u2	1
jacobalberty/unifi :v7.1.66	4a3616625dda	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
jakowenko/double-take :1.6.0	b858bac9e32a	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
jedi132000/nextapp :latest	dc2a81e92f23	libksba@1.3.5-2ubuntu0.20.04.1	1.3.5-2ubuntu0.20.04.2	1
kelvinsp/mlflow :1.26.1	cd33e6db2a59	libksba@1.3.5-2	1.3.5-2+deb10u2	1
kennethreitz/httpbin :latest	599fe5e50731	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	libksba@1.5.0-3	1.5.0-3+deb11u2	1
kporwit/vinyl_lib_app :v0.1.1	217de0302218	libksba@1.5.0-3	1.5.0-3+deb11u2	1
ladeit/ladeit :latest	962b665ffe82	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/flink :1.11.2-scala_2.12	1fe4fb22a2a5	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/flink :1.14.6-scala_2.12	2461f02672b3	libksba@1.6.0-2ubuntu0.1	1.6.0-2ubuntu0.2	1
library/influxdb :2.0.8	ba10ac9ba17a	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	libksba@1.5.1-r0	1.5.1-r1	1
library/mariadb :10.7.3	07e06f2e7ae9	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
library/mariadb :10.8.2-focal	490f01279be1	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
library/mongo :4.4.13	05678ae4e5e1	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
library/mongo :4.4-bionic	3d0e6df9fd5b	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
library/mongo :4.2.1	6ca49afbcb2b	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
library/mongo :6.0.2	71a63fc2438e	libksba@1.3.5-2ubuntu0.20.04.1	1.3.5-2ubuntu0.20.04.2	1
library/mongo :4.2.21-bionic	9cb28f7291d9	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
library/mysql :8.0.26	5d52dc010398	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/mysql :5.7.32	e08834258fcc	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/mysql :5.7.33	e42a18d0bd0a	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/mysql :8.0.27	e9027fe4d91c	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/postgres :13.7	03652c675ae1	libksba@1.5.0-3	1.5.0-3+deb11u2	1
library/postgres :14.3	2d1e636f0778	libksba@1.5.0-3	1.5.0-3+deb11u2	1
library/postgres :12.2	d96835c90329	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/postgres :14.0	db927beee892	libksba@1.5.0-3	1.5.0-3+deb11u2	1
library/solr :8.7.0	d124efd81fbb	libksba@1.5.0-3	1.5.0-3+deb11u2	1
library/sonarqube :8.2-community	a246bc64207e	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/storm :2.4.0	bd5d420506d6	libksba@1.5.0-3	1.5.0-3+deb11u2	1
library/telegraf :1.20.4	28e98eece020	libksba@1.5.0-3	1.5.0-3+deb11u2	1
library/zookeeper :3.4	3882d9493d38	libksba@1.3.5-2	1.3.5-2+deb10u2	1
library/zookeeper :3.6.2	4c8a6d3b2338	libksba@1.3.5-2	1.3.5-2+deb10u2	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
linuxserver/cloud9 :latest	45c5fe102ff3	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
linuxserver/deluge :18.04.1	0ac871624394	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
linuxserver/jellyfin :10.7.7	2427dde159a2	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
linuxserver/plex :1.25.2	4a13ced2326c	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
litmuschaos/mongo :4.2.8	99961210d467	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2	1
lsstdm/alert-stream-simulator :v1.2.1	973df082d006	libksba@1.3.5-2	1.3.5-2+deb10u2	1
lsstdm/lsst_alert_packet :tickets-DM-32743	74c97a490940	libksba@1.3.5-2	1.3.5-2+deb10u2	1
lsstsqre/kafkaaggregator :master	be1b21060854	libksba@1.3.5-2	1.3.5-2+deb10u2	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
lsstsqre/squash-api :0.5.3	4879415ec6ac	libksba@1.3.5-2	1.3.5-2+deb10u2	1