CVE-2022-47629

Critical

Advisory

Published 20 Dec 2022In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.015; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 409; of 17,781 indexed, latest versions
Container images: 407; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: libksba security update

Carried by container images the latest versions of 409 of 17,781 indexed charts deploy, on 407 images.

Affected package	Affected versions	Fixed in	Images
libksbadeb	1.3.3-1ubuntu0.16.04.1, 1.3.5-2, 1.3.5-2+deb10u1, 1.3.5-2ubuntu0.18.04.1+5 more	1.3.3-1ubuntu0.16.04.1+esm2, 1.3.5-2+deb10u2, 1.3.5-2ubuntu0.18.04.2, 1.3.5-2ubuntu0.20.04.2+2 more	263
libksbaapk	1.5.1-r0, 1.6.0-r0	1.5.1-r1, 1.6.3-r0	8
libksbarpm	1.3.5-2.14, 1.3.5-7.el8, 1.3.5-8.el8_6, 1.3.5-9.el8_2+4 more	0:1.3.5-9.el8_1, 0:1.3.5-9.el8_2, 0:1.3.5-9.el8_4, 0:1.3.5-9.el8_6+4 more	136

OSV records: ALPINE-CVE-2022-47629 UBUNTU-CVE-2022-47629 RHSA-2023:0592 RHSA-2023:0593 RHSA-2023:0594 RHSA-2023:0624 RHSA-2023:0625 RHSA-2023:0626 DLA-3248-1 DSA-5305-1 openSUSE-SU-2024:12595-1 SUSE-SU-2023:0056-2
Also known as: USN-5787-1, USN-5787-2

Charts affected

409 by stars

Chart

Latest

Affected images

Radar Score

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	libksba@1.3.5-2	1.3.5-2+deb10u2

Open the chart page →

2,670

sonarqubewebencryptor

6.7.3

1 of 3 See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	libksba@1.3.5-2	1.3.5-2+deb10u2

Open the chart page →

5,460

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	libksba@1.3.5-7.el8	0:1.3.5-9.el8_4

Open the chart page →

28,605

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7

Open the chart page →

6,138

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libksba@1.3.5-8.el8_6	0:1.3.5-9.el8_7

Open the chart page →

6,016

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-47629.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	libksba@1.3.5-2	1.3.5-2ubuntu0.18.04.2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2

Open the chart page →

9,207

Container images carrying it

407 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	libksba@1.3.5-7.el8	0:1.3.5-9.el8_4	1
quay.io/snowdrop/spring-boot-rest-http-example :2.7	b1a054613715	libksba@1.5.0-3	1.5.0-3+deb11u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	libksba@1.3.5-7.el8	0:1.3.5-9.el8_4	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	libksba@1.3.5-2	1.3.5-2ubuntu0.20.04.2	1
registry.gitlab.com/open-forms/design-catalogue :latest	f21f19346b29	libksba@1.3.5-2	1.3.5-2+deb10u2	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	libksba@1.3.5-7.el8	0:1.3.5-9.el8_7	1