StackRadar

USN-4038-3

Critical

Advisory

Published 19 Jun 2019In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.080
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
78
of 17,781 indexed, latest versions
Container images
69
deployed by those charts
Fix available
1 of 1
affected package

bzip2 regression

Carried by container images the latest versions of 78 of 17,781 indexed charts deploy, on 69 images.

Affected packageAffected versionsFixed inImages
bzip2deb1.0.6-8, 1.0.6-8.1, 1.0.6-8ubuntu0.11.0.6-8.1ubuntu0.1, 1.0.6-8ubuntu0.1, 1.0.6-8ubuntu0.269
OSV records
UBUNTU-CVE-2019-12900USN-4038-3
Also known as
USN-4038-1

Charts affected

78 by stars
ChartLatestAffected imagesRadar Score
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

38,865
ovspluginopencord1.0.21 of 1See more

ovsplugin opencord 1.0.2

1 of the 1 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
gopinatht/ovs-plugin-installer:latest632cb2e9c399
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

4,164
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
bzip2@1.0.6-8ubuntu0.1
1.0.6-8ubuntu0.2

Open the chart page →

12,609
sebaopencord1.0.05 of 17See more

seba opencord 1.0.0

5 of the 17 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
voltha/voltha-cli:1.6.0c4e41e92f046
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
voltha/voltha-netconf:1.6.037f80524c207
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
voltha/voltha-voltha:1.6.0ff596b62de59
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

93,855
bookinforgnu1.0.03 of 7See more

bookinfo rgnu 1.0.0

3 of the 7 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

20,462
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

11,422
istio-bookinforgnu1.0.23 of 7See more

istio-bookinfo rgnu 1.0.2

3 of the 7 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

20,462
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

23,007
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

27,477
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

9,436
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

25,769
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

11,007
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry USN-4038-3.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
bzip2@1.0.6-8
1.0.6-8ubuntu0.1

Open the chart page →

15,330

Container images carrying it

69 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pposkrobko/risk-advisor:v1.0.0eaf260341dba
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
rundeck/rundeck:3.0.16b13e8059ad72
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
seldonio/locust-core:0.81d0da98a2d76
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
sismics/docs:v1.10f4b0ef019cf1
bzip2@1.0.6-8.1
1.0.6-8.1ubuntu0.1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
tpdock/freeradius:2.2.93da600c95a49
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
voltha/voltha-cli:1.6.0c4e41e92f046
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
voltha/voltha-netconf:1.6.037f80524c207
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
voltha/voltha-tester:1.7.0655c3048a602
bzip2@1.0.6-8ubuntu0.1
1.0.6-8ubuntu0.2
1
voltha/voltha-voltha:1.6.0ff596b62de59
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
woojoong/wowza:latestec230db19652
bzip2@1.0.6-8.1
1.0.6-8.1ubuntu0.1
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
bzip2@1.0.6-8
1.0.6-8ubuntu0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.