USN-4038-3
CriticalAdvisory
Published 19 Jun 2019In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.080
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 78
- of 17,781 indexed, latest versions
- Container images
- 69
- deployed by those charts
- Fix available
- 1 of 1
- affected package
bzip2 regression
Carried by container images the latest versions of 78 of 17,781 indexed charts deploy, on 69 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bzip2deb | 1.0.6-8, 1.0.6-8.1, 1.0.6-8ubuntu0.1 | 1.0.6-8.1ubuntu0.1, 1.0.6-8ubuntu0.1, 1.0.6-8ubuntu0.2 | 69 |
- OSV records
- UBUNTU-CVE-2019-12900USN-4038-3
- Also known as
- USN-4038-1
Charts affected
78 by stars
Container images carrying it
69 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | bzip2 | 1.0.6-8ubuntu0.1 | 11 |
| oomk8s/ | 7daa08b81954 | bzip2 | 1.0.6-8ubuntu0.1 | 6 |
| hyperledger/ | 4ce6f43ded2e | bzip2 | 1.0.6-8ubuntu0.1 | 4 |
| hyperledger/ | f6c724592abf | bzip2 | 1.0.6-8ubuntu0.1 | 4 |
| omecproject/ | d59ccb138ffb | bzip2 | 1.0.6-8ubuntu0.1 | 3 |
| istio/ | 40e8aba77c1b | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| istio/ | ee156b8aefd6 | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| istio/ | e86d247b7ac2 | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| istio/ | eab80bcd2132 | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| istio/ | 1e37fca43550 | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| istio/ | e454cab754cf | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| lightstep/ | 11c5569aaf3b | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| ngick8stesting/ | 1e764eab77b4 | bzip2 | 1.0.6-8.1ubuntu0.1 | 2 |
| omecproject/ | cfdb566dd949 | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| gcr.io/ | fbe12aa24de6 | bzip2 | 1.0.6-8ubuntu0.1 | 2 |
| a10networks/ | 8dc58d434d71 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| arilot/ | 27a4f7e0f9f1 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| cheyang/ | 46cc34755493 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| citizenstig/ | b81c818ccb86 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| cradlepoint/ | 8f5720b0cd03 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| daskdev/ | 052630f5ca04 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| datalust/ | 9c731bb207a6 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| ethereumex/ | a7603aa8df4c | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| free5gmano/ | 36f806935519 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| gopinatht/ | 632cb2e9c399 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| hyperledger/ | c65891b6c237 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| hyperledger/ | 6ee1abcfd840 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| hyperledger/ | 6756c7c48234 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| ibmcom/ | 7e4dc1e27cdf | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| ibmcom/ | b5d8c6714dbc | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| ibmcom/ | e17bdccc5030 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| ibmcom/ | 395e60cc6e3d | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| istio/ | 268ab879ea51 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| istio/ | c09319753454 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| istio/ | 0c78be035e98 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| jacobalberty/ | c409924e2463 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| kennethreitz/ | 599fe5e50731 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| kubesphere/ | 6d93129beb32 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| lightbend/ | b0c9894ac8dd | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| linuxserver/ | 2fbb21fb4903 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| muluder/ | 43b597a93da7 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| ngick8stesting/ | 8dd6dea45be4 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| omecproject/ | b4ae7d0d6b74 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| omecproject/ | 5715e5648aa0 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| omecproject/ | d109a8e57e71 | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| oomk8s/ | 3adf3d21ad3b | bzip2 | 1.0.6-8ubuntu0.1 | 1 |
| opendatacube/ | 5d810e8504b8 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| opendatacube/ | 91870111837c | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| opendatacube/ | 1b90cdf68831 | bzip2 | 1.0.6-8.1ubuntu0.1 | 1 |
| plexinc/ | b598abb134ad | bzip2 | 1.0.6-8ubuntu0.1 | 1 |