Wave container security scan

Container security scan completed

Summary

Scan ID

b453c2424c81

Build ID

83e6a49ae3591943_1

Container image

community.wave.seqera.io/library/sylph:0.6.1--83e6a49ae3591943

Platform

-

Status

SUCCEEDED

Created

2024-10-09 19:25 (GMT)

Duration

0:10

Vulnerabilities

ID	Severity	Library	Version	Fixed Version	Title
CVE-2024-0567	HIGH	libgnutls30	3.7.9-2		gnutls: rejects certificate chain with distributed trust
CVE-2024-0553	HIGH	libgnutls30	3.7.9-2		gnutls: incomplete fix for CVE-2023-5981
CVE-2023-39804	MEDIUM	tar	1.34+dfsg-1ubuntu0.1.22.04.1	1.34+dfsg-1ubuntu0.1.22.04.2	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash
CVE-2024-22365	MEDIUM	libpam-modules	1.5.2-6+deb12u1		pam: allowing unpriledged user to block another user namespace
CVE-2024-22365	MEDIUM	libpam-modules	1.5.2-6+deb12u1		pam: allowing unpriledged user to block another user namespace
CVE-2024-22365	MEDIUM	libpam-modules	1.5.2-6+deb12u1		pam: allowing unpriledged user to block another user namespace
CVE-2024-22365	MEDIUM	libpam-modules	1.5.2-6+deb12u1		pam: allowing unpriledged user to block another user namespace
CVE-2023-5156	MEDIUM	libc-bin	2.35-0ubuntu3.1	2.35-0ubuntu3.5	glibc: DoS due to memory leak in getaddrinfo.c
CVE-2023-5156	MEDIUM	libc-bin	2.35-0ubuntu3.1	2.35-0ubuntu3.5	glibc: DoS due to memory leak in getaddrinfo.c