Security Vulnerabilities #8765
Description
Name and Version
bitnami/fluent-bit: 1.9.9
What steps will reproduce the bug?
Vulnerabilities scanned by PRISMA tool
What is the expected behavior?
No response
What do you see instead?
Our Security Scanning tools have identified CVEs in the following components listed. Can you please review this and provide an update on the following:
Documentation that explains the mitigation strategy that we can apply to reduce the severity level
Details on when is this going to be fixed with the expected version number
| Component | Version | Vulnerability | Severity |
|---|---|---|---|
| ncurses | 6.2+20201114-2 | CVE-2022-29458 | low |
| openssl | 1.1.1n-0+deb11u3 | CVE-2022-2097 | low |
| e2fsprogs | 1.46.2-2 | CVE-2022-1304 | low |
| libsepol | 3.1-1 | CVE-2021-36087 | low |
| libsepol | 3.1-1 | CVE-2021-36086 | low |
| libsepol | 3.1-1 | CVE-2021-36085 | low |
| libsepol | 3.1-1 | CVE-2021-36084 | low |
| libgcrypt20 | 1.8.7-6 | CVE-2021-33560 | low |
| db5.3 | 5.3.28+dfsg1-0.8 | CVE-2019-8457 | low |
| perl | 5.32.1-4+deb11u2 | CVE-2020-16156 | low |
| coreutils | 8.32-4 | CVE-2016-2781 | low |