From 8e05b2a3f7892a85d9c2d420b9d682af1f0509c4 Mon Sep 17 00:00:00 2001 From: hafiz-Abdullahshahzad-DS Date: Wed, 25 Jun 2025 21:18:35 +0500 Subject: [PATCH 1/4] changes of html reporting --- MANIFEST.in | 1 + docker_scanner.py | 286 ++++++++++++++++++++- setup.py | 11 +- templates/report_template.html | 446 +++++++++++++++++++++++++++++++++ 4 files changed, 740 insertions(+), 4 deletions(-) create mode 100644 templates/report_template.html diff --git a/MANIFEST.in b/MANIFEST.in index 9d4baf9..6332b77 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -3,4 +3,5 @@ include README.md include requirements.txt include .env.example recursive-include testfiles * +recursive-include templates * global-exclude *.py[cod] __pycache__ *.so .DS_Store \ No newline at end of file diff --git a/docker_scanner.py b/docker_scanner.py index 6e042a9..a92dad6 100644 --- a/docker_scanner.py +++ b/docker_scanner.py @@ -616,7 +616,7 @@ def add_section_header(self, title): def generate_all_reports(self, results: Dict) -> Dict: """ - Generate all report formats (JSON, CSV, PDF) from scan results. + Generate all report formats (JSON, CSV, PDF, HTML) from scan results. Args: results: The scan results to save @@ -627,7 +627,8 @@ def generate_all_reports(self, results: Dict) -> Dict: report_paths = { 'json': '', 'csv': '', - 'pdf': '' + 'pdf': '', + 'html': '' } # Save to JSON @@ -645,6 +646,11 @@ def generate_all_reports(self, results: Dict) -> Dict: if pdf_path: report_paths['pdf'] = pdf_path + # Save to html + html_path = self.save_results_to_html(results) + if html_path: + report_paths['html'] = html_path + return report_paths def get_security_score(self, results: Dict) -> float: @@ -661,8 +667,282 @@ def get_security_score(self, results: Dict) -> float: score = self.score_chain.invoke({"results": results}) print(f"Security Score: {score.score}") return score.score - + def save_results_to_html(self, results: Dict) -> str: + """ + Save scan results to an HTML file using a template. + + Args: + results: The scan results to save + + Returns: + Path to the saved HTML file + """ + output_file = os.path.join(self.RESULTS_DIR, f"{re.sub(r'[:/.\-]', '_', self.image_name)}_security_report.html") + template_path = os.path.join(os.path.dirname(__file__), 'templates', 'report_template.html') + + try: + # Read the HTML template + if not os.path.exists(template_path): + raise FileNotFoundError(f"HTML template not found at {template_path}") + + with open(template_path, 'r', encoding='utf-8') as f: + html_template = f.read() + + # Prepare template variables + template_vars = self._prepare_html_template_vars(results) + + # Replace placeholders in template + html_content = html_template + for key, value in template_vars.items(): + html_content = html_content.replace(f'{{{{{key}}}}}', str(value)) + + # Save the HTML file + with open(output_file, 'w', encoding='utf-8') as f: + f.write(html_content) + + print(f"HTML report saved to {output_file}") + return output_file + + except Exception as e: + print(f"Error saving results to HTML file: {e}") + return "" + + def _prepare_html_template_vars(self, results: Dict) -> Dict[str, str]: + """ + Prepare variables for HTML template replacement. + + Args: + results: The scan results + + Returns: + Dictionary of template variables + """ + vulnerabilities = results.get('json_data', []) + scan_mode = results.get('scan_mode', 'full') + + # Base template variables + template_vars = { + 'IMAGE_NAME': self.image_name, + 'SCAN_MODE': scan_mode.replace('_', ' ').title(), + 'SCAN_MODE_TITLE': f"{scan_mode.replace('_', ' ').title()} Scan", + 'DOCKERFILE_PATH': results.get('dockerfile_path', 'N/A'), + 'SCAN_DATE': results.get('timestamp', ''), + } + + # Security Score Section + if 'security_score' in results: + template_vars['SECURITY_SCORE_SECTION'] = f""" +
+

Security Score

+
+
Overall Security Score
+
{results['security_score']}/100
+
+
+ """ + else: + template_vars['SECURITY_SCORE_SECTION'] = "" + + # Image Information Section + if 'image_info' in results: + image_info = results['image_info'] + size_mb = round(image_info.get('size', 0) / (1024*1024), 2) if image_info.get('size') else 'N/A' + + template_vars['IMAGE_INFO_SECTION'] = f""" +
+

Image Information

+
+
+
Size
+
{size_mb} MB
+
+
+
Created
+
{image_info.get('created', 'N/A')[:19]}
+
+
+
Architecture
+
{image_info.get('architecture', 'N/A')}
+
+
+
OS
+
{image_info.get('os', 'N/A')}
+
+
+
+ """ + else: + template_vars['IMAGE_INFO_SECTION'] = "" + + # Configuration Analysis Section + if 'config_analysis' in results: + config_analysis = results['config_analysis'] + config_html = '

Configuration Analysis

' + + # High risk issues + if config_analysis.get('high_risk'): + config_html += '

High-Risk Issues

    ' + for issue in config_analysis['high_risk']: + config_html += f'
  • {self._escape_html(issue)}
    • ' + config_html += '
' + + # Medium risk issues + if config_analysis.get('medium_risk'): + config_html += '

Medium-Risk Issues

    ' + for issue in config_analysis['medium_risk']: + config_html += f'
  • {self._escape_html(issue)}
    • ' + config_html += '
' + + # Low risk issues + if config_analysis.get('low_risk'): + config_html += '

Low-Risk Issues

    ' + for issue in config_analysis['low_risk']: + config_html += f'
  • {self._escape_html(issue)}
    • ' + config_html += '
' + + config_html += '
' + template_vars['CONFIG_ANALYSIS_SECTION'] = config_html + else: + template_vars['CONFIG_ANALYSIS_SECTION'] = "" + + # Dockerfile Section + if not results['dockerfile_scan'].get('skipped', False): + if results['dockerfile_scan']['success']: + dockerfile_content = '
No Dockerfile linting issues found
' + else: + dockerfile_output = results['dockerfile_scan'].get('output', '') + dockerfile_content = f'
{self._escape_html(dockerfile_output[:2000])}
' + if len(dockerfile_output) > 2000: + dockerfile_content += '

Output truncated for display...

' + + template_vars['DOCKERFILE_SECTION'] = f""" +
+

Dockerfile Scan Results

+ {dockerfile_content} +
+ """ + else: + template_vars['DOCKERFILE_SECTION'] = "" + + # Vulnerability Summary + if not vulnerabilities: + template_vars['VULNERABILITY_SUMMARY'] = '
No vulnerabilities found
' + template_vars['DETAILED_VULNERABILITIES_SECTION'] = "" + else: + # Count vulnerabilities by severity + severity_counts = {'CRITICAL': 0, 'HIGH': 0, 'MEDIUM': 0, 'LOW': 0} + for vuln in vulnerabilities: + severity = vuln.get('Severity', 'UNKNOWN') + if severity in severity_counts: + severity_counts[severity] += 1 + + # Create severity statistics HTML + severity_html = f""" +
+
+
{severity_counts['CRITICAL']}
+
Critical
+
+
+
{severity_counts['HIGH']}
+
High
+
+
+
{severity_counts['MEDIUM']}
+
Medium
+
+
+
{severity_counts['LOW']}
+
Low
+
+
+

Total vulnerabilities: {len(vulnerabilities)}

+ """ + + template_vars['VULNERABILITY_SUMMARY'] = severity_html + + # Detailed vulnerabilities table + if vulnerabilities: + table_html = """ +
+

Detailed Vulnerabilities

+ + + + + + + + + + + + + + """ + + # Show top 50 vulnerabilities to avoid overly large HTML files + for vuln in vulnerabilities[:50]: + severity = vuln.get('Severity', 'UNKNOWN').lower() + severity_class = f'badge-{severity}' if severity in ['critical', 'high', 'medium', 'low'] else 'badge-low' + + status = vuln.get('Status', 'affected') + status_class = 'status-fixed' if status == 'fixed' else 'status-affected' + + cvss_score = vuln.get('CVSS', 'N/A') + if cvss_score and cvss_score != 'N/A': + cvss_score = f"{cvss_score:.1f}" if isinstance(cvss_score, (int, float)) else str(cvss_score) + + table_html += f""" + + + + + + + + + + """ + + table_html += """ + +
IDSeverityPackageVersionTitleCVSSStatus
{self._escape_html(vuln.get('VulnerabilityID', 'N/A'))}{vuln.get('Severity', 'N/A')}{self._escape_html(vuln.get('PkgName', 'N/A'))}{self._escape_html(vuln.get('InstalledVersion', 'N/A'))}{self._escape_html((vuln.get('Title', '')[:80] + '...') if len(vuln.get('Title', '')) > 80 else vuln.get('Title', 'N/A'))}{cvss_score}{status}
+ """ + + if len(vulnerabilities) > 50: + table_html += f'

Showing 50 of {len(vulnerabilities)} vulnerabilities. See CSV/JSON for complete list.

' + + table_html += '
' + template_vars['DETAILED_VULNERABILITIES_SECTION'] = table_html + else: + template_vars['DETAILED_VULNERABILITIES_SECTION'] = "" + + return template_vars + + def _escape_html(self, text: str) -> str: + """ + Escape HTML special characters in text. + + Args: + text: Text to escape + + Returns: + HTML-escaped text + """ + if not text: + return "" + + html_escape_table = { + "&": "&", + '"': """, + "'": "'", + ">": ">", + "<": "<", + } + + return "".join(html_escape_table.get(c, c) for c in str(text)) def main(): """Main function to run the security scanner.""" diff --git a/setup.py b/setup.py index 6360b42..05432e0 100644 --- a/setup.py +++ b/setup.py @@ -1,8 +1,9 @@ from setuptools import setup +import os setup( name="docksec", - version="0.0.5", + version="0.0.14", description="AI-Powered Docker Security Analyzer", long_description=open("README.md").read(), long_description_content_type="text/markdown", @@ -37,4 +38,12 @@ "Operating System :: OS Independent", ], include_package_data=True, + # Ensure all Python files and templates are included in the distribution + package_data={ + '': ['*.py', 'templates/*.html', 'templates/**/*.html'], + }, + # Alternative way to include data files + data_files=[ + ('templates', ['templates/' + f for f in os.listdir('templates') if f.endswith('.html')]) + ] if os.path.exists('templates') else [], ) \ No newline at end of file diff --git a/templates/report_template.html b/templates/report_template.html new file mode 100644 index 0000000..766ba1b --- /dev/null +++ b/templates/report_template.html @@ -0,0 +1,446 @@ + + + + + + Docker Security Report + + + +
+
+

Docker Security Report

+

{{SCAN_MODE_TITLE}}

+
+ +
+ +
+

Scan Information

+
+
+
Image Name
+
{{IMAGE_NAME}}
+
+
+
Scan Mode
+
{{SCAN_MODE}}
+
+
+
Dockerfile Path
+
{{DOCKERFILE_PATH}}
+
+
+
Scan Date
+
{{SCAN_DATE}}
+
+
+
+ + + {{SECURITY_SCORE_SECTION}} + + + {{IMAGE_INFO_SECTION}} + + + {{CONFIG_ANALYSIS_SECTION}} + + + {{DOCKERFILE_SECTION}} + + +
+

Vulnerability Summary

+ {{VULNERABILITY_SUMMARY}} +
+ + + {{DETAILED_VULNERABILITIES_SECTION}} +
+ +
+

Generated by docksec on {{SCAN_DATE}}

+
+
+ + From 7378fdf34e09c0d3cf23904c9fa88832a1339526 Mon Sep 17 00:00:00 2001 From: hafiz-Abdullahshahzad-DS Date: Thu, 26 Jun 2025 15:31:25 +0500 Subject: [PATCH 2/4] template issue resolver --- MANIFEST.in | 2 +- config.py | 454 ++++++++++++++++++++++++++- docker_scanner.py | 18 +- report_template.html | 446 ++++++++++++++++++++++++++ report_template.html:Zone.Identifier | 0 setup.py | 9 +- 6 files changed, 913 insertions(+), 16 deletions(-) create mode 100644 report_template.html create mode 100644 report_template.html:Zone.Identifier diff --git a/MANIFEST.in b/MANIFEST.in index 6332b77..f24ff03 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -1,7 +1,7 @@ include LICENSE include README.md +include *.html include requirements.txt include .env.example recursive-include testfiles * -recursive-include templates * global-exclude *.py[cod] __pycache__ *.so .DS_Store \ No newline at end of file diff --git a/config.py b/config.py index b17bf95..d11b11c 100644 --- a/config.py +++ b/config.py @@ -101,4 +101,456 @@ docker_score_prompt = PromptTemplate( input_variables=["results"], template=docker_score_template -) \ No newline at end of file +) + +# report_template.py + +html_template = """ + + + + + + Docker Security Report + + + +
+
+

Docker Security Report

+

{{SCAN_MODE_TITLE}}

+
+ +
+ +
+

Scan Information

+
+
+
Image Name
+
{{IMAGE_NAME}}
+
+
+
Scan Mode
+
{{SCAN_MODE}}
+
+
+
Dockerfile Path
+
{{DOCKERFILE_PATH}}
+
+
+
Scan Date
+
{{SCAN_DATE}}
+
+
+
+ + + {{SECURITY_SCORE_SECTION}} + + + {{IMAGE_INFO_SECTION}} + + + {{CONFIG_ANALYSIS_SECTION}} + + + {{DOCKERFILE_SECTION}} + + +
+

Vulnerability Summary

+ {{VULNERABILITY_SUMMARY}} +
+ + + {{DETAILED_VULNERABILITIES_SECTION}} +
+ +
+

Generated by docksec on {{SCAN_DATE}}

+
+
+ + + +""" diff --git a/docker_scanner.py b/docker_scanner.py index a92dad6..bd74e79 100644 --- a/docker_scanner.py +++ b/docker_scanner.py @@ -679,15 +679,17 @@ def save_results_to_html(self, results: Dict) -> str: Path to the saved HTML file """ output_file = os.path.join(self.RESULTS_DIR, f"{re.sub(r'[:/.\-]', '_', self.image_name)}_security_report.html") - template_path = os.path.join(os.path.dirname(__file__), 'templates', 'report_template.html') - + # template_path = os.path.join(os.path.dirname(__file__), 'templates', 'report_template.html') + template_path = os.path.join(os.path.dirname(__file__), 'report_template.html') + try: - # Read the HTML template - if not os.path.exists(template_path): - raise FileNotFoundError(f"HTML template not found at {template_path}") - - with open(template_path, 'r', encoding='utf-8') as f: - html_template = f.read() + # # Read the HTML template + # if not os.path.exists(template_path): + # raise FileNotFoundError(f"HTML template not found at {template_path}") + # + # with open(template_path, 'r', encoding='utf-8') as f: + # html_template = f.read() + from config import html_template # Prepare template variables template_vars = self._prepare_html_template_vars(results) diff --git a/report_template.html b/report_template.html new file mode 100644 index 0000000..766ba1b --- /dev/null +++ b/report_template.html @@ -0,0 +1,446 @@ + + + + + + Docker Security Report + + + +
+
+

Docker Security Report

+

{{SCAN_MODE_TITLE}}

+
+ +
+ +
+

Scan Information

+
+
+
Image Name
+
{{IMAGE_NAME}}
+
+
+
Scan Mode
+
{{SCAN_MODE}}
+
+
+
Dockerfile Path
+
{{DOCKERFILE_PATH}}
+
+
+
Scan Date
+
{{SCAN_DATE}}
+
+
+
+ + + {{SECURITY_SCORE_SECTION}} + + + {{IMAGE_INFO_SECTION}} + + + {{CONFIG_ANALYSIS_SECTION}} + + + {{DOCKERFILE_SECTION}} + + +
+

Vulnerability Summary

+ {{VULNERABILITY_SUMMARY}} +
+ + + {{DETAILED_VULNERABILITIES_SECTION}} +
+ +
+

Generated by docksec on {{SCAN_DATE}}

+
+
+ + diff --git a/report_template.html:Zone.Identifier b/report_template.html:Zone.Identifier new file mode 100644 index 0000000..e69de29 diff --git a/setup.py b/setup.py index 05432e0..4cdbedd 100644 --- a/setup.py +++ b/setup.py @@ -1,9 +1,9 @@ from setuptools import setup import os - +import glob setup( name="docksec", - version="0.0.14", + version="0.0.17", description="AI-Powered Docker Security Analyzer", long_description=open("README.md").read(), long_description_content_type="text/markdown", @@ -26,6 +26,7 @@ "langchain-openai", "python-dotenv", "pandas", + "tqdm", "colorama", "rich", @@ -42,8 +43,4 @@ package_data={ '': ['*.py', 'templates/*.html', 'templates/**/*.html'], }, - # Alternative way to include data files - data_files=[ - ('templates', ['templates/' + f for f in os.listdir('templates') if f.endswith('.html')]) - ] if os.path.exists('templates') else [], ) \ No newline at end of file From 7550e6da52bc31b33e8df91095039392d7e6b88d Mon Sep 17 00:00:00 2001 From: hafiz-Abdullahshahzad-DS Date: Thu, 26 Jun 2025 15:49:19 +0500 Subject: [PATCH 3/4] results will be saved in CWD --- config.py | 4 +++- setup.py | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/config.py b/config.py index d11b11c..eb0c52f 100644 --- a/config.py +++ b/config.py @@ -38,7 +38,9 @@ BASE_DIR = os.path.abspath(os.path.dirname(__file__)) -RESULTS_DIR = os.path.join(BASE_DIR, "results") +# RESULTS_DIR = os.path.join(BASE_DIR, "results") +print("CURRENT WORKING DIRECTORY IS: ", os.getcwd()) +RESULTS_DIR = os.path.join(os.getcwd(), "results") os.makedirs(os.path.dirname(RESULTS_DIR), exist_ok=True) diff --git a/setup.py b/setup.py index 4cdbedd..680d7d7 100644 --- a/setup.py +++ b/setup.py @@ -3,7 +3,7 @@ import glob setup( name="docksec", - version="0.0.17", + version="0.0.18", description="AI-Powered Docker Security Analyzer", long_description=open("README.md").read(), long_description_content_type="text/markdown", From b28d11f1555eaaaa79ed38f7933fbee6cab24f23 Mon Sep 17 00:00:00 2001 From: hafiz-Abdullahshahzad-DS Date: Thu, 26 Jun 2025 16:35:08 +0500 Subject: [PATCH 4/4] score added in reporting --- config.py | 4 + docker_scanner.py | 11 +- results/python_3_9_slim_scan_results.json | 897 -------------------- results/python_3_9_slim_security_report.pdf | Bin 28660 -> 0 bytes results/python_3_9_slim_vulnerabilities.csv | 81 -- 5 files changed, 12 insertions(+), 981 deletions(-) delete mode 100644 results/python_3_9_slim_scan_results.json delete mode 100644 results/python_3_9_slim_security_report.pdf delete mode 100644 results/python_3_9_slim_vulnerabilities.csv diff --git a/config.py b/config.py index eb0c52f..e1ac81f 100644 --- a/config.py +++ b/config.py @@ -523,6 +523,10 @@
Scan Date
{{SCAN_DATE}}
+
+
Analysis Score
+
{{ANALYSIS_SCORE}}
+
diff --git a/docker_scanner.py b/docker_scanner.py index bd74e79..1885c86 100644 --- a/docker_scanner.py +++ b/docker_scanner.py @@ -363,7 +363,8 @@ def save_results_to_json(self, results: Dict) -> str: "scan_info": { "image": self.image_name, "dockerfile": self.dockerfile_path, - "scan_time": results.get('timestamp', datetime.now().strftime("%Y-%m-%d %H:%M:%S")) + "scan_time": results.get('timestamp', datetime.now().strftime("%Y-%m-%d %H:%M:%S")), + "analysis score": self.analysis_score }, "vulnerabilities": json_results } @@ -470,6 +471,7 @@ def add_section_header(self, title): pdf.multi_cell_with_title('Scan Mode:', scan_mode.replace('_', ' ').title()) pdf.multi_cell_with_title('Dockerfile:', results.get('dockerfile_path', 'N/A')) pdf.multi_cell_with_title('Scan Date:', results.get('timestamp', '')) + pdf.multi_cell_with_title('Analysis Score:', str(self.analysis_score)) pdf.ln(5) # Add image information if available (for extended scans) @@ -624,13 +626,16 @@ def generate_all_reports(self, results: Dict) -> Dict: Returns: Dictionary with paths to the generated reports """ + self.analysis_score = self.get_security_score(results) + report_paths = { 'json': '', 'csv': '', 'pdf': '', 'html': '' } - + print("IMAGE SCANNING RESULTS BEFORE SAVING: ", results) + # Save to JSON json_path = self.save_results_to_json(results) if json_path: @@ -730,6 +735,7 @@ def _prepare_html_template_vars(self, results: Dict) -> Dict[str, str]: 'SCAN_MODE_TITLE': f"{scan_mode.replace('_', ' ').title()} Scan", 'DOCKERFILE_PATH': results.get('dockerfile_path', 'N/A'), 'SCAN_DATE': results.get('timestamp', ''), + 'ANALYSIS_SCORE': self.analysis_score } # Security Score Section @@ -967,7 +973,6 @@ def main(): # Calculate security score score = scanner.get_security_score(results) - print_section("Security Score", [f"Score: {score}"], "yellow") # Save results to file diff --git a/results/python_3_9_slim_scan_results.json b/results/python_3_9_slim_scan_results.json deleted file mode 100644 index fc05b00..0000000 --- a/results/python_3_9_slim_scan_results.json +++ /dev/null @@ -1,897 +0,0 @@ -{ - "scan_info": { - "image": "python:3.9-slim", - "dockerfile": ".\\testfiles\\1\\Dockerfile", - "scan_time": "2025-03-01 22:42:09" - }, - "vulnerabilities": [ - { - "VulnerabilityID": "CVE-2011-3374", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "apt", - "InstalledVersion": "2.6.1", - "Severity": "LOW", - "Title": "It was found that apt-key in apt, all versions, do not correctly valid ...", - "Description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle a...", - "Status": "affected", - "CVSS": 3.7, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-3374" - }, - { - "VulnerabilityID": "TEMP-0841856-B18BAF", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "bash", - "InstalledVersion": "5.2.15-2+b7", - "Severity": "LOW", - "Title": "[Privilege escalation possible to other user than root]", - "Description": "", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "bsdutils", - "InstalledVersion": "1:2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2016-2781", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "coreutils", - "InstalledVersion": "9.1-1", - "Severity": "LOW", - "Title": "coreutils: Non-privileged session can escape to the parent session in chroot", - "Description": "chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes ...", - "Status": "will_not_fix", - "CVSS": 6.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2016-2781" - }, - { - "VulnerabilityID": "CVE-2017-18018", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "coreutils", - "InstalledVersion": "9.1-1", - "Severity": "LOW", - "Title": "coreutils: race condition vulnerability in chown and chgrp", - "Description": "In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX \"-R...", - "Status": "affected", - "CVSS": 4.7, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2017-18018" - }, - { - "VulnerabilityID": "CVE-2022-27943", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "gcc-12-base", - "InstalledVersion": "12.2.0-14", - "Severity": "LOW", - "Title": "binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const", - "Description": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-27943" - }, - { - "VulnerabilityID": "CVE-2023-4039", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "gcc-12-base", - "InstalledVersion": "12.2.0-14", - "Severity": "LOW", - "Title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64", - "Description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \n...", - "Status": "affected", - "CVSS": 4.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-4039" - }, - { - "VulnerabilityID": "CVE-2022-3219", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "gpgv", - "InstalledVersion": "2.2.40-1.1", - "Severity": "LOW", - "Title": "gnupg: denial of service issue (resource consumption) using compressed packets", - "Description": "GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to...", - "Status": "affected", - "CVSS": 3.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-3219" - }, - { - "VulnerabilityID": "CVE-2011-3374", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libapt-pkg6.0", - "InstalledVersion": "2.6.1", - "Severity": "LOW", - "Title": "It was found that apt-key in apt, all versions, do not correctly valid ...", - "Description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle a...", - "Status": "affected", - "CVSS": 3.7, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-3374" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libblkid1", - "InstalledVersion": "2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2010-4756", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc-bin", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions", - "Description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consu...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2010-4756" - }, - { - "VulnerabilityID": "CVE-2018-20796", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc-bin", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c", - "Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by ...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-20796" - }, - { - "VulnerabilityID": "CVE-2019-1010022", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc-bin", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: stack guard protection bypass", - "Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vect...", - "Status": "affected", - "CVSS": 9.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010022" - }, - { - "VulnerabilityID": "CVE-2019-1010023", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc-bin", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation", - "Description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privile...", - "Status": "affected", - "CVSS": 8.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010023" - }, - { - "VulnerabilityID": "CVE-2019-1010024", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc-bin", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: ASLR bypass using cache of thread stack and heap", - "Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: gl...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010024" - }, - { - "VulnerabilityID": "CVE-2019-1010025", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc-bin", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: information disclosure of heap addresses of pthread_created thread", - "Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: ...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010025" - }, - { - "VulnerabilityID": "CVE-2019-9192", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc-bin", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c", - "Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by ...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-9192" - }, - { - "VulnerabilityID": "CVE-2010-4756", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc6", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions", - "Description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consu...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2010-4756" - }, - { - "VulnerabilityID": "CVE-2018-20796", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc6", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c", - "Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by ...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-20796" - }, - { - "VulnerabilityID": "CVE-2019-1010022", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc6", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: stack guard protection bypass", - "Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vect...", - "Status": "affected", - "CVSS": 9.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010022" - }, - { - "VulnerabilityID": "CVE-2019-1010023", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc6", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation", - "Description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privile...", - "Status": "affected", - "CVSS": 8.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010023" - }, - { - "VulnerabilityID": "CVE-2019-1010024", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc6", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: ASLR bypass using cache of thread stack and heap", - "Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: gl...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010024" - }, - { - "VulnerabilityID": "CVE-2019-1010025", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc6", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: information disclosure of heap addresses of pthread_created thread", - "Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: ...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010025" - }, - { - "VulnerabilityID": "CVE-2019-9192", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libc6", - "InstalledVersion": "2.36-9+deb12u9", - "Severity": "LOW", - "Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c", - "Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by ...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-9192" - }, - { - "VulnerabilityID": "CVE-2022-27943", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libgcc-s1", - "InstalledVersion": "12.2.0-14", - "Severity": "LOW", - "Title": "binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const", - "Description": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-27943" - }, - { - "VulnerabilityID": "CVE-2023-4039", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libgcc-s1", - "InstalledVersion": "12.2.0-14", - "Severity": "LOW", - "Title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64", - "Description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \n...", - "Status": "affected", - "CVSS": 4.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-4039" - }, - { - "VulnerabilityID": "CVE-2018-6829", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libgcrypt20", - "InstalledVersion": "1.10.1-3", - "Severity": "LOW", - "Title": "libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information", - "Description": "cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain s...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-6829" - }, - { - "VulnerabilityID": "CVE-2011-3389", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libgnutls30", - "InstalledVersion": "3.7.9-2+deb12u3", - "Severity": "LOW", - "Title": "HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)", - "Description": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and o...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-3389" - }, - { - "VulnerabilityID": "CVE-2018-5709", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libgssapi-krb5-2", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c", - "Description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-5709" - }, - { - "VulnerabilityID": "CVE-2024-26458", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libgssapi-krb5-2", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26458" - }, - { - "VulnerabilityID": "CVE-2024-26461", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libgssapi-krb5-2", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26461" - }, - { - "VulnerabilityID": "CVE-2018-5709", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libk5crypto3", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c", - "Description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-5709" - }, - { - "VulnerabilityID": "CVE-2024-26458", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libk5crypto3", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26458" - }, - { - "VulnerabilityID": "CVE-2024-26461", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libk5crypto3", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26461" - }, - { - "VulnerabilityID": "CVE-2018-5709", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libkrb5-3", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c", - "Description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-5709" - }, - { - "VulnerabilityID": "CVE-2024-26458", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libkrb5-3", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26458" - }, - { - "VulnerabilityID": "CVE-2024-26461", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libkrb5-3", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26461" - }, - { - "VulnerabilityID": "CVE-2018-5709", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libkrb5support0", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c", - "Description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16...", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-5709" - }, - { - "VulnerabilityID": "CVE-2024-26458", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libkrb5support0", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26458" - }, - { - "VulnerabilityID": "CVE-2024-26461", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libkrb5support0", - "InstalledVersion": "1.20.1-2+deb12u2", - "Severity": "LOW", - "Title": "krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c", - "Description": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-26461" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libmount1", - "InstalledVersion": "2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libsmartcols1", - "InstalledVersion": "2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2021-45346", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libsqlite3-0", - "InstalledVersion": "3.40.1-2+deb12u1", - "Severity": "LOW", - "Title": "sqlite: crafted SQL query allows a malicious user to obtain sensitive information", - "Description": "A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File...", - "Status": "affected", - "CVSS": 4.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2021-45346" - }, - { - "VulnerabilityID": "CVE-2022-27943", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libstdc++6", - "InstalledVersion": "12.2.0-14", - "Severity": "LOW", - "Title": "binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const", - "Description": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-27943" - }, - { - "VulnerabilityID": "CVE-2023-4039", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libstdc++6", - "InstalledVersion": "12.2.0-14", - "Severity": "LOW", - "Title": "gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64", - "Description": "**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \n...", - "Status": "affected", - "CVSS": 4.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-4039" - }, - { - "VulnerabilityID": "CVE-2013-4392", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libsystemd0", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts", - "Description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink ...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2013-4392" - }, - { - "VulnerabilityID": "CVE-2023-31437", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libsystemd0", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "An issue was discovered in systemd 253. An attacker can modify a seale ...", - "Description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages ar...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31437" - }, - { - "VulnerabilityID": "CVE-2023-31438", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libsystemd0", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "An issue was discovered in systemd 253. An attacker can truncate a sea ...", - "Description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows ...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31438" - }, - { - "VulnerabilityID": "CVE-2023-31439", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libsystemd0", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "An issue was discovered in systemd 253. An attacker can modify the con ...", - "Description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that che...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31439" - }, - { - "VulnerabilityID": "CVE-2013-4392", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libudev1", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts", - "Description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink ...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2013-4392" - }, - { - "VulnerabilityID": "CVE-2023-31437", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libudev1", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "An issue was discovered in systemd 253. An attacker can modify a seale ...", - "Description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages ar...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31437" - }, - { - "VulnerabilityID": "CVE-2023-31438", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libudev1", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "An issue was discovered in systemd 253. An attacker can truncate a sea ...", - "Description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows ...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31438" - }, - { - "VulnerabilityID": "CVE-2023-31439", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libudev1", - "InstalledVersion": "252.33-1~deb12u1", - "Severity": "LOW", - "Title": "An issue was discovered in systemd 253. An attacker can modify the con ...", - "Description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that che...", - "Status": "affected", - "CVSS": 5.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31439" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "libuuid1", - "InstalledVersion": "2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2007-5686", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "login", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...", - "Description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding ...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2007-5686" - }, - { - "VulnerabilityID": "CVE-2023-29383", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "login", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "shadow: Improper input validation in shadow-utils package utility chfn", - "Description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible...", - "Status": "affected", - "CVSS": 3.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-29383" - }, - { - "VulnerabilityID": "CVE-2024-56433", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "login", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise", - "Description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) t...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-56433" - }, - { - "VulnerabilityID": "TEMP-0628843-DBAD28", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "login", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "[more related to CVE-2005-4890]", - "Description": "", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "mount", - "InstalledVersion": "2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2007-5686", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "passwd", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...", - "Description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding ...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2007-5686" - }, - { - "VulnerabilityID": "CVE-2023-29383", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "passwd", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "shadow: Improper input validation in shadow-utils package utility chfn", - "Description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible...", - "Status": "affected", - "CVSS": 3.3, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-29383" - }, - { - "VulnerabilityID": "CVE-2024-56433", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "passwd", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise", - "Description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) t...", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-56433" - }, - { - "VulnerabilityID": "TEMP-0628843-DBAD28", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "passwd", - "InstalledVersion": "1:4.13+dfsg1-1+b1", - "Severity": "LOW", - "Title": "[more related to CVE-2005-4890]", - "Description": "", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28" - }, - { - "VulnerabilityID": "CVE-2023-31484", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "perl-base", - "InstalledVersion": "5.36.0-7+deb12u1", - "Severity": "HIGH", - "Title": "perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS", - "Description": "CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.", - "Status": "affected", - "CVSS": 8.1, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31484" - }, - { - "VulnerabilityID": "CVE-2011-4116", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "perl-base", - "InstalledVersion": "5.36.0-7+deb12u1", - "Severity": "LOW", - "Title": "perl: File:: Temp insecure temporary file handling", - "Description": "_is_safe in the File::Temp module for Perl does not properly handle symlinks.", - "Status": "affected", - "CVSS": 7.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-4116" - }, - { - "VulnerabilityID": "CVE-2023-31486", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "perl-base", - "InstalledVersion": "5.36.0-7+deb12u1", - "Severity": "LOW", - "Title": "http-tiny: insecure TLS cert default", - "Description": "HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must ...", - "Status": "affected", - "CVSS": 8.1, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31486" - }, - { - "VulnerabilityID": "TEMP-0517018-A83CE6", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "sysvinit-utils", - "InstalledVersion": "3.06-4", - "Severity": "LOW", - "Title": "[sysvinit: no-root option in expert installer exposes locally exploitable security flaw]", - "Description": "", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6" - }, - { - "VulnerabilityID": "CVE-2005-2541", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "tar", - "InstalledVersion": "1.34+dfsg-1.2+deb12u1", - "Severity": "LOW", - "Title": "tar: does not properly warn the user when extracting setuid or setgid files", - "Description": "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2005-2541" - }, - { - "VulnerabilityID": "TEMP-0290435-0B57B5", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "tar", - "InstalledVersion": "1.34+dfsg-1.2+deb12u1", - "Severity": "LOW", - "Title": "[tar's rmt command may have undesired side effects]", - "Description": "", - "Status": "affected", - "CVSS": null, - "PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "util-linux", - "InstalledVersion": "2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2022-0563", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "util-linux-extra", - "InstalledVersion": "2.38.1-5+deb12u3", - "Severity": "LOW", - "Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline", - "Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment var...", - "Status": "affected", - "CVSS": 5.5, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563" - }, - { - "VulnerabilityID": "CVE-2023-45853", - "Target": "python:3.9-slim (debian 12.9)", - "PkgName": "zlib1g", - "InstalledVersion": "1:1.2.13.dfsg-1", - "Severity": "CRITICAL", - "Title": "zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6", - "Description": "MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, ...", - "Status": "will_not_fix", - "CVSS": 9.8, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-45853" - }, - { - "VulnerabilityID": "CVE-2022-40897", - "Target": "Python", - "PkgName": "setuptools", - "InstalledVersion": "58.1.0", - "Severity": "HIGH", - "Title": "pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py", - "Description": "Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custo...", - "Status": "fixed", - "CVSS": 5.9, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-40897" - }, - { - "VulnerabilityID": "CVE-2024-6345", - "Target": "Python", - "PkgName": "setuptools", - "InstalledVersion": "58.1.0", - "Severity": "HIGH", - "Title": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools", - "Description": "A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. Thes...", - "Status": "fixed", - "CVSS": null, - "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-6345" - } - ] -} \ No newline at end of file diff --git a/results/python_3_9_slim_security_report.pdf b/results/python_3_9_slim_security_report.pdf deleted file mode 100644 index acfbed2492500f7360d8c6c1e8938f5e9088e0ac..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 28660 zcmeEtbyQVbyS{`HDlH+6Te`a&q(MSJy1PNxba!_nt#pHQcS^T_w1CphZ^6-XzT$!}eFclp&13Uu(ErEr$F+3+HjXc;=kAOx- z%Rmnv_-n0aZc9K1d@2i1Bdcd)VP~zQXG1{$$AEx^xh?Ry4FThA%*_q2XRdpDmD}+9 z)r5^qZS|}PXoO9*Z1n{7bS!j%i%aO48`v5W(6O;H0bjDQwbs)zgLg;{QJ%G)V@7cq zqB+gRFMonc+4#J#Usy4uZa2>ToCi=(3WCGxl4`r(2QS}*tB?|~J#CI*=I0&C0aE^OwNg(K51 z#+h$AF@#Cpe4*+W6Ck~F8tVeRYJ)v!gpx9?_(ri;CaUqfP?mMa|y%YKu5 zS}HyDR$}QLb&wrRP5|5U(zFD%)_9p4#)EqaevSC}@y#j=eAO+Srdv;Jlh!&PYU}bG#zKhz9OUGrC4P&L<*-5=CHOr!NQ6BpDj1d?2 zZyG6r6h>l-hxd!5$GJOcjcsS;dWBF3z3fKT#8pSly+#zV8y#hJq^$Tu2wZtH4(s(` zoq4!Q9+W9PEA!)_eM_>pKC@p1jjE&{K@%ix%zwP_OHo`-e2FKI=8#G|QSsjzJ;ZXM2NCHT7 z{bl#*)~QECr6X~c4=3!O%0_yZQQgZCBE-S)(n5Iai>wO@GVrysW5cB*X=8&;9;c-x z#YXqBbdgBL_09t`eyqlc334VW%Y{<*cbE0-su7;3AoboBh_pi%i9L%hQ6h0-=oYu; z!tE0Fe#CRet~i>3RD{?wE_B#~6v;|orZt6>yK}9JgN@u#%6iCD1pKlpeq??SZxNw> zHU5_B-q(BUd(_}MV~Nlk`j9r-blsMAaC;2fMYHT~7$iGwj=R_X_BIJ^Ofam0Ac zjX^v-;CR}xhme)iDWR(bo$X_%Pw(dIjq9Dm*@0=Vrega-TM0HHIxyGhCG4c%=S?EU z5wcXJu_;duoHpTZZ+TA1ApRO|kTga*oYc4WEe{zLbHB_fSh6P_W5C*41Oi3B)oguw z-t{r3(*)&JEtteuYA>KEbah>2c#Aq}vOP*)LVk+oA#0s#PhxnrAyzhe@)G$e6p*CQpcYz~czNkj z-i6Iw?kmTYGb52v(qrzAhbw*>lsotV8w3wrHVPi!PL+5Df!|1DWyknN>Cr>FErAuI z*J!Orgy34(Y?qLA6btj%(=g~#WOMr2_vEuhh@xXcq~A;gkp&Gum!`!AJTH7!D)q4I zc4@+5;-zPfqi918bS+LSsqewlJZ#NH=Cc`1*Ap@;Om(FRGdiIHFDJG+LHt!uZWlKk z---3jF9Ww&Fk~u=+;FS*qBz@r)6`UWS&tth|B_nat!Dy|e$_|5Z0;YO&?1A4ayfNU z@jE;U58Fy{+TT40Db@n2&?Pv4{w5C`)s0G!PfP1EnJ7CyMw`oyJXkynTIT+mJW!S*FRV_$X5~Y^hNQXW`SW;9SlqCz~Su9d#hlJzr9TIN=E0RimJ1kwmb@t`jhBY$8@?c_6Z2FChNEPsb8`|unYP^d) zD^RbIT|BxEt%Jx_fBy`mYd(bqNq#6(Mg5Zwt^(_e`>l8;=;5S{A|lOGukK}b_1kwK zM`=3updSqt(SX}|1S~bs!kQ!1n)m`*1*|W5YHy%VZ`J?1mVfsFOn>=+|B0(${=2KV z4S&H^FtE`v{Hv=-N$!bU=|uM3bA-pqE`in3SRQ}*o^H`Y z=V^E-xT;Q?x2`D~a~gjZRm6iW{vh!4o`#;$JTZRL`F7psI{ct4@p4M=N%-a0-TVyk zKK9Lh`ojFrYzc8@i@AD9Um_P#>^O_}D+)EaAm}~4MVFumo8OZkFz!WB=YK4aS}=<$ zUcA2WQ;1mIA>S*jzaR#mEQ;>zX!~x|Rgn8=BJ;Jb5p?)k1|H-ky2=rst!rF+v0F^a z2qvr>#o43)R~+zQr&_YD#iyfsT4ZCxiV$~D!{ISA8^ieWiQQ{m)xux`Et|Km#Z^!E zVwjl}XLHZUVX~|94KvIWD==+wU^hZb>Zau19-IEzoh>ImmSE9wu& zHEPU17NOI-yE7q62uJ1Gfn&an^0-O6I$kha@fb!F*w?jn$yu`(v+UWevLPxI1y&dd z=@Dp3dS6QTYtG~`QzhkBEsc)OToK7(+nT|+#&JyINE?jX5tM7xx{YI5U|Hfk5{=RG zhKXjuE%y2WS3&Cpr==yG-ypF;Gjd_K*SGJ>_fA_5r#V~WUQA$LO2++ZXv z8+R%3k{ki{XOadVVu`;{PdK4XFvDzALYuH>*_UooD%S2`U=i{gLc9oA+?6bIta<8u zWX+lEH*jVtfj3cv{Cr(t-$5C_`gQJg<1Th=whYAga!D90>hHC;$6i`2;*-=t(tElo(A5t2$#YlY+bvT603Plk`hJ}hF|e5F37OeT)RQ&wpcRa zv@21=Jtr{?u6f0@MA_ySLc;z?+RZP&D9&oA<1Nvj&AplFPA~7zGnN&j)RumJqTWBmu2RoIl4O#VNNHdj`aNAqI59) z_ujP@`TV<87r`V`Ahy+zmHTx%>ne##)zS%UNraKEM9C&5^}CicvD=Cf!p5-R1S+T)ibuJs-U8 zckt~ual~z_fPEvzLmCT_-~SioGx%Hi25(O4PF9#F7c`2p;OgRzqZOfS z&gL4`$K9q8PQX@Vl?|~E7ns9>kqAK^4I&?Hb#yARPvWF4<}^lE!0fA2p}7OQmbEy3 zn_qNX>hXuVj$ST)WYpj;9#yRZ0o?>Wx=j7N_DkNX*4*RV&yKVE5WBBaQzOHqy&itx zIo~a5T>eHT>di5|*>R=zqoVZXj>e`@{b7KCsYSKLnNT_Ddz^Q{TLo6Omz>#O$9KR< z79H1xhKp*wt!P^9(5M(Ef6prg6_(ly%1L@}d(u$~B9SQ^&=k^`OZ+nLNx+y4v_q6_ zFDwc(%vJ@o9e&QJndiV(s`=GCHL!TIqntyNB&d$po{5O4+lkWUTQ1w1m0_`c^KSxz z2?+0l@#*-&Mu$#_!E?B~QQyw=SU3?c4vrT1%9N#V>XHw~L(c{aIZ}FSV1X4tqmEP= zjhtb}VcV0@xnf3E-<)5~*rfWcdl|jqe*C0p-j_^J>ozeIbJ21PiN)GqXUM13eK%tV z*J@l@>+%yfF-DHoP30HCIY{rL41KUcva-tVIqFAqH- zVMRF3<^O^1%9=8NiK!K=(2yRaZM2Jby6i4uQ+Z{BJPl;FLHGz$wFmw~Rh_mS+G z;1tf=QIvwNh(RAb3^E`KdPlzA00gwDS{!i#LXK-hKFlKAaxKAEB)EO9-7@<(Jotzl z_79?J^5goB5<9sW=@%zc>JQ7BARtVL;@yeFx6kx@yePP;$8xm}uFaj;7k4_>zd6^= z7T71%#kFlpX@s0dgIae2Ud@g0Lrw^G4|&59GnnMWuBIt)kgeqIg|@AHHJZx89=9e~ ztS_i#F2r7-`NUci0cZ;fu@9p6JySLXjja1kCdnuHb1APsm~hP7#`a;gVn>OhBZEv4 zKAOTBvrE{%-4rw?h2#`v*Mo*jg0cguiZJ?N%r^ER(6wp}3|BL2yrr>kbK2TF0iOOa z`zqr0yV0g_W!O<)W9%3Q>GFyx%4_9^&o^TgVM|5sL%$!D`wTXZR@1L!9-OT`iH> zc%K-(MPGK0&_9q_C$lV(vctO)B#|9NT1d%GU1jthc-c+I@E(gDF#y3f^;Xa5#JM_* zV3RV#SM+2_Z1FyR7z5uWTBCsjphq<8S_up94+r5>4(rO)_OsLgQjws2iTD~1oNs1_ zn$CGv4s>R9%imz!gBabWNnRmME)apY=CWLWM(AnOZ_d9%WaH5Hj1nMaYBUr^=NA5zy;-6Lk6 zfh1aGgy)?@vQMh2z>l6QZ=bGG zsm7v9(^zBG%MA6xexG{l13p_X1VM~hS>wD3;;IiB19GHgyKZ?D zGZNrYKrJ^apto7GY|11uX9ujGNKUEcpMVO?5M+$uCd@^Q>gOrr>da684+9H{9r2dN z!8*UmW@N=7kus17vqeyswfUGNZSI^=zGn0pgGh7jLy4>>xKddSyFGGMvy0#Tqx`bE6w7(9YY!W6#voC zD=50o4DoKZP!VqxQ>7F3R5qtEL7Hm!_4@0(9Vk0u^yB(PcXHfv6gNP`rlG0`!J<8% zm?AIF4XT9RNIu%_yC5<Ib^r zIE0^|qaL2aRIO1|tGx~iBEQwS(NBX{LC1Y~Q|I2G^!Fdd9({TS=)h+KerVLq!PK&A zX`YgfWLIT_Q3j(4hEJ@g5yk*+?zRYHZ??#Hf@Ee#5KV8hQ`iFvxnbzFR(h*1t_ax2#!#z`gy zIAMu2C&Hd3Ahj^oQutI|mrI+_Wow|b@&HgreV26$bu{b5AP8Lt`(A}=!nW<)$_Q)U zuQ{5Lci>^d_QXmRgn5MjJ{`6MdNcZ#riYE-^c_B8F<#yxy&>P8_z$G(JIFp|x#bN& zLja+qMTI+$d{Mb3ZoukHoF5q|5ms|1;;+eWgQMwmlsN-9Mw!Ng;<)0??IUq0r>mzt zSG~MPoxB&VyjP9QpHOEy=+95T1gSTXmrPoGW1xYT--CNpPfWWX+q`eH%}!bG!N2eBS^nCO|4(-JtbgC#--f@iyJw`MWBk|MeRi@+)NCiR&*Bxu zSM)m7_GQ-*fjrZgWqGlHs4whbtC&D>?dQVv37^Fl;x3OL`ERn#k3zZ2rhYMZ-r#N? z-0ZLv(jC!g6kRS0<#sz*5wJbUr8Hg!1>mJ-upln#N+!p>j9Rl&7OXRb-L48bV4o2_ ziLmFS`dC9vx(ktDf!C?@Jr-`))uU{SZO`@@Lz1Gmqi;W!$|VjSq!e8# zSZ1$I>N?3EUrvskIg{dksjHX#T(z*Dm4DLGn8`{FMo2YA)hw|?IhpdK=h&eAen45? z@~eW|S&hlY`y`>M_O0mOI8U1n6%*MYvV_fV?pxbCa%-S(n^(^@Ex!3iKJ$eueakbc zOk-QZ_ZjH}2rRqNPDvYJi@fL>;OcnAPS3&^6g#`Kbil^05t|?8x}J`}K53M!o56sL z<`ur~4VzO)y~5sLyzP2Z!f3B+GnK@FJmLbbX8$sT5orJesZgb*+#%Tm^8lBGBcr_E zUFNy3Agm=rZqdh@{3OPct}CYVGDiGhEdDUDzlFi|4Fz6E!w1c-E#a4AXJ6M^;dtK7Ji=i<&cVJG`=4Y5}- zVx>iVj!Z3=hzFR~{-SBRD&HP=}F`#{As$@`-enB0e!8S!h1{V0BW`u3KT{+YQeJyFEQI;o zD+Tm*Ed1(Deeg=yY=C+orZCDR1wDc7V-h7~%xZ~JylOcv&el+(965ae8(DIwz@PyS zLqE5k)8LgA$4DQ^Va8D$sH675<~VdG)o4x z3?3fN%d2aJLqj}mZfb6eLA8o=OImJ?nuwL4Lz)lWD;X##KTr`NG>TZH{&}CC)3|{p zaxiY=`g&)+ZT4bg(!$O8pzW%yco7Wco;OQtvQn_Ro4uloU>o;+NtpN66jfCE)(gv| z#_nMP$S^_q6B$$Y+?Sj0#cwPj>mqDKV<7>P9)rfdH$08#egFo~QF5o^^$D#>dwlcd zPLC^ZQo03s1@RP`yP*y8l>kPFN5B1)LmT*}`w=W*0L}x^t9hp0DH(0KyN9~2 z7u(VfW7#=+$-NMQ&>aLy1_#6Apf-WYOmHJd1Lbv%+exVtxLRF3)}u-Qxq=Cisqoaf z?|T~)Q<7aw+ciAzJ2EeCQsFsH^O`SAv+r_Pef)IGNC53HGz!j&0!Sq}Uj~yqAJo9H zPKtJfg3$D7lzx2zQ2};>W&{9r){a2Us0WcyQTiEvFTx?xe^kx%Bk%fL7M8^Z>J0lq zzUr&T$iT?q_mP2v&WE#G>_*o!I|#XPhO<-y#db&jOKN)4@>W#Gv5j$9ghO!1;R;no zs*l1j?Hh{f4vg#!T!-y*SGIO*RPYv4-e4>q6_q_UDIZu(>!?|oKq~l?X^LpJ*$1Dl zo|7M`@{C9zdok4fn5g@9g6_`wdpta?fo9v@N3d#Mw#JY}2J8mFKMs=|zCKnY2VfO2 z0j)YDI8@`Bu~ZKR)*mi-?3snFT3l4d$V2zdqYU88+u2FHia9|QuX8;WMf?!93N$Ux zYVXxpi?6<(!Q~$9E-Mxk{B82+K>YXSESO)I(bav3za_nYp^dY2R?R!wNd1d84g_+Q zQStk>Uqt%Nv0OVaqz(5?YZRbuKLshF_Makg8eD$!J-Cj*LgGhZdlYFtuk=oQAc_?k zUzZ)|!vY)ic00R^&Q^3jl>^36;tZ-EweG*v?LF=c@!9^PvJih&mJn(n3Ogu3Kd?kf z*HZ|f-X$~&Pf08h1c`)OMtk7>gV9RJpi<=IfZ9tN&h{5uDl-WJBP}+-NV>Ek$xsrt z>3eKEn#+7f9{<;uA4Janpj&0pap`WFIeD2?LdryTY6^2jb}4;cgC8Qw)@WGHN?|@F zAIu`>ZFe7)l0I~p>8%p7C1(_l<)t8E7y$!s?w$CtGeLAQq{xNhTdbiv;$GyBb=LZ# z7QnHl!ll|=0zIhqaz-ZxnbEU{0On66N+RssDB zPa6Kce=QrQ(JFhs_-bdw5f!k-tKXrzB~Y`|PuuJg01My0RA)uNz~b^+2YT@cHN}~~ zSkEn6w!kF(wIuDNz)tWs$Q%Id9HmKSpyr`YWMv?eCeq)bU zzV%h10BsaSNzJgUz%C^P6bAV5M*&Fp>PYO|Qp!~VZh;Z2`6n=@aU-GLq}}q_gFpGK zoWnMB#-%<=dPC?7&C5W$$Fliw`u6Wq$}fPjOx{tK^L^3ksrkCzdOG58246sA_)}4d z2q-KLSbLhR@o(!wy&UaEHh^0ls`;aB+{<0ekNG8;>cW7&@o&LWE$((7W=hr+YCe)E zeRCy`7*>+1`NJ$gOfsZQ9Idafe6y@Qy*aeXNR!@pvQw-G%;sYOoI{#X>bGmbHt@rq zTOyTsAX>dkJeK`R^rldDAptg!uVgUh1IfTn9h?fZ*+7)Uvun&1V6@u?*wMTqwn|v2 zNwVZJ^Y>h^+9xpgxwSMR6%S|)-h!=J=m3hD2$m?ho13;!2_ICC2Oq;o+cRK*i~*3f zkMH4_4d2@64+ozd!0jZT2~p?!!U7{;^Wk8YLpZZF@S=|z(@l7K(MQSyG3PKrWvn}& zq6{8K?4g;JtLbHy*sd|G(b;4@gGd3q(H*5or0H3`9@rxzP9$r6>IH`mNQzFX3G*IOne z`|A231F<7n>$%tFlUp~7Q~>LcMuyAx}sHz$IdWe+^+rCR)fbYRt1l9`?(Ft`4*_*lgDf8o@rl!EqzEQpM zIpOUAa3xoAnzWj&Ltt!f*T8B8XM=$;sEXnEak6BpHENi+mztCpvrw{ zfyHLmSNXvvC7HV@@o^A&(J4O5yp=U^EdU|~Z4vK#5^3~1lPzci5U_?lY&;Nk;Rs<#W(fkUYh<@n zIOANi;>cEobFJ<6#x=f0=3;8y=);B25=D@h+j?U3!G%$Kt*oMWq^k<}Zs8?Kem(p(+ez!r$F^ zvt;s^s_?5GgVbRTc#=diZOi8vKh_k_Dp8iodg~z*BQ}3nE@FhyY3bxX$D^y07#0iS z*Js}971xnjN|OX15}WI_th*L4nSnh8-rb%8imy+xAxlQh@?{b-x$dp+CeG|Xcgwhb zPD55UJ>0ux52`y`g+jRAWZBQ~0$OjN2L(x1>?m@lIf&DLe;oND=yzZw1!(FM&;fN?BnrsE_%RNF(#%m~9B`ZP$YB z6RU4?{kmIbc%R9FOn!2j+JOd}44dU-)-ZMcUR?r1HnYHlRss>LRDhI!K4?-7K1lWweLjk?S z^;;q=J-O&R`?xc4ougkLhIj`8?0giE0F-HA{UOmId=3Dxl}XIw8

;ev4dyB2~m1XZ{t7}MZN4~?Wr0OdJ z2?wr>4K?NJz-=1xZiRH4HWkvFJ zx(TGB@v(x2aLulBNG6J6!*~^$h@Q@{N80;L_RZX!1tQ4$!@XD{k{Fo$7j5=PU zuozmOiWd$IjlH}+|EjaEnud%dCKe$+ISO2Cj}C0z>ev~9X0_$Wd?a_WaHOvxv{A=R z0kTc@XSH^@>J|Ko7ezxt&B7PNXyvj3LKmCwy`eY&twafK9(fQ(WW6V?@B5@k+^YET z_`!=Ah4Xx$+HI)^3%v+=wX=BY10(V>)wJ9*ypdOHoNO8nFSLlhN55xRSf(-9Z(ZdNZC|TPaiA@ z4;B7YS0C5~C@!`o5CoVS)N-Uu=usWzd<9G&=G+?i&wVv<&uu6HNJalFU@#Sh8jI}8 z6~()WEznzn^FHXSgm0-jOZhEQ= z8^M7_8;QrAI&VIpprMYgub{C1Oa4U521BIzGOO)9n( zBQ23F?T3HFe2%YmU|9`5eb8m?G`*d-Yf?4;<%BpvB!&g=Hn+jjJ39U}D~qX;4|C)4 zzHA@kPmPCoVA#yfekvd3Af2WC-07S3HfH#Jt~+#Uz}F^*7p#%&JnLi1``@lj=2Kl~ zCKGoyl}`57*GH4mT>Q){_CGS?$ZqZlSa7!r%+?E>I6H9Ma3)>*rMQH7PRflY>YT~5 z9FrwUHD}UUo}A*ofk`U$yAs#=;v_F;e-&-obdMH#v-sbMhwk>V>F-SOKVqJ{r>ud) z&hJlC(cQ+sz&s3W^vwTyMB1S$X)(u&(lAs^V4Vo}F|ctwu?=z>gzCU@;4#H8)ppN! zj>_KTnLP`r68GkUN{k#m=(#u>2slL}=Ppx^2t(@;K^Sjx{n`MML*%(U5No)8E^jh) zGCmGGalzyO`NX^b$$jqBTugk>efXrV;*g<&;>Rf0&yBWvL}Cs@K+-dYq0 zTLGT0tz$VCMW!s0c3XKX9&n&!B#}tRZEt84KlQ}v%%IgN8!xky>>wn`N1flFZi&R2)gI*p+oJU8 zEoxAZ6c<`yEmta{%J@!@)RSEEqYuvV<9s*gVo&S}cl&bgD_0bc9lt~9lJa<$WIZ|_ zw$=D9-)tnt*nWoW-DI9$-mHLJb}hwBk?9<0-rRFZ$~hL2XqXtfn8BwcGMK0kIR!Lq zoY%G+lh>#Hu<70IJ9s>ISflvMMUX5$rPgb-af1?tY_mvYdAk48nJ`<~59c|jN z!#dilBM}Tsn23oZcQ4X8+{sl_l>3pQYou_|=QLn#+BkFS!YWl-un)bTgSC?#0`h$m zFoSdkxV$wfWgfRLhtw7Z!H6HfwWXT0Q5?^&WlwH;H*k$UhA5QeQn&XouZWy)=3@We zOcRHK-3MInYdFyT7_sqG>0F&r@Rl*ngj02z^WwwP3L)qj?@x9)NUvgDzZ9-;i?`($ znI~p|<=4?sND;O=IxO5S!AF}r4;Aos^Vb||yp->a)g;0w7(p@O9bdStQ!m3QYU>`z@E@&r<^$fKu;TZ4I!47Jp zd39))TZEPvdkynk9_Ompix(Ox4Lb38(F@ZRzxwJln%XPbw2P1bS^=M>g#XyQ!L$`G zoi*m1g-cILD6<2q*SJs(N;(+D=c=DLwwQ*V*6!wiN^ zP3`jfcz=su;e~@dS$F0HmSR!^d&(@A1Pmb<)q*jqUwr5JOmrp=WoN$t>`42kc*yY2 zqr*Y`D*MyqN*66NBbO4i9!OrF-q6jIJ#GWQHh{XS^u=^dn-YQX1j)0MmkcQ=i0_NV z%P#~|YYq!LS}fRW#hQ9N+&Hfs$sMq{=p3C?59|lvnAzVVHjJ||tu~;8 zl>r6maUR#E`qMDS(sK|~*vl6T{pnt&E!u3oEz1L(-hVWW5#F&0xYM3lE4FKQLZ3LE z*FW8o{>wC+)RIm5{~&UA+(N%Cjt7`f@1UD94F`bA^V;UOWVmZ&JB44M;zfZ?w~_j+qN!g0nds;%!694m-VyTS%sGYq(NbuB z+ltu`!#?ImS{^0Q62V$9n+PWo!5uB1@%U-cS?Ai9SNrTS;!31lZgyA2r%EssT+GGh z-WQuY%@;{M##v&XFMV09HxhC${B$d4SS4}Sp@79niAZHt|MQ_}nbeV4!T<(xrWv8X zMI?+mCuPUg$Ono9>bVw!)zvav zB{(`LeUA`2zij9r8KQblCh#kPbrUd(E;!pqTf8wP^Y)^{tjpO00iH|b4Mow+i542+ z#Lb|!%pH@U^gt45n%k)#CxezG3$pqwq`^}`%@1!0{z~F^+_rSt1v7OYe=MXiY5KVC z^cY(1LF^UeF^k=Z!inD1yBQ9bO*vetbt#%kw;P9tas`*Nb17Tq`W@ z27c3{)M5^?5uM=?Z{)|QDy2%Ho+XA1h=hWuUOMo+8GeQ8cr*(ZgY7^sBbl>gQq9tO z-)}|XqKiFAvY|tVNxJ3Qw>bVC<%<@9=7G*b8s%t69?XOeDP-O;y3p$dhe`7miSe0m zL)*zzAC*F_OO*b+cqF0=O%KK%i-9(rHzrJV+(@h$W-FwYXewr(K(lIaN9o#a)!#kP z{&snil#%8xhhB>F=e4ubwx(}Fc3C95TY@JO;%#MdcgX=!-ke**Vs^K-Xg9B@VFB%E?cCP17%HAs$~eP@ zerl$)$M^><-s_nR;SV12W}olZlG(4uSwoSWarJNWAX+l+CF&IBZsuCs?BZ*jXBExa zl*u#%@Fc<|k3p%F-R7QN6OZ4Y_(2z%yF8*w)m*hgS}`QgSFIL%TOL#?g7%V{l+Y^E zHcNC^@e@IIjIPfgFoOh!?t}rSo&Vu=<^+q#+or%`&Bxy5pY<`X(#C;3`(EI+{`%TC z`3kcp*Zi$rc~i!7gQEvSIrbeZ{#eC6Z`L!WYej44(MVG9|FwF_PSYi0VO`GMS_H-T zGF@%qJ40KRTU#wW$z@s$)tgycbZdsK40Z$P#*{DElnMYf&Io9syH7CwqU420j{M%P zrG6_=S@`PA+sY0?YQ0YtDbC(90GN~Ijyd^|f`rE1JVVT_*f$Gl`L~`WJ5=je5AT_M zidQisXQjzI!FSu-8`+s&BHntV5bj9k^t_AUyZ)j)hH7}QAz0bCG;(Zd`kFNg%}kU< z)Uhhol9g?{yyyMmJgkW6v5sao0CI+DF^18xZg`Hxf~ z)eoY1S_kiUANZLphBRhkUH9dAJib09_(&4tqMV!)d!t4rZ{ZoLkM87gWt>2Uzp6R< zV+zghxIMY%*i&R(mfyJ&C-eH3S~}g*^AaUemSa$b{1t%zZ-3w)R{L9_0`T;x*(^SK zMaCTTJhhn1)mEk?KJs@Kg3Bq5LojhJojM}eZm`en=y%=)Ne8cLy`k=0cCbMt#C#|ZUFwk2 zR=4hQX=j7R|5tlj@Zo8NQy z)@xc9+5^eC?T-i5QGfMEU)vX;^67V#Ck2>qPLVYu&a+Zq*TDV9D zHYcBM0^wQyuk3QLVzk{lS6egH^{sSPFXY^kOlZb(oTI%4l7AT1%yZ41ZFQyE)`S4S zs#4CS{$W*b4IU+8IUovMe~1E+e+L7uzR-G>$1Xw=>kr>7>s3a3MeV1I>c*(U>N0B) zl3OQ!@sdGbiiazC5uw%)-i&o19FNT!J3P6G;YMQYlA9h2lX8^W(|sRTvbhHv z(W~qeU@d0$n8#0m6N%H@L-FRwOwo1o^<^H8!5r)SIpSIvOUkuKb&Q*uR&anu_f}Ik z|4jQwt5d4ZsE zS(<2z`n6otO?+6~RPVJldCZH>ruJPAoSTiCho0!k9T!jDI9g?2t1*|HuvL*`v7DzR zCAH5i2o&dDk;(9o@Pf``4)bc>&&O@1P>*Ohl~4MX0ME;Rxx~$Hp?hiWM)|4GZ@n{U z=W()dQr9>S!em-s*S6Wn6B=9Lw4fa|JBNmb5qy~Xh1TOoYnC_BBlzK!Dc2_2;fMj} zZbw)Pv;VN$|IJsZ>3({L`Y!&3-98;X?Z0mJ%|ba4T6rG{UT}3p%d}6`nM}_<@FAi? zC*ehdH7)|)js|hB_H%})cgDw$eHC%hwC}dm7FMMd?3EH)k`rFqd_zB{?;_WGNUP zT6t1!M9U&NjStdTr;`f*Ll%DX89BP29+JC@e<2I>On*B8G7IaIYNJIGIyno>FPga@ zm5XZN1&t!&uC%0=-5c;24ot{lG~PraWES~~a&KcUfek_(H%!UX>wxqVH_WHcV5Bq$ zl+ZNmKz>Ue5PEtG8;OyamgiIan&(P5a_p<9R$K}G9iiXMKb@hqe^M93^O8~GsUR)H zWkmSMAH%$NJY(on)^QQkoWz{KoN~YI4HZQ|udZnwpGLg-Dfy=;d{jZYH=SJJQ{r;H z1ryl*dpO&{Qa zX^{k-(zJVJbj$H+s#Ii14V71+{UP}VjtGeezL6QM86Bcsw12)|T>w6wy166anUgtU`018H zutHwai`E}&T}GshxF&xdoa(C=DeR|ghgTUUGy1~<2ayW?Ll%CMzZrhw@4NUHvOv$s z@;6L`4M=&@qWPR~cJvh3E>&JW-jNLQ4=37)x?!Tv_58k~pcWQ*C zfyiWR!<-YJ;}-hVj;R~)0?XS|4#mrlE*s7m$A%cX1B<+Vg(t$i8nkx#B3W8r`>6BK zqMbjm>JuelEI)cpt$^}-|6I zHbCXa?DIYlCD7H ztKrrOE>9)@3H3!pa{pKhOuUt0tQ@4$#Mdt?5dz}VpFL%IMJdErmg=e5QmHfe`I-LV zDJEOQsZ&~K5NGGf3XxlD^hRgbom}(NTn3kj5z6pY`5^_*ilLN%)imWSt)!UmRv_C zCK8E!HmqQUhl;|A6(Xw=l~ikD7FIt3)761nw!&{q$rO~gBvCsS?{AVCFw1g-TyB^l zE4xL+ZrfS4(rFoVqVWD(EsM9?CL?=D6n#v6%67bT*Ka}G)HG}CV z&A5wyp&b9FpnvO6lQ9M|LpTwmZ;*oS1Zx*x0tJ>~&Eg7Vzrf2qp6g{Vogsfp_e>hI z-0)exp|(7(BB%DD6nc$jSh1Qa>1B+;r*beV55~|kKCN;>xGm$GpDQnp~PvaPox z^Re9rrcN-%Mr3dQJsV8FsU1u|X~$jsOWF8OQc$MfoD#C{NgG3n}FSC-Dw zKj7{+g@NfOVYrKbA>;qng@5ie#YoG(43*8_-fW?eawkO^Q%w_u6LIcM06*pGh>y2! zd3NM6&-XF_%c=!QltNkfN#>Utoq%knGEeN#)0qyRz^462&de6e>)KS;5K%F3q5^s( zgZ>Q67o)>u`F4X7RsP$Q7tp*NWQPBcjo*|Ark^C@F8-x#{I^|5nf71pG_!-lupfod z@qWMAl1nLbce8~fj-PJjcBdH)Qoo?R?jADak+L@UqNkqqiu~?oi+6=zgYi0sb<#iG zY+?FMW@i40neXCX$O1hJ{okBZSf8~gFL1NPxkHUuegrF(fifgfzDz9UGn6onx3~L! zv(5Dvk6@LQ7g9$@*Bu?Ip?y$Dw%J-ngJ6XC33^JTC|O>ioyrtRYq{eeDtFSIp*&}< zA!#MeIF04d=Kg>j#Y1h+wG@fL7vL`Fuj>ahtKMM7%^h{rTZPeW`w|b^D+6-?-q#xHUz6jFUp+%g8;GSufpOOtbi{SKjZ1VD5_qH_CQo zjg80I3~0`Od8|`v_>mL-ZC@F89M_|wz#|?569zAGN-3e(#^V`EBDDQu`Gsyg#lEM6wWZcESP^N!t-TxH< zozYxI7yk^dYJf5(AWQuB)@A-p>0tgzI_~0M$;SVx!wuwZ^p<+D{=gbc%Kr~J_)Rir z{)x=*;$O%CJ;UE!epsJ5aIg5TajRq*nGn5{t7PjosxIAqB$p>J1FZNDPO@J@W^L_< z4$dV+EpZ`(C?tBsy>hD`0seM$sZ#Xg>z5G%*=#+KTty%9OnNCCoIlYJ_C;P z@|m*jw`YiueZ?Q(=`E=9^()S&_%QS+eax;M%d$)+O9D6I|+$^z^VXwrWlNDAYJhbYguxdKMFMa(g zk2sq;mc)Q$f$$OXjMJ1w*N6|7Ev<^j0{wP_-bRGKx!cV>m(Nx~|4@bB6cOg1MC301 zg)01i`jV0BzcRLFH8FPDl?u>*7~60KZ%l=*Ct*{LBqo0t+jnO_&TdmXcr?rC2{&Q? zGPeKHmtB-tSipPlHc}2IsNmf3g*B zCoibR9a79?Yrm2x1=8inNv~C?46KiTB&&N8?d8?XJ z=NtP=o7%?jh`qS!uP?8vEm!CFEL^dEMT=irdtt*TTW@Wcx3~C>S8r@t(vq23 z^5Df!wbpHS?-_mmIDXk~b~{gZtj~Bx{p^ukPr5n$w45vzC!>CcK|<$(gnvDRfe=jd zKU(cR>QptfeZIeNB_3>3NWa5yp>yHFzaEM<{!gZPht68(oV9;F1RdaT@U+>$koo4W z`iHLA8T%TXuhcwooAQ_c6B8L_doePhpE z*FQYc7Mb2Wo2?ajQVru`PYk|b29J$_Ta5yO=+tRiH13-gRBWjkH^bvPzhMAg-c z%_5^3A!(jn9*;%bI#dGjk(eZl9zZa{N|s@khUimN-(MYdXtr-UvcFE|(Nr@bDH5x( z;Tw|j?Zj%^iF?IW_TqU_dVh$S|~C zZnFbne(<+JHIt0n$=hol!YdP>X6i}0Wkt4!N+g=n2T8?t9aU0670u!k=_{jsWdR)! zUxzt4^oxRgUDND7c^LT$fv+kuKy(X~B`q#ozS1u95arX$e+S9n`Y*37qnUov7S!i~ z2uhZoh0zMntIn3B>iUZ6@`|iV*R4$WIe@at+$t%Z&J3FR$BVm8F3k>v(sHx0jEStu z3Z`oSMNJ>r8_cc#yJd4C8uMZaw-VA6RnnwHOk%09+ID7@L8JW^DCNbyeB{(767<%A zJ2zJE)>8cxI(F1e)K)nI`l(CW6(O0<$&mcd2Wf;*1FJv`!^DIWfAB$0KSn9krv@;% zpc9$L3~Coa3@c!w9EQOM1ThWE)cSbL;Oi=K7#80Fo+1-4{2-=i;DdO~6fmNhyetaQ z!RUi^i3tzmK}?h3eISR?;T14d7BLN+99LHd_sLZI@u(uncQ!4jV+4unI3`Io=?$gf&qX>gvS0rZ~Pt z7RQ%haeRp?jxQmw<_gM3G{LuH4GaDSYpSRhEewmPV0)To@V*^ux;X&zlCgM#t`#6| u7sc1u5Thi^bv*n_key_data in kadmin/dbutil/dump.c,"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable ""dbentry->n_key_data"" in kadmin/dbutil/dump.c that can store 16...",7.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2018-5709 -CVE-2024-26458,LOW,libgssapi-krb5-2,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26458 -CVE-2024-26461,LOW,libgssapi-krb5-2,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26461 -CVE-2018-5709,LOW,libk5crypto3,1.20.1-2+deb12u2,krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c,"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable ""dbentry->n_key_data"" in kadmin/dbutil/dump.c that can store 16...",7.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2018-5709 -CVE-2024-26458,LOW,libk5crypto3,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26458 -CVE-2024-26461,LOW,libk5crypto3,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26461 -CVE-2018-5709,LOW,libkrb5-3,1.20.1-2+deb12u2,krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c,"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable ""dbentry->n_key_data"" in kadmin/dbutil/dump.c that can store 16...",7.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2018-5709 -CVE-2024-26458,LOW,libkrb5-3,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26458 -CVE-2024-26461,LOW,libkrb5-3,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26461 -CVE-2018-5709,LOW,libkrb5support0,1.20.1-2+deb12u2,krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c,"An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable ""dbentry->n_key_data"" in kadmin/dbutil/dump.c that can store 16...",7.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2018-5709 -CVE-2024-26458,LOW,libkrb5support0,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26458 -CVE-2024-26461,LOW,libkrb5support0,1.20.1-2+deb12u2,krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c,Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.,,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-26461 -CVE-2022-0563,LOW,libmount1,2.38.1-5+deb12u3,util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline,"A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an ""INPUTRC"" environment var...",5.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2022-0563 -CVE-2022-0563,LOW,libsmartcols1,2.38.1-5+deb12u3,util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline,"A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an ""INPUTRC"" environment var...",5.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2022-0563 -CVE-2021-45346,LOW,libsqlite3-0,3.40.1-2+deb12u1,sqlite: crafted SQL query allows a malicious user to obtain sensitive information,A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File...,4.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2021-45346 -CVE-2022-27943,LOW,libstdc++6,12.2.0-14,binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const,"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.",5.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2022-27943 -CVE-2023-4039,LOW,libstdc++6,12.2.0-14,gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64,"**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains -that target AArch64 allows an attacker to exploit an existing buffer -...",4.8,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-4039 -CVE-2013-4392,LOW,libsystemd0,252.33-1~deb12u1,systemd: TOCTOU race condition when updating file permissions and SELinux security contexts,"systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink ...",,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2013-4392 -CVE-2023-31437,LOW,libsystemd0,252.33-1~deb12u1,An issue was discovered in systemd 253. An attacker can modify a seale ...,"An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages ar...",5.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31437 -CVE-2023-31438,LOW,libsystemd0,252.33-1~deb12u1,An issue was discovered in systemd 253. An attacker can truncate a sea ...,An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows ...,5.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31438 -CVE-2023-31439,LOW,libsystemd0,252.33-1~deb12u1,An issue was discovered in systemd 253. An attacker can modify the con ...,An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that che...,5.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31439 -CVE-2013-4392,LOW,libudev1,252.33-1~deb12u1,systemd: TOCTOU race condition when updating file permissions and SELinux security contexts,"systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink ...",,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2013-4392 -CVE-2023-31437,LOW,libudev1,252.33-1~deb12u1,An issue was discovered in systemd 253. An attacker can modify a seale ...,"An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages ar...",5.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31437 -CVE-2023-31438,LOW,libudev1,252.33-1~deb12u1,An issue was discovered in systemd 253. An attacker can truncate a sea ...,An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows ...,5.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31438 -CVE-2023-31439,LOW,libudev1,252.33-1~deb12u1,An issue was discovered in systemd 253. An attacker can modify the con ...,An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that che...,5.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31439 -CVE-2022-0563,LOW,libuuid1,2.38.1-5+deb12u3,util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline,"A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an ""INPUTRC"" environment var...",5.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2022-0563 -CVE-2007-5686,LOW,login,1:4.13+dfsg1-1+b1,initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...,"initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding ...",,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2007-5686 -CVE-2023-29383,LOW,login,1:4.13+dfsg1-1+b1,shadow: Improper input validation in shadow-utils package utility chfn,"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible...",3.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-29383 -CVE-2024-56433,LOW,login,1:4.13+dfsg1-1+b1,shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise,"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) t...",,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-56433 -TEMP-0628843-DBAD28,LOW,login,1:4.13+dfsg1-1+b1,[more related to CVE-2005-4890],,,affected,python:3.9-slim (debian 12.9),https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 -CVE-2022-0563,LOW,mount,2.38.1-5+deb12u3,util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline,"A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an ""INPUTRC"" environment var...",5.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2022-0563 -CVE-2007-5686,LOW,passwd,1:4.13+dfsg1-1+b1,initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...,"initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding ...",,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2007-5686 -CVE-2023-29383,LOW,passwd,1:4.13+dfsg1-1+b1,shadow: Improper input validation in shadow-utils package utility chfn,"In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible...",3.3,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-29383 -CVE-2024-56433,LOW,passwd,1:4.13+dfsg1-1+b1,shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise,"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) t...",,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2024-56433 -TEMP-0628843-DBAD28,LOW,passwd,1:4.13+dfsg1-1+b1,[more related to CVE-2005-4890],,,affected,python:3.9-slim (debian 12.9),https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 -CVE-2023-31484,HIGH,perl-base,5.36.0-7+deb12u1,perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS,CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.,8.1,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31484 -CVE-2011-4116,LOW,perl-base,5.36.0-7+deb12u1,perl: File:: Temp insecure temporary file handling,_is_safe in the File::Temp module for Perl does not properly handle symlinks.,7.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2011-4116 -CVE-2023-31486,LOW,perl-base,5.36.0-7+deb12u1,http-tiny: insecure TLS cert default,"HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must ...",8.1,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-31486 -TEMP-0517018-A83CE6,LOW,sysvinit-utils,3.06-4,[sysvinit: no-root option in expert installer exposes locally exploitable security flaw],,,affected,python:3.9-slim (debian 12.9),https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 -CVE-2005-2541,LOW,tar,1.34+dfsg-1.2+deb12u1,tar: does not properly warn the user when extracting setuid or setgid files,"Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.",,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2005-2541 -TEMP-0290435-0B57B5,LOW,tar,1.34+dfsg-1.2+deb12u1,[tar's rmt command may have undesired side effects],,,affected,python:3.9-slim (debian 12.9),https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 -CVE-2022-0563,LOW,util-linux,2.38.1-5+deb12u3,util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline,"A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an ""INPUTRC"" environment var...",5.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2022-0563 -CVE-2022-0563,LOW,util-linux-extra,2.38.1-5+deb12u3,util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline,"A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an ""INPUTRC"" environment var...",5.5,affected,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2022-0563 -CVE-2023-45853,CRITICAL,zlib1g,1:1.2.13.dfsg-1,zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6,"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, ...",9.8,will_not_fix,python:3.9-slim (debian 12.9),https://avd.aquasec.com/nvd/cve-2023-45853 -CVE-2022-40897,HIGH,setuptools,58.1.0,pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py,Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custo...,5.9,fixed,Python,https://avd.aquasec.com/nvd/cve-2022-40897 -CVE-2024-6345,HIGH,setuptools,58.1.0,pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools,A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. Thes...,,fixed,Python,https://avd.aquasec.com/nvd/cve-2024-6345