Updates for vulnerabilities in V1.16.0

[neu7ron2]

Hi Team,
Our SentinelOne scanner is showing a number of vulnerabilities in components on the SMB container images, do you know when a new version will address the following vulnerabilities?

• tar 1.15.1 - CVE-2005-2541
• libexpat1 - CVE-2024-45490
• libc-bin, libc6 - CVE-2019-1010022
• zlib1g - CVE-2023-45853
• openssl-libs, openssl, libssl3 - CVE-2024-5535
• cifs-utils - CVE-2014-2830
• libpython3.11-minimal, python3.11-minimal, python3.11,libpython3.11-stdlib - CVE-2024-7592
• libgcrypt20 -CVE-2018-6829

Upgrading them to the latest version will most likely sort out all the vulnerabilities.

Thanks

[neu7ron2]

Thanks, a number of the vulnerabilities were fixed in V1.17 including:

• libexpat1 - CVE-2024-45490 - Fixed
• openssl-libs, openssl, libssl3 - CVE-2024-5535 - Fixed
• libpython3.11-minimal, python3.11-minimal, python3.11,libpython3.11-stdlib - CVE-2024-7592 - Fixed
• tar 1.15.1 - CVE-2005-2541 - No fix in the industry, seen as a low risk.