Openssl-1.1.1f-1ubuntu2.24 in ELK docker container with critical vulnerability

According to Dependency Track, the Elasticsearch container contains vulnerabilities in openssl-1.1.1f-1ubuntu2.24 ( CVE-2022-1292 per example).
Version 8.17.3 is deployed which should be the latest version.

Welcome!

Thank you for your report.

Elastic's security reporting guidelines are available at Security issues | Elastic.

Per those guidelines, all reports of potential security issues or vulnerabilities should be sent via email to security@elastic.co.

We are unable to discuss potential issues of this nature here. Please send your report to the email address above, where it can be appropriately handled.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.