Vulnerability Reportrust:1.98.0-bookworm

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could achieve arbitrary code execution or crash services by exploiting image parser flaws such as CVE-2023-5841 if downstream applications process untrusted OpenEXR files, while CVE-2019-1010023 can lead to code execution only when ldd is run on a malicious ELF. Avoiding ldd on untrusted ELF files fully eliminates the practical risk from CVE-2019-1010023. The image is otherwise from an official, digest-pinned publisher, and its post-exploit-only findings remain below severity 6.0, so the main action is to rebuild downstream images after updating the affected packages. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.