Critical security vulnerabilities in container image

[porscheme]

Please check the FAQ documentation before raising an issue

Describe the bug (required)
Nebula Version: v.3.2.0
Critical security vulnerabilities in container images detected. Please upgrade the effected components.

Scanning graphd, storaged and metad container images revealed critical security vulnerabilities in below components.

 Name: nss, Version: 3.53.1
      CVE-2021-43527, Severity: CRITICAL, Source: https://access.redhat.com/errata/RHSA-2021:4904
            Fixed version: 3.67.0-4.el7_9

 Name: nss-sysinit, Version: 3.53.1
        Failed policy: Default vulnerabilities policy
        CVE-2021-43527, Severity: CRITICAL, Source: https://access.redhat.com/errata/RHSA-2021:4904
            Fixed version: 3.67.0-4.el7_9

    Name: nss-tools, Version: 3.53.1
        Failed policy: Default vulnerabilities policy
        CVE-2021-43527, Severity: CRITICAL, Source: https://access.redhat.com/errata/RHSA-2021:4904
            Fixed version: 3.67.0-4.el7_9

@wey-gu

[wey-gu]

cc @Sophie-Xie

[wey-gu]

Maybe we should have a label for security/CVE/vulnerabilities?

[porscheme]

In addition to above CTIRICAL, can please also fix below HIGH security vulnerabilities?
I'm happy scan private build.
If you provide proper notes, I'm can build the container with upgraded packages!
Can we have a Zoom session?

Name: gzip, Version: 1.5
        CVE-2022-1271, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:2191
            Fixed version: 1.5-11.el7_9

Name: glib2, Version: 2.56.1
        CVE-2016-3191, Severity: HIGH, Source: https://access.redhat.com/security/cve/CVE-2016-3191
        CVE-2015-8385, Severity: HIGH, Source: https://access.redhat.com/security/cve/CVE-2015-8385
        CVE-2021-27219, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2021:2147
            Fixed version: 2.56.1-9.el7_9

Name: systemd, Version: 219
        CVE-2022-2526, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:6160
            Fixed version: 219-78.el7_9.7

Name: systemd-libs, Version: 219
        CVE-2022-2526, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:6160
            Fixed version: 219-78.el7_9.7

Name: xz, Version: 5.2.2
        CVE-2022-1271, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:5052
            Fixed version: 5.2.2-2.el7_9

Name: expat, Version: 2.1.0
        CVE-2022-25235, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:1069
            Fixed version: 2.1.0-14.el7_9
        CVE-2022-25236, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:1069
            Fixed version: 2.1.0-14.el7_9
        CVE-2022-25315, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:1069
            Fixed version: 2.1.0-14.el7_9
        CVE-2022-40674, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:6834
            Fixed version: 2.1.0-15.el7_9

Name: bind-license, Version: 9.11.4
        CVE-2022-38178, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:6765
            Fixed version: 32:9.11.4-26.P2.el7_9.10
        CVE-2020-8625, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2021:0671
            Fixed version: 32:9.11.4-26.P2.el7_9.4
        CVE-2021-25215, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2021:1469
            Fixed version: 32:9.11.4-26.P2.el7_9.5
        CVE-2022-38177, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:6765
            Fixed version: 32:9.11.4-26.P2.el7_9.10

Name: openssl-libs, Version: 1.0.2k
        CVE-2020-1971, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2020:5566
            Fixed version: 1:1.0.2k-21.el7_9
        CVE-2022-0778, Severity: HIGH, Source: https://access.redhat.com/errata/RHSA-2022:1066
            Fixed version: 1:1.0.2k-25.el7_9