Two risks found in image oneagent deployed with dynatrace-operator

[kapsonic]

We use a CVE scanner to scan all the images of our environment.
For oneagent with tag latest, we found two CVE reported on date 14 Oct 24.

• CVE-2024-48958: execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
• CVE-2024-48957: execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

Is the component impacted by these CVEs?
Are there any fix available or any recommendation for these.

[github-actions]

Thank you for opening a Dynatrace Operator Issue. We've identified and tagged the issue as a "Support request".

Dynatrace responds to requests like these via Dynatrace ONE support rather than Github. This helps our team respond as quickly as possible using the support team's tools and procedures.

Thanks for your help!