Adding fixed events for confluent-common-docker (#4824)

* Adding Fixed Advisory CVE-2024-24787 for confluent-common-docker * Adding Fixed Advisory CVE-2024-24788 for confluent-common-docker --------- Co-authored-by: octo-sts[bot] <[email protected]>
wolfi-dev · May 16, 2024 · b94e3c5 · b94e3c5
1 parent 5858b1a
commit b94e3c5
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/confluent-common-docker.advisories.yaml b/confluent-common-docker.advisories.yaml
@@ -54,3 +54,21 @@ advisories:
         type: pending-upstream-fix
         data:
           note: Confluent should publish the latest version of common package to their maven repository. They do not have any jars/poms past 7.6.x but they have 7.7.x tags in their GitHub repository.
+
+  - id: CVE-2024-24787
+    aliases:
+      - GHSA-5fq7-4mxc-535h
+    events:
+      - timestamp: 2024-05-14T11:44:32Z
+        type: fixed
+        data:
+          fixed-version: 7.6.0-r5
+
+  - id: CVE-2024-24788
+    aliases:
+      - GHSA-2jwv-jmq4-4j3r
+    events:
+      - timestamp: 2024-05-14T11:44:33Z
+        type: fixed
+        data:
+          fixed-version: 7.6.0-r5