Adding Advisory GHSA-xw73-rw38-6vjc for k3d (#3198)

Co-authored-by: octo-sts[bot] <101908552+octo-sts@users.noreply.github.com>
wolfi-dev · Mar 22, 2024 · d0dc7c6 · d0dc7c6
1 parent 41dc8c7
commit d0dc7c6
Showing 1 changed file with 38 additions and 19 deletions.
diff --git a/k3d.advisories.yaml b/k3d.advisories.yaml
@@ -998,6 +998,23 @@ advisories:
         data:
           fixed-version: 5.6.0-r6
 
+  - id: CVE-2024-24557
+    aliases:
+      - GHSA-xw73-rw38-6vjc
+    events:
+      - timestamp: 2024-03-22T07:06:05Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: k3d
+            componentID: 22f44d686d875f84
+            componentName: github.com/docker/docker
+            componentVersion: v24.0.7+incompatible
+            componentType: go-module
+            componentLocation: /usr/bin/k3d
+            scanner: grype
+
   - id: CVE-2024-24783
     aliases:
       - GHSA-3q2c-pvp5-3cqp
@@ -1025,6 +1042,27 @@ advisories:
         data:
           fixed-version: 5.6.0-r7
 
+  - id: CVE-2024-24786
+    aliases:
+      - GHSA-8r3f-844c-mc37
+    events:
+      - timestamp: 2024-03-14T07:08:28Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: k3d
+            componentID: 6ae545edc2d9ee4a
+            componentName: google.golang.org/protobuf
+            componentVersion: v1.31.0
+            componentType: go-module
+            componentLocation: /usr/bin/k3d
+            scanner: grype
+      - timestamp: 2024-03-16T20:28:53Z
+        type: fixed
+        data:
+          fixed-version: 5.6.0-r8
+
   - id: GHSA-76wf-9vgp-pj7w
     events:
       - timestamp: 2024-02-17T17:00:05Z
@@ -1059,25 +1097,6 @@ advisories:
         data:
           fixed-version: 5.6.0-r6
 
-  - id: GHSA-8r3f-844c-mc37
-    events:
-      - timestamp: 2024-03-14T07:08:28Z
-        type: detection
-        data:
-          type: scan/v1
-          data:
-            subpackageName: k3d
-            componentID: 6ae545edc2d9ee4a
-            componentName: google.golang.org/protobuf
-            componentVersion: v1.31.0
-            componentType: go-module
-            componentLocation: /usr/bin/k3d
-            scanner: grype
-      - timestamp: 2024-03-16T20:28:53Z
-        type: fixed
-        data:
-          fixed-version: 5.6.0-r8
-
   - id: GHSA-jq35-85cj-fj4p
     events:
       - timestamp: 2024-02-14T12:26:39Z