cilium-1.16.advisories.yaml

schema-version: 2.0.2

package:
  name: cilium-1.16

advisories:
  - id: CGA-3h33-xq7m-h74h
    aliases:
      - GHSA-xr7q-jx4m-x55m
    events:
      - timestamp: 2024-07-26T18:35:44Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cilium-1.16
            componentID: 4e4c469a0e233c79
            componentName: google.golang.org/grpc
            componentVersion: v1.64.0
            componentType: go-module
            componentLocation: /opt/cni/bin/cilium-cni
            scanner: grype
      - timestamp: 2024-07-26T21:20:08Z
        type: fixed
        data:
          fixed-version: 1.16.0-r1

  - id: CGA-5wgc-fxg3-g28q
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T21:09:12Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cilium-1.16
            componentID: d5dd83c778e6945a
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /opt/cni/bin/cilium-cni
            scanner: grype
      - timestamp: 2024-09-12T18:45:49Z
        type: fixed
        data:
          fixed-version: 1.16.1-r2

  - id: CGA-cmww-rq29-94hm
    aliases:
      - CVE-2024-42487
      - GHSA-qcm3-7879-xcww
    events:
      - timestamp: 2024-08-16T08:11:46Z
        type: fixed
        data:
          fixed-version: 1.16.1-r0

  - id: CGA-gvg7-8qjg-wphh
    aliases:
      - CVE-2024-42486
      - GHSA-vwf8-q6fw-4wcm
    events:
      - timestamp: 2024-08-17T07:12:01Z
        type: fixed
        data:
          fixed-version: 1.16.1-r0

  - id: CGA-mf67-jmvr-vcf2
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T21:09:17Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cilium-1.16
            componentID: d5dd83c778e6945a
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /opt/cni/bin/cilium-cni
            scanner: grype
      - timestamp: 2024-09-12T18:45:49Z
        type: fixed
        data:
          fixed-version: 1.16.1-r2

  - id: CGA-w2vm-ffx5-jprg
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T21:09:14Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: cilium-1.16
            componentID: d5dd83c778e6945a
            componentName: stdlib
            componentVersion: go1.23.0
            componentType: go-module
            componentLocation: /opt/cni/bin/cilium-cni
            scanner: grype
      - timestamp: 2024-09-12T18:45:50Z
        type: fixed
        data:
          fixed-version: 1.16.1-r2