calico-3.29.advisories.yaml

schema-version: 2.0.2

package:
  name: calico-3.29

advisories:
  - id: CGA-fhcp-8jp5-pcrj
    aliases:
      - CVE-2024-45341
      - GHSA-3f6r-qh9c-x6mm
    events:
      - timestamp: 2025-01-31T07:32:33Z
        type: fixed
        data:
          fixed-version: 3.29.1-r4

  - id: CGA-j268-jww5-frf7
    aliases:
      - CVE-2025-22866
      - GHSA-3whm-j4xm-rv8x
    events:
      - timestamp: 2025-02-08T07:22:31Z
        type: fixed
        data:
          fixed-version: 3.29.2-r0

  - id: CGA-q5mr-jvrm-h5x8
    aliases:
      - CVE-2024-45338
      - GHSA-w32m-9786-jp63
    events:
      - timestamp: 2024-12-19T19:45:28Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: calico-3.29
            componentID: 88e9a2830417a92d
            componentName: golang.org/x/net
            componentVersion: v0.26.0
            componentType: go-module
            componentLocation: /bin/calico-node
            scanner: grype
      - timestamp: 2024-12-20T17:10:43Z
        type: fixed
        data:
          fixed-version: 3.29.1-r2

  - id: CGA-qx9g-2jr3-8gjm
    aliases:
      - CVE-2024-45337
      - GHSA-v778-237x-gjrc
    events:
      - timestamp: 2024-12-12T09:14:34Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: calico-3.29
            componentID: a18e17a834d612f2
            componentName: golang.org/x/crypto
            componentVersion: v0.17.0
            componentType: go-module
            componentLocation: /bin/calico-node
            scanner: grype
      - timestamp: 2024-12-14T21:10:09Z
        type: fixed
        data:
          fixed-version: 3.29.1-r1

  - id: CGA-vjjw-m7x6-96cm
    aliases:
      - CVE-2024-45336
      - GHSA-7wrw-r4p8-38rx
    events:
      - timestamp: 2025-01-31T07:32:34Z
        type: fixed
        data:
          fixed-version: 3.29.1-r4