advisories/aws-flb-firehose.advisories.yaml at main · wolfi-dev/advisories · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
schema-version: 2.0.2

package:
  name: aws-flb-firehose

advisories:
  - id: CGA-2cvx-9qj3-23p9
    aliases:
      - CVE-2024-24790
      - GHSA-49gw-vxvf-fc2g
    events:
      - timestamp: 2024-06-07T10:35:36Z
        type: fixed
        data:
          fixed-version: 1.7.2-r11

  - id: CGA-3xc4-2pp3-7wqg
    aliases:
      - CVE-2023-45290
      - GHSA-rr6r-cfgf-gc6h
    events:
      - timestamp: 2024-03-12T07:10:46Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-6ggv-6wm3-qm7x
    aliases:
      - CVE-2025-22874
      - GHSA-6f52-wpx2-hvf2
    events:
      - timestamp: 2025-06-14T09:03:07Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: 5bff2a6ac271cc38
            componentName: stdlib
            componentVersion: go1.24.2
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2025-06-14T13:15:37Z
        type: fixed
        data:
          fixed-version: 1.7.2-r17

  - id: CGA-6qxq-3vqg-83pj
    aliases:
      - CVE-2024-45341
      - GHSA-3f6r-qh9c-x6mm
    events:
      - timestamp: 2025-01-31T14:39:39Z
        type: fixed
        data:
          fixed-version: 1.7.2-r14

  - id: CGA-6v6x-qqqp-wc85
    aliases:
      - CVE-2024-45336
      - GHSA-7wrw-r4p8-38rx
    events:
      - timestamp: 2025-01-31T14:39:35Z
        type: fixed
        data:
          fixed-version: 1.7.2-r14

  - id: CGA-7gcx-5vhp-fpv6
    aliases:
      - CVE-2024-24784
      - GHSA-fgq5-q76c-gx78
    events:
      - timestamp: 2024-03-12T07:10:48Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-7mmp-m5pp-wpgg
    aliases:
      - CVE-2023-45283
      - GHSA-vvjp-q62m-2vph
    events:
      - timestamp: 2023-11-07T19:23:28Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows

  - id: CGA-8342-42x5-92fr
    aliases:
      - CVE-2023-45289
      - GHSA-32ch-6x54-q4h9
    events:
      - timestamp: 2024-03-12T07:10:46Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-8rfv-vvvp-qr26
    aliases:
      - CVE-2025-47907
      - GHSA-j5pm-7495-qmr3
    events:
      - timestamp: 2025-08-09T21:38:32Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: 8c12ad4cc362e7dc
            componentName: stdlib
            componentVersion: go1.24.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2025-08-10T09:41:38Z
        type: true-positive-determination
        data:
          note: 'Govulncheck found vulnerable symbols in Go binaries at the following locations: in aws-flb-firehose-1.7.2-r18.apk, at usr/bin/firehose.so, usr/bin/firehose.so.'
      - timestamp: 2025-08-10T14:12:31Z
        type: fixed
        data:
          fixed-version: 1.7.2-r19

  - id: CGA-c4mw-gwmr-54wg
    aliases:
      - CVE-2025-22866
      - GHSA-3whm-j4xm-rv8x
    events:
      - timestamp: 2025-02-08T19:20:51Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: 027e1cfe9bd84f34
            componentName: stdlib
            componentVersion: go1.23.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2025-02-09T12:31:24Z
        type: fixed
        data:
          fixed-version: 1.7.2-r15

  - id: CGA-f65v-32rh-89jq
    aliases:
      - CVE-2025-4673
      - GHSA-62jj-gr2r-5c34
    events:
      - timestamp: 2025-06-14T09:03:08Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: 5bff2a6ac271cc38
            componentName: stdlib
            componentVersion: go1.24.2
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2025-06-14T13:15:38Z
        type: fixed
        data:
          fixed-version: 1.7.2-r17

  - id: CGA-fc6m-h685-4ccp
    aliases:
      - CVE-2024-24791
      - GHSA-hw49-2p59-3mhj
    events:
      - timestamp: 2024-07-04T07:05:45Z
        type: fixed
        data:
          fixed-version: 1.7.2-r12

  - id: CGA-g29c-gw92-j79r
    aliases:
      - CVE-2023-39326
      - GHSA-9f76-wg39-x86h
    events:
      - timestamp: 2023-12-18T15:43:55Z
        type: fixed
        data:
          fixed-version: 1.7.2-r6

  - id: CGA-gg6q-qxqc-c5gv
    aliases:
      - CVE-2023-45285
      - GHSA-5f94-vhjq-rpg8
    events:
      - timestamp: 2023-12-18T15:43:18Z
        type: fixed
        data:
          fixed-version: 1.7.2-r6

  - id: CGA-gmvf-6ppc-8vhp
    aliases:
      - CVE-2024-34156
      - GHSA-crqm-pwhx-j97f
    events:
      - timestamp: 2024-09-10T07:04:10Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: af85ced8499bc64d
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2024-09-12T19:06:21Z
        type: fixed
        data:
          fixed-version: 1.7.2-r13

  - id: CGA-gmww-rfv5-qr97
    aliases:
      - CVE-2025-65637
      - GHSA-4f99-4q7p-p3gh
    events:
      - timestamp: 2025-12-06T11:18:24Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: f86b9f110b926d29
            componentName: github.com/sirupsen/logrus
            componentVersion: v1.9.0
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2025-12-07T17:24:53Z
        type: fixed
        data:
          fixed-version: 1.7.2-r22

  - id: CGA-h557-wgwm-5v93
    aliases:
      - CVE-2024-24785
      - GHSA-j6m3-gc37-6r6q
    events:
      - timestamp: 2024-03-12T07:10:49Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-hfwm-9px4-qhw4
    aliases:
      - CVE-2024-24783
      - GHSA-3q2c-pvp5-3cqp
    events:
      - timestamp: 2024-03-12T07:10:47Z
        type: fixed
        data:
          fixed-version: 1.7.2-r7

  - id: CGA-m3mx-2rxc-fc5v
    aliases:
      - CVE-2024-34158
      - GHSA-j7vj-rw65-4v26
    events:
      - timestamp: 2024-09-10T07:04:14Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: af85ced8499bc64d
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2024-09-12T19:06:22Z
        type: fixed
        data:
          fixed-version: 1.7.2-r13

  - id: CGA-v8m4-9prr-r3g6
    aliases:
      - CVE-2025-22871
      - GHSA-g9pc-8g42-g6vq
    events:
      - timestamp: 2025-04-10T08:31:50Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: b993e5a54681f7b9
            componentName: stdlib
            componentVersion: go1.23.6
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2025-04-10T14:19:32Z
        type: fixed
        data:
          fixed-version: 1.7.2-r16

  - id: CGA-vf4w-5vcf-f4m7
    aliases:
      - CVE-2024-34155
      - GHSA-8xfx-rj4p-23jm
    events:
      - timestamp: 2024-09-10T07:04:06Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: aws-flb-firehose
            componentID: af85ced8499bc64d
            componentName: stdlib
            componentVersion: go1.22.5
            componentType: go-module
            componentLocation: /usr/bin/firehose.so
            scanner: grype
      - timestamp: 2024-09-12T19:06:22Z
        type: fixed
        data:
          fixed-version: 1.7.2-r13

  - id: CGA-wcpf-22vc-qp72
    aliases:
      - CVE-2024-24789
      - GHSA-236w-p7wf-5ph8
    events:
      - timestamp: 2024-06-07T10:35:39Z
        type: fixed
        data:
          fixed-version: 1.7.2-r11

  - id: CGA-wgrp-cx25-p993
    aliases:
      - CVE-2023-45288
      - GHSA-4v7x-pqxf-cx7m
    events:
      - timestamp: 2024-04-13T07:05:53Z
        type: fixed
        data:
          fixed-version: 1.7.2-r8

  - id: CGA-ww4f-3cgm-8g2r
    aliases:
      - CVE-2023-45284
      - GHSA-rq3x-83w4-p28c
    events:
      - timestamp: 2023-11-07T19:23:29Z
        type: false-positive-determination
        data:
          type: vulnerable-code-not-included-in-package
          note: Only affects Windows