Adding detection events for chromium (#6077)

* Adding Advisory CVE-2024-6290 for chromium * Adding Advisory CVE-2024-6291 for chromium * Adding Advisory CVE-2024-6292 for chromium * Adding Advisory CVE-2024-6293 for chromium --------- Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>
wolfi-dev · Jun 26, 2024 · 7edb5c5 · 7edb5c5
1 parent 4c460b0
commit 7edb5c5
Showing 1 changed file with 72 additions and 0 deletions.
diff --git a/chromium.advisories.yaml b/chromium.advisories.yaml
@@ -276,6 +276,24 @@ advisories:
         data:
           fixed-version: 126.0.6478.55-r0
 
+  - id: CGA-5qhg-vc7w-x37h
+    aliases:
+      - CVE-2024-6292
+      - GHSA-m848-8f5r-6j4g
+    events:
+      - timestamp: 2024-06-26T07:06:09Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: chromium
+            componentID: c82dbd4243c67a8d
+            componentName: chromium
+            componentVersion: 126.0.6478.114-r0
+            componentType: apk
+            componentLocation: /.PKGINFO
+            scanner: grype
+
   - id: CGA-5qp4-hhj8-fhmv
     aliases:
       - CVE-2024-4060
@@ -878,6 +896,24 @@ advisories:
           type: vulnerable-code-version-not-used
           note: This vulnerability has been resolved around ~2010 and does't apply to the chromium version in Wolfi.
 
+  - id: CGA-m5vh-2hg7-wmrr
+    aliases:
+      - CVE-2024-6293
+      - GHSA-9f8f-453p-rg87
+    events:
+      - timestamp: 2024-06-26T07:06:35Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: chromium
+            componentID: c82dbd4243c67a8d
+            componentName: chromium
+            componentVersion: 126.0.6478.114-r0
+            componentType: apk
+            componentLocation: /.PKGINFO
+            scanner: grype
+
   - id: CGA-mg9g-rjg9-2mxr
     aliases:
       - CVE-2013-6647
@@ -911,6 +947,24 @@ advisories:
         data:
           fixed-version: 124.0.6367.60-r0
 
+  - id: CGA-mvc3-2qqx-hh7q
+    aliases:
+      - CVE-2024-6291
+      - GHSA-rpvg-h6p6-42qj
+    events:
+      - timestamp: 2024-06-26T07:05:44Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: chromium
+            componentID: c82dbd4243c67a8d
+            componentName: chromium
+            componentVersion: 126.0.6478.114-r0
+            componentType: apk
+            componentLocation: /.PKGINFO
+            scanner: grype
+
   - id: CGA-p4f8-3x34-vpqp
     aliases:
       - CVE-2024-5846
@@ -1060,6 +1114,24 @@ advisories:
         data:
           fixed-version: 125.0.6422.141-r0
 
+  - id: CGA-r686-652q-2qxp
+    aliases:
+      - CVE-2024-6290
+      - GHSA-r5mh-qgc2-26p2
+    events:
+      - timestamp: 2024-06-26T07:05:18Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: chromium
+            componentID: c82dbd4243c67a8d
+            componentName: chromium
+            componentVersion: 126.0.6478.114-r0
+            componentType: apk
+            componentLocation: /.PKGINFO
+            scanner: grype
+
   - id: CGA-rjwc-gq97-q2qp
     aliases:
       - CVE-2024-3833