re-append the pending-upstream-fix events (#5152)

Signed-off-by: hectorj2f <hector@chainguard.dev>
wolfi-dev · Jun 4, 2024 · 5a5e8a8 · 5a5e8a8
1 parent a64d635
commit 5a5e8a8
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/jenkins.advisories.yaml b/jenkins.advisories.yaml
@@ -41,6 +41,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-38pq-3m5v-j985
     aliases:
@@ -168,6 +172,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-cm9w-hfx3-j2p6
     aliases:
@@ -258,6 +266,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-j5h3-f4x4-8725
     aliases:
@@ -296,6 +308,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-jvx2-3xj2-cqqv
     aliases: