[Git][security-tracker-team/security-tracker][master] Update upstream information on CVE-2022-23630

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Feb 14 19:10:21 GMT 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
555b05b7 by Salvatore Bonaccorso at 2022-02-14T20:09:50+01:00
Update upstream information on CVE-2022-23630

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4667,9 +4667,9 @@ CVE-2022-23632
 CVE-2022-23631 (superjson is a program to allow JavaScript expressions to be serialize ...)
 	TODO: check
 CVE-2022-23630 (Gradle is a build tool with a focus on build automation and support fo ...)
-	- gradle <not-affected> (Vulnerable node not yet uploaded)
-	NOTE: https://docs.gradle.org/7.4/release-notes.html
-	NOTE: https://github.com/gradle/gradle/commit/88ab9b652933bc3b2e3161b31ad8b8f4f0516351 (7.4.0)
+	- gradle <not-affected> (Vulnerable node not yet uploaded; introduced in 6.2)
+	NOTE: https://github.com/gradle/gradle/security/advisories/GHSA-9pf5-88jw-3qgr
+	NOTE: https://github.com/gradle/gradle/commit/88ab9b652933bc3b2e3161b31ad8b8f4f0516351 (v7.4.0-RC2)
 CVE-2022-23629
 	RESERVED
 CVE-2022-23628 (OPA is an open source, general-purpose policy engine. Under certain co ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/555b05b776af5c92de69d4b048401c12e180c478

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/555b05b776af5c92de69d4b048401c12e180c478
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220214/536420fc/attachment.htm>


More information about the debian-security-tracker-commits mailing list