[Git][security-tracker-team/security-tracker][master] Add CVE-2022-23959/varnish

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jan 26 08:35:07 GMT 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
24892cd2 by Salvatore Bonaccorso at 2022-01-26T09:34:53+01:00
Add CVE-2022-23959/varnish

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27,7 +27,11 @@ CVE-2022-23961
 CVE-2022-23960
 	RESERVED
 CVE-2022-23959 (In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0  ...)
-	TODO: check
+	- varnish <unfixed>
+	NOTE: https://varnish-cache.org/security/VSV00008.html
+	NOTE: https://docs.varnish-software.com/security/VSV00008/
+	NOTE: Fixed by: https://github.com/varnishcache/varnish-cache/commit/fceaefd4d59a3b5d5a4903a3f420e35eb430d0d4 (master)
+	NOTE: Fixed by: https://github.com/varnishcache/varnish-cache/commit/9ed39d1f796369caafb647fe37b729c07f332327 (6.6.2)
 CVE-2022-23958
 	RESERVED
 CVE-2022-23957



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/24892cd2484f4b4753671ad2d38bea0947f97223

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/24892cd2484f4b4753671ad2d38bea0947f97223
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220126/f1815c9d/attachment.htm>


More information about the debian-security-tracker-commits mailing list