[Git][security-tracker-team/security-tracker][master] Add CVE-2022-29599/maven-shared-utils

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cc2459bc by Salvatore Bonaccorso at 2022-06-01T08:31:39+02:00
Add CVE-2022-29599/maven-shared-utils

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7079,7 +7079,10 @@ CVE-2019-25059 (Artifex Ghostscript through 9.26 mishandles .completefont. NOTE:
 	NOTE: Fixed by: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=430e219ea17a2650577d70021399c4ead05869e0
 	NOTE: Issue exists because of an incomplete fix for CVE-2019-3839
 CVE-2022-29599 (In Apache Maven maven-shared-utils prior to version 3.3.3, the Command ...)
-	TODO: check
+	- maven-shared-utils <unfixed>
+	NOTE: https://github.com/apache/maven-shared-utils/pull/40
+	NOTE: https://issues.apache.org/jira/browse/MSHARED-297
+	NOTE: https://github.com/apache/maven-shared-utils/commit/f751e614c09df8de1a080dc1153931f3f68991c9 (maven-shared-utils-3.3.1)
 CVE-2022-1450
 	RESERVED
 CVE-2022-1449



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc2459bc89610e5455008c792222a01eb6e55676

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc2459bc89610e5455008c792222a01eb6e55676
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220601/522721a9/attachment.htm>