[Git][security-tracker-team/security-tracker][master] Add CVE-2022-22967/salt

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
735a4594 by Salvatore Bonaccorso at 2022-06-23T22:46:35+02:00
Add CVE-2022-22967/salt

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -33217,7 +33217,8 @@ CVE-2022-22968 (In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and
 	[stretch] - libspring-java <end-of-life> (EOL'd for stretch)
 	NOTE: https://tanzu.vmware.com/security/cve-2022-22968
 CVE-2022-22967 (An issue was discovered in SaltStack Salt in versions before 3002.9, 3 ...)
-	TODO: check
+	- salt <unfixed>
+	NOTE: https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/
 CVE-2022-22966 (An authenticated, high privileged malicious actor with network access  ...)
 	NOT-FOR-US: VMware
 CVE-2022-22965 (A Spring MVC or Spring WebFlux application running on JDK 9+ may be vu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/735a45946c033c4e64c97a907b3be15c6720e1bb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/735a45946c033c4e64c97a907b3be15c6720e1bb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220623/9e52f803/attachment.htm>