[Git][security-tracker-team/security-tracker][master] Add CVE-2022-46146/golang-github-prometheus-exporter-toolkit

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b3ae04cd by Salvatore Bonaccorso at 2022-11-29T21:16:01+01:00
Add CVE-2022-46146/golang-github-prometheus-exporter-toolkit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -452,7 +452,10 @@ CVE-2022-46148 (Discourse is an open-source messaging platform. In versions 2.8.
 CVE-2022-46147 (Drag and Drop XBlock v2 implements a drag-and-drop style problem, wher ...)
 	TODO: check
 CVE-2022-46146 (Prometheus Exporter Toolkit is a utility package to build exporters. P ...)
-	TODO: check
+	- golang-github-prometheus-exporter-toolkit <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/11/29/1
+	NOTE: https://github.com/prometheus/exporter-toolkit/security/advisories/GHSA-7rg2-cxvp-9p7p
+	NOTE: https://github.com/prometheus/exporter-toolkit/commit/5b1eab34484ddd353986bce736cd119d863e4ff5 (v0.8.2)
 CVE-2022-46145
 	RESERVED
 CVE-2022-46144



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3ae04cd11cffd44a05d8be17080bd3daa801f75

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3ae04cd11cffd44a05d8be17080bd3daa801f75
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221129/cd88453d/attachment.htm>