[Git][security-tracker-team/security-tracker][master] CVE-2022-33980/commons-configuration2 n/a on buster

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fd6b8c8a by Emilio Pozuelo Monfort at 2022-09-27T13:41:11+02:00
CVE-2022-33980/commons-configuration2 n/a on buster

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19720,6 +19720,7 @@ CVE-2022-33981 (drivers/block/floppy.c in the Linux kernel before 5.17.6 is vuln
 	NOTE: https://git.kernel.org/linus/233087ca063686964a53c829d547c7571e3f67bf (5.18-rc5)
 CVE-2022-33980 (Apache Commons Configuration performs variable interpolation, allowing ...)
 	- commons-configuration2 2.8.0-1 (bug #1014960)
+	[buster] - commons-configuration2 <not-affected> (Vulnerable code introduced later)
 	NOTE: https://www.openwall.com/lists/oss-security/2022/07/06/5
 CVE-2022-2129 (Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. ...)
 	- vim 2:9.0.0135-1 (bug #1015984)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd6b8c8a2dbc33cf0fe383e39fd48e46108b706c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd6b8c8a2dbc33cf0fe383e39fd48e46108b706c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220927/01cbb874/attachment.htm>