[Git][security-tracker-team/security-tracker][master] CVE-2022-22967/salt: add fixing commit

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
58e969c4 by Emilio Pozuelo Monfort at 2023-03-06T13:35:57+01:00
CVE-2022-22967/salt: add fixing commit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -92743,6 +92743,7 @@ CVE-2022-22968 (In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and
 CVE-2022-22967 (An issue was discovered in SaltStack Salt in versions before 3002.9, 3 ...)
 	- salt <unfixed> (bug #1013872)
 	NOTE: https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/
+	NOTE: Fixed by: https://github.com/saltstack/salt/commit/e068a34ccb2e17ae7224f8016a24b727f726d4c8 (v3004.2)
 CVE-2022-22966 (An authenticated, high privileged malicious actor with network access  ...)
 	NOT-FOR-US: VMware
 CVE-2022-22965 (A Spring MVC or Spring WebFlux application running on JDK 9+ may be vu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58e969c44270d4e5e70d77fe9757639c7f9feb5a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58e969c44270d4e5e70d77fe9757639c7f9feb5a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230306/94395f5a/attachment.htm>