Bug #21263
closed
Ignore CVE CVE-2022-22978 that will not be fixed in 6.1/6.2 dependencies
Added by Vincent MEMBRÉ about 2 years ago.
Updated about 1 year ago.
Description
CVE CVE-2022-22978 affecting spring-security will not be fixed in 5.3 branch used in 6.1/6.2, we should ignore it
- Status changed from New to In progress
- Assignee set to Vincent MEMBRÉ
- Assignee changed from Vincent MEMBRÉ to François ARMAND
- Pull Request set to https://github.com/Normation/rudder/pull/4326
- Status changed from In progress to Pending release
- Fix check changed from To do to Checked
- Status changed from Pending release to Released
This bug has been fixed in Rudder 6.1.21 and 6.2.15 which were released today.
- Private changed from Yes to No
Also available in: Atom
PDF