From 1727f8552d0f0ac1210831bf8c18673cdeaef4c1 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Tue, 27 Sep 2022 07:55:25 +0200
Subject: Add CVE-2022-36944/scala

---
 data/CVE/list | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/data/CVE/list b/data/CVE/list
index 7f877ee432..f6b4b45c2e 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -11750,7 +11750,10 @@ CVE-2022-36946 (nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux ker
 CVE-2022-36945 (The Remote Keyless Entry (RKE) receiving unit on certain Mazda vehicle ...)
 	NOT-FOR-US: Remote Keyless Entry (RKE) receiving unit on Mazda vehicles
 CVE-2022-36944 (Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR ...)
-	TODO: check
+	- scala <undetermined>
+	NOTE: https://github.com/scala/scala/pull/10118
+	NOTE: https://github.com/scala/scala/commit/f24c226211eb340c999d810013efbff35a49863f (v2.13.9)
+	TODO: check, check might be 2.13.x specific
 CVE-2022-36797
 	RESERVED
 CVE-2022-36794
-- 
cgit v1.2.3