From 274910621ea6b81468efb446157e149b1f536647 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Wed, 26 Jan 2022 09:34:28 +0100
Subject: Add CVE-2022-23959/varnish

---
 data/CVE/2022.list | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/data/CVE/2022.list b/data/CVE/2022.list
index a42f4dcf62..90b2f3b46d 100644
--- a/data/CVE/2022.list
+++ b/data/CVE/2022.list
@@ -27,7 +27,11 @@ CVE-2022-23961
 CVE-2022-23960
 	RESERVED
 CVE-2022-23959 (In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0  ...)
-	TODO: check
+	- varnish <unfixed>
+	NOTE: https://varnish-cache.org/security/VSV00008.html
+	NOTE: https://docs.varnish-software.com/security/VSV00008/
+	NOTE: Fixed by: https://github.com/varnishcache/varnish-cache/commit/fceaefd4d59a3b5d5a4903a3f420e35eb430d0d4 (master)
+	NOTE: Fixed by: https://github.com/varnishcache/varnish-cache/commit/9ed39d1f796369caafb647fe37b729c07f332327 (6.6.2)
 CVE-2022-23958
 	RESERVED
 CVE-2022-23957
-- 
cgit v1.2.3