From 870c83be86eca5ee7f869ee0e3c48890ea1fd682 Mon Sep 17 00:00:00 2001
From: Neil Williams <codehelp@debian.org>
Date: Tue, 25 Jan 2022 11:09:41 +0000
Subject: Add CVE-2021-22060 to libspring-java as follow-up to CVE-2021-22096

---
 data/CVE/list.2021 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/data/CVE/list.2021 b/data/CVE/list.2021
index 6260236a77..494f4bf4ad 100644
--- a/data/CVE/list.2021
+++ b/data/CVE/list.2021
@@ -59648,7 +59648,9 @@ CVE-2021-22062
 CVE-2021-22061
 	RESERVED
 CVE-2021-22060 (In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older ...)
-	TODO: check
+	- libspring-java <unfixed>
+	NOTE: follow-up to CVE-2021-22096
+	NOTE: https://tanzu.vmware.com/security/cve-2021-22060
 CVE-2021-22059
 	RESERVED
 CVE-2021-22058
-- 
cgit v1.2.3