x/vulndb: potential Go vuln in github.com/snapcore/snapd: GHSA-cjqf-877p-7m3f

[GoVulnBot]

In GitHub Security Advisory GHSA-cjqf-877p-7m3f, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/snapcore/snapd	2.57.6	< 2.57.6

Cross references:

• Module github.com/snapcore/snapd appears in issue x/vulndb: potential Go vuln in github.com/snapcore/snapd: CVE-2023-1523 #2034 EFFECTIVELY_PRIVATE
• Module github.com/snapcore/snapd appears in issue x/vulndb: potential Go vuln in github.com/snapcore/snapd: CVE-2017-14178 #2198 LEGACY_FALSE_POSITIVE
• Module github.com/snapcore/snapd appears in issue x/vulndb: potential Go vuln in github.com/snapcore/snapd: CVE-2019-11503 #2233 LEGACY_FALSE_POSITIVE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/snapcore/snapd
      versions:
        - fixed: 2.57.6
      packages:
        - package: github.com/snapcore/snapd
summary: snapd Race Condition vulnerability
cves:
    - CVE-2022-3328
ghsas:
    - GHSA-cjqf-877p-7m3f
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2022-3328
    - web: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328
    - web: https://ubuntu.com/security/notices/USN-5753-1
    - fix: https://github.com/snapcore/snapd/pull/12380
    - fix: https://github.com/snapcore/snapd/commit/21ebc51f00b8a1417888faa2e83a372fd29d0f5e
    - fix: https://github.com/snapcore/snapd/commit/6226cdc57052f4b7057d92f2e549aa169e35cd2d
    - advisory: https://github.com/advisories/GHSA-cjqf-877p-7m3f

[gopherbot]

Change https://go.dev/cl/582535 mentions this issue: data/reports: batch add unreviewed reports

[gopherbot]

Change https://go.dev/cl/590278 mentions this issue: data/reports: add 48 unreviewed reports