[Git][security-tracker-team/security-tracker][master] NFU

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fdd0407e by Moritz Muehlenhoff at 2022-08-24T10:42:58+02:00
NFU
add note for shim entries

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4669,7 +4669,7 @@ CVE-2022-37009 (In JetBrains IntelliJ IDEA before 2022.2 local code execution vi
 CVE-2022-2569
 	RESERVED
 CVE-2022-2568 (A privilege escalation flaw was found in the Ansible Automation Platfo ...)
-	TODO: check, https://bugzilla.redhat.com/show_bug.cgi?id=2108653 unclear if this is an issue on ansible level itself
+	NOT-FOR-US: Red Hat Ansible Automation Platform
 CVE-2022-2567
 	RESERVED
 CVE-2022-2566
@@ -11519,12 +11519,18 @@ CVE-2022-34304
 CVE-2022-34303
 	RESERVED
 	NOT-FOR-US: Eurosoft (UK) shim
+	NOTE: This transitively affects Secure Boot as used in Debian, but tracking DBX updates
+	NOTE: is out of scope for the Debian Security Tracker
 CVE-2022-34302
 	RESERVED
 	NOT-FOR-US: New Horizon Datasys Inc shim
+	NOTE: This transitively affects Secure Boot as used in Debian, but tracking DBX updates
+	NOTE: is out of scope for the Debian Security Tracker
 CVE-2022-34301
 	RESERVED
 	NOT-FOR-US: CryptoPro Secure Disk shim
+	NOTE: This transitively affects Secure Boot as used in Debian, but tracking DBX updates
+	NOTE: is out of scope for the Debian Security Tracker
 CVE-2022-34300 (In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::D ...)
 	- tinyexr <unfixed> (bug #1014980)
 	[bullseye] - tinyexr <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fdd0407ea40f809edee8ae9e21a3009479ffe210

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fdd0407ea40f809edee8ae9e21a3009479ffe210
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220824/2082fd29/attachment-0001.htm>