[Git][security-tracker-team/security-tracker][master] mark esptool as non issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
08fd4796 by Moritz Muehlenhoff at 2023-11-14T10:52:48+01:00
mark esptool as non issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -462,7 +462,7 @@ CVE-2023-47237 (Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson
 CVE-2023-47110 (blockreassurance adds an information block aimed at offering helpful i ...)
 	NOT-FOR-US: blockreassurance
 CVE-2023-46894 (An issue discovered in esptool 4.6.2 allows attackers to view sensitiv ...)
-	- esptool <unfixed> (bug #1055773; unimportant)
+	NOTE: Bogus issue reported for esptool, also see
 	NOTE: https://github.com/espressif/esptool/issues/926
 	NOTE: Old revisions of one of the supported chipsets were using AES ECB for secure
 	NOTE: boot and flash encryption, but newer ones have switched to newer cryptographic



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08fd479667fa91e3f3755a17c3ff52e1ab3c6d58

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08fd479667fa91e3f3755a17c3ff52e1ab3c6d58
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231114/c84f370a/attachment.htm>