[Git][security-tracker-team/security-tracker][master] new arm-trusted-firmware issue

Moritz Muehlenhoff (@jmm) jmm at debian.org
Fri Feb 23 10:40:16 GMT 2024



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3a32f1cc by Moritz Muehlenhoff at 2024-02-23T11:39:44+01:00
new arm-trusted-firmware issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -421,7 +421,10 @@ CVE-2023-50975 (The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS
 CVE-2023-50955 (IBM InfoSphere Information Server 11.7 could allow an authenticated pr ...)
 	NOT-FOR-US: IBM
 CVE-2023-49100 (Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-boun ...)
-	TODO: check
+	- arm-trusted-firmware 2.10.0+dfsg-1
+	[bookworm] - arm-trusted-firmware <no-dsa> (Minor issue)
+	[bullseye] - arm-trusted-firmware <no-dsa> (Minor issue)
+	NOTE: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=a7eff3477dcf3624c74f5217419b1a27b7ebd2aa
 CVE-2023-47795 (Stored cross-site scripting (XSS) vulnerability in the Document and Me ...)
 	NOT-FOR-US: Liferay
 CVE-2023-46241 (`discourse-microsoft-auth` is a plugin that enables authentication via ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3a32f1cc7ca1f12382b15eb1e9480f959dee3d59

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3a32f1cc7ca1f12382b15eb1e9480f959dee3d59
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240223/596fd954/attachment.htm>


More information about the debian-security-tracker-commits mailing list