[Git][security-tracker-team/security-tracker][master] resolve two TODOs, not really actionable with Intel advisories

Moritz Muehlenhoff (@jmm) jmm at debian.org
Mon Mar 4 09:20:29 GMT 2024



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
60aaff08 by Moritz Muehlenhoff at 2024-03-04T10:19:42+01:00
resolve two TODOs, not really actionable with Intel advisories

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -55959,7 +55959,6 @@ CVE-2023-27517 (Improper access control in some Intel(R) Optane(TM) PMem softwar
 	[bookworm] - ipmctl <no-dsa> (Minor issue)
 	[bullseye] - ipmctl <no-dsa> (Minor issue)
 	NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html
-	TODO: full details not clear but affects the "Intel Optane Pmem {1,2,3}00Series management software (ipmctl)
 CVE-2023-26589 (Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tool ...)
 	NOT-FOR-US: Intel
 CVE-2023-25949 (Uncontrolled resource consumption in some Intel(R) Aptio* V UEFI Firmw ...)
@@ -69587,7 +69586,6 @@ CVE-2023-22431
 CVE-2023-22311 (Improper access control in some Intel(R) Optane(TM) PMem 100 Series Ma ...)
 	- ipmctl <not-affected> (Only affects the Intel Optane PMem 100 Series Managment Software)
 	NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html
-	TODO: full details not clear but affects the "Intel Optane Pmem {1,2,3}00Series management software (ipmctl)
 CVE-2023-0525 (Weak Encoding for Password vulnerability in Mitsubishi Electric Corpor ...)
 	NOT-FOR-US: PyroCMS
 CVE-2023-0524 (As part of our Security Development Lifecycle, a potential privilege e ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60aaff08d89b19bcef2d7f20e1ac1ead770cabc6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60aaff08d89b19bcef2d7f20e1ac1ead770cabc6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240304/880ccb3e/attachment.htm>


More information about the debian-security-tracker-commits mailing list