CVE-2023-40548 version range fix
Dear NVD maintainers,
Your entry at https://nvd.nist.gov/vuln/detail/CVE-2023-40548 for CVE-2023-40548 states that the affected CPE ID is
cpe:2.3:a:redhat:shim:*:*:*:*:*:*:*:* Up to (including) 15.8
But actually, the bug was fixed in shim 15.8:
https://github.com/rhboot/shim/commit/96dccc255b16e9465dbee50b3cef6b3db74d11c8
And the CVE is also listed in the 15.8 release notes:
https://github.com/rhboot/shim/releases/tag/15.8
So it should be < 15.8. Do you think you could adjust the NVD entry for this CVE ?
Thanks a lot in advance!
Signature · 5 lines
Bye, Peter Korsgaard _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot