doc: security: cve-2023-4257 left embargo (90b9809c) · Commits · Wenxi XU / zephyr

doc/releases/release-notes-3.5.rst

+2 −1

Changes for doc/releases/release-notes-3.5.rst: 2 added lines, 1 removed line.
Original line number	Diff line number	Diff line
		@@ -23,7 +23,8 @@ https://docs.zephyrproject.org/latest/security/vulnerabilities.html
		* CVE-2023-3725 `Zephyr project bug tracker GHSA-2g3m-p6c7-8rr3
		<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2g3m-p6c7-8rr3>`_

		* CVE-2023-4257: Under embargo until 2023-10-12
		* CVE-2023-4257 `Zephyr project bug tracker GHSA-853q-q69w-gf5j
		<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5j>`_

		* CVE-2023-4258 `Zephyr project bug tracker GHSA-m34c-cp63-rwh7
		<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-m34c-cp63-rwh7>`_

+13 −1

Changes for doc/security/vulnerabilities.rst: 13 added lines, 1 removed line.
Original line number	Diff line number	Diff line
		@@ -1370,7 +1370,19 @@ This has been fixed in main for v3.5.0
		CVE-2023-4257
		-------------

		Under embargo until 2023/10/12
		Unchecked user input length in the Zephyr WiFi shell module can cause
		buffer overflows.

		- `Zephyr project bug tracker GHSA-853q-q69w-gf5j
		<https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5j>`_

		This has been fixed in main for v3.5.0

		- `PR 605377 fix for main
		<https://github.com/zephyrproject-rtos/zephyr/pull/605377>`_

		- `PR 61383 fix for 3.4
		<https://github.com/zephyrproject-rtos/zephyr/pull/61383>`_

		CVE-2023-4258
		-------------