Bug#1055773: esptool: CVE-2023-46894

2023-11-13 Thread Salvatore Bonaccorso
Hi Faidon, On Sun, Nov 12, 2023 at 10:17:01AM +0200, Faidon Liambotis wrote: > On Sat, Nov 11, 2023 at 08:51:30AM +0100, Salvatore Bonaccorso wrote: > > The following vulnerability was published for esptool. > > > > CVE-2023-46894[0]: > > | An issue discovered in esptool 4.6.2 allows attackers to

Bug#1055773: esptool: CVE-2023-46894

2023-11-12 Thread Faidon Liambotis
On Sat, Nov 11, 2023 at 08:51:30AM +0100, Salvatore Bonaccorso wrote: > The following vulnerability was published for esptool. > > CVE-2023-46894[0]: > | An issue discovered in esptool 4.6.2 allows attackers to view > | sensitive information via weak cryptographic algorithm. > > If I undestand th

Bug#1055773: esptool: CVE-2023-46894

2023-11-10 Thread Salvatore Bonaccorso
Source: esptool Version: 4.6.2+dfsg-0.1 Severity: normal Tags: security upstream Forwarded: https://github.com/espressif/esptool/issues/926 X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for esptool. CVE-2023-46894[0]: | An issue discovered i