<html>
<head>
<base href="https://bugzilla.rosalinux.ru/">
</head>
<body><span class="vcard"><a class="email" href="mailto:i.gaptrakhmanov@rosalinux.ru" title="ilfat <i.gaptrakhmanov@rosalinux.ru>"> <span class="fn">ilfat</span></a>
</span> changed
<a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - [CVE 21] dmidecode 3.3 CVEs found"
href="https://bugzilla.rosalinux.ru/show_bug.cgi?id=13514">bug 13514</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">Status</td>
<td>CONFIRMED
</td>
<td>RESOLVED
</td>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>i.gaptrakhmanov@rosalinux.ru
</td>
</tr>
<tr>
<td style="text-align:right;">Resolution</td>
<td>---
</td>
<td>FIXED
</td>
</tr>
<tr>
<td style="text-align:right;">Flags</td>
<td>
</td>
<td>qa_verified?
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - [CVE 21] dmidecode 3.3 CVEs found"
href="https://bugzilla.rosalinux.ru/show_bug.cgi?id=13514#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - [CVE 21] dmidecode 3.3 CVEs found"
href="https://bugzilla.rosalinux.ru/show_bug.cgi?id=13514">bug 13514</a>
from <span class="vcard"><a class="email" href="mailto:i.gaptrakhmanov@rosalinux.ru" title="ilfat <i.gaptrakhmanov@rosalinux.ru>"> <span class="fn">ilfat</span></a>
</span></b>
<pre>********** QA ADVISORY **********
CVE closed by project update:
Updated from 3.3 to 3.5 and added upstream fix
Changelog:
Version 3.5 (Tue Mar 14 2023)
- Decode HPE OEM records 216, 224, 230, 238 and 242.
- Fortify entry point length checks.
- Add a --no-quirks option.
- Drop the CPUID exception list.
- Do not let --dump-bin overwrite an existing file.
- Ensure /dev/mem is a character device file.
- Bug fixes:
Fix segmentation fault in HPE OEM record 240
- Minor improvements:
Typo fixes
Write the whole dump file at once
Fix a build warning when USE_MMAP isn't set
Version 3.4 (Mon Jun 27 2022)
- Support for SMBIOS 3.4.0. This includes new memory device types, new
processor upgrades, new slot types and characteristics, decoding of memory
module extended speed, new system slot types, new processor characteristics
and new format of Processor ID.
- Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
characteristics, new slot characteristics, new on-board device types, new
pointing device interface types, and a new record type (type 45 -
Firmware Inventory Information).
- Decode HPE OEM records 194, 199, 203, 236, 237, 238 and 240.
- Bug fixes:
Fix OEM vendor name matching
Fix ASCII filtering of strings
Fix crash with option -u
- Minor improvements:
Skip details of uninstalled memory modules
Don't display the raw CPU ID in quiet mode
Improve the formatting of the manual pages
<a href="https://abf.rosalinux.ru/build_lists/4681679">https://abf.rosalinux.ru/build_lists/4681679</a> aarch64
<a href="https://abf.rosalinux.ru/build_lists/4681677">https://abf.rosalinux.ru/build_lists/4681677</a> i686
<a href="https://abf.rosalinux.ru/build_lists/4681678">https://abf.rosalinux.ru/build_lists/4681678</a> x86_64
<a href="https://abf.rosalinux.ru/build_lists/4681680">https://abf.rosalinux.ru/build_lists/4681680</a> riscv64
<a href="https://abf.rosalinux.ru/build_lists/4681681">https://abf.rosalinux.ru/build_lists/4681681</a> e2kv4</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>