Security vulnerabilities CVE-2023-34329 CVE–2023-34330

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM).

Issue

• I would like to inquire if the vulnerabilities CVE-2023-34329 and CVE–2023-34330 affect Liferay and the Liferay SaaS/PaaS

Environment

• Liferay DXP 7.2
• Liferay DXP 7.3
• Liferay DXP 7.4

Resolution

• The Security Team have analyzed the mentioned vulnerabilities and they do not affect Liferay SaaS/PaaS. They are related to hardware firmware.