[Git][security-tracker-team/security-tracker][master] firefox-esr fixed

Moritz Muehlenhoff jmm at debian.org
Thu Feb 14 10:41:55 GMT 2019


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
32a1ef7f by Moritz Muehlenhoff at 2019-02-14T10:41:30Z
firefox-esr fixed

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -5894,7 +5894,7 @@ CVE-2019-5786
 CVE-2019-5785
 	RESERVED
 	- firefox <unfixed>
-	- firefox-esr <unfixed>
+	- firefox-esr 60.5.1esr-1
 	- skia <itp> (bug #818180)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-04/#CVE-2019-5785
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-05/#CVE-2019-5785
@@ -24055,7 +24055,7 @@ CVE-2018-18356 (An integer overflow in path handling lead to a use after free in
 	{DSA-4352-1}
 	- chromium 71.0.3578.80-1
 	- firefox <unfixed>
-	- firefox-esr <unfixed>
+	- firefox-esr 60.5.1esr-1
 	- skia <itp> (bug #818180)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-04/#CVE-2018-18356
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-05/#CVE-2018-18356


=====================================
data/dsa-needed.txt
=====================================
@@ -23,6 +23,8 @@ chromium
 faad2
   not yet fixed upstream
 --
+firefox-esr (jmm)
+--
 glusterfs
 --
 graphicsmagick



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/32a1ef7f9e440589f29c0bf04f26cdb46a9211b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/32a1ef7f9e440589f29c0bf04f26cdb46a9211b6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190214/a4dacd53/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list