[Git][security-tracker-team/security-tracker][master] 2 commits: Add new firefox-esr issues from mfsa2020-31

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ee18e87b by Salvatore Bonaccorso at 2020-07-29T06:03:22+02:00
Add new firefox-esr issues from mfsa2020-31

- - - - -
3580dfaa by Salvatore Bonaccorso at 2020-07-29T06:03:54+02:00
Add firefox-esr to dsa-needed list

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -990,6 +990,8 @@ CVE-2020-15660
 	RESERVED
 CVE-2020-15659
 	RESERVED
+	- firefox-esr 68.11.0esr-1
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-31/#CVE-2020-15659
 CVE-2020-15658
 	RESERVED
 CVE-2020-15657
@@ -1004,6 +1006,8 @@ CVE-2020-15653
 	RESERVED
 CVE-2020-15652
 	RESERVED
+	- firefox-esr 68.11.0esr-1
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-31/#CVE-2020-15652
 CVE-2020-15651
 	RESERVED
 CVE-2020-15650
@@ -25090,6 +25094,8 @@ CVE-2020-6514 (Inappropriate implementation in WebRTC in Google Chrome prior to
 	[experimental] - chromium 84.0.4147.89-1
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
+	- firefox-esr 68.11.0esr-1
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-31/#CVE-2020-6514
 CVE-2020-6513 (Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89  ...)
 	[experimental] - chromium 84.0.4147.89-1
 	- chromium <unfixed>
@@ -25288,6 +25294,8 @@ CVE-2020-6463 (Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 a
 	{DSA-4714-1}
 	- chromium 83.0.4103.83-1
 	[stretch] - chromium <end-of-life> (see DSA 4562)
+	- firefox-esr 68.11.0esr-1
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-31/#CVE-2020-6463
 CVE-2020-6462 (Use after free in task scheduling in Google Chrome prior to 81.0.4044. ...)
 	{DSA-4714-1}
 	- chromium 83.0.4103.83-1


=====================================
data/dsa-needed.txt
=====================================
@@ -16,6 +16,8 @@ chromium
 --
 curl (ghedo)
 --
+firefox-esr (jmm)
+--
 knot-resolver
   Santiago Ruano Rincón proposed a debdiff for review
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/96a716a833a5357bbba2e46955367100714f2b69...3580dfaa75e588236a4b57707b6d265971a91150

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/96a716a833a5357bbba2e46955367100714f2b69...3580dfaa75e588236a4b57707b6d265971a91150
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200729/7456818f/attachment-0001.html>