[Git][security-tracker-team/security-tracker][master] Sync additional CVEs from mdsa2020-21 and add fixed version via unstable

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7f13b382 by Salvatore Bonaccorso at 2020-06-03T06:14:57+02:00
Sync additional CVEs from mdsa2020-21 and add fixed version via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3066,6 +3066,8 @@ CVE-2020-12411
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/#CVE-2020-12411
 CVE-2020-12410
 	RESERVED
+	- firefox 68.9.0esr-1
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-21/#CVE-2020-12410
 CVE-2020-12409
 	RESERVED
 	- firefox <unfixed>
@@ -3080,12 +3082,13 @@ CVE-2020-12407
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/#CVE-2020-12407
 CVE-2020-12406
 	RESERVED
-	- firefox <unfixed>
+	- firefox 68.9.0esr-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/#CVE-2020-12406
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-21/#CVE-2020-12406
 CVE-2020-12405
 	RESERVED
 	- firefox <unfixed>
-	- firefox-esr <unfixed>
+	- firefox-esr 68.9.0esr-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/#CVE-2020-12405
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-21/#CVE-2020-12405
 CVE-2020-12404
@@ -3101,7 +3104,7 @@ CVE-2020-12400
 CVE-2020-12399 [Force a fixed length for DSA exponentiation]
 	RESERVED
 	- firefox <unfixed>
-	- firefox-esr <unfixed>
+	- firefox-esr 68.9.0esr-1
 	- nss 2:3.53-1 (bug #961752)
 	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1631576 (non-public)
 	NOTE: Fixed by: https://hg.mozilla.org/projects/nss/rev/daa823a4a29bcef0fec33a379ec83857429aea2e



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f13b38243d9838eaeabd31d5d2b7d03ad815aa4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f13b38243d9838eaeabd31d5d2b7d03ad815aa4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200603/4fcdc68b/attachment.html>