[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-7760/codemirror-js via unstable
Salvatore Bonaccorso
carnil at debian.org
Sun Nov 8 09:47:25 GMT 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4fcfcec7 by Salvatore Bonaccorso at 2020-11-08T10:46:53+01:00
Track fixed version for CVE-2020-7760/codemirror-js via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -50720,7 +50720,7 @@ CVE-2020-7762 (This affects the package jsreport-chrome-pdf before 1.10.0. ...)
CVE-2020-7761 (This affects the package @absolunet/kafe before 3.2.10. It allows caus ...)
NOT-FOR-US: @absolunet/kafe
CVE-2020-7760 (This affects the package codemirror before 5.58.2; the package org.apa ...)
- - codemirror-js <unfixed>
+ - codemirror-js 5.58.2+~cs0.23.101-1
[stretch] - codemirror-js <not-affected> (Vulnerable code added later)
NOTE: https://snyk.io/vuln/SNYK-JS-CODEMIRROR-1016937
NOTE: https://github.com/codemirror/CodeMirror/commit/55d0333907117c9231ffdf555ae8824705993bbb
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4fcfcec7aa812e44c5d9f34222bef8ca2c8c33f6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4fcfcec7aa812e44c5d9f34222bef8ca2c8c33f6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201108/73d456fa/attachment.html>
More information about the debian-security-tracker-commits
mailing list