[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-7760/codemirror-js via unstable

Salvatore Bonaccorso carnil at debian.org
Sun Nov 8 09:47:25 GMT 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4fcfcec7 by Salvatore Bonaccorso at 2020-11-08T10:46:53+01:00
Track fixed version for CVE-2020-7760/codemirror-js via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -50720,7 +50720,7 @@ CVE-2020-7762 (This affects the package jsreport-chrome-pdf before 1.10.0. ...)
 CVE-2020-7761 (This affects the package @absolunet/kafe before 3.2.10. It allows caus ...)
 	NOT-FOR-US: @absolunet/kafe
 CVE-2020-7760 (This affects the package codemirror before 5.58.2; the package org.apa ...)
-	- codemirror-js <unfixed>
+	- codemirror-js 5.58.2+~cs0.23.101-1
 	[stretch] - codemirror-js <not-affected> (Vulnerable code added later)
 	NOTE: https://snyk.io/vuln/SNYK-JS-CODEMIRROR-1016937
 	NOTE: https://github.com/codemirror/CodeMirror/commit/55d0333907117c9231ffdf555ae8824705993bbb



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4fcfcec7aa812e44c5d9f34222bef8ca2c8c33f6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4fcfcec7aa812e44c5d9f34222bef8ca2c8c33f6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201108/73d456fa/attachment.html>


More information about the debian-security-tracker-commits mailing list