[Git][security-tracker-team/security-tracker][master] Reserve DLA-2411-1 for firefox-esr
Emilio Pozuelo Monfort
pochu at debian.org
Wed Oct 21 22:41:01 BST 2020
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
66261ce9 by Emilio Pozuelo Monfort at 2020-10-21T23:40:53+02:00
Reserve DLA-2411-1 for firefox-esr
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[21 Oct 2020] DLA-2411-1 firefox-esr - security update
+ {CVE-2020-15683 CVE-2020-15969}
+ [stretch] - firefox-esr 78.4.0esr-1~deb9u1
[21 Oct 2020] DLA-2410-1 bluez - security update
{CVE-2020-27153}
[stretch] - bluez 5.43-2+deb9u3
=====================================
data/dla-needed.txt
=====================================
@@ -67,8 +67,6 @@ f2fs-tools
NOTE: 20200815: About CVE-2020-6070. The fix got introduced between 1.12.0 and 1.13.0, but it is not trivial to
NOTE: 20200815: to detect which of the patches correlates to the CVE. Contacting upstream might be necessary. (sunweaver)
--
-firefox-esr (Emilio)
---
fossil
NOTE: 20200903: looked into CVE-2020-24614: the fix for this CVE partially applies, but does not apply around a
NOTE: 20200903: database query in src/add.c. In fact, the patch fixing this CVE is quite invasive. Maybe decide
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66261ce9bce0b2502f8c9f720542954c16b140b9
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66261ce9bce0b2502f8c9f720542954c16b140b9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201021/e118a88f/attachment.html>
More information about the debian-security-tracker-commits
mailing list