[Git][security-tracker-team/security-tracker][master] Reserve DLA-2387-1 for firefox-esr

[Emilio Pozuelo Monfort]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ae0f7059 by Emilio Pozuelo Monfort at 2020-09-28T23:31:49+02:00
Reserve DLA-2387-1 for firefox-esr

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[28 Sep 2020] DLA-2387-1 firefox-esr - security update
+	{CVE-2020-15673 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678}
+	[stretch] - firefox-esr 78.3.0esr-1~deb9u1
 [28 Sep 2020] DLA-2379-2 mediawiki - regression update
 	[stretch] - mediawiki 1:1.27.7-1~deb9u5
 [28 Sep 2020] DLA-2386-1 libdbi-perl - security update


=====================================
data/dla-needed.txt
=====================================
@@ -66,10 +66,6 @@ f2fs-tools
   NOTE: 20200815: About CVE-2020-6070. The fix got introduced between 1.12.0 and 1.13.0, but it is not trivial to
   NOTE: 20200815: to detect which of the patches correlates to the CVE. Contacting upstream might be necessary. (sunweaver)
 --
-firefox-esr (Emilio)
-  NOTE: 20200720: working on ESR 78 backport. (pochu)
-  NOTE: 20200926: backported llvm 7 fix, rustc, cargo, rust-cbindgen, gcc 7, nodejs 10 (pochu)
---
 fossil
   NOTE: 20200903: looked into CVE-2020-24614: the fix for this CVE partially applies, but does not apply around a
   NOTE: 20200903: database query in src/add.c. In fact, the patch fixing this CVE is quite invasive. Maybe decide



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae0f7059d54cbc029ae0f60489f49807209324ba

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae0f7059d54cbc029ae0f60489f49807209324ba
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200928/a336819b/attachment-0001.html>