[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage firefox-esr for stretch LTS (CVE-2020-16044).

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
16351fae by Chris Lamb at 2021-01-07T08:44:12+00:00
data/dla-needed.txt: Triage firefox-esr for stretch LTS (CVE-2020-16044).

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -45,6 +45,9 @@ f2fs-tools
   NOTE: 20200815: About CVE-2020-6070. The fix got introduced between 1.12.0 and 1.13.0, but it is not trivial to
   NOTE: 20200815: to detect which of the patches correlates to the CVE. Contacting upstream might be necessary. (sunweaver)
 --
+firefox-esr
+  NOTE: 20210107: Last update was ~2020-12-16, but apparently "[CVE-2020-16044] could have been exploited to run arbitrary code." (lamby)
+--
 firmware-nonfree
   NOTE: 20201207: wait for the update in buster and backport that (Emilio)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16351fae70ae64fb35955edb8fe3103e6e50f0db

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16351fae70ae64fb35955edb8fe3103e6e50f0db
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210107/e4d48f40/attachment-0001.html>