[Git][security-tracker-team/security-tracker][master] new firefox-esr issues

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Mar 14 15:39:15 GMT 2023



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6f0ec73f by Moritz Muehlenhoff at 2023-03-14T16:38:47+01:00
new firefox-esr issues

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -369,7 +369,9 @@ CVE-2023-28177
 CVE-2023-28176
 	RESERVED
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-28176
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-28176
 CVE-2023-28175
 	RESERVED
 CVE-2023-28174
@@ -395,15 +397,21 @@ CVE-2023-28165
 CVE-2023-28164
 	RESERVED
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-28164
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-28164
 CVE-2023-28163
 	RESERVED
 	- firefox <not-affected> (Windows-specific)
+	- firefox-esr <not-affected> (Windows-specific)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-28163
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-28163
 CVE-2023-28162
 	RESERVED
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-28162
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-28162
 CVE-2023-28161
 	RESERVED
 	- firefox <unfixed>
@@ -6974,11 +6982,15 @@ CVE-2023-25753
 CVE-2023-25752
 	RESERVED
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-25752
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-25752
 CVE-2023-25751
 	RESERVED
 	- firefox <unfixed>
+	- firefox-esr <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-25751
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-25751
 CVE-2023-25750
 	RESERVED
 	- firefox <unfixed>


=====================================
data/dsa-needed.txt
=====================================
@@ -14,6 +14,8 @@ If needed, specify the release by adding a slash after the name of the source pa
 --
 apache2 (jmm)
 --
+firefox-esr (jmm)
+--
 gpac (aron)
 --
 jupyter-core



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f0ec73fc55333502c21abea1eef459aa12a3a5b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f0ec73fc55333502c21abea1eef459aa12a3a5b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230314/742afb27/attachment.htm>


More information about the debian-security-tracker-commits mailing list