Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits: 16351fae by Chris Lamb at 2021-01-07T08:44:12+00:00 data/dla-needed.txt: Triage firefox-esr for stretch LTS (CVE-2020-16044). - - - - - 1 changed file: - data/dla-needed.txt Changes: ===================================== data/dla-needed.txt ===================================== @@ -45,6 +45,9 @@ f2fs-tools NOTE: 20200815: About CVE-2020-6070. The fix got introduced between 1.12.0 and 1.13.0, but it is not trivial to NOTE: 20200815: to detect which of the patches correlates to the CVE. Contacting upstream might be necessary. (sunweaver) -- +firefox-esr + NOTE: 20210107: Last update was ~2020-12-16, but apparently "[CVE-2020-16044] could have been exploited to run arbitrary code." (lamby) +-- firmware-nonfree NOTE: 20201207: wait for the update in buster and backport that (Emilio) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16351fae70ae64fb35955edb8fe3103e6e50f0db -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16351fae70ae64fb35955edb8fe3103e6e50f0db You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
