Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c12f1032 by Emilio Pozuelo Monfort at 2021-01-08T10:01:14+01:00
Reserve DLA-2521-1 for firefox-esr
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[08 Jan 2021] DLA-2521-1 firefox-esr - security update
+ {CVE-2020-16044}
+ [stretch] - firefox-esr 78.6.1esr-1~deb9u1
[07 Jan 2021] DLA-2520-1 golang-websocket - security update
{CVE-2020-27813}
[stretch] - golang-websocket 1.1.0-1+deb9u1
=====================================
data/dla-needed.txt
=====================================
@@ -45,9 +45,6 @@ f2fs-tools
NOTE: 20200815: About CVE-2020-6070. The fix got introduced between 1.12.0
and 1.13.0, but it is not trivial to
NOTE: 20200815: to detect which of the patches correlates to the CVE.
Contacting upstream might be necessary. (sunweaver)
--
-firefox-esr (Emilio)
- NOTE: 20210107: Last update was ~2020-12-16, but apparently
"[CVE-2020-16044] could have been exploited to run arbitrary code." (lamby)
---
firmware-nonfree
NOTE: 20201207: wait for the update in buster and backport that (Emilio)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c12f1032719163da5cd9854eb99e72ecb730da19
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c12f1032719163da5cd9854eb99e72ecb730da19
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
