Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
baf33617 by Salvatore Bonaccorso at 2024-04-17T05:58:27+02:00
Track fixed version via unstable for firefox-esr issues from mfsa2024-19
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4,7 +4,7 @@ CVE-2024-XXXX [Stored XSS in Avatar block]
NOTE:
https://wordpress.org/news/2024/04/wordpress-6-5-2-maintenance-and-security-release/
CVE-2024-3302
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3302
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-3302
CVE-2024-3865
@@ -12,7 +12,7 @@ CVE-2024-3865
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3865
CVE-2024-3864
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3864
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-3864
CVE-2024-3863
@@ -25,7 +25,7 @@ CVE-2024-3862
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3862
CVE-2024-3861
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3861
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-3861
CVE-2024-3860
@@ -33,7 +33,7 @@ CVE-2024-3860
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3860
CVE-2024-3859
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3859
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-3859
CVE-2024-3858
@@ -41,7 +41,7 @@ CVE-2024-3858
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3858
CVE-2024-3857
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3857
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-3857
CVE-2024-3856
@@ -52,7 +52,7 @@ CVE-2024-3855
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3855
CVE-2024-3854
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3854
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-3854
CVE-2024-3853
@@ -60,7 +60,7 @@ CVE-2024-3853
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3853
CVE-2024-3852
- firefox <unfixed>
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-18/#CVE-2024-3852
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-3852
CVE-2024-3575 (Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb)
@@ -8758,7 +8758,7 @@ CVE-2024-2610 (Using a markup injection an attacker could
have stolen nonce valu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/#CVE-2024-2610
CVE-2024-2609 (The permission prompt input delay could have expired while the
window ...)
- firefox 124.0-1
- - firefox-esr <unfixed>
+ - firefox-esr 115.10.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-12/#CVE-2024-2609
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/#CVE-2024-2609
CVE-2024-2608 (`AppendEncodedAttributeValue(),
ExtraSpaceNeededForAttrEncoding()` and ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/baf336177e572cf82310d86ed3a22f4ac892ee8c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/baf336177e572cf82310d86ed3a22f4ac892ee8c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
