From 39c43d12bcd327301197c096b102ded6dea9e481 Mon Sep 17 00:00:00 2001 From: Emilio Pozuelo Monfort Date: Tue, 20 Oct 2020 18:38:09 +0200 Subject: dla: take firefox-esr --- data/dla-needed.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/data/dla-needed.txt b/data/dla-needed.txt index c6e1524059..5e6777d299 100644 --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -69,6 +69,8 @@ f2fs-tools NOTE: 20200815: About CVE-2020-6070. The fix got introduced between 1.12.0 and 1.13.0, but it is not trivial to NOTE: 20200815: to detect which of the patches correlates to the CVE. Contacting upstream might be necessary. (sunweaver) -- +firefox-esr (Emilio) +-- fossil NOTE: 20200903: looked into CVE-2020-24614: the fix for this CVE partially applies, but does not apply around a NOTE: 20200903: database query in src/add.c. In fact, the patch fixing this CVE is quite invasive. Maybe decide -- cgit v1.2.3