| Summary: | firefox/thunderbird new security issues fixed in 17.0.9 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | critical | ||
| Priority: | Normal | CC: | davidwhodgins, oe, sysadmin-bugs, tmb, wrw105 |
| Version: | 3 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| URL: | http://lwn.net/Vulnerabilities/567271/ | ||
| Whiteboard: | MGA2TOO mga3-64-ok mga3-32-ok mga2-64-ok mga2-64-ok | ||
| Source RPM: | firefox, thunderbird | CVE: | |
| Status comment: | |||
|
Description
David Walser
2013-09-17 21:57:28 CEST
David Walser
2013-09-17 21:57:38 CEST
Whiteboard:
(none) =>
MGA2TOO No PoC on SecurityFocus. Testing mga3-64. CC:
(none) =>
wrw105 Firefox: tested general browsing, sunspider javascript, javatester for java, youtube for flash. Thunderbird: read/write, move messages over IMAP, send SMTP, receive IMAP. As a side note, will there be an NSS/NSPR update for this release? Whiteboard:
MGA2TOO =>
MGA2TOO mga3-64-ok (In reply to Bill Wilkinson from comment #2) > As a side note, will there be an NSS/NSPR update for this release? No, just as a reminder of what I said during the 17.0.8 update, we'll update nss and nspr when we update to 24 ESR, which should be the next round of FF/TB updates after this one. Also, while it's good to ask that question, as we don't want to forget it (and the packager who usually packages the TB/FF updates, usually does forget about nss/nspr), as well as rootcerts, I personally won't push a FF/TB update to QA without considering nss/nspr first (although I did forget rootcerts until just now, so it's still good you asked...it's good for now too BTW :o). Thanks, David! Just trying to be thorough! Completed same tests with mga3-32, all OK. Whiteboard:
MGA2TOO mga3-64-ok =>
MGA2TOO mga3-64-ok mga3-32-ok completed same tests with mga2-32, all OK. As I don't have a working mga2-64 I'll ask someone else to test that one. Whiteboard:
MGA2TOO mga3-64-ok mga3-32-ok =>
MGA2TOO mga3-64-ok mga3-32-ok mga2-32-ok Testing complete and advisory committed to svn. Someone from the sysadmin team please push 11250.adv to updates. Keywords:
(none) =>
validated_update
Dave Hodgins
2013-09-18 03:18:32 CEST
Whiteboard:
MGA2TOO mga3-64-ok mga3-32-ok mga2-32-ok mga2-64-ok =>
MGA2TOO mga3-64-ok mga3-32-ok mga2-64-ok mga2-64-ok
David Walser
2013-09-18 20:09:55 CEST
URL:
(none) =>
http://lwn.net/Vulnerabilities/567271/ FYI. For NSS/NSPR, I find it faster to view a diff between the old and new firefox version to see if there is changes in the bundled ones, than try to find info elsewhere. CC:
(none) =>
oe Update pushed: http://advisories.mageia.org/MGASA-2013-0287.html Status:
NEW =>
RESOLVED |