| Summary: | Firefox 38.6 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | critical | ||
| Priority: | Normal | CC: | davidwhodgins, sysadmin-bugs, wrw105 |
| Version: | 5 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| URL: | http://lwn.net/Vulnerabilities/673772/ | ||
| Whiteboard: | has_procedure mga5-32-ok mga5-64-ok advisory | ||
| Source RPM: | firefox | CVE: | |
| Status comment: | |||
|
Description
David Walser
2016-01-26 22:33:17 CET
RedHat has issued an advisory for this today (January 27): https://rhn.redhat.com/errata/RHSA-2016-0071.html Advisory: ======================== Updated firefox packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2016-1930, CVE-2016-1935). References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1930 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1935 https://www.mozilla.org/en-US/security/advisories/mfsa2016-01/ https://www.mozilla.org/en-US/security/advisories/mfsa2016-03/ https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ https://rhn.redhat.com/errata/RHSA-2016-0071.html Tested mga5-64: general browsing, JetStream for JavaScript, Acid3 for rendering, youtube video for flash (habanera sax quartet yoi!), javatester for java. All OK. CC:
(none) =>
wrw105 Working fine Mageia 5 i586 also. Whiteboard:
has_procedure mga5-64-ok =>
has_procedure mga5-32-ok mga5-64-ok Testing on mga5-64 Packages installed from testing: - firefox-38.6.0-1.mga5.x86_64 - firefox-en_GB-38.6.0-1.mga5.noarch Packages installed cleanly. No regressions noted. OK for mga5-64 Testing on mga5-32 Packages installed from testing: firefox-en_GB-38.6.0-1.mga5.noarch firefox-38.6.0-1.mga5.i586 Packages installed cleanly. No regressions noted. OK for mga5-32 This update is now validated. The advisory in comment#2 needs to be uploaded to SVN. The packages can then be pushed to updates. Keywords:
(none) =>
validated_update
David Walser
2016-01-27 22:57:34 CET
URL:
(none) =>
http://lwn.net/Vulnerabilities/673772/
Dave Hodgins
2016-01-28 20:20:55 CET
CC:
(none) =>
davidwhodgins An update for this issue has been pushed to Mageia Updates repository. http://advisories.mageia.org/MGASA-2016-0041.html Status:
NEW =>
RESOLVED |