| Summary: | Firefox 52.5 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | critical | ||
| Priority: | Normal | CC: | herman.viaene, jim, sysadmin-bugs, tarazed25 |
| Version: | 6 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA5TOO MGA6-64-OK MGA6-32-OK MGA5-64-OK MGA5-32-OK | ||
| Source RPM: | rootcerts, firefox | CVE: | |
| Status comment: | |||
|
Description
David Walser
2017-11-14 22:59:52 CET
David Walser
2017-11-14 23:00:00 CET
Whiteboard:
(none) =>
MGA5TOO on mga6-64 packages installed cleanly - firefox-52.5.0-1.mga6.x86_64 - firefox-en_GB-52.5.0-1.mga6.noarch - lib64nss3-3.28.6-1.1.mga6.x86_64 - nss-3.28.6-1.1.mga6.x86_64 - rootcerts-20171025.00-1.mga6.noarch - rootcerts-java-20171025.00-1.mga6.noarch tested on a variey of web sites played video and streaming video no regressions noted OK for mga6-64 CC:
(none) =>
jim Mageia 6 on x86_64 Updated from Firefox 52.4 to 53.5 with firefox-en components. Restarted firefox with all previous tabs and checked bookmarking, add-ons, youtube and retrieving bookmarked pages. Linked OK from emails. Hopefully other language packs can be checked by other testers. CC:
(none) =>
tarazed25 on mga6-32 in a vbox VM packages installed cleanly: - firefox-52.5.0-1.mga6.i586 - firefox-en_GB-52.5.0-1.mga6.noarch - libnss3-3.28.6-1.1.mga6.i586 - nss-3.28.6-1.1.mga6.i586 - rootcerts-20171025.00-1.mga6.noarch - rootcerts-java-20171025.00-1.mga6.noarch tested on a number of websites played videos and streaming video no regressions noted OK for mga6-32 Whiteboard:
MGA5TOO MGA6-64-OK =>
MGA5TOO MGA6-64-OK MGA6-32-OK MGA5-32 on Asus A6000VM Xfce No installation issues. View images, video from newspaper and youtube, no obvious setbacks. Whiteboard:
MGA5TOO MGA6-64-OK MGA6-32-OK =>
MGA5TOO MGA6-64-OK MGA6-32-OK MGA5-32-OK on mga5-64, packages installed cleanly: - firefox-52.5.0-1.mga5.x86_64 - firefox-en_GB-52.5.0-1.mga5.noarch - lib64nss3-3.28.6-1.1.mga5.x86_64 - nss-3.28.6-1.1.mga5.x86_64 - rootcerts-20171025.00-1.mga5.noarch - rootcerts-java-20171025.00-1.mga5.noarch firefox-sync settings restored OK Tested on a variety of web sites, including video and streaming video. No regressions noted OK for mga5-64 Whiteboard:
MGA5TOO MGA6-64-OK MGA6-32-OK MGA5-32-OK =>
MGA5TOO MGA6-64-OK MGA6-32-OK MGA5-64-OK restored Herman's OK - sorry Whiteboard:
MGA5TOO MGA6-64-OK MGA6-32-OK MGA5-64-OK =>
MGA5TOO MGA6-64-OK MGA6-32-OK MGA5-64-OK MGA5-32-OK RedHat has issued an advisory for this today (November 17): https://access.redhat.com/errata/RHSA-2017:3247 Advisory: ======================== Updated firefox packages fix security vulnerabilities: Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2017-7826, CVE-2017-7828, CVE-2017-7830). References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7826 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7828 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7830 https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/ https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ https://access.redhat.com/errata/RHSA-2017:3247 Only a few tests but no problems detected and this is only a sub-version update, and so I have validated it. The Advisory in comment#7 needs to be uploaded to SVN The update can then be pushed Keywords:
(none) =>
validated_update
Lewis Smith
2017-11-19 10:56:38 CET
Keywords:
(none) =>
advisory An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2017-0418.html Resolution:
(none) =>
FIXED |