Bug 33122

Summary:	Firefox 115.10
Product:	Mageia	Reporter:	Nicolas Salguero <nicolas.salguero>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	andrewsfarm, fri, joselp, richard, sysadmin-bugs, tarazed25
Version:	9	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA9-64-OK
Source RPM:	firefox, firefox-l10n	CVE:	CVE-2024-3852, CVE-2024-3854, CVE-2024-3857, CVE-2024-2609, CVE-2024-3859, CVE-2024-3861, CVE-2024-3302, CVE-2024-3864
Status comment:

Description Nicolas Salguero 2024-04-22 10:42:15 CEST

Mozilla has released Firefox 115.10 on April 16:
https://www.mozilla.org/en-US/firefox/115.10.0/releasenotes/

Security issues fixed:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-19/

Nicolas Salguero 2024-04-22 10:44:26 CEST

Source RPM: (none) => firefox, firefox-l10n
CVE: (none) => CVE-2024-3852, CVE-2024-3854, CVE-2024-3857, CVE-2024-2609, CVE-2024-3859, CVE-2024-3861, CVE-2024-3302, CVE-2024-3864
Whiteboard: (none) => MGA9TOO

Comment 1 Lewis Smith 2024-04-22 21:21:41 CEST

Giving this back to you, Nicolas; being the main Firefox maintainer.

Assignee: bugsquad => nicolas.salguero

Comment 2 Jose Manuel López 2024-04-23 09:47:19 CEST

Hi,

Installed from testing repos today.

Works fine for me in Mga9 x86_64.

Banks ok.
Video and audio ok.
Addons ok.
Settings ok.
Es-translation ok.

CC: (none) => joselp

Comment 3 Morgan Leijström 2024-04-23 17:39:37 CEST

mga9-64 OK here

Plasma X11, nvidia-current

clean update


Swedish locale
Remembered settings and a hundred+ open tabs
Video sites
Banking sites
Webshops
Mageia pages :)
Printing

Seem to be OK to set to QA

Assignee: nicolas.salguero => qa-bugs
CC: (none) => fri

Comment 4 katnatek 2024-04-24 04:28:10 CEST

Packages in 9/core/updates_testing

##################################################
firefox-115.10.0-1.mga9
firefox-af-115.10.0-1.mga9.noarch.rpm
firefox-an-115.10.0-1.mga9.noarch.rpm
firefox-ar-115.10.0-1.mga9.noarch.rpm
firefox-ast-115.10.0-1.mga9.noarch.rpm
firefox-az-115.10.0-1.mga9.noarch.rpm
firefox-be-115.10.0-1.mga9.noarch.rpm
firefox-bg-115.10.0-1.mga9.noarch.rpm
firefox-bn-115.10.0-1.mga9.noarch.rpm
firefox-br-115.10.0-1.mga9.noarch.rpm
firefox-bs-115.10.0-1.mga9.noarch.rpm
firefox-ca-115.10.0-1.mga9.noarch.rpm
firefox-cs-115.10.0-1.mga9.noarch.rpm
firefox-cy-115.10.0-1.mga9.noarch.rpm
firefox-da-115.10.0-1.mga9.noarch.rpm
firefox-de-115.10.0-1.mga9.noarch.rpm
firefox-el-115.10.0-1.mga9.noarch.rpm
firefox-en_CA-115.10.0-1.mga9.noarch.rpm
firefox-en_GB-115.10.0-1.mga9.noarch.rpm
firefox-en_US-115.10.0-1.mga9.noarch.rpm
firefox-eo-115.10.0-1.mga9.noarch.rpm
firefox-es_AR-115.10.0-1.mga9.noarch.rpm
firefox-es_CL-115.10.0-1.mga9.noarch.rpm
firefox-es_ES-115.10.0-1.mga9.noarch.rpm
firefox-es_MX-115.10.0-1.mga9.noarch.rpm
firefox-et-115.10.0-1.mga9.noarch.rpm
firefox-eu-115.10.0-1.mga9.noarch.rpm
firefox-fa-115.10.0-1.mga9.noarch.rpm
firefox-ff-115.10.0-1.mga9.noarch.rpm
firefox-fi-115.10.0-1.mga9.noarch.rpm
firefox-fr-115.10.0-1.mga9.noarch.rpm
firefox-fur-115.10.0-1.mga9.noarch.rpm
firefox-fy_NL-115.10.0-1.mga9.noarch.rpm
firefox-ga_IE-115.10.0-1.mga9.noarch.rpm
firefox-gd-115.10.0-1.mga9.noarch.rpm
firefox-gl-115.10.0-1.mga9.noarch.rpm
firefox-gu_IN-115.10.0-1.mga9.noarch.rpm
firefox-he-115.10.0-1.mga9.noarch.rpm
firefox-hi_IN-115.10.0-1.mga9.noarch.rpm
firefox-hr-115.10.0-1.mga9.noarch.rpm
firefox-hsb-115.10.0-1.mga9.noarch.rpm
firefox-hu-115.10.0-1.mga9.noarch.rpm
firefox-hy_AM-115.10.0-1.mga9.noarch.rpm
firefox-ia-115.10.0-1.mga9.noarch.rpm
firefox-id-115.10.0-1.mga9.noarch.rpm
firefox-is-115.10.0-1.mga9.noarch.rpm
firefox-it-115.10.0-1.mga9.noarch.rpm
firefox-ja-115.10.0-1.mga9.noarch.rpm
firefox-ka-115.10.0-1.mga9.noarch.rpm
firefox-kab-115.10.0-1.mga9.noarch.rpm
firefox-kk-115.10.0-1.mga9.noarch.rpm
firefox-km-115.10.0-1.mga9.noarch.rpm
firefox-kn-115.10.0-1.mga9.noarch.rpm
firefox-ko-115.10.0-1.mga9.noarch.rpm
firefox-lij-115.10.0-1.mga9.noarch.rpm
firefox-lt-115.10.0-1.mga9.noarch.rpm
firefox-lv-115.10.0-1.mga9.noarch.rpm
firefox-mk-115.10.0-1.mga9.noarch.rpm
firefox-mr-115.10.0-1.mga9.noarch.rpm
firefox-ms-115.10.0-1.mga9.noarch.rpm
firefox-my-115.10.0-1.mga9.noarch.rpm
firefox-nb_NO-115.10.0-1.mga9.noarch.rpm
firefox-nl-115.10.0-1.mga9.noarch.rpm
firefox-nn_NO-115.10.0-1.mga9.noarch.rpm
firefox-oc-115.10.0-1.mga9.noarch.rpm
firefox-pa_IN-115.10.0-1.mga9.noarch.rpm
firefox-pl-115.10.0-1.mga9.noarch.rpm
firefox-pt_BR-115.10.0-1.mga9.noarch.rpm
firefox-pt_PT-115.10.0-1.mga9.noarch.rpm
firefox-ro-115.10.0-1.mga9.noarch.rpm
firefox-ru-115.10.0-1.mga9.noarch.rpm
firefox-sc-115.10.0-1.mga9.noarch.rpm
firefox-si-115.10.0-1.mga9.noarch.rpm
firefox-sk-115.10.0-1.mga9.noarch.rpm
firefox-sl-115.10.0-1.mga9.noarch.rpm
firefox-sq-115.10.0-1.mga9.noarch.rpm
firefox-sr-115.10.0-1.mga9.noarch.rpm
firefox-sv_SE-115.10.0-1.mga9.noarch.rpm
firefox-szl-115.10.0-1.mga9.noarch.rpm
firefox-ta-115.10.0-1.mga9.noarch.rpm
firefox-te-115.10.0-1.mga9.noarch.rpm
firefox-tg-115.10.0-1.mga9.noarch.rpm
firefox-th-115.10.0-1.mga9.noarch.rpm
firefox-tl-115.10.0-1.mga9.noarch.rpm
firefox-tr-115.10.0-1.mga9.noarch.rpm
firefox-uk-115.10.0-1.mga9.noarch.rpm
firefox-ur-115.10.0-1.mga9.noarch.rpm
firefox-uz-115.10.0-1.mga9.noarch.rpm
firefox-vi-115.10.0-1.mga9.noarch.rpm
firefox-xh-115.10.0-1.mga9.noarch.rpm
firefox-zh_CN-115.10.0-1.mga9.noarch.rpm
firefox-zh_TW-115.10.0-1.mga9.noarch.rpm

SRPMs:
firefox-115.10.0-1.mga9.src.rpm
firefox-l10n-115.10.0-1.mga9.src.rpm

Whiteboard: MGA9TOO => (none)
Keywords: (none) => advisory
Version: Cauldron => 9

Comment 5 Len Lawrence 2024-04-24 13:06:38 CEST

mga9, x64
Firefox installation with en_GB OK.  Running fine for online banking, APOD, Youtube videos, madb, BBC weather, Guardian newspaper and Google search for flying cars.

CC: (none) => tarazed25

Comment 6 Thomas Andrews 2024-04-24 14:22:19 CEST

No new nss this time, eh? Odd, but not without precedent.

CC: (none) => andrewsfarm

Comment 7 Morgan Leijström 2024-04-24 18:43:25 CEST

I see FF for mga10 have this far got submitted twice but both failed.

Comment 8 Thomas Andrews 2024-04-26 14:55:15 CEST

MGA9-64 Plasma, on two machines. No installation issues on either, and both are working as expected.

Giving this an OK. If the Cauldron update is no longer an issue, it can be validated.

Whiteboard: (none) => MGA9-64-OK

Comment 9 katnatek 2024-04-27 03:46:11 CEST

(In reply to Thomas Andrews from comment #8)
> MGA9-64 Plasma, on two machines. No installation issues on either, and both
> are working as expected.
> 
> Giving this an OK. If the Cauldron update is no longer an issue, it can be
> validated.

I see the same version in cauldron

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update

Comment 10 Mageia Robot 2024-04-27 08:26:57 CEST

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2024-0153.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED

Comment 11 rexy 2024-04-30 09:44:46 CEST

Hi,
Am i alone with a bad fingerprint with this release ?

package firefox-0:115.10.0-1.mga9.x86_64 does not verify: Payload SHA256 ALT digest: BAD (Expected 7ee5843d3e589eda8d23a1d49a3fa67880d1fb23db33dba9414aa0348f24274a != 3cd126d35a3a0012308a221c74e0879e3bf74ff5542ba290105619a8b74e2151)

CC: (none) => richard

Comment 12 Morgan Leijström 2024-04-30 10:34:43 CEST

Could be a download issue.
execute
  urpmi --clean
and try again.

If that do not help see
 https://wiki.mageia.org/en/Mageia_9_Errata#Downloading_software

Comment 13 rexy 2024-04-30 11:04:10 CEST

Indeed, all seems good after "urpmi --clean".

Thx