Firefox 52.8.0-1 OK here 64 bit;

- firefox-52.8.0-1.mga6.x86_64
- firefox-sv_SE-52.8.0-1.mga6.noarch

This system use kernel 4.14.40-1, nvidia-current-390.48-1 also from testing.
Reopening tabs that were open in old version, plugins OK, Playing video OK.

CC: (none) => fri

TESTING M6/64 real hardware with AMD/ATI/Radeon video

 rootcerts-20180411.00-1.mga6
 rootcerts-java-20180411.00-1.mga6
 nss-3.28.6-1.4.mga6
 lib64nss3-3.28.6-1.4.mga6
 firefox-52.8.0-1.mga6
 firefox-cy-52.8.0-1.mga6
 firefox-en_GB-52.8.0-1.mga6

Using it now, have tried a couple of mixed content sites including video with sound, all looks OK.

Tested mga6-64

general browsing, jetstream, javatester all OK.

Acid3 renders to 99% with the yellow box rendering as gray.

Whiteboard: (none) => mga6-64-ok has_procedure
CC: (none) => wrw105

(In reply to Bill Wilkinson from comment #3)
> Acid3 renders to 99% with the yellow box rendering as gray.
Could you please explain this - for future reference?

Lewis,

The Acid tests (acidtests.org) are a series of browser standards compliance tests, the most often used of which are acid2 and acid3.  The acid3 test, which supersedes acid2 runs a script which lists a percentage and renders 7 boxes in the colors of the rainbow. If the script runs smoothly to 100% and all 7 boxes are the right color, the test passes.  This may be an issue with my own machine (it's from 2006), and has had some issues with previous releases.  Just part of the test to make sure browsers are working as they should.

Interesting.

In firefox 52.8, it reaches 97/100, but does not display any of the boxes, so
it's a complete fail on my system.

In firefox 52.6 (in a vb guest I haven't updated yet), it reaches 98/100 with
the 3rd and 5th boxes gray, so the change is a regression.

Btw, in opera 12.16, http://acid3.acidtests.org/ reaches 100/100 and displays
correctly, while in google chrome, it reaches 97/100, with the second and third
box showing gray instead of orange/yellow.

While it is a regression, and as Bill reported, system dependent, it's not one
serious enough to block the update.

CC: (none) => davidwhodgins

Tried the acid tests:
1) Looked good
2) Not completely congruent; extra rectangle over the message.
3) 99/100

CC: (none) => tarazed25

RedHat has issued an advisory for this on May 14:
https://access.redhat.com/errata/RHSA-2018:1415

Advisory:
========================

Updated firefox packages fix security vulnerabilities:

Mozilla: Memory safety bugs fixed in Firefox ESR 52.8 (CVE-2018-5150).

Mozilla: Backport critical security fixes in Skia (CVE-2018-5183).

Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154).

Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155).

Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files
(CVE-2018-5157).

Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158).

Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159).

Mozilla: Lightweight themes can be installed without user interaction
(CVE-2018-5168).

Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through
legacy extension (CVE-2018-5178).

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5150
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5154
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5155
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5157
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5158
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5159
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5168
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5178
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5183
https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/
https://www.mozilla.org/security/known-vulnerabilities/firefox-esr/
https://access.redhat.com/errata/RHSA-2018:1415

tested mga6-32 in virtualbox under mate as above, same results.

Ready for validation when advisory added to svn.

Whiteboard: mga6-64-ok has_procedure => mga6-64-ok has_procedure mga6-32-ok

Advisory added to svn

CC: (none) => tmb
Keywords: (none) => advisory

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0248.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED