Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 940714 - www-client/firefox-128.4.0: security stabilization
Summary: www-client/firefox-128.4.0: security stabilization
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Mozilla Gentoo Team
URL: https://www.mozilla.org/en-US/securit...
Whiteboard:
Keywords: CC-ARCHES, SECURITY, STABLEREQ
Depends on: 940638
Blocks: 941169 CVE-2024-9680, MFSA2024-51
  Show dependency tree
 
Reported: 2024-10-03 12:38 UTC by Joonas Niilola
Modified: 2024-10-31 11:42 UTC (History)
1 user (show)

See Also:
Package list:
www-client/firefox-128.4.0 arm64
Runtime testing required: ---
nattka: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Joonas Niilola gentoo-dev 2024-10-03 12:38:29 UTC
https://www.mozilla.org/en-US/security/advisories/mfsa2024-47/

128esr will be stabilized on amd64 and arm64 only going forward. While ppc64 hasn't been catastrophic, I haven't really been happy with it either. And especially all patches and workarounds for ppc* doesn't give me confidence for ppc support.

amd64 and arm64 are officially supported upstream.

x86 will be destabilized due to Gentoo's ongoing effort in destabilizing 32-bit arches.
Comment 1 Larry the Git Cow gentoo-dev 2024-10-03 12:45:13 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=da9b3f0d4e5136c6d250e43f8fbeba0c2bf89568

commit da9b3f0d4e5136c6d250e43f8fbeba0c2bf89568
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-03 12:42:41 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-03 12:45:10 +0000

    www-client/firefox-bin: stabilize 128.3.0 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox-bin/firefox-bin-128.3.0.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7429758d122ec77406aaf91e4c6a75ac9b5d0a1d

commit 7429758d122ec77406aaf91e4c6a75ac9b5d0a1d
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-03 12:42:23 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-03 12:45:10 +0000

    www-client/firefox: stabilize 128.3.0 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox/firefox-128.3.0.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 2 Joonas Niilola gentoo-dev 2024-10-11 06:12:10 UTC
Update to 128.3.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/
Comment 3 Larry the Git Cow gentoo-dev 2024-10-11 08:53:00 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=64e963956fe06fb70518ced36400069ab2e0537e

commit 64e963956fe06fb70518ced36400069ab2e0537e
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-11 08:52:17 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-11 08:52:57 +0000

    www-client/firefox: stabilize 128.3.1 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox/firefox-128.3.1.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
Comment 4 Joonas Niilola gentoo-dev 2024-10-31 05:40:51 UTC
Update to 128.4.0
https://www.mozilla.org/en-US/security/advisories/mfsa2024-56/
Comment 5 Larry the Git Cow gentoo-dev 2024-10-31 11:42:34 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=101bdbf5e01ef8d5a3380ded82a4db6e8ff9121a

commit 101bdbf5e01ef8d5a3380ded82a4db6e8ff9121a
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-31 11:39:49 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-31 11:39:49 +0000

    www-client/firefox: stabilize 128.4.0 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Bug: https://bugs.gentoo.org/942469
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox/firefox-128.4.0.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)