Bug 940714

Summary:	www-client/firefox-128.4.0-r1: security stabilization
Product:	Gentoo Linux	Reporter:	Joonas Niilola <juippis>
Component:	Stabilization	Assignee:	Mozilla Gentoo Team <mozilla>
Status:	RESOLVED FIXED
Severity:	normal	Keywords:	CC-ARCHES, SECURITY, STABLEREQ
Priority:	Normal	Flags:	nattka: sanity-check+
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/
Whiteboard:
Package list:	www-client/firefox-128.4.0-r1 arm64	Runtime testing required:	---
Bug Depends on:	940638
Bug Blocks:	941169, 941224

Description Joonas Niilola gentoo-dev

2024-10-03 12:38:29 UTC

https://www.mozilla.org/en-US/security/advisories/mfsa2024-47/

128esr will be stabilized on amd64 and arm64 only going forward. While ppc64 hasn't been catastrophic, I haven't really been happy with it either. And especially all patches and workarounds for ppc* doesn't give me confidence for ppc support.

amd64 and arm64 are officially supported upstream.

x86 will be destabilized due to Gentoo's ongoing effort in destabilizing 32-bit arches.

Comment 1 Larry the Git Cow gentoo-dev

2024-10-03 12:45:13 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=da9b3f0d4e5136c6d250e43f8fbeba0c2bf89568

commit da9b3f0d4e5136c6d250e43f8fbeba0c2bf89568
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-03 12:42:41 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-03 12:45:10 +0000

    www-client/firefox-bin: stabilize 128.3.0 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox-bin/firefox-bin-128.3.0.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7429758d122ec77406aaf91e4c6a75ac9b5d0a1d

commit 7429758d122ec77406aaf91e4c6a75ac9b5d0a1d
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-03 12:42:23 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-03 12:45:10 +0000

    www-client/firefox: stabilize 128.3.0 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox/firefox-128.3.0.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comment 2 Joonas Niilola gentoo-dev

2024-10-11 06:12:10 UTC

Update to 128.3.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/

Comment 3 Larry the Git Cow gentoo-dev

2024-10-11 08:53:00 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=64e963956fe06fb70518ced36400069ab2e0537e

commit 64e963956fe06fb70518ced36400069ab2e0537e
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-11 08:52:17 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-11 08:52:57 +0000

    www-client/firefox: stabilize 128.3.1 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox/firefox-128.3.1.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comment 4 Joonas Niilola gentoo-dev

2024-10-31 05:40:51 UTC

Update to 128.4.0
https://www.mozilla.org/en-US/security/advisories/mfsa2024-56/

Comment 5 Larry the Git Cow gentoo-dev

2024-10-31 11:42:34 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=101bdbf5e01ef8d5a3380ded82a4db6e8ff9121a

commit 101bdbf5e01ef8d5a3380ded82a4db6e8ff9121a
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-10-31 11:39:49 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-10-31 11:39:49 +0000

    www-client/firefox: stabilize 128.4.0 for amd64
    
    Bug: https://bugs.gentoo.org/940714
    Bug: https://bugs.gentoo.org/942469
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 www-client/firefox/firefox-128.4.0.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comment 6 NATTkA bot gentoo-dev

2024-11-09 06:29:20 UTC Comment hidden (obsolete)

Unable to check for sanity:

> no match for package: www-client/firefox-128.4.0

Comment 7 NATTkA bot gentoo-dev

2024-11-22 13:12:25 UTC Comment hidden (obsolete)

Sanity check failed:

> www-client/firefox-128.4.0-r1
>   depend arm64 stable profile default/linux/arm64/23.0 (12 total)
>     >=dev-libs/nss-3.101
>   depend arm64 dev profile default/linux/arm64/23.0/hardened (10 total)
>     >=dev-libs/nss-3.101
>   rdepend arm64 stable profile default/linux/arm64/23.0 (12 total)
>     >=dev-libs/nss-3.101
>   rdepend arm64 dev profile default/linux/arm64/23.0/hardened (10 total)
>     >=dev-libs/nss-3.101

Comment 8 Arthur Zamarin archtester

2024-11-22 18:24:14 UTC

arm64 done

all arches done