GNU bug report logs - #73669
Firefox ESR 115 branch is now deprecated for GNU/Linux and needs to move on to the 128 branch

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: gnuzilla; Reported by: Nin Gen <0xningen@HIDDEN>; dated Mon, 7 Oct 2024 00:10:02 UTC; Maintainer for gnuzilla is bug-gnuzilla@HIDDEN.

Message received at 73669 <at> debbugs.gnu.org:


Received: (at 73669) by debbugs.gnu.org; 27 Nov 2024 00:17:33 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Nov 26 19:17:33 2024
Received: from localhost ([127.0.0.1]:55485 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1tG5kK-0001ZO-VO
	for submit <at> debbugs.gnu.org; Tue, 26 Nov 2024 19:17:33 -0500
Received: from world.peace.net ([50.187.222.44]:58152)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <mhw@HIDDEN>) id 1tG5kI-0001Z5-Vw
 for 73669 <at> debbugs.gnu.org; Tue, 26 Nov 2024 19:17:31 -0500
Received: from mhw by world.peace.net with esmtpsa
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92)
 (envelope-from <mhw@HIDDEN>)
 id 1tG5kC-0003pl-Eq; Tue, 26 Nov 2024 19:17:24 -0500
From: Mark H Weaver <mhw@HIDDEN>
To: Nin Gen <0xningen@HIDDEN>, 73669 <at> debbugs.gnu.org
Subject: Re: bug#73669: Firefox ESR 115 branch is now deprecated for
 GNU/Linux and needs to move on to the 128 branch
In-Reply-To: <CALwzZ+dVWmxv9+oVtcmtxzxRDjXw8_sYGRJf5jj2FJ+kOoC6nQ@HIDDEN>
References: <CALwzZ+dVWmxv9+oVtcmtxzxRDjXw8_sYGRJf5jj2FJ+kOoC6nQ@HIDDEN>
Date: Tue, 26 Nov 2024 19:17:41 -0500
Message-ID: <87cyihcywv.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 73669
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hi,

Nin Gen <0xningen@HIDDEN> writes:

> Version 115.16.0, first offered to ESR channel users on October 1, 2024
>
> Firefox ESR 115 is now supported only on Windows 7-8.1 and macOS
> 10.12-10.14. Users on other operating systems should use Firefox ESR 128
> instead.
> source: https://www.mozilla.org/en-US/firefox/115.16.0/releasenotes/

Thanks for this report.

I've not been overly concerned about this, because during my 10 years of
maintaining the IceCat package in GNU Guix, I've noticed that it is rare
for Firefox ESR security updates to affect only GNU/Linux systems.
Moreover, I expect that security flaws in the GNU/Linux-specific code of
ESR 115 most likely also exist in ESR 128, and if such a flaw were
discovered, it would be publicized by Mozilla in connection with ESR
128.  As of now, that has not happened.

I've been more concerned about the possibility of malicious
functionality that might have been added in the upstream ESR 128 branch
relative to ESR 115.

That said, I acknowledge that this is not a satisfactory situation,
especially given that the published list of bug fixes in 115.18.0esr
(mfsa2024-65) is unexpectedly short compared to the fixes in 128.5.0esr
(mfsa2024-64).

I will start working on the IceCat 128 branch in the next few days.

    Best regards,
        Mark




Information forwarded to bug-gnuzilla@HIDDEN:
bug#73669; Package gnuzilla. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 7 Oct 2024 00:09:52 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Oct 06 20:09:52 2024
Received: from localhost ([127.0.0.1]:43426 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1sxbJw-0002xY-0E
	for submit <at> debbugs.gnu.org; Sun, 06 Oct 2024 20:09:52 -0400
Received: from lists.gnu.org ([209.51.188.17]:44632)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <0xningen@HIDDEN>) id 1sxbJt-0002xQ-9X
 for submit <at> debbugs.gnu.org; Sun, 06 Oct 2024 20:09:50 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <0xningen@HIDDEN>)
 id 1sxbJm-0002NH-CI
 for bug-gnuzilla@HIDDEN; Sun, 06 Oct 2024 20:09:42 -0400
Received: from mail-yb1-xb33.google.com ([2607:f8b0:4864:20::b33])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <0xningen@HIDDEN>)
 id 1sxbJk-0002z8-N2
 for bug-gnuzilla@HIDDEN; Sun, 06 Oct 2024 20:09:42 -0400
Received: by mail-yb1-xb33.google.com with SMTP id
 3f1490d57ef6-e28bd4e70cfso660590276.1
 for <bug-gnuzilla@HIDDEN>; Sun, 06 Oct 2024 17:09:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1728259778; x=1728864578; darn=gnu.org;
 h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
 :date:message-id:reply-to;
 bh=SlkCMqe1PqWFBjcyWJS+yycMAg10eoTaOlXiAM3vSqQ=;
 b=Ne6TH2Gc1dQkmm4TUk6eCQCgBpGwpfeC/FVf92mYsCKSONaSScoubQu2ok7BjmXj+r
 n3hgahlJ4aGPalNQW84I/T+MJBxZVFrMpn2t4B7Nomk9i+udjYZcfRxqj4p6axwK+g5i
 HLxVnqLDzqv5s9/U/48X/rK+kO5UKiqYidCpV+knaCgqTSAB9ZsnLDuMPrlmalMeSR8B
 oS+HZ1M3ijoODsSziLxLm6eCcS+J7zu+9uE9bJ+RrM0u85gDD/R8tSCrQVmmoJvQ2oTb
 qZVsMvADEiFAn/M4jCCJ1iSUiP0kcPqq+/++RLlws3KeJqLtY4saTbLdfXtQEfYwejil
 +GGA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1728259778; x=1728864578;
 h=to:subject:message-id:date:from:mime-version:x-gm-message-state
 :from:to:cc:subject:date:message-id:reply-to;
 bh=SlkCMqe1PqWFBjcyWJS+yycMAg10eoTaOlXiAM3vSqQ=;
 b=UHWw0Fqk4i2nRDwNY6DYzT3gZ2ADQDt/ahc/ha+tNSr3B3oJg0K8P5wBGQmiYVakBJ
 NmCtEXYMMNosCZKeyAlB7U8J2qjlK9V+qvMqqDBRJ/Yk0kN9NKWBQNP4M7Z1j3UgR++m
 DeHDyaBLSPTqKJ4TtBrkA9xFpDdCo70m+4ZXh9vmZyXuq6B/1zJndI+b9Yeh/JakjlKQ
 qqnm2BNPOn2Q0+57g2FEnjelaS0RKMzC72IHausFEAaYjBP2ohLtAgZ9e/O7vsmXlf/j
 S4jGvyYXB5sbuq6jQITLvlDAWXKe5tqiktNKY2BmaVVrs1WU8QgBFdW9xRspYMWBzATn
 5Ufg==
X-Gm-Message-State: AOJu0Yxl0kwjYsMsTm2KdBEba/hD9mXCJ2jV1tJOEIomQvyXbvCLdfqs
 lSvF/e53+cwyaq8iuuo3AjavY8ufid8yqGET+Np3RevyoG2BNPNKIjbor61pEMBZrrACMPxgvt8
 4z/iNoD8NySrWhBWHKKV0wzxvrohlI0tG
X-Google-Smtp-Source: AGHT+IG4kySGdChJPkv/1RjpulrTEP1yAq76jxn+vQuFsWdm7RaU6ZbNCZ0k6NOwO4OOTx5Y7GQpk91+D2XmiKHPLxY=
X-Received: by 2002:a05:6902:2102:b0:e22:60b0:7a73 with SMTP id
 3f1490d57ef6-e28939513a8mr6289155276.44.1728259778603; Sun, 06 Oct 2024
 17:09:38 -0700 (PDT)
MIME-Version: 1.0
From: Nin Gen <0xningen@HIDDEN>
Date: Mon, 7 Oct 2024 00:09:28 +0000
Message-ID: <CALwzZ+dVWmxv9+oVtcmtxzxRDjXw8_sYGRJf5jj2FJ+kOoC6nQ@HIDDEN>
Subject: Firefox ESR 115 branch is now deprecated for GNU/Linux and needs to
 move on to the 128 branch
To: bug-gnuzilla@HIDDEN
Content-Type: multipart/alternative; boundary="0000000000002ef43c0623d7d640"
Received-SPF: pass client-ip=2607:f8b0:4864:20::b33;
 envelope-from=0xningen@HIDDEN; helo=mail-yb1-xb33.google.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.3 (-)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

--0000000000002ef43c0623d7d640
Content-Type: text/plain; charset="UTF-8"

Version 115.16.0, first offered to ESR channel users on October 1, 2024

Firefox ESR 115 is now supported only on Windows 7-8.1 and macOS
10.12-10.14. Users on other operating systems should use Firefox ESR 128
instead.
source: https://www.mozilla.org/en-US/firefox/115.16.0/releasenotes/

--0000000000002ef43c0623d7d640
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail-c-release-first-title" style=3D"font-f=
amily:Inter,X-LocaleSpecific,sans-serif;font-weight:700;color:rgb(66,66,90)=
">Version 115.16.0, first offered to ESR channel users on October 1, 2024</=
div><div class=3D"gmail-c-release-first-text" style=3D"font-size:16px;color=
:rgb(66,66,90);font-family:Inter,X-LocaleSpecific,sans-serif"><p style=3D"m=
argin:0px 0px 1.25em;padding:0px">Firefox ESR 115 is now supported only on =
Windows 7-8.1 and macOS 10.12-10.14. Users on other operating systems shoul=
d use Firefox ESR 128 instead.</p></div>source: <a href=3D"https://www.mozi=
lla.org/en-US/firefox/115.16.0/releasenotes/">https://www.mozilla.org/en-US=
/firefox/115.16.0/releasenotes/</a><br></div>

--0000000000002ef43c0623d7d640--




Acknowledgement sent to Nin Gen <0xningen@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnuzilla@HIDDEN. Full text available.
Report forwarded to bug-gnuzilla@HIDDEN:
bug#73669; Package gnuzilla. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Sun, 12 Jan 2025 05:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.