Bug 1113862

Summary: [RHEL6] Rebase Mozilla firefox/thunderbird to 31-ESR after 24-ESR is EOL
Product: Red Hat Enterprise Linux 6 Reporter: Huzaifa S. Sidhpurwala <huzaifas>
Component: firefoxAssignee: Martin Stransky <stransky>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: high Docs Contact:
Priority: urgent    
Version: 6.6CC: aruizrui, bgollahe, dblechte, howey.vernon, jfenal, jgalipea, jherrman, jhorak, jkurik, kcleveng, kengert, mboisver, ngalvin, rrajaram, salmy, sforsber, snagar, stransky, tlavigne, tpelka, walicki
Target Milestone: rcKeywords: Rebase, ZStream
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: firefox-31.3.0-7.el6_6 Doc Type: Rebase: Bug Fixes and Enhancements
Doc Text:
The firefox packages have been upgraded to upstream version 31.1.0, which provides a number of bug fixes and enhancements over the previous version.
Story Points: ---
Clone Of:
: 1113926 1113929 1124329 1140688 1140689 1142764 1142765 (view as bug list) Environment:
Last Closed: 2015-01-05 12:11:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1099618, 1099619, 1124329    
Bug Blocks: 1043430, 1113926, 1113929, 1134876, 1139219, 1140650, 1140688, 1140689, 1142764, 1142765    

Description Huzaifa S. Sidhpurwala 2014-06-27 05:44:21 UTC
Mozilla will EOL firefox/thunderbird 24-ESR on 13-Oct 2015. We need to rebase to 31-ESR after that.

Comment 3 John Walicki 2014-07-02 19:43:13 UTC
There is a misunderstanding in this BZ that Enterprise customers would wait for FF24 ESR to go EOL before starting their migration to FF 31 ESR.   We purposefully worked with Mozilla Development when the Extended Support Release was proposed to create an overlap of two release cycles.    As a result, Firefox 31 ESR becomes available two cycles before Firefox 24 ESR goes EOL.   Enterprises uses these 12 weeks to migrate hundreds of thousands of systems to the next ESR before the prior release goes out of support.  We don't want our desktop systems to be running on unsupported (and potentially vulnerable) releases of the older Firefox ESR.   During the transition both ESR releases are secured by backports of security errata.  After a Firefox ESR goes EOL, Mozilla continues to publish security errata (at least every 6 weeks) that could disclose security vulnerabilities in prior releases.   Those open source disclosures could tip off hackers on how to attack prior releases of Firefox.  This would put enterprises at risk, if they don't stay vigilant and current with their browser policy.

Comment 4 Martin Stransky 2014-07-07 10:21:43 UTC
We are going to provide Firefox 31 ESR rpm packages as soon as possible for testing purposes. So the customers can test their scenarios during the overlapping period and report issues to us.

Comment 5 John Walicki 2014-07-07 11:11:16 UTC
Thanks Martin! That works much better for us.

Comment 6 Martin Stransky 2014-07-09 15:05:52 UTC
To be clear here, Firefox team is going to provide test packages based on official Mozilla Firefox 31 ESR packages. So you can expect those packages after July 22 which is current release date by Mozilla.

Comment 7 John Walicki 2014-07-09 16:25:24 UTC
Great - Thanks for the clarification that the Red Hat test packages will be built from the official Firefox 31 ESR packages (after July 22)