Re: [Security-Discuss] Firefox update MDKSA-2005:174

Le lundi 10 octobre 2005 à 21:29 -0600, Vincent Danen a écrit :
> * Juergen Holm <holm-cReBFXHS9TI9HBOmPq+WUkOITlckZahNbaYZWgcc/[email protected]> [2005-10-10 20:09:01 +0200]:
> 
> > >>Any hints?
> > >
> > >Didn't see this in testing on 3 different machines... not quite sure
> > >what the deal here is.  Did you try logging out then logging back in
> > >again to try?  Was firefox running when you did the update?
> > 
> > I had rebooted the Machine and logged in again same result.
> > I've then installed the old mozilla-firefox-1.0.2-9.1.102mdk, no problems
> > anymore!
> > So, there must be something bad in the firefox patches for my (I think
> > very mandriva vanilla) environment.
> > 
> > After a heavy investigations I found the reason why I am in trouble:
> > We are automaticaly copy a system wide
> > /usr/lib/mozilla-firefox-1.0.2/defaults/pref/firefox.js
> > to all of our computers to set up some defaults (proxy, etc).
> 
> This doesn't sound very vanilla to me.
> 
> > In your last version of firefox mandriva decided to make use of
> > 
> >    pref("app.build_id", "2005031700");
> > 
> > But in all previous versions of firefox you are setting this in firefox.js:
> > 
> >    pref("app.build_id", "0000000000);
> > 
> > Why in the hell did you do this?
> > Is there another (=better) way to setup system wide defaults?
> 
> No idea... I'll let Fred reply to this one... he's the expert.  I don't
> even know what "app.build_id" is for.

Yes, I changed this to follow current cooker packages.

In old packages, the buildid was incorrect ("000000000"), causing
problems when upgrading releases between releases, so I've fixed this in
security updates as well. I'm sorry it has this unfortunate effect but
it was for the best.

-- 
Frederic Crozat <fcrozat-4qZELD6FgxhWk0Htik3J/[email protected]>
Mandriva

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________