OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Security-Discuss] Firefox update MDKSA-2005:174

From: Juergen Holm (holmtheorie.physik.uni-goettingen.de)
Date: Mon Oct 10 2005 - 13:09:01 CDT


On Mon, 10 Oct 2005, Vincent Danen wrote:

> * Juergen Holm <holmtheorie.physik.uni-goettingen.de> [2005-10-10 10:26:14 +0200]:
>
>>
>> Any hints?
>
> Didn't see this in testing on 3 different machines... not quite sure
> what the deal here is. Did you try logging out then logging back in
> again to try? Was firefox running when you did the update?

I had rebooted the Machine and logged in again same result.
I've then installed the old mozilla-firefox-1.0.2-9.1.102mdk, no problems
anymore!
So, there must be something bad in the firefox patches for my (I think
very mandriva vanilla) environment.

After a heavy investigations I found the reason why I am in trouble:
We are automaticaly copy a system wide
/usr/lib/mozilla-firefox-1.0.2/defaults/pref/firefox.js
to all of our computers to set up some defaults (proxy, etc).
In your last version of firefox mandriva decided to make use of

    pref("app.build_id", "2005031700");

But in all previous versions of firefox you are setting this in firefox.js:

    pref("app.build_id", "0000000000);

Why in the hell did you do this?
Is there another (=better) way to setup system wide defaults?

mfg,jh

In case of mail-probs (Anti-SPAM-conf) mail to jholmgwdg.removethis.de

----------------- IT Physik / Universitaet Goettingen ------------------
  _______________________ ________.--'-`--._____ Tel: +49 551 399363
|____==================_) \_'===================` FAX: +49 551 399263
        _,--___.-|__|-.______|=====/ `---' Post: Dr. J. A. Holm
        `---------._ ~~~~~| Friedrich-Hund-Platz 1
                    `-._ - - - ,' 37077 Goettingen
                        \_____,-' Deutschland
         PGP-Key: http://www.Theorie.Physik.Uni-Goe.de/jh.html
                         "Tee. Earl Grey. Heiss!"

____________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________