bugtraq - Re: Firefox Software Update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 28 Feb 2005 17:25:21 -0600
From: Michael Hampton <error10@...il.com>
To: bugtraq@...urityfocus.com
Subject: Re: Firefox Software Update


I can confirm that this problem also exists in Firefox 1.0.1 on Linux,
where there simply is no preference UI at all for Software Update, and
no apparent way to check for updates. In addition, I found by
right-clicking an extension, an Update option appears in the menu, but
it does nothing.


On Sun, 27 Feb 2005 20:29:36 +1100, Kai Howells <kai@...ketcat.info> wrote:
> It appears that there is a problem with the Firefox Software Update, at
> least in Firefox 1.0 on Windows and Mac OS X.
> 
> In Preferences -> Advanced -> Software Update there are checkboxes to
> Periodically check for updates to Firefox and My Extensions. It doesn't
> appear that this feature works at all. I've not been notified via this
> method that Firefox 1.0.1 has been released, even manually hitting the
> Check Now button (that takes a minute or so to do it's thing over a
> cable internet connection) happily reports back to me that there are no
> available updates.
> 
> Now, there are a couple of bugs, listed as critical in bugzilla, that
> confirm that I'm not alone with these problems, however they don't
> appear to be assigned to anyone at this stage. I believe that this
> issue deserves more attention than it's currently getting as security
> is one of the stated design goals of the project and with no working
> auto-update feature we're potentially being put in a worse position
> than with other vendor's alternatives that at least have monthly
> updates.
> 
> Regards,
> Kai Howells
> 
>