Re: [Bug 404827] Re: Firefox doesn't warn about Attack Sites!?

[Alexander Sack]

On Tue, Sep 15, 2009 at 09:15:47AM -, Martin Pitt wrote:
> ** Tags added: verification-done
> ** Tags removed: verification-needed
> 
Plesae remember to also help verifying Bug 398205 ... which currently
holds back the rollout of this update. Would be great if we could get
this done today.

Thankw!

 - Alexander

-- 
Firefox doesn't warn about Attack Sites!?
https://bugs.launchpad.net/bugs/404827
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 404827] Re: Firefox doesn't warn about Attack Sites!?

[dje]

Sure, I've reinstalled using that PPA and it appears to work, at least on
the test page www.mozilla.com/firefox/its-an-attack.html. Version info
below:

Package: firefox-3.5
Source: firefox-3.5
Priority: optional
Section: web
Installed-Size: 3600
Maintainer: Ubuntu Mozilla Team 
Architecture: amd64
Version: 3.5.3+build1+nobinonly-0ubuntu0.9.04.2
Recommends: ubufox
Replaces: firefox-3.1
Suggests: firefox-3.5-gnome-support (=
3.5.3+build1+nobinonly-0ubuntu0.9.04.2), latex-xft-fonts, libthai0
Provides: firefox-3.1, www-browser
Depends: fontconfig, psmisc, debianutils (>= 1.16), xulrunner-1.9.1 (>=
1.9.1), libasound2 (>> 1.0.18), libatk1.0-0 (>= 1.20.0), libc6 (>= 2.4),
libcairo2 (>= 1.2.4), libfontconfig1 (>= 2.4.0), libfreetype6 (>= 2.2.1),
libgcc1 (>= 1:4.1.1), libglib2.0-0 (>= 2.16.0), libgtk2.0-0 (>= 2.16.0),
libnspr4-0d (>= 4.7.3-0ubuntu1~), libpango1.0-0 (>= 1.14.0), libstdc++6 (>=
4.1.1), firefox-3.5-branding | abrowser-3.5-branding
Conflicts: firefox-3.1 (<< 3.1~b4~hg20090317)
Filename:
pool/main/f/firefox-3.5/firefox-3.5_3.5.3+build1+nobinonly-0ubuntu0.9.04.2_amd64.deb
Size: 948266
MD5sum: 9a5f16d9fa98fdba40a22aea650ec6ee
SHA1: 506d8f48a59599f41a0080c414c80b5095131a10
Description: safe and easy web browser from Mozilla
 Firefox delivers safe, easy web browsing. A familiar user interface,
 enhanced security features including protection from online identity theft,
 and integrated search let you get the most out of the web.

Package: xulrunner-1.9.1
Source: xulrunner-1.9.1
Priority: optional
Section: devel
Installed-Size: 27496
Maintainer: Ubuntu Mozilla Team 
Architecture: amd64
Version: 1.9.1.3+build1+nobinonly-0ubuntu0.9.04.2
Recommends: libcanberra0
Depends: libasound2 (>> 1.0.18), libatk1.0-0 (>= 1.20.0), libc6 (>= 2.4),
libcairo2 (>= 1.6.0), libdbus-1-3 (>= 1.0.2), libdbus-glib-1-2 (>= 0.78),
libfontconfig1 (>= 2.4.0), libfreetype6 (>= 2.2.1), libgcc1 (>= 1:4.1.1),
libglib2.0-0 (>= 2.16.0), libgtk2.0-0 (>= 2.16.0), libhunspell-1.2-0 (>=
1.2.4), libidl0, libnspr4-0d (>= 4.7.3-0ubuntu1~), libnss3-1d (>= 3.12.3),
libpango1.0-0 (>= 1.14.0), libpython2.6 (>= 2.6), libsqlite3-0 (>= 3.6.10),
libstartup-notification0 (>= 0.8-1), libstdc++6 (>= 4.1.1), libx11-6,
libxrender1, libxt6, zlib1g (>= 1:1.1.4)
Conflicts: j2re1.4, libmozjs-dev, libxul-dev
Filename:
pool/main/x/xulrunner-1.9.1/xulrunner-1.9.1_1.9.1.3+build1+nobinonly-0ubuntu0.9.04.2_amd64.deb
Size: 9240614
MD5sum: 2ce3ecbbc3f8c73f5a0bf46e5b7bd578
SHA1: da954cc65bcc7bd8a52791dce60467a98611a0f5
Description: XUL + XPCOM application runner
 XULRunner is a single "gecko runtime" that can be used to bootstrap
 multiple XUL + XPCOM applications that are as rich as Firefox and
 Thunderbird.
 .
 XUL is Mozilla's XML based User Interface language that lets you build
 feature-rich cross platform applications. These applications are easily
 customized with alternative text, graphics and layout so that they can be
 readily branded or localized for various markets. Web developers already
 familiar with Dynamic HTML (DHTML) will learn XUL quickly and can start
 building applications right away.
 .
 XPCOM is a cross platform component model. It has multiple language
 bindings and IDL descriptions so programmers can plug their custom
 functionality into the framework and connect it with other components.

I was using the mozilla daily PPA, in which it was fixed, until now but I
downgraded firefox-3.5 and xulrunner-1.9.1 and to the security update
staging PPA versions and it remains fixed!

Thanks,
dje

2009/9/10 Alexander Sack 

> On Wed, Sep 09, 2009 at 05:14:55PM -, dje wrote:
> > Any updates on when/if this will make Jaunty? I've managed to get the
> > Karmic packages running on Jaunty and the problem is fixed
> >
>
> The fixes should be in the security update staging PPA by
> now. 
> https://edge.launchpad.net/~ubuntu-mozilla-security/+archive/ppa
>
> However, those package will have to take a weekend de-tour through
> jaunty-proposed before they get in the -security and -updates
> repository.
>
> Would be precious if you could verify if upgrading to that ppa fixes
> this bug for you.
>
>  - Alexander
>
> --
> Firefox doesn't warn about Attack Sites!?
> https://bugs.launchpad.net/bugs/404827
> You received this bug notification because you are a direct subscriber
> of the bug.
>

-- 
Firefox doesn't warn about Attack Sites!?
https://bugs.launchpad.net/bugs/404827
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 404827] Re: Firefox doesn't warn about Attack Sites!?

[Alexander Sack]

On Wed, Sep 09, 2009 at 05:14:55PM -, dje wrote:
> Any updates on when/if this will make Jaunty? I've managed to get the
> Karmic packages running on Jaunty and the problem is fixed
> 

The fixes should be in the security update staging PPA by
now. https://edge.launchpad.net/~ubuntu-mozilla-security/+archive/ppa

However, those package will have to take a weekend de-tour through
jaunty-proposed before they get in the -security and -updates
repository.

Would be precious if you could verify if upgrading to that ppa fixes
this bug for you.

 - Alexander

-- 
Firefox doesn't warn about Attack Sites!?
https://bugs.launchpad.net/bugs/404827
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 404827] Re: Firefox doesn't warn about Attack Sites!?

[Micah Gersten]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Yes, that build has the search engine plugins.  The ones in universe
do not.

tlu wrote:
> @Micah Gersten: I've only installed FF 3.5.4 in Jaunty and the fix
> works. But perhaps it's because I added
> https://launchpad.net/~ubuntu- mozilla-daily/+archive/ppa
>
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkqpO5QACgkQTniv4aqX/VmNXwCfb2Y7N3Io3IK0Ng7Nlv51oEBH
oWwAoIOqvcfF3UnWIa4QvUrHeWltOLkE
=uQDw
-END PGP SIGNATURE-

-- 
Firefox doesn't warn about Attack Sites!?
https://bugs.launchpad.net/bugs/404827
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 404827] Re: Firefox doesn't warn about Attack Sites!?

[Micah Gersten]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

In Jaunty you need firefox-3.0 installed alongside firefox-3.5 for
full functionality.  This has been fixed in Karmic.

Tim Besard wrote:
> I'd be interested in seeing this fix in jaunty too, as 3.5 now ships
> without any search engines.
>
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkqpGTYACgkQTniv4aqX/VmwMACcCGGpU5lpbT5mR3lrmiTP7L0R
haIAn03hPedGxDe6eZ/NjbJC2Lq24ke+
=Vr3l
-END PGP SIGNATURE-

-- 
Firefox doesn't warn about Attack Sites!?
https://bugs.launchpad.net/bugs/404827
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs