Your message dated Mon, 20 Nov 2017 06:52:06 +0900
with message-id <[email protected]>
and subject line Re: Bug#882156: firefox-esr: Upgrading firefox should somehow
prompt users to restart running instances
has caused the Debian Bug report #882156,
regarding firefox-esr: Upgrading firefox should somehow prompt users to restart
running instances
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
882156: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882156
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: firefox-esr
Version: 52.5.0esr-1~deb9u1
Severity: normal
Dear Maintainer,
If firefox is upgraded to a new version, running instances of
the old version are not stopped and continue to function.
Consider, for example, an unattended-upgrades process that
installs security updates automatically. Users may continue
to run instances of old insecure versions for long periods
with no indication that an upgrade has been installed.
Generally, Debian will restart long-running system processes
(i.e. daemons) in this sort of situation but not user processes.
This is a particular issue for firefox because of its security
characteristics.
It's not obvious how to fix this; simply killing instances of the
old version would be unfriendly to users who may lose work;
a message from apt might be emailed to root but will not reach
the actual users. Any thoughts?
Thanks, Phil.
-- System Information:
Debian Release: 9.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: arm64 (aarch64)
--- End Message ---
--- Begin Message ---
On Sun, Nov 19, 2017 at 05:25:07PM +0000,
[email protected] wrote:
> Source: firefox-esr
> Version: 52.5.0esr-1~deb9u1
> Severity: normal
>
> Dear Maintainer,
>
> If firefox is upgraded to a new version, running instances of
> the old version are not stopped and continue to function.
>
> Consider, for example, an unattended-upgrades process that
> installs security updates automatically. Users may continue
> to run instances of old insecure versions for long periods
> with no indication that an upgrade has been installed.
> Generally, Debian will restart long-running system processes
> (i.e. daemons) in this sort of situation but not user processes.
> This is a particular issue for firefox because of its security
> characteristics.
>
> It's not obvious how to fix this; simply killing instances of the
> old version would be unfriendly to users who may lose work;
> a message from apt might be emailed to root but will not reach
> the actual users. Any thoughts?
That's not limited to firefox. That's also true of libreoffice, gnome,
chromium, etc. Maybe open a general bug or a discussion on debian-devel.
Mike
--- End Message ---
