375991 - automatic updates turned off, firefox updated anyway

Status: RESOLVED DUPLICATE of bug 319198

(Toolkit :: Application Update, defect)

Description

[fred]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1


A message popped up that a new version of firefox has been downloaded. I opted not to restart, since I'm in the middle of something, then *another* window popped up telling me *again* that the new version will be installed when firefox is restarted.

I have automatic updates turned off in the preferences. If firefox is ignoring that preference, what other preferences are being ignored? What security preferences are being ignored?

Reproducible: Always

Steps to Reproduce:
1. turn off automatic updates
2. surf the web
3. watch for a message saying an update has been downloaded, and will be installed when firefox is restarted.
Actual Results:  
A message popped up that a new version of firefox has been downloaded. I opted not to restart, since I'm in the middle of something, then *another* window popped up telling me *again* that the new version will be installed when firefox is restarted.

Expected Results:  
I would expect that if I set a preference, firefox would honor that preference. There are serious security implications to ignoring preferences, particularly software installation preferences.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

(In reply to comment #0)
> 1. turn off automatic updates

Could you elaborate on exactly how you did this? Presumably you went to Preferences->Advanced->Update and selected "Ask me what I want to do"? That preference doesn't control whether or not Firefox checks for updates, it only controls whether it asks you before downloading it. Could it be that when you were prompted about the update, you said "Continue" at the download question, and then "Later" at the "Apply Update" stage?

Some related bugs: bug 372123, bug 334041 and bug 319198.

Given those other reports of similar issues, there may indeed be a bug in the software update code and/or preference panel that would cause this, but there's no evidence that any security preferences are affected, so I'm unhiding this bug.

Comment 2

[fred]

Attachment: update prefs window

I've attached a screen capture of how I disabled the automatic updates.

I'm not convinced this is not a security issue. I'm having software I did not ask for force fed to my computer.

Comment 3

[(not reading, please use [e-mail] instead)]

accepting and investigating.

I'll investigate if app.update.enabled is not properly being heeded.

> Some related bugs: bug 372123, bug 334041 and bug 319198.

I'll look into those as well, thanks for the triage, gavin.

Comment 4

[(not reading, please use [e-mail] instead)]

sorry for the bug spam, re-assigning bugs back to default owner if I'm not working actively on them.