1036986 - Update mozmill-ci machines to latest Flash, Java and OS updates

Status: RESOLVED FIXED

(Mozilla QA Graveyard :: Infrastructure, defect)

Description

[Cosmin Malutan, [:cosmin-malutan]]

Microsoft has released a new security update:
https://technet.microsoft.com/library/security/ms14-jul

Also Flash:
http://helpx.adobe.com/security/products/flash-player/apsb14-17.html

Comment 1

[Andrei Eftimie]

Daniel, could you please take this.

Comment 2

[Daniel Gherasim]

Looks like we also have updates for the other Mac OS X nodes (10.7 & 10.8).
http://support.apple.com/kb/HT6296

Update OS X Mavericks v10.9.4 is already done by Andrei last week.

Comment 3

[Daniel Gherasim]

I've updated on staging this nodes:
OSX
  mm-osx-106 - N/A
  mm-osx-107 - OS UPDATED / FLASH - NEED TO BE ROOT
  mm-osx-108 - OS UPDATED / FLASH - 14.0.0.145
  mm-osx-109 - OS UPDATED / FLASH - 14.0.0.145

Ubuntu:
  mm-ub-1204-32 - OS UPDATED / FLASH - 11,2,202,394

--
Henrik, on OSX 107 thats puppetized, I can't connect through VNC using the private ssh key. 
Any suggestions here or how I can make the updates ? 

(using > ssh [e-mail] works!)

Comment 4

[Henrik Skupin [:whimboo][⌚️UTC+2] (away 07/21 - 08/08)]

(In reply to daniel.gherasim from comment #3)
>   mm-osx-107 - OS UPDATED / FLASH - NEED TO BE ROOT

No update needed here for Flash. This will happen via puppet. Only OS updates have to be done so far for puppet controled hosts.

> Henrik, on OSX 107 thats puppetized, I can't connect through VNC using the
> private ssh key. 

VNC and SSH are totally different services. So no, you cannot use any private SSH key for that. But as said above there is no need to update Flash.

Comment 5

[Daniel Gherasim]

Finished staging:
OSX
  mm-osx-108 - OS UPDATED / FLASH - 14.0.0.145 / JAVA - 7u65
  mm-osx-109 - OS UPDATED / FLASH - 14.0.0.145 / JAVA - 7u65

Ubuntu:
  mm-ub-1204-32 - OS UPDATED / FLASH - 11,2,202,394 / JAVA - 7u65
  mm-ub-1310-32 - OS UPDATED / FLASH - 11,2,202,394 / JAVA - 7u65
  mm-ub-1310-64 - OS UPDATED / FLASH - 11,2,202,394 / JAVA - 7u65

Windows:
  mm-win-7-32 - OS UPDATED / FLASH - 14.0.0.145 (debug version) / JAVA - 7u65
  mm-win-7-64 - OS UPDATED / FLASH - 14.0.0.145 (debug version) / JAVA - 7u65
  mm-win-81-32 - OS UPDATED / FLASH - 14.0.0.145 (debug version) / JAVA - 7u65
  mm-win-81-64 - OS UPDATED / FLASH - 14.0.0.145 (debug version) / JAVA - 7u65
  mm-win-xp-32 - N/A / FLASH - 14.0.0.145 / JAVA - 7u65

Others:
--
mm-osx-106 - N/A
mm-ub-1204-64 - OFFLINE BY HENRIK / * PUPPETIZED
mm-osx-107 - OS UPDATED / * PUPPETIZED

Comment 6

[Andreea Matei [:AndreeaMatei]]

I'll continue on production.

Comment 7

[Andreea Matei [:AndreeaMatei]]

Updated so far:
OS X: 10.7 all, 10.8 and 10.9 just nodes 3 and 4
Ubuntu: 12.04-32 all, 12.04-64, 13.10-32 and 13.10-64 - nodes 3 and 4.

Tomorrow I'll finish the 4 OSX nodes and the rest of 6 ubuntu at least.

Comment 8

[Andreea Matei [:AndreeaMatei]]

Finished OS X and Ubuntu, started Windows - finished win-7-32 all 4 machines.

Comment 9

[Andrei Eftimie]

I'll take over and finish all Windows machines.

Comment 10

[Andrei Eftimie]

OSX and Ubuntu done by Andreea

Windows
===
> mm-win-xp-32-1 Flash 14.0.0.145 && Java ju65
> mm-win-xp-32-2 Flash 14.0.0.145 && Java ju65
> mm-win-xp-32-3 Flash 14.0.0.145 && Java ju65
> mm-win-xp-32-4 Flash 14.0.0.145 && Java ju65
> mm-win-vista-32-1 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-vista-32-2 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-vista-32-3 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-vista-32-4 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-7-32-1 OS updates && Flash 14.0.0.145 && Java ju65 // only checked versions. was done previously by Andreea
> mm-win-7-32-2 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-7-32-3 OS updates && Flash 14.0.0.145 && Java ju65 // only checked versions. was done previously by Andreea
> mm-win-7-32-4 OS updates && Flash 14.0.0.145 && Java ju65 // only checked versions. was done previously by Andreea
> mm-win-7-64-1 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-7-64-2 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-7-64-3 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-7-64-4 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-32-1 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-32-2 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-32-3 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-32-4 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-64-1 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-64-2 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-64-3 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-8-64-4 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-81-32-1 OS updates && Flash 14.0.0.145 && Java ju65 // flash: notify updates
> mm-win-81-32-2 OS updates && Flash 14.0.0.145 && Java ju65 // flash: notify updates
> mm-win-81-32-3 OS updates && Flash 14.0.0.145 && Java ju65 // flash: notify updates
> mm-win-81-32-4 OS updates && Flash 14.0.0.145 && Java ju65 // flash: notify updates
> mm-win-81-64-1 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-81-64-2 OS updates && Flash 14.0.0.145 && Java ju65 // flash: notify updates
> mm-win-81-64-3 OS updates && Flash 14.0.0.145 && Java ju65
> mm-win-81-64-4 OS updates && Flash 14.0.0.145 && Java ju65

==

I have 5 machines where Flash is on "Notify Me" about updates, and I haven't found a way of changing that. We use the Debug version of Flash, and that doesn't prompt to set the update policy during install. You could right-click on a flash video > Global Settings > Advanced and there are the update settings there. The problem is that they are all disabled (grayed out).

Searching for a solution for this.

Comment 11

[Andrei Eftimie]

Ok, all windows machines have Flash update policy set to "Never check for updates".

To fix this, I've edited the file in:
> C:/Windows/System32/Macromed/Flash/mms.cfg
In some cases the path was:
> C:/Windows/SystemWOW64/Macromed/Flash/mms.cfg

To have:
> AutoUpdateDisable=1

== 

Also note that because of permissions issues, the easiest way to edit that file is to move it out of System32 (eg: drag to desktop). Edit the file. Drag it back. I've had a very hard time trying to edit the file in place.

Comment 12

[Henrik Skupin [:whimboo][⌚️UTC+2] (away 07/21 - 08/08)]

(In reply to Andrei Eftimie from comment #10)
> doesn't prompt to set the update policy during install. You could
> right-click on a flash video > Global Settings > Advanced and there are the
> update settings there. The problem is that they are all disabled (grayed
> out).

Usually you will run the control panel as administrator. So there is no need to manually change the settings in the config file yourself.

Comment 13

[Andrei Eftimie]

(In reply to Henrik Skupin (:whimboo) from comment #12)
> (In reply to Andrei Eftimie from comment #10)
> > doesn't prompt to set the update policy during install. You could
> > right-click on a flash video > Global Settings > Advanced and there are the
> > update settings there. The problem is that they are all disabled (grayed
> > out).
> 
> Usually you will run the control panel as administrator. So there is no need
> to manually change the settings in the config file yourself.

It had something to do with not having write permissions in the System32/Macromed folder.
For those 4-5 affected machines I had to fix it manually as documented in comment 11.

Comment 14

[Henrik Skupin [:whimboo][⌚️UTC+2] (away 07/21 - 08/08)]

If that is not related to the admin privileges you really want to file a bug so we can get this investigated and fixed. Especially when we want to make use of Puppet on Windows.