696348 - Localized versions of What's New page don't detect out-of-date Flash

Status: RESOLVED WONTFIX

(www.mozilla.org :: General, defect)

Description

[Scoobidiver (away)]

Attachment: Plugincheck and What's new page screenshots

While plugincheck and en-US What's new pages detect an out-of-date Flash 10.3.183.10, localized versions of What's New page don't detect out-of-date Flash.

For instance: http://www.mozilla.org/fr/firefox/7.0.1/whatsnew/

Comment 1

[Scoobidiver (away)]

Assuming each time the en-US What's New page displays a Flash warning, users update their Flash, every en-US users should have a Flash version above 11.0.1.152 (latest warning in 7.0.1 What's New page).
According to 8.0 stats correlations, 56% of all users has a Flash version above 11.0.1.152 (see below).
According to http://input.mozilla.com/en-US/?q=&product=firefox&version=8.0&date_start=&date_end=, 53% of all users use a en-US version.
So it means that non US users have more vulnerable Flash versions than US users.

Here are Flash crash correlations in:
* 8.0 where 67% of users uses a vulnerable Flash version:
9.0.16.0	0.01%
9.0.28.0	0.02%
9.0.45.0	0.36%
9.0.47.0	0.06%
9.0.115.0	0.22%
9.0.124.0	0.26%
10.0.0.525	0.02%
10.0.1.218	0.07%
10.0.2.26	0.04%
10.0.2.54	0.22%
10.0.12.10	0.04%
10.0.12.36	1.67%
10.0.22.87	3.57%
10.0.32.18	4.25%
10.0.42.34	2.60%
10.0.45.2	3.43%
10.1.50.426	0.03%
10.1.51.45	0.03%
10.1.51.66	0.10%
10.1.51.95	0.02%
10.1.52.14	0.04%
10.1.53.21	0.02%
10.1.53.55	0.01%
10.1.53.64	1.08%
10.1.53.7	0.02%
10.1.82.76	0.52%
10.1.85.3	0.61%
10.1.102.64	2.18%
10.2.151.49	0.02%
10.2.152.14	0.03%
10.2.152.21	0.02%
10.2.152.26	0.87%
10.2.152.32	1.09%
10.2.153.1	1.22%
10.2.154.12	0.12%
10.2.159.1	1.53%
10.2.161.23	0.16%
10.3.180.42	0.03%
10.3.180.65	0.03%
10.3.181.5	0.06%
10.3.181.14	1.57%
10.3.181.22	0.55%
10.3.181.26	2.44%
10.3.181.34	2.16%
10.3.183.5	2.82%
10.3.183.7	4.13%
10.3.183.10	3.94%
10.3.183.11	0.20%
11.0.0.58	0.01%
11.0.1.60	0.12%
11.0.1.98	0.06%
11.0.1.129	0.12%
11.0.1.152     22.95%
11.1.102.55    33.16%

* 3.6.24 where 89% of users uses a vulnerable Flash version:
6.0.79.0	0.01%
8.0.22.0	0.08%
8.0.24.0	0.01%
9.0.16.0	0.01%
9.0.28.0	0.03%
9.0.45.0	0.29%
9.0.47.0	0.10%
9.0.115.0	0.18%
9.0.124.0	0.44%
9.0.151.0	0.01%
9.0.262.0	0.01%
10.0.0.525	0.02%
10.0.1.218	0.14%
10.0.2.26	0.01%
10.0.2.54	0.14%
10.0.12.10	0.08%
10.0.12.36	2.23%
10.0.22.87	4.74%
10.0.32.18	5.82%
10.0.42.34	4.14%
10.0.45.2	6.16%
10.1.51.45	0.08%
10.1.51.66	0.23%
10.1.51.95	0.06%
10.1.52.14	0.06%
10.1.53.7	0.06%
10.1.53.21	0.06%
10.1.53.38	0.07%
10.1.53.55	0.03%
10.1.53.60	0.02%
10.1.53.64	3.04%
10.1.82.76	2.24%
10.1.85.3	2.71%
10.1.102.64	8.46%
10.2.151.49	0.02%
10.2.152.14	0.07%
10.2.152.21	0.02%
10.2.152.26	2.24%
10.2.152.32	2.87%
10.2.153.1	2.19%
10.2.154.12	0.31%
10.2.159.1	2.24%
10.2.161.22	0.03%
10.2.161.23	0.20%
10.3.180.42	0.02%
10.3.180.65	0.06%
10.3.181.5	0.02%
10.3.181.14	2.10%
10.3.181.22	0.78%
10.3.181.26	3.32%
10.3.181.34	2.70%
10.3.183.5	3.16%
10.3.183.7	4.66%
10.3.183.10	3.88%
10.3.183.11	1.50%
11.0.1.60	0.09%
11.0.1.98	0.02%
11.0.1.129	0.03%
11.0.1.152     16.27%
11.1.102.55    10.59%

Comment 2

[Pascal Chevrel:pascalc (PTO until April 26)]

We no longer show a whatsnew page to our users in the rapid release cycle

Comment 3

[Scoobidiver (away)]

I though it was restricted to the 8.0 What's New page because of the third party add-ons warning at the first startup. Indeed, http://www.mozilla.org/en-US/firefox/8.0/whatsnew/ is redirected but http://www.mozilla.org/en-US/firefox/9.0/whatsnew/ is not.

Anyway, a way to warn regularly users for outdated plugins should be found (e.g. plugincheck page displayed once every 6 weeks).

Comment 4

[Scoobidiver (away)]

(In reply to Pascal Chevrel:pascalc from comment #2)
> We no longer show a whatsnew page to our users in the rapid release cycle
It's only on release driver request:
https://wiki.mozilla.org/Silent_Update_whatsnew

Comment 5

[Kohei Yoshino [:kohei]]

The Flash detection has been removed also from the en-US whatsnew pages.