867337 - 5/27: Plugin CTP request: Flash 11.5.*-11.6.602.175

Status: VERIFIED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Alex Keybl [:akeybl]]

Plugin name: Flash
Plugin versions to block: 11.5.*-11.6.602.175
Applications, versions, and platforms affected: Firefox 17.0.4-17.0.* as well as Firefox 19 and up, on Windows/Mac
Block severity: CTP

Reasons: Ensure that users on old Flash versions are protected from critical security bugs. For now we're using a criteria of versions of Flash released >3wk ago with a max of 20% of our overall population receiving the CTP experience.

Comment 1

[Alex Keybl [:akeybl]]

If we can go out with these blocks this week or early next at the latest, we won't need to delay until after release of FF21.

Comment 2

[Alex Keybl [:akeybl]]

Jorge - do you think this deserves a blog post? Or should we wait until we finalize the criteria for blocking old versions of Flash?

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

(In reply to Alex Keybl [:akeybl] from comment #2)
> Jorge - do you think this deserves a blog post? Or should we wait until we
> finalize the criteria for blocking old versions of Flash?

I think it's worthwhile to announce this block along with whatever updated blocking policy we have, so that more people are aware of why and when we do things.

Comment 4

[Jorge Villalobos [:jorgev] (he/him)]

The block is now staged. I just updated the previous Flash 11 block: https://addons-dev.allizom.org/firefox/blocked/p178

Comment 5

[u279076]

(In reply to Jorge Villalobos [:jorgev] from comment #4)
> The block is now staged. I just updated the previous Flash 11 block:
> https://addons-dev.allizom.org/firefox/blocked/p178

Confirmed this is working as expected on staging. Detailed results are here:
https://wiki.mozilla.org/QA/Desktop_Firefox/Test_Plans/Bug_867337_CTP_Flash_11.5-11.6#Results

Please push live at Release Management's go.

Comment 6

[Alex Keybl [:akeybl]]

Didn't realize this was waiting on us (given comment 1). We have to wait till after the release now.

Comment 7

[Jorge Villalobos [:jorgev] (he/him)]

The block has been updated in production.

https://addons.mozilla.org/en-US/firefox/blocked/p178

Comment 8

[u279076]

Unfortunately I won't be able to test this today since this won't show up for an hour due to server caching. Setting Paul as QA Contact to test this overnight.

Comment 9

[Paul Silaghi, QA [:pauly]]

Confirmed this is working as expected on production. Detailed results are here:
https://wiki.mozilla.org/QA/Desktop_Firefox/Test_Plans/Bug_867337_CTP_Flash_11.5-11.6#Results