[opensuse-factory] Firefox Addons gone
So, all my addons in FF have been disabled due to some bug that renders them all unsigned as far as FF is concerned. The hotfix description from Mozilla talks about some Linux variants not getting the fix, so what are the plans from openSUSE? Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Wavetables for the Waldorf Blofeld: http://Synth.Stromeko.net/Downloads.html#BlofeldUserWavetables -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 04/05/2019 22.08, Achim Gratz wrote:
So, all my addons in FF have been disabled due to some bug that renders them all unsigned as far as FF is concerned. The hotfix description from Mozilla talks about some Linux variants not getting the fix, so what are the plans from openSUSE?
AFAIK, wait for upstream to correct the issue. -- Cheers / Saludos, Carlos E. R. (from openSUSE, Leap 15.1 x86_64 (ssd-test)) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Achim Gratz writes:
So, all my addons in FF have been disabled due to some bug that renders them all unsigned as far as FF is concerned. The hotfix description from Mozilla talks about some Linux variants not getting the fix, so what are the plans from openSUSE?
Fortunately, the Tumbleweed FF has been built with the ability to switch off the requirement for the addons to be signed. Switching the xpinstall.signatures.required in about:config to false regains the functionality of the addons (they are still marked as unsigned, but at least continue to work). There's various ways you can make them show up as verified again, but since FF will periodically re-run the check that's a fools errand. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Waldorf MIDI Implementation & additional documentation: http://Synth.Stromeko.net/Downloads.html#WaldorfDocs -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sun, May 05, 2019 at 09:11:06AM +0200, Achim Gratz wrote:
Achim Gratz writes:
So, all my addons in FF have been disabled due to some bug that renders them all unsigned as far as FF is concerned. The hotfix description from Mozilla talks about some Linux variants not getting the fix, so what are the plans from openSUSE?
Fortunately, the Tumbleweed FF has been built with the ability to switch off the requirement for the addons to be signed. Switching the xpinstall.signatures.required in about:config to false regains the functionality of the addons (they are still marked as unsigned, but at least continue to work). There's various ways you can make them show up as verified again, but since FF will periodically re-run the check that's a fools errand.
Please do not disable signature verification, this is a recipe for malware infections. If you have enabled studies, Mozilla had deployed a hotfix over that, and more is in their blog: https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firef... Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Marcus Meissner writes:
Please do not disable signature verification, this is a recipe for malware infections.
As long as I don't install any new addons that point is moot.
If you have enabled studies, Mozilla had deployed a hotfix over that, and more is in their blog:
https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firef...
Doesn't work with FF that isn't distributed by Mozilla themselves as detailed in the article, which was why I asked here. In addition, installing the hotfix manually also didn't solve the problem. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Wavetables for the Terratec KOMPLEXER: http://Synth.Stromeko.net/Downloads.html#KomplexerWaves -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Hi, Am 05.05.19 um 09:29 schrieb Achim Gratz:
Marcus Meissner writes:
Please do not disable signature verification, this is a recipe for malware infections.
As long as I don't install any new addons that point is moot.
If you have enabled studies, Mozilla had deployed a hotfix over that, and more is in their blog:
https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firef...
Doesn't work with FF that isn't distributed by Mozilla themselves as detailed in the article, which was why I asked here. In addition, installing the hotfix manually also didn't solve the problem.
all the different threads are mixing up a lot of things. We would need a better visibility which versions of Firefox on openSUSE are still affected. I'm running 66.0.3 as delivered for Tumbleweed and via the mozilla repo and I do not see any issues. The study was installed on my openSUSE built browser and nothing is "untrusted". In addition the article says: " Firefox ESR, Firefox for Android, and some versions of Firefox included ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ with Linux distributions will require separate updates ^^^^^^^^^^^^^^^^^^^^^^^^ " So far I have seen Firefox latest working as expected. And I read comments from people running ESR where the problem disappeared. So at this moment it's totally unclear to me if and where there is still an issue. Also this intermediate certificate issue as I understand it does not need to or can be fixed correctly with a Firefox update. Wolfgang -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Wolfgang Rosenauer writes:
We would need a better visibility which versions of Firefox on openSUSE are still affected. I'm running 66.0.3 as delivered for Tumbleweed and via the mozilla repo and I do not see any issues.
I still see them, on two separate machines, both fully up-to-date. Addons are verified once a day, so it can take a while for the problem to show up.
The study was installed on my openSUSE built browser and nothing is "untrusted".
It didn't install on my box after enabling studies, and yes I did wait the twelve hours it may take (based on the timer interval preference). I've installed the new intermediate cert that the study pushes manually to no effect. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Wavetables for the Terratec KOMPLEXER: http://Synth.Stromeko.net/Downloads.html#KomplexerWaves -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 5/5/19 9:49 AM, Achim Gratz wrote:
Wolfgang Rosenauer writes:
We would need a better visibility which versions of Firefox on openSUSE are still affected. I'm running 66.0.3 as delivered for Tumbleweed and via the mozilla repo and I do not see any issues. I still see them, on two separate machines, both fully up-to-date. Addons are verified once a day, so it can take a while for the problem to show up.
The study was installed on my openSUSE built browser and nothing is "untrusted". It didn't install on my box after enabling studies, and yes I did wait the twelve hours it may take (based on the timer interval preference). I've installed the new intermediate cert that the study pushes manually to no effect.
I went the 'studies' route on my straight-from-the-TW repositories Firefox 66, and the problem disappeared an hour later. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Achim Gratz writes:
It didn't install on my box after enabling studies, and yes I did wait the twelve hours it may take (based on the timer interval preference). I've installed the new intermediate cert that the study pushes manually to no effect.
I've reset all the update timers, reduced the update intervals to a few minutes, disabled and re-enabled the studies and restarted the browser. Finally both machines picked up the hotfix studies and re-verified all addons. Now setting all the preferences back to their defaults… Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Wavetables for the Terratec KOMPLEXER: http://Synth.Stromeko.net/Downloads.html#KomplexerWaves -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 04/05/2019 22.08, Achim Gratz wrote:
So, all my addons in FF have been disabled due to some bug that renders them all unsigned as far as FF is concerned. The hotfix description from Mozilla talks about some Linux variants not getting the fix, so what are the plans from openSUSE?
Updated MozillaFirefox packages were released for Leap yesterday https://bugzilla.suse.com/show_bug.cgi?id=1134126 The Factory submission in https://build.opensuse.org/request/show/700898 was also accepted 40h ago so 66.0.4 will probably be in the next snapshot. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
tirsdag den 7. maj 2019 15.10.20 CEST skrev Bernhard M. Wiedemann:
On 04/05/2019 22.08, Achim Gratz wrote:
So, all my addons in FF have been disabled due to some bug that renders them all unsigned as far as FF is concerned. The hotfix description from Mozilla talks about some Linux variants not getting the fix, so what are the plans from openSUSE?
Updated MozillaFirefox packages were released for Leap yesterday https://bugzilla.suse.com/show_bug.cgi?id=1134126
Workz on 15.0. Thanks.
The Factory submission in https://build.opensuse.org/request/show/700898 was also accepted 40h ago so 66.0.4 will probably be in the next snapshot.
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Dne úterý 7. května 2019 15:10:20 CEST, Bernhard M. Wiedemann napsal(a):
On 04/05/2019 22.08, Achim Gratz wrote:
So, all my addons in FF have been disabled due to some bug that renders them all unsigned as far as FF is concerned. The hotfix description from Mozilla talks about some Linux variants not getting the fix, so what are the plans from openSUSE?
Updated MozillaFirefox packages were released for Leap yesterday https://bugzilla.suse.com/show_bug.cgi?id=1134126
The Factory submission in https://build.opensuse.org/request/show/700898 was also accepted 40h ago so 66.0.4 will probably be in the next snapshot.
Yes, Tumbleweed snapshot 20190506 released today contains MozillaFirefox 66.0.4 solving the issue. Thank You for the fix! -- Vojtěch Zeisek Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/ https://trapa.cz/
participants (8)
-
Achim Gratz -
Bernhard M. Wiedemann -
Carlos E. R. -
Marcus Meissner -
Martin Schlander -
Rhaytana -
Vojtěch Zeisek -
Wolfgang Rosenauer