[opensuse] A Day After Firefox Upgrade 3.5 -> 3.6 Many Add-On Updates — Suspicious? (11.3)
Hi, Yesterday I installed the Firefox 3.5 -> 3.6 upgrade that was offered by YaST Online Update. After restarting the browser (which I'd quit before commencing the upgrade installation) it checked my installed add-ons, found one (a theme) to be incompatible and disabled it. The next day (today) when I started Firefox up, it presented updates for several of my add-ons, all of them seemingly unrelated to each other. Since I found the conjunction of so many updates suspicious, I thought I'd ask if anyone's aware of any exploits being propagated via Firefox add-ons. These add-ons were listed as having updates: Firebug (1.5.3 -> 1.5.4) Novell Moonlight (2.2 -> 2.3) TabGroups Manager (2009.10.02.05 -> 2010.06.20.02) Tab Mix Plus (0.3.8.2 -> 0.3.8.4) Weave Sync (1.2.3 -> 1.4.4) Xmarks (3.6.14 -> 3.8.6) Does anyone have any insights on these? Is it a coincidence? Were the updates enabled by the upgrade from Firefox 3.5 to 3.6? If so, why were they not detected until the second restart of Firefox following the upgrade? The incompatibility of the theme was detected immediately. Randall Schulz -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hi,
Yesterday I installed the Firefox 3.5 -> 3.6 upgrade that was offered by YaST Online Update. After restarting the browser (which I'd quit before commencing the upgrade installation) it checked my installed add-ons, found one (a theme) to be incompatible and disabled it. The next day (today) when I started Firefox up, it presented updates for several of my add-ons, all of them seemingly unrelated to each other. Since I found the conjunction of so many updates suspicious, I thought I'd ask if anyone's aware of any exploits being propagated via Firefox add-ons.
These add-ons were listed as having updates:
Firebug (1.5.3 -> 1.5.4) Novell Moonlight (2.2 -> 2.3) TabGroups Manager (2009.10.02.05 -> 2010.06.20.02) Tab Mix Plus (0.3.8.2 -> 0.3.8.4) Weave Sync (1.2.3 -> 1.4.4) Xmarks (3.6.14 -> 3.8.6)
Does anyone have any insights on these? Is it a coincidence? Were the updates enabled by the upgrade from Firefox 3.5 to 3.6? If so, why were they not detected until the second restart of Firefox following the upgrade? The incompatibility of the theme was detected immediately.
Randall Schulz
In my 3.6 upgrade with 16 extensions, 1 was updated. No issues. I also use Tab Mix Plus; the update to 0.3.8.4 had been done previously. Perhaps your automatic updates wasn't working? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On 09/19/2010 10:01 AM, Randall R Schulz wrote:
These add-ons were listed as having updates:
Firebug (1.5.3 -> 1.5.4) Novell Moonlight (2.2 -> 2.3) TabGroups Manager (2009.10.02.05 -> 2010.06.20.02) Tab Mix Plus (0.3.8.2 -> 0.3.8.4) Weave Sync (1.2.3 -> 1.4.4) Xmarks (3.6.14 -> 3.8.6)
Randall, That all looks normal. I know in the past 2 FF and tbird updates I have had a lot of updates on themes + extensions. It's not uncommon for me to see 3-4 every couple of days. If you are still concerned, just go to the addons site and check the latest versions (which I'll bet will jive with the proposed updates). I haven't heard anything on any new moz exploits. HTH -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
David C. Rankin -
dwgallien -
Randall R Schulz