Forum der Gemeinschaft Firefox

Tenable is reporting 128.1 and 128.2 as affected by vulnerabilities covered in CVEs' in their plugin 205009 ( https://www.tenable.com/plugins/nessus/205009 ). The rule they are applying is: Mozilla Firefox < 129 That implies that 128.1 and 128.2 are also < then 129 -> therefor vulnerable. Can you please answer 2 questions:

• are Firefox 128.1 and 128.2 part of the same branch of product as 129? Or are they necessarily ESR?
• are Firefox 128.1 and 128.2 affected by CVEs' covered in their TENABLE plugin 205009?

I have a IP intercom that only works with Firefox 127.0.2 Now Firefox automatically upgrades to the latest version and I'm unable to prevent this. I'm unable to manage my intercom with the latest version. How do I turn off automatic updates.

Many of Linux Distributions take firefox binaries from https://packages.mozilla.org/apt/ as given in the Mozilla Knowlege Base Article Install Firefox on Linux. In this article there is a option to Install Firefox .deb package for Debian-based distributions.

However the binaries and libraries that are hosted in Firefox repositories are not compiled with the PIE/PIC flag. That prevents Firefox browser from using ASLR capabilities and to a large degree prevent Buffer overflows attacks. Please refer to the output given below for more details.

$ file -e elf /opt/firefox/firefox /opt/firefox/firefox: ELF 64-bit LSB executable, x86-64, version 1 (SYSV) $ $ readelf -h /opt/firefox/firefox ELF Header:

 Magic:   7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 
 Class:                             ELF64
 Data:                              2's complement, little endian
 Version:                           1 (current)
 OS/ABI:                            UNIX - System V
 ABI Version:                       0
 Type:                              EXEC (Executable file)
 Machine:                           Advanced Micro Devices X86-64
 Version:                           0x1

The output of the first command is ELF 64-bit LSB executable, which indicates that it is not a PIE executable. If it had been a PIE executable then it would have been ELF 64-bit LSB pie executable. Similarly the output of the second command has a Key, Type, whose value is EXEC (Executable file). However for a PIE binary the value would be DYN (Position-Independent Executable file).

Can Mozilla please compile the binaries and shared libraries with the PIE/PIC flag and then host them in its repositories? Many of Linux Distros do not have the bandwidth to take the source and compile binaries for different architects and are dependent on Mozilla to provide the same. Doing so would be appreciated and would help in enhancing safety of Linux users who use Firefox as their primary browser.

PIE = Position Independent Executable PIC = Position Independent Code ASLR = Address Space Layout Randomisation. PIC and PIE are used interchangeably and imply the same thing.

Last Pass Firefox extension was working on my Windows 10 computer until 3 weeks ago. Now when I click on extension it hangs. (the extension is red red in tool bar so I know it is correctly installed).. I was able to solve by deleting Firefox extension and instead installed Last Pass 4.0 directly from Last Pass's site. Please fix your extension. This is not a Last Pass issue.

Tom Weaver

hello,

is just wanted to know if the new feature "Users in the United States and Canada can view local weather directly on the new tab page. Additionally, they have the option to select a specific location to see current weather conditions.", which was released with the version 130.0 also comes to europe someday?

I cannot open firefox. The error box says that the platform version 130.0.1 is not compatible with the maxversion 130.0 or the minversion 130.0. It looks as if the upgrade to 130.0.1 was incomplete. I need to have this fixed

Hello, 1. I can't run Firefox - there is error appeared as screen shot. I'm using Chrome to make it this report and Firefox disappoint me again... 2. Before i had problem with Firefox ver. 30.0.0 - 32bit version was stack on some webpages so I changed for 64bit version and problem gone, but now see pt.1.

Regards Greg

Today I manually download and rename the firefox executable so a script that runs as a Sandbox is spun up is ready to go immediately. But that entails me manually downloading, then renaming the installer to a name that the script always knows. And often the setup file gets updated on the web and I am running the prior version, or older depending on when I went thru that manual process.

So I am back looking for a way to either find a way to download the newest installer each time or find a way to kick off the internal updater right after its currently scripted install completes. Either could work.

I hate having to use Edge as its the browser MS automatically installs when a sandbox is spun up.

Or are there other ideas on how to accomplish this? Thanks, Bill

Every time I open Firefox recently, and the Yahoo.com web page starts up, I get an annoying prompt from global privacy control, that asks to allow or not allow. IT'S ANNOYING. I went into the settings for that apparent add on feature, that I DIDN'T add, and set all 5 settings to FALSE, but the program still pops up. It ALSO screws up the format of the Firefox web page, and shows the Yahoo News feed totally different and it's also VERY ANNOYING HOW do I totally get rid of the global privacy control? I can select the Firefox settings under security to tell web pages to not sell the info, as far as I know, correct, so I don't need the retarded global add on? ?? I want Firefox news feed like it was before the update. Thank you very much... HOPEFULLY!

Just received notice of "Firefox Review Checker - Ensure review authenticity in your online shopping" tool. I realize it's new and Mozilla is looking for customer input from using the tool. How much does it cost? Thanks for your help.

hello.

I had the to try to open Firefox, to do something, but you showed me this message: 

error platform version 130.0.1 is not compatible with min version >=130.0 max version <=130.0 what do you suppose me, to do now?

I have got a message: "Error: Platform version '130.0.1' is not compatible with minVersion >=130 maxVersion< =130.0" I can´t get any connection. What am I going to do and how can you help me?

Regards Mats Å.

This has occurred before and I found a page with all the icons you could upload to address bar. I want the envelope that indicates to email the link of the page I am on to someone in my email account. I've used it for years but when I go to find, it's always difficult.

There used to be an option for a separate search window on the address bar. I found it really useful especially for a instant spell check. The option was there then after an update, it wasn't. WHY WHY WHY????? Is there any way for me to put it back? I hate using the address bar to search! Unless I open a new tab or window, regaining control of the prior tab/window is difficult.

Hello--I am using 130.0.1. Now there is a "tmp[xx]" with a large black dot at the right end of the address bar. The number [xx] changes for each tab. Whazzup with this, and what does it mean?

Thanks--Jonn