Φόρουμ κοινότητας «Firefox»

Tenable is reporting 128.1 and 128.2 as affected by vulnerabilities covered in CVEs' in their plugin 205009 ( https://www.tenable.com/plugins/nessus/205009 ). The rule they are applying is: Mozilla Firefox < 129 That implies that 128.1 and 128.2 are also < then 129 -> therefor vulnerable. Can you please answer 2 questions:

• are Firefox 128.1 and 128.2 part of the same branch of product as 129? Or are they necessarily ESR?
• are Firefox 128.1 and 128.2 affected by CVEs' covered in their TENABLE plugin 205009?

I have a IP intercom that only works with Firefox 127.0.2 Now Firefox automatically upgrades to the latest version and I'm unable to prevent this. I'm unable to manage my intercom with the latest version. How do I turn off automatic updates.

Many of Linux Distributions take firefox binaries from https://packages.mozilla.org/apt/ as given in the Mozilla Knowlege Base Article Install Firefox on Linux. In this article there is a option to Install Firefox .deb package for Debian-based distributions.

However the binaries and libraries that are hosted in Firefox repositories are not compiled with the PIE/PIC flag. That prevents Firefox browser from using ASLR capabilities and to a large degree prevent Buffer overflows attacks. Please refer to the output given below for more details.

$ file -e elf /opt/firefox/firefox /opt/firefox/firefox: ELF 64-bit LSB executable, x86-64, version 1 (SYSV) $ $ readelf -h /opt/firefox/firefox ELF Header:

 Magic:   7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 
 Class:                             ELF64
 Data:                              2's complement, little endian
 Version:                           1 (current)
 OS/ABI:                            UNIX - System V
 ABI Version:                       0
 Type:                              EXEC (Executable file)
 Machine:                           Advanced Micro Devices X86-64
 Version:                           0x1

The output of the first command is ELF 64-bit LSB executable, which indicates that it is not a PIE executable. If it had been a PIE executable then it would have been ELF 64-bit LSB pie executable. Similarly the output of the second command has a Key, Type, whose value is EXEC (Executable file). However for a PIE binary the value would be DYN (Position-Independent Executable file).

Can Mozilla please compile the binaries and shared libraries with the PIE/PIC flag and then host them in its repositories? Many of Linux Distros do not have the bandwidth to take the source and compile binaries for different architects and are dependent on Mozilla to provide the same. Doing so would be appreciated and would help in enhancing safety of Linux users who use Firefox as their primary browser.

PIE = Position Independent Executable PIC = Position Independent Code ASLR = Address Space Layout Randomisation. PIC and PIE are used interchangeably and imply the same thing.

Last Pass Firefox extension was working on my Windows 10 computer until 3 weeks ago. Now when I click on extension it hangs. (the extension is red red in tool bar so I know it is correctly installed).. I was able to solve by deleting Firefox extension and instead installed Last Pass 4.0 directly from Last Pass's site. Please fix your extension. This is not a Last Pass issue.

Tom Weaver

hello,

is just wanted to know if the new feature "Users in the United States and Canada can view local weather directly on the new tab page. Additionally, they have the option to select a specific location to see current weather conditions.", which was released with the version 130.0 also comes to europe someday?

I cannot open firefox. The error box says that the platform version 130.0.1 is not compatible with the maxversion 130.0 or the minversion 130.0. It looks as if the upgrade to 130.0.1 was incomplete. I need to have this fixed

Hello, 1. I can't run Firefox - there is error appeared as screen shot. I'm using Chrome to make it this report and Firefox disappoint me again... 2. Before i had problem with Firefox ver. 30.0.0 - 32bit version was stack on some webpages so I changed for 64bit version and problem gone, but now see pt.1.

Regards Greg

Today I manually download and rename the firefox executable so a script that runs as a Sandbox is spun up is ready to go immediately. But that entails me manually downloading, then renaming the installer to a name that the script always knows. And often the setup file gets updated on the web and I am running the prior version, or older depending on when I went thru that manual process.

So I am back looking for a way to either find a way to download the newest installer each time or find a way to kick off the internal updater right after its currently scripted install completes. Either could work.

I hate having to use Edge as its the browser MS automatically installs when a sandbox is spun up.

Or are there other ideas on how to accomplish this? Thanks, Bill

Help/About Firefox tells me I have - ver 112.0.1 (64-bit)

There is no option to automatically update.

I have downloaded this zip file - firefox-130.0(1).tar.bz2

QUESTION - How do I instal the update  ? - or can I not with my system - as below

Xtra-PC - Turbo 32 × 1 (purchased 2019)

Ubuntu 18.04.6 LTS

Running on 2010 Acer 4741G computer. 4Gb RAM Intel i5 2.27Ghz

Many thanks for any assistance, John, Brisbane Aus

This has occurred before and I found a page with all the icons you could upload to address bar. I want the envelope that indicates to email the link of the page I am on to someone in my email account. I've used it for years but when I go to find, it's always difficult.

I have got a message: "Error: Platform version '130.0.1' is not compatible with minVersion >=130 maxVersion< =130.0" I can´t get any connection. What am I going to do and how can you help me?

Regards Mats Å.

There used to be an option for a separate search window on the address bar. I found it really useful especially for a instant spell check. The option was there then after an update, it wasn't. WHY WHY WHY????? Is there any way for me to put it back? I hate using the address bar to search! Unless I open a new tab or window, regaining control of the prior tab/window is difficult.

Hello--I am using 130.0.1. Now there is a "tmp[xx]" with a large black dot at the right end of the address bar. The number [xx] changes for each tab. Whazzup with this, and what does it mean?

Thanks--Jonn