Komunitné fórum Firefox

Tenable is reporting 128.1 and 128.2 as affected by vulnerabilities covered in CVEs' in their plugin 205009 ( https://www.tenable.com/plugins/nessus/205009 ). The rule they are applying is: Mozilla Firefox < 129 That implies that 128.1 and 128.2 are also < then 129 -> therefor vulnerable. Can you please answer 2 questions:

• are Firefox 128.1 and 128.2 part of the same branch of product as 129? Or are they necessarily ESR?
• are Firefox 128.1 and 128.2 affected by CVEs' covered in their TENABLE plugin 205009?

I have a IP intercom that only works with Firefox 127.0.2 Now Firefox automatically upgrades to the latest version and I'm unable to prevent this. I'm unable to manage my intercom with the latest version. How do I turn off automatic updates.

Many of Linux Distributions take firefox binaries from https://packages.mozilla.org/apt/ as given in the Mozilla Knowlege Base Article Install Firefox on Linux. In this article there is a option to Install Firefox .deb package for Debian-based distributions.

However the binaries and libraries that are hosted in Firefox repositories are not compiled with the PIE/PIC flag. That prevents Firefox browser from using ASLR capabilities and to a large degree prevent Buffer overflows attacks. Please refer to the output given below for more details.

$ file -e elf /opt/firefox/firefox /opt/firefox/firefox: ELF 64-bit LSB executable, x86-64, version 1 (SYSV) $ $ readelf -h /opt/firefox/firefox ELF Header:

 Magic:   7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 
 Class:                             ELF64
 Data:                              2's complement, little endian
 Version:                           1 (current)
 OS/ABI:                            UNIX - System V
 ABI Version:                       0
 Type:                              EXEC (Executable file)
 Machine:                           Advanced Micro Devices X86-64
 Version:                           0x1

The output of the first command is ELF 64-bit LSB executable, which indicates that it is not a PIE executable. If it had been a PIE executable then it would have been ELF 64-bit LSB pie executable. Similarly the output of the second command has a Key, Type, whose value is EXEC (Executable file). However for a PIE binary the value would be DYN (Position-Independent Executable file).

Can Mozilla please compile the binaries and shared libraries with the PIE/PIC flag and then host them in its repositories? Many of Linux Distros do not have the bandwidth to take the source and compile binaries for different architects and are dependent on Mozilla to provide the same. Doing so would be appreciated and would help in enhancing safety of Linux users who use Firefox as their primary browser.

PIE = Position Independent Executable PIC = Position Independent Code ASLR = Address Space Layout Randomisation. PIC and PIE are used interchangeably and imply the same thing.

Last Pass Firefox extension was working on my Windows 10 computer until 3 weeks ago. Now when I click on extension it hangs. (the extension is red red in tool bar so I know it is correctly installed).. I was able to solve by deleting Firefox extension and instead installed Last Pass 4.0 directly from Last Pass's site. Please fix your extension. This is not a Last Pass issue.

Tom Weaver

hello,

is just wanted to know if the new feature "Users in the United States and Canada can view local weather directly on the new tab page. Additionally, they have the option to select a specific location to see current weather conditions.", which was released with the version 130.0 also comes to europe someday?

I cannot open firefox. The error box says that the platform version 130.0.1 is not compatible with the maxversion 130.0 or the minversion 130.0. It looks as if the upgrade to 130.0.1 was incomplete. I need to have this fixed

Hello, 1. I can't run Firefox - there is error appeared as screen shot. I'm using Chrome to make it this report and Firefox disappoint me again... 2. Before i had problem with Firefox ver. 30.0.0 - 32bit version was stack on some webpages so I changed for 64bit version and problem gone, but now see pt.1.

Regards Greg

Today I manually download and rename the firefox executable so a script that runs as a Sandbox is spun up is ready to go immediately. But that entails me manually downloading, then renaming the installer to a name that the script always knows. And often the setup file gets updated on the web and I am running the prior version, or older depending on when I went thru that manual process.

So I am back looking for a way to either find a way to download the newest installer each time or find a way to kick off the internal updater right after its currently scripted install completes. Either could work.

I hate having to use Edge as its the browser MS automatically installs when a sandbox is spun up.

Or are there other ideas on how to accomplish this? Thanks, Bill

I've been struggling with this issue for a few months. After Firefox updates, my toolbar layout gets reset and I have to re-do it from scratch. If that wasn't bad enough, occasionally when this happens it also enters this state where nothing loads. All tabs just get stuck in blank screen "dancing dot mode". Yes, google, everything. To "fix" this, I go into troubleshoot mode, and back to normal again, and then it's "fixed"... until it happens again a few days later. I can actually rebuild my toolbar layout in under 15 seconds now, I've done it so many times. I've tried doing the 'refresh'. Many times. I've fully uninstalled and re-installed Firefox. I uninstalled plugins that I suspected might be the cause. Nothing worked. At best these measures kept firefox stable a couple of weeks longer. I actually gave up and tried other browsers for a while. Any insight is appreciated.

I recently updated to v130. I'm having the same problem that so many others have, "Firefox already running, close Firefox". After updating to v130 I had to go to Task Manager and delete 19 Firefox running. It's only been a few days ago and I checked Task Manager today and deleted another 13. After updating to v130 many of my add-ons are showing up in the Menu Bar. I have used Add-ons Manager to drag and drop, but it doesn't work. I have specific bookmarks that should be in the "Bookmarks" section" but they are also showing up in the Menu Bar. I had to re-select my screen choice because it had disappeared. I use DuckDuckGo for my search engine and in the past I was able to choose a separate search bar, but that too has disappeared and I cannot seem to fix it in settings. So many problems after updates, but this one seems very bad. I use Windows 10 on my desktop PC

Please Help, Rhonda

hello.

I had the to try to open Firefox, to do something, but you showed me this message: 

error platform version 130.0.1 is not compatible with min version >=130.0 max version <=130.0 what do you suppose me, to do now?

I have got a message: "Error: Platform version '130.0.1' is not compatible with minVersion >=130 maxVersion< =130.0" I can´t get any connection. What am I going to do and how can you help me?

Regards Mats Å.

This has occurred before and I found a page with all the icons you could upload to address bar. I want the envelope that indicates to email the link of the page I am on to someone in my email account. I've used it for years but when I go to find, it's always difficult.

There used to be an option for a separate search window on the address bar. I found it really useful especially for a instant spell check. The option was there then after an update, it wasn't. WHY WHY WHY????? Is there any way for me to put it back? I hate using the address bar to search! Unless I open a new tab or window, regaining control of the prior tab/window is difficult.

Hello--I am using 130.0.1. Now there is a "tmp[xx]" with a large black dot at the right end of the address bar. The number [xx] changes for each tab. Whazzup with this, and what does it mean?

Thanks--Jonn