Hi folks,

On May 4th, 2019, a bug surfaced in Firefox related to Addons. This was due to an internal certificate that expired, and was not renewed by Mozilla until problems were already present. The initial fix was deployed on May 5th, 2019, through a patch in Mozilla's Studies system. This fix expires soon, so we highly recommend updating to 66.0.5 or 67 whenever it comes out. Once that fix expires, versions 66.0.4 all the way down to 52 (when the certificate was introduced) will stop working with any addons or extensions that you have installed. Other reports on Mozilla's bug tracker say that SSL support will be broken as well.

We highly recommend updating to Firefox 66.0.5 or later. On an 8.4 system, I can confirm that it works perfectly without any updates. That's not to say that I wouldn't recommend updating certain dependencies such as node.js, SQLite, NSS, NSPR, Harfbuzz, and wget though, due to security vulnerabilities that have since been patched. Note that Firefox 66.x fixes a lot of vulnerabilities over 65.0.1 as well. Rust-1.32.0 and LLVM-7.0.1 should be perfectly fine as well.

An errata entry will be published to document this fix.

Thank you,

Douglas R. Reno

--
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to