Pale Moon Auto Addon Update Disabled

Started by Corrine, April 25, 2015, 03:05:52 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Corrine

In short:
Quote

  • Mozilla's server-side signing produces a manifest file that has an improper file ending, which is what is causing the immediate crash.  A point release of Pale Moon will be built and released as soon as  possible to prevent the crashes seen upon installing an extension with  this kind of signature problem. Expect 25.3.2 very soon.
  • Mozilla's  server-side signing, additionally, creates signature files that are  empty and do not list the files to check. This means that even though  the extensions have checksums in the meta data that has been added, they  are not actually tied to the included Mozilla certificate and will not be checked for authenticity at all, even in current Firefox versions. This, first assumed to be the root cause of the crash, likely does not  affect the crashes seen, but obviously will not provide any  authenticity check of the signed files inside the extension either  (since the files are not checked against mozilla's certificate)

Mozilla bug:  1158467 – Signed extensions on AMO have invalid signatures

Expect a Pale Moon update.  Full topic here:  Warning: signed add-ons crash Pale Moon




On another note, if you are experiencing Flash Player crashes, see Anyone having flash crashing all time on youtube read this


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Corrine

Pale Moon Updated to Version 25.3.2 to fix the crashing issue that popped up with Mozilla-signed extensions.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.