desktop-packages team mailing list archive

[Mikaela Suomalainen <mikaela@xxxxxxxxxxxx>]

Public bug reported:

I have installed Mozilla Firefox 41.0a2 out of repositories, but this
extension gets loaded on it too. Today this Firefox Developer Edition
started complaining about the addon not being signed which prevents
loading it for security reasons.

Even if this Firefox is out of repositories, when 41 becomes stable
downstream Firefox is also going to suffer from this unless it has
patches to disable this which would again be insecure and allow random
extensions to be installed from anywhere.

Firefox Developer Edition gives "more details" which is link to
<https://support.mozilla.org/fi/kb/add-on-signing-in-
firefox?redirectlocale=en-US&as=u&redirectslug=add-ons-signing-
firefox&utm_source=inproduct>.

(This is direct copy-paste of
https://bugs.launchpad.net/ubuntu/+source/mozvoikko/+bug/1482219 which
is the same issue with xul-ext-mozvoikko,)

ProblemType: Bug
DistroRelease: Ubuntu 15.04
Package: xul-ext-ubufox 3.0-0ubuntu1
ProcVersionSignature: Ubuntu 3.19.0-25.26-generic 3.19.8-ckt2
Uname: Linux 3.19.0-25-generic x86_64
ApportVersion: 2.17.2-0ubuntu1.1
Architecture: amd64
CurrentDesktop: MATE
Date: Thu Aug  6 22:07:39 2015
InstallationDate: Installed on 2014-12-19 (230 days ago)
InstallationMedia: Ubuntu MATE 14.10 "Utopic Unicorn" - amd64 (20141023)
PackageArchitecture: all
SourcePackage: ubufox
UpgradeStatus: Upgraded to vivid on 2015-04-05 (123 days ago)

** Affects: ubufox (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug third-party-packages vivid

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to ubufox in Ubuntu.
https://bugs.launchpad.net/bugs/1482346

Title:
   xul-ext-ubufox isn't signed (cannot be loaded on Mozilla Firefox
  41.0a2)

Status in ubufox package in Ubuntu:
  New

Bug description:
  I have installed Mozilla Firefox 41.0a2 out of repositories, but this
  extension gets loaded on it too. Today this Firefox Developer Edition
  started complaining about the addon not being signed which prevents
  loading it for security reasons.

  Even if this Firefox is out of repositories, when 41 becomes stable
  downstream Firefox is also going to suffer from this unless it has
  patches to disable this which would again be insecure and allow random
  extensions to be installed from anywhere.

  Firefox Developer Edition gives "more details" which is link to
  <https://support.mozilla.org/fi/kb/add-on-signing-in-
  firefox?redirectlocale=en-US&as=u&redirectslug=add-ons-signing-
  firefox&utm_source=inproduct>.

  (This is direct copy-paste of
  https://bugs.launchpad.net/ubuntu/+source/mozvoikko/+bug/1482219 which
  is the same issue with xul-ext-mozvoikko,)

  ProblemType: Bug
  DistroRelease: Ubuntu 15.04
  Package: xul-ext-ubufox 3.0-0ubuntu1
  ProcVersionSignature: Ubuntu 3.19.0-25.26-generic 3.19.8-ckt2
  Uname: Linux 3.19.0-25-generic x86_64
  ApportVersion: 2.17.2-0ubuntu1.1
  Architecture: amd64
  CurrentDesktop: MATE
  Date: Thu Aug  6 22:07:39 2015
  InstallationDate: Installed on 2014-12-19 (230 days ago)
  InstallationMedia: Ubuntu MATE 14.10 "Utopic Unicorn" - amd64 (20141023)
  PackageArchitecture: all
  SourcePackage: ubufox
  UpgradeStatus: Upgraded to vivid on 2015-04-05 (123 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubufox/+bug/1482346/+subscriptions