Corrine Posted April 25, 2015 Share Posted April 25, 2015 Pale Moon has been updated to Version 25.3.2 as an emergency bug-fix to repair the crashing issue that popped up with Mozilla-signed extensions. As documented in Warning: signed add-ons crash Pale Moon, the problem and it is two-fold and a direct result of the incorrect server-side signing of extensions that started yesterday: Mozilla's server-side signing produces a manifest file that has an improper file ending, which is what is causing the immediate crash. A point release of Pale Moon will be built and released as soon as possible to prevent the crashes seen upon installing an extension with this kind of signature problem. Expect 25.3.2 very soon. Mozilla's server-side signing, additionally, creates signature files that are empty and do not list the files to check. This means that even though the extensions have checksums in the meta data that has been added, they are not actually tied to the included Mozilla certificate and will not be checked for authenticity at all, even in current Firefox versions. This, first assumed to be the root cause of the crash, likely does not affect the crashes seen, but obviously will not provide any authenticity check of the signed files inside the extension either (since the files are not checked against mozilla's certificate) Mozilla Bug: bug #1158467 2 Quote Link to comment Share on other sites More sharing options...
crp Posted April 26, 2015 Share Posted April 26, 2015 Welcome to Agile Quote Link to comment Share on other sites More sharing options...
.thumb.jpg.7c3caaf218a75d76e16db7a5bddfb463.jpg)
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.