[CentOS] C5: The Firefox ESR 45.1.0 Nighmare

Fri Apr 29 03:05:03 UTC 2016
Richard <lists-centos at listmail.innovate.net>

> Date: Thursday, April 28, 2016 22:27:16 -0400
> From: Jonathan Billings <billings at negate.org>
> On Fri, Apr 29, 2016 at 02:23:32AM +0100, Always Learning wrote:
>> Centos replaced well-running customise Firefox with version ESR
>> 45.1.0
> Errr... you mean Red Hat released a security update (see
> https://rhn.redhat.com/errata/RHSA-2016-0695.html), and CentOS
> rebuilt and released it.
> What, exactly, would you like the CentOS maintainers to do
> differently?  Are you volunteering your time to help?

Basically all they did was to move from the old ESR base (38) to the
current one (45) so that they could keep current with the (mozilla)
upstream ESR release branch. I don't believe that the 38ESR that
rhel/centos was running was particularly "customized".

The issue of the signed extension requirement has been in the works
for some time, with implementation starting with FF40. Since the
previous ESR branch was based on 38, ESR didn't see this until just
now when the release was based on 45.

The issue for ESR people is that they didn't get eased into it the
way standard FF users did - over the course of three releases. FF40
was released in october of last year, so by now hopefully extension
developers have gotten their code signed.

This explains the extension signing, and timeline, a bit:


Note that the unsigned override that you used is going away with FF47.