> Date: Thursday, April 28, 2016 22:27:16 -0400 > From: Jonathan Billings <billings at negate.org> > > On Fri, Apr 29, 2016 at 02:23:32AM +0100, Always Learning wrote: >> >> Centos replaced well-running customise Firefox with version ESR >> 45.1.0 > > Errr... you mean Red Hat released a security update (see > https://rhn.redhat.com/errata/RHSA-2016-0695.html), and CentOS > rebuilt and released it. > > What, exactly, would you like the CentOS maintainers to do > differently? Are you volunteering your time to help? Basically all they did was to move from the old ESR base (38) to the current one (45) so that they could keep current with the (mozilla) upstream ESR release branch. I don't believe that the 38ESR that rhel/centos was running was particularly "customized". The issue of the signed extension requirement has been in the works for some time, with implementation starting with FF40. Since the previous ESR branch was based on 38, ESR didn't see this until just now when the release was based on 45. The issue for ESR people is that they didn't get eased into it the way standard FF users did - over the course of three releases. FF40 was released in october of last year, so by now hopefully extension developers have gotten their code signed. This explains the extension signing, and timeline, a bit: <https://wiki.mozilla.org/Addons/Extension_Signing> Note that the unsigned override that you used is going away with FF47.