#881802 Firefox gets unusable and with broken security after update

Package:
firefox
Source:
firefox
Description:
Mozilla Firefox web browser
Submitter:
Klaus Ethgen
Date:
2017-11-15 11:39:04 UTC
Severity:
normal
#881802#5
Date:
2017-11-15 10:44:41 UTC
From:
To:
The new update of firefox render it completely unusable and unsafe to
use as essential addons are disabled without asking the user.

- Foxproxy - In the setup where I use firefox, I need to configure proxy
  far behind the possibilities that firefox gives me. So without that
  addon, I am actually cut of from internet completely.
  On one hand, that is good as otherwise I would be endangered due to
  the following disabled addons.
- Noscript - Present internet is absolutely to dangerous to browse
  without Noscript. As a short term solution, JS could be completely
  disabled but it is needed to enable it on some trusted sites.
- HTTPS Everywhere
- Status-4-Evar - Without this addon, it is a blind flight without
  instruments to browse internet. Every link will be a surprise where it
  leads to.
- Y U no validate - Without that addon it is easily possible to
  accidentally accept an invalid TLS certificate forever. That opens up
  for many problems.
- DNSSEC/TLSA Validator - I need to be able to check the validity of
  TLSA entries. It is sad that firefox has no buildin check for that.
  But now it even disables the only addon that was able to verify them.
- Cookie Monster

Beside that there are several addons that bring back some stuff that was
dropped from firefox but without, browsing is impossible.

- Tabgruppen - Without that feature, I have about 1000 Tabs open at the
  same time. Firefox is unusable without that addon.
- Tab Mix Plus - The same, it makes Tabbed browsing even more usable.
- UAControl - Several sites require to set special UA to be able to
  access them. Including some embedded devices I need to use at work.

"Funny" think ist that noscript was updated too but the update is
incompatible to currect firefox.

#881802#10
Date:
2017-11-15 11:37:12 UTC
From:
To:
severity 881802 normal
thanks
Lowering the severity as Firefox remains usable and safe.

The features that you are mentioning are provided by extension and not by the Firefox package itself.
In parallel, I guess some of them will be ported to 57 in the next few weeks.

Last but not least, you can still use Firefox esr:
https://tracker.debian.org/pkg/firefox-esr
Where the extensions will probably work.

Sylvestre