Author Topic: Firefox Certificate Expiration Threatens Add-ons, Streaming on March 14  (Read 1297 times)

Martin Iturbide

  • OS2World NewsMaster
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 5249
  • Karma: +44/-1
  • Your Friend Wil Declares...
    • View Profile
    • Martin's Personal Blog
Hello.

I found this news at Slashdot.org
- https://news.slashdot.org/story/25/03/11/1446251/firefox-certificate-expiration-threatens-add-ons-streaming-on-march-14

"A critical root certificate expiring on March 14, 2025 will disable extensions and potentially break DRM-dependent streaming services for Firefox users running outdated browsers. Users must update to at least Firefox 128 or ESR 115.13+ to maintain functionality across Windows, macOS, Linux, and Android platforms.

The expiration additionally compromises security infrastructure, including blocklists for malicious add-ons, SSL certificate revocation lists, and password breach notifications. Even those on legacy operating systems (Windows 7/8/8.1, macOS 10.12รข"10.14) must update to minimum ESR 115.13+."

I was wondering how this affect us, since we are at Firefox 45. Is it possible to get affected with malicious sites? or this just for Add-ons?

Regards
Martin Iturbide
OS2World NewsMaster
... just share the dream.

Dave Yeo

  • Hero Member
  • *****
  • Posts: 5335
  • Karma: +126/-1
    • View Profile
Hi Martin.
This doesn't affect us as we don't use signed add-ons and don't support streaming Netflix etc.
It is a reminder that our certificate store likely needs updating and also we're likely to run into more expired certificates where the user will need to import newer versions, which means being careful not to import a malware certificate.
Guess need to look at how to update the OS certificates RPM package.
Also see "man update-ca-trust"