All versions prior to the 3.6.2 were updated. Please make sure you don’t have anything older than 3.5.9 or 3.0.19
I have yet to figure out where this SSL setting is to be performed. But I am looking.
It appears that only the 3.5.9 version requires the SSL setting be changed. I think the 3.0.19 version does not have this issue.
Update to version 3.5.9. Set the
“security.ssl.require_safe_negotiation” preference to “true”.
Update to version 3.0.19.
Successful exploitation (under version 3.0.18) requires that the “Firebug” addon is