137 min read
I run windows 7 and I'm on 55.0.1
had to run the installer…
Me, too - 'tried the "Start Firefox, then >Help >About >Apply Update …", since I was still on v54.0.1, and it was as though there was -no- update available. Don't understand why - searched on "54.0.1 fails to update to 55.0.1" @
> http://forums.mozillazine.org/index.php?
… 'got "No Results".
'Likely would get a "Glitch…" answer of sorts, anyway. So I had to download and run the 55.0.1 installer from here:
> https://www.mozilla.org/en-US/firefox/all/
___
Edit/add: 'Still on the 32-bit version, even though I'm on a 64-bit Win7 Dell AMD… it works, and "If it ain't broke…".
___
It appears others had trouble getting FF updated:
> https://www.sans.org/newsletters/newsbites/xix/63#303
Aug 11, 2017
"… [Editor Comments] [Northcutt] I will check again in the morning, but right now my MacOS Firefox says it is up to date with 54.0.1 from June 29, 2017. The Firefox release notes say it was available August 8, 2017:
- https://www.mozilla.org/en-US/firefox/55.0/releasenotes/ "
crazy ain't it!
You betcha, and way over my head too. 'Pretty sure I'm -very- glad I'm just a tech and NOT a "Developer" - see this:
> https://developer.mozilla.org/en-US/docs/tag/Web%20Development
FYI…
Firefox 'add-on' technology is modernizing
> https://support.mozilla.org/en-US/kb/firefox-add-technology-modernizing
"'Add-ons' allow you to add extra features and functionality to Firefox. Anyone can create an extension and make it available for people to download.
>> What's happening?
In the past, add-ons often stopped working each time a new version of Firefox was released, because developers had to update them every six weeks to keep them compatible. Since add-ons could also modify Firefox internal code directly, it was possible for bad actors to include malicious code in an innocent-looking add-on.
To address these issues, and as part of broader efforts to modernize Firefox as a whole, we’ve been transitioning to a new framework for developing Firefox extensions. You can still personalize Firefox with add-ons the same way you do now, except they won’t break in new Firefox releases.
Note: Starting in Firefox 57, which will be released in November 2017, only add-ons built with this new technology will work in Firefox. These are indicated by the “Compatible with Firefox 57+” label on addons.mozilla.org (AMO). Add-ons built with the old technology are labeled “Legacy” on the about:addons tab.
If an add-on does not have the "Compatible with 57+" label or has the -Legacy- label, the developer may be in the process of transitioning to the new technology…"
___
Fixed in Firefox v55.0:
- https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox55
> https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/
Critical:
CVE-2017-7798: XUL injection in the style editor in devtools
CVE-2017-7800: Use-after-free in WebSockets during disconnection
CVE-2017-7801: Use-after-free with marquee during window resizing
CVE-2017-7779: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3
___
FF 52.3.0 ESR released
Start Firefox, then >Help >About >Apply Update …
-or- https://www.mozilla.org/en-US/firefox/organizations/all/
Release notes:
- https://www.mozilla.org/en-US/firefox/52.3.0/releasenotes/
August 8, 2017
Fixed:
- Various security fixes*
- Various stability and regression fixes
* https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/
Critical:
CVE-2017-7798: XUL injection in the style editor in devtools
CVE-2017-7800: Use-after-free in WebSockets during disconnection
CVE-2017-7801: Use-after-free with marquee during window resizing
CVE-2017-7779: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3
FYI…
Firefox 55.0.2 released
Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/
Release notes: https://www.mozilla.org/en-US/firefox/55.0.2/releasenotes/
August 16, 2017
Fixed:
- Fix a -regression- with the popup menu (Bug 1388682)
- Fix performance -regressions- with WebExtension (Bugs 1386937 & 1389381)
- Fix an issue with new installation notification for sideload add-ons (Bug 1372448)
- Fix a potential issue when the username had some specific characters in the path (Bug 1388584)
FYI…
Firefox 55.0.3 released
Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/
Release notes: https://www.mozilla.org/en-US/firefox/55.0.3/releasenotes/
August 25, 2017
Fixed:
- Fix file uploads to some websites, including YouTube (bug 1383518)
- Fix an issue with addons when using a path containing non-ascii characters (bug 1389160)
FYI…
Firefox 56 released
Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/
Release notes: https://www.mozilla.org/en-US/firefox/56.0/releasenotes/
Sep 28, 2017
New:
Launched Firefox Screenshots[1], a feature that lets users take, save, and share screenshots without leaving the browser
1] https://screenshots.firefox.com/#tour
Added support for address form autofill (en-US only)
Updated Preferences:
Added search tool so users can find a specific setting quickly
Reorganized preferences so users can more easily scan settings
Rewrote descriptions so users can better understand choices and how they affect browsing
Revised data collection choices so they align with updated Privacy Notice and data collection strategy
Media opened in a background tab will not play until the tab is selected
Improved Send Tabs feature of Sync for iOS and Android, and Send Tabs can be discovered even by users without a Firefox Account
Changed:
Replaced character encoding converters with a new Encoding Standard-compliant implementation written in Rust
Added hardware acceleration for AES-GCM
Updated the Safe Browsing protocol to version 4
Reduced update download file size by approximately 20 percent
Improved security for verifying update downloads…
Unresolved:
Startup crashes with 64-bit Firefox on Windows 7, for users of Lenovo's "OneKey Theater" software for
IdeaPad laptops. To fix this crash, please re-install 32-bit Firefox.
> https://www.mozilla.org/en-US/firefox/all/
Startup crash with RelevantKnowledge adware installed. Firefox Support has helpful instructions to remove it:
> https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware
Fixed in Firefox 56: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox56
> https://www.mozilla.org/en-US/security/advisories/mfsa2017-21/
Critical:
CVE-2017-7811: Memory safety bugs fixed in Firefox 56
CVE-2017-7810: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 …
- http://www.securitytracker.com/id/1039465
CVE Reference: CVE-2017-7793, CVE-2017-7805, CVE-2017-7810, CVE-2017-7811, CVE-2017-7812, CVE-2017-7813, CVE-2017-7814, CVE-2017-7815, CVE-2017-7816, CVE-2017-7817, CVE-2017-7818, CVE-2017-7819, CVE-2017-7820, CVE-2017-7821, CVE-2017-7822, CVE-2017-7823, CVE-2017-7824, CVE-2017-7825
Sep 29 2017
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 56.0 …
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
A remote user can obtain potentially sensitive information on the target system.
A remote user can spoof the address bar and other user interface components.
A remote user can conduct cross-site scripting attacks.
Solution: The vendor has issued a fix (56.0)…
___
52.4.0 ESR released
Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/organizations/all/
Release notes: https://www.mozilla.org/en-US/firefox/52.4.0/releasenotes/
Sep 28, 2017
Fixed:
Various security fixes*
Various stability and regression fixes
* https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr52.4
Security vulnerabilities fixed in Firefox ESR52.4
> https://www.mozilla.org/en-US/security/advisories/mfsa2017-22/
Critical:
CVE-2017-7810: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 …
___
- https://www.us-cert.gov/ncas/current-activity/2017/09/28/Mozilla-Releases-Security-Updates
Sep 28, 2017
FYI…
Fake Firefox updates…
> https://support.mozilla.org/en-US/kb/i-found-fake-firefox-update
"We have received reports from many users who were interrupted in their browsing experience and who got redirected to a -fake- page purporting to provide an "urgent" or "critical" update and prompting to download a firefox-patch.js (or .exe) file. Some people have also reported seeing -ads- prompting them to download a Firefox update. These are -scam- tactics trying to trick you into installing malware!… To our knowledge those notices are a form of "malvertising": those fake notices get triggered by code contained in -ads- that are displayed on otherwise legitimate websites you are visiting and get spread through advertisement networks. This is an example how such a fake update notice may look like - they are hosted on randomly generated and quickly changing domains:
>> https://support.cdn.mozilla.net/media/uploads/gallery/images/2016-09-15-12-37-10-c81e72.png
… -Fake-updates- have been spotted for other popular browsers. Although we cannot root out every bad actor on the web, we are continuing to improve Firefox's defenses against malware. Knowing how to recognize and report such frauds helps us keep the Internet open and safer."
FYI…
Firefox ESR E-O-L - on XP-Vista in June 2018
> https://blog.mozilla.org/futurereleases/2017/10/04/firefox-support-for-windows-xp-and-vista/
Oct 4, 2017 - "… Today we are announcing June 2018 as the final end of life date for Firefox support on Windows XP and Vista. As one of the few browsers that continues to support Windows XP and Vista, Firefox users on these platforms can expect security updates until that date. Users do not need to take additional action to receive those updates…"
> https://support.mozilla.org/en-US/kb/end-support-windows-xp-and-vista
FYI…
Firefox 56.0.1 released
Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/
Release notes:
- https://www.mozilla.org/en-US/firefox/56.0.1/releasenotes/
Oct 9, 2017
Fixed:
- Block D3D11 when using Intel drivers on Windows 7 systems with partial AVX support (bug 1403353)
Changed
- Users of 32-bit Firefox on 64-bit Windows are migrated to 64-bit Firefox for increased stability and security.
