Firefox updates

FYI…

Firefox 56.0.2 released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/

Release notes:
- https://www.mozilla.org/en-US/firefox/56.0.2/releasenotes/
Oct 26, 2017
Fixed:
- Disable Form Autofill completely on user request (Bug 1404531)
- Fix for video-related crashes on Windows 7 (Bug 1409141)
- Correct detection for 64-bit GSSAPI authentication (Bug 1409275)
- Fix for shutdown crash (Bug 1404105)
 

FYI…

Firefox 57.0 released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/

Release notes:
- https://www.mozilla.org/en-US/firefox/57.0/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew
Nov 14, 2017
New:
 A completely new browsing engine, designed to take full advantage of the processing power in modern devices
 A redesigned interface with a clean, modern appearance, consistent visual elements, and optimizations for touch screens
 A unified address and search bar. New installs will see this unified bar. Learn how to add the stand-alone search bar to the toolbar
 A revamped new tab page that includes top visited sites, recently visited pages, and recommendations from Pocket (in the US, Canada, and Germany)
 An updated product tour to orient new and returning Firefox users
 AMD VP9 hardware video decoder support for improved video playback with lower power consumption
 An expanded section in preferences to manage all website permissions
Changed:
 Modernized application update UI to be less intrusive and more aligned with the rest of the browser. Only users who have not restarted their browser 8 days after downloading an update or users who opted out of automatic updates will see this change.
 Firefox does -not- support downgrades, even though this may have worked in past versions. Users who install Firefox 55+ and later downgrade to an earlier version may experience -issues- with Firefox.
 Made the Adobe Flash plugin click-to-activate by default and allowed -only- on http:// and https:// URL schemes. (This change will not be visible to all users immediately. For more information see the Firefox plugin roadmap:
- https://developer.mozilla.org/en-US/docs/Plugins/Roadmap )

Changed: Firefox now exclusively supports extensions built using the WebExtension API, and unsupported legacy extensions will no longer work…"
> https://support.mozilla.org/kb/firefox-add-technology-modernizing

Fixed: Various security fixes:
> https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox57
Security vulnerabilities fixed in Firefox 57
> https://www.mozilla.org/en-US/security/advisories/mfsa2017-24/
Nov 14, 2017
Critical:
CVE-2017-7828: Use-after-free of PressShell while restyling layout
CVE-2017-7827: Memory safety bugs fixed in Firefox 57
CVE-2017-7826: Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5

> https://blog.mozilla.org/blog/2017/11/14/introducing-firefox-quantum/
___

Firefox 52.5.0 ESR released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/organizations/all/

Release notes: https://www.mozilla.org/en-US/firefox/52.5.0/releasenotes/
Nov 14, 2017
 Various security fixes
- https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr52.5
Security vulnerabilities fixed in Firefox ESR 52.5
- https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/
Critical:
CVE-2017-7828: Use-after-free of PressShell while restyling layout
CVE-2017-7826: Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5

 Various stability and regression fixes
___

- https://www.us-cert.gov/ncas/current-activity/2017/11/14/Mozilla-Releases-Security-Updates
Nov 14, 2017
 

Didn't care for this update, lost add-ons and bookmarks are scattered in places I never looked for before.

yucker-poo

 

…. lost add-ons and bookmarks are scattered…

 

'Seems as though Mozilla wouldn't wait for the "Addon" developers to catch up with their changes…

 

- https://www.mozilla.org/en-US/firefox/57.0/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew
Nov 14, 2017
"… Changed:
Firefox does -not- support downgrades, even though this may have worked in past versions. Users who install Firefox 55+ and later downgrade to an earlier version may experience -issues- with Firefox…
 Firefox now exclusively supports extensions built using the WebExtension API, and unsupported legacy extensions will no longer work…"
___

 

- https://www.securitytracker.com/id/1039803

CVE Reference: CVE-2017-7826, CVE-2017-7827, CVE-2017-7828, CVE-2017-7830, CVE-2017-7831, CVE-2017-7832, CVE-2017-7833, CVE-2017-7834, CVE-2017-7835, CVE-2017-7836, CVE-2017-7837, CVE-2017-7838, CVE-2017-7839, CVE-2017-7840, CVE-2017-7842
Nov 15 2017
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via local system, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): prior to 57.0 …
(More detail at the URL above.)

- https://www.securitytracker.com/id/1039805
CVE Reference: CVE-2017-7826, CVE-2017-7828, CVE-2017-7830
Nov 15 2017
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via local system, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): prior to ESR 52.5 …
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
A remote user can modify data on the target system.
A local user can obtain elevated privileges on the target system.
A remote user can bypass security controls on the target system.
A remote user can obtain potentially sensitive information on the target system.
A remote user can spoof a URL.
Solution: The vendor has issued a fix for CVE-2017-7826, CVE-2017-7828, and CVE-2017-7830 for Firefox ESR (52.5)…
 

      

No changes to my bookmarks or add-ons.  Granted, I've lost many add-ons over the years that I miss, but I lost none with this new version.

 

So far I like it.  It does seem faster and more responsive.

I lost
NoScript
Color Tabs
Malware Search

Bookmarks are moved into different categories making me open different locations to find the web site I want.

OK, I get it, Firefox just doesn't like me.

"Don't take it personal…" - what I always hear when something like this happens…

 

LOL!

Firefox does not dislike you.  It has no feelings.  It's just a jumble of 1's and 0's.

 

Obviously, the hundreds of people at the Mozilla Foundation and the thousands of contributors from the open-source community are human and do have feelings.  It's probably just a majority of this army of programmers that don't like you.

 

It's probably just a majority of this army of programmers that don't like you

lol

figures

As ugly as the changes may seem, make note of the assessments below - 'appears that it had to be done:

 

- https://www.securitytracker.com/id/1039803
CVE Reference: CVE-2017-7826, CVE-2017-7827, CVE-2017-7828, CVE-2017-7830, CVE-2017-7831, CVE-2017-7832, CVE-2017-7833, CVE-2017-7834, CVE-2017-7835, CVE-2017-7836, CVE-2017-7837, CVE-2017-7838, CVE-2017-7839, CVE-2017-7840, CVE-2017-7842
Nov 15 2017
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via local system, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): prior to 57.0 …
(More detail at the URL above.)

- https://www.securitytracker.com/id/1039805
CVE Reference: CVE-2017-7826, CVE-2017-7828, CVE-2017-7830
Nov 15 2017
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via local system, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): prior to ESR 52.5 …
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
A remote user can modify data on the target system.
A local user can obtain elevated privileges on the target system.
A remote user can bypass security controls on the target system.
A remote user can obtain potentially sensitive information on the target system.
A remote user can spoof a URL.
Solution: The vendor has issued a fix for CVE-2017-7826, CVE-2017-7828, and CVE-2017-7830 for Firefox ESR (52.5)…
 

FYI…

Firefox 57.0.1 released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/

Release notes:
- https://www.mozilla.org/en-US/firefox/57.0.1/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew
Nov 29, 2017
Fixed:
 Fix a video color distortion issue on YouTube and other video sites with some AMD devices (bug 1417442)
 Fix an issue with prefs.js when the profile path has non-ascii characters (bug 1420427) …
 Google map crashes on OSX with Intel HD Graphics 3000
Changed:
 Block injection of a client library associated with the RealPlayer Free player which is known to cause performance problems in Firefox. (Bug 1418535)

> https://www.mozilla.org/en-US/security/advisories/mfsa2017-27/
Fixed in: Firefox 57.0.1
___

> https://www.ixquick.com/
"Firefox's latest update (57.0.1) aggressively tries to reset your default search engine to Google! To make StartPage your default search engine again after the update, please follow the instructions… You may want to bookmark this article now…"
* https://support.startpage.com/index.php?/Knowledgebase/Article/View/199/0/how-do-i-add-startpage-to-firefox-as-a-default-search-engine
___

- https://www.us-cert.gov/ncas/current-activity/2017/12/04/Mozilla-Releases-Security-Update-Firefox
Dec 04, 2017
 

FYI…

Firefox 57.0.2 released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/

Release notes:
- https://www.mozilla.org/en-US/firefox/57.0.2/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew
Dec 07, 2017
Fixed:
- Block old versions of G Data Endpoint Security for crashing Firefox on start up - Windows only (bug 1421991)
- Fix a regression with WebGL and D3D9 - Windows only

Firefox 57.0.2: https://www.mozilla.org/en-US/security/advisories/mfsa2017-29/
___

Firefox ESR 52.5.2 released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/organizations/all/

Release notes: https://www.mozilla.org/en-US/firefox/52.5.2/releasenotes/
Dec 07, 2017
- Various security fixes: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr52.5.2

ESR 52.5.2: https://www.mozilla.org/en-US/security/advisories/mfsa2017-28/
___

> https://www.us-cert.gov/ncas/current-activity/2017/12/07/Mozilla-Releases-Security-Updates
Dec 07, 2017
 

FYI…

Firefox 57.0.3 released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/

> https://www.mozilla.org/en-US/firefox/57.0.3/releasenotes/
Dec 28, 2017
Fixed: Fix a crash reporting issue that inadvertently sends background tab crash reports to Mozilla without user opt-in (bug 1427111)
 

FYI…

Firefox 57.0.4 released

Start Firefox, then >Help >About >Apply Update …
-or-
Download: https://www.mozilla.org/en-US/firefox/all/

> https://www.mozilla.org/en-US/firefox/57.0.4/releasenotes/
Jan 4, 2018
Fixed: Security fixes* to address the Meltdown and Spectre** timing attacks.
* https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox57.0.4
…
> https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/

** https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
___

> https://www.us-cert.gov/ncas/current-activity/2018/01/04/Mozilla-Releases-Security-Update
Jan 04, 2018

> https://www.us-cert.gov/ncas/alerts/TA18-004A
Jan 04, 2018