Mozilla Firefox Version 52.0 Released with Security Updates

[Corrine]

Mozilla sent Firefox Version 52.0 to the release channel today.  The update includes six (6) Critical, four (4) High, eleven (11) Moderate updates and six (6) low security updates.  Firefox ESR was updated to version 45.8.0.

Note in particular the removal of support for Netscape Plugin API (NPAPI) plugins other than Flash.  Silverlight, Java, Acrobat and the like are no longer supported.  See Why do Java, Silverlight, Adobe Acrobat and other plugins no longer work? for Mozilla's explanation.

Additionally, Firefox users on Windows XP (EoL, End of Life, April 8, 2014) and Windows Vista (EoL April 11, 2017) have been migrated to the extended support release (ESR) version of Firefox.

The next scheduled release is April 18,  2017 (5 week cycle with release for critical fixes as needed).

Mozilla Firefox Release Notes
Security vulnerabilities fixed in Firefox 52 â€" Mozilla

[ky331]

On an XP system (as of last night), FF told me that version 51.0.1 was up-to-date.   I was not offered v52, nor was there any indication that I would/should be migrated to the ESR version.   Just wondering what other XP+FF users have experienced.

(Note:  I am not looking to have this post diverge into a discussion of the merits/dangers of still using XP.   Just trying to find out whether/when FF on XP might be automatically migrated to ESR, or whether that's something that one needs to perform manually.)

[ky331]

The next morning (Wednesday), the FF [on XP] internal updater acknowledged the existence of an update.   I had to "update" TWICE... the first (almost instantaneous) update switching me from the "standard" to the "Extended Release" channel, with the second update actually downloading/installing ESR 52.0.   NO plug-ins were disabled.

[hayc59]

Mine went to ESR but I cannot get the latest version..says i have one available
down/restart/still have version 51

[Corrine]

Doesn't sound as if the right hand knows what the left is doing at Mozilla.  Found the article from December announcing the support change:  Update on Firefox Support for Windows XP and Vista | Future Releases

[ky331]

Firefox 52.0.1

Security fix 2017-08 integer overflow in createImageBitmap()   
https://www.mozilla.org/en-US/security/advisories/mfsa2017-08/       

Available via internal updater:   Help / About Firefox

[Corrine]

Note:  The Firefox 52.0.1 version update issued by Mozilla was released 22 hours after the security flaw identified as CVE-2017-5428 was illustrated by by Chaitin Security Research Lab in the TrendMicro Pwn2Own 2017 hacking contest.  Mozilla was the first vendor to patch a vulnerability discovered during the Pwn2Own.

[Corrine]

Mozilla sent Firefox Version 52.0.2 to the release channel. The update includes the fixes listed below.

Fixes:

•   Use Nirmala UI as fallback font for additional Indic languages
  
•   Fix loading tab icons on session restore
  
•   Fix a crash on startup on Linux
  
•   Fix new installs erroneously not prompting to change the default browser setting
  

Available via internal updater: Help / About Firefox