Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Firefox 24 ESR not detected correctly

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
GrandDixence Firefox 24 ESR not detected correctly
Member 17th Nov, 2013 21:59
Ranking: 0
Posts: 3
User Since: 7th Mar, 2013
System Score: N/A
Location: N/A
Firefox 24.1.1.5064 ESR (german) is installed, and PSI tells me, latest safe Version is 25.x, which is not true for ESR, because 24.1.1 ESR is the latest safe version for Firefox ESR. So, PSI should detect if Firefox is ESR or not.

https://wiki.mozilla.org/Enterprise/Firefox/Extend...

http://www.mozilla.org/en-US/firefox/organizations...


mogs RE: Firefox 24 ESR not detected correctly
Expert Contributor 17th Nov, 2013 22:29
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@GrandDixence

There was a recent official eplanation of the situation regarding ESR....given here in the following thread.....See E Jeppesen's post :-
http://secunia.com/community/forum/thread/show/145...

Hope it helps........regards.....mogs.....

--
Was this reply relevant?
+0
-0
jroysdon RE: Firefox 24 ESR not detected correctly
Member 19th Nov, 2013 21:35
Score: 0
Posts: 3
User Since: 25th Sep 2012
System Score: N/A
Location: US
The logic in the "offical explanation" is flawed. FF24.0ESR is not beta, it is post beta. There were 24.0a1, 24.0a2 alpha releases and a 24.0b1 beta release, prior to 24.0 or 24.0esr.

But clearly FF24.1.0esr and FF24.1.1esr should be detected as ESR and kept upgraded to ESR releases.

I posted extensively about this in the CSI forum:
http://secunia.com/community/forum/thread/show/146...
Was this reply relevant?
+0
-0
Anthony Wells RE: Firefox 24 ESR not detected correctly
Expert Contributor 20th Nov, 2013 18:09
Score: 2437
Posts: 3,330
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello @jroysdon ,

Secunia have always had a problem with what to "detect/display" concerning the Release Channel/ESR "platform/version" split . They have previously advised in response to my questioning (on more than one occasion !!)that they would handle it correctly in the future = now !!

Obviously , this is not the case and E Jeppesen's support reply concerning the Beta version is rather disingenuine , if not misleading as you have pointed out elsewhere .. Whilst it may be fair to assume the majority of the PSI users will use the RC rather than the ESR , equally the opposite is likely to apply to the CSI users .

If you do not get a satisfactory response from Secunia support here or in your CSI thread , i would suggest you persist and email them direct at
support@secunia.com (for the PSI) or at csc@secunia.com (for the CSI) and refer to the three threads extant .

I personally never allow the PSI to update my browsers - nor Adobe products nor JAVA ; the situation is likely different for the CSI so that the RC/ESR split is/could be pretty important in it's signalisation .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
wr RE: Firefox 24 ESR not detected correctly
Contributor 20th Nov, 2013 18:25
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Hi Anthony

To add fuel to the fire I use ESR version of Firefox myself.
The last update flagged by Mozilla for download to the ESR channel, on my system, was 17.0.11. I have not, as of yet, been offered the 'update' to the v25.xx channel. I'm thinking because the last 'update' before v17.xx goes EOL
'new' downloads will be for the v25.xx ESR only. Just my
guess, no real support for this. And PSI correctly identifies & displays my version in 1.5.0.2.

Hope this helps
Regards, wr

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0
Anthony Wells RE: Firefox 24 ESR not detected correctly
Expert Contributor 20th Nov, 2013 20:41
Score: 2437
Posts: 3,330
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi OGSO aka wr ,

I certainly remembered you run ESR being a significant PSI minority of at least one and who knows the trials and tribulations of past platform splits .

If you use link one in the OP and select item 2.1 Version Numbers you will see this , which is a clear description of the latest method of allocating version numbers to the ESR 24.xx esr channel :-

Version Numbers
Update: Starting with Firefox ESR 24 the version numbering scheme has changed in order to make it more clear which ESR lines up with the rapid release versions and to make the chemspill versions more consistent. Going forward ESR versions will use the second digit in the version number to indicate which mainline version they match up to:

24.0esr => 24.0 mainline release
24.1esr => 25.0 mainline release security fixes
24.2esr -=> 26.0 mainline release security fixes
and so on...
For chemspills this would mean:

24.1.1esr => 25.0.1 mainline release chemspill security fixes
24.2.1esr => 26.0.1 mainline release chemspill security fixes
The diagram below still accurately reflect how the ESR release matches to the release cycles of mainline Firefox, but the version numbers reflect the former scheme so please disregard those.

That should help Support , one can only hope , now and in the future - no Beta's to interfere .

If you use the second link and scroll down you will find that 17.0.11esr is the latest still available :ie: supported , 17.xxesr version from Mozilla . Not clear how long it will stay but presumably until the majority of local versions can be found in 24.xxesr and assuming 17 remains secure .

Hope time is finding you well ; not too dusty myself , I find wine a good absorbent :))

Take care

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
jroysdon RE: Firefox 24 ESR not detected correctly
Member 20th Nov, 2013 21:03
Score: 0
Posts: 3
User Since: 25th Sep 2012
System Score: N/A
Location: US
@Nelson Mandela

FF17esr goes EOL Dec 3. Most likely FF17.0.11esr is the final release.

ESR EOL are 54 weeks after the initial release. FF17esr was released Nov 20, 2012. Add 54 weeks and you get Dec 3, 2013.

Sources:
http://www.mozilla.org/en-US/firefox/17.0/releasen...
http://en.wikipedia.org/wiki/Firefox_release_histo...
http://www.timeanddate.com/date/dateadded.html?m1=...
Was this reply relevant?
+0
-0
wr RE: Firefox 24 ESR not detected correctly
Contributor 20th Nov, 2013 21:52
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Thanks Anthony for opening my eyes a bit-i hadn't
scrolled down far enough in the 2nd link to reveal
the whole message.

Yes time ,so far, has been kind. No surgery-yet-for cataracts & the AMD has been held in check with non-prescription meds. Thanks for asking.

Glad to 'see' you're doing well-gotta 'clink' that quote on
absorbancy-good one!

Gonna sit & wait patiently on Ff to nudge me forward
on the updates to ESR-i don't let them automatically
update me, just inform me the update is ready to download & install. The only reason I stayed on the
ESR channel was because the rapid-fire updates being
pushed out by Ff was causing some of my plugins
to not work properly. After I found out about the ESR
channel being 'slower' I jumped on the bandwagon
and cured a lot of the problems.

The only problem now is with No-Squint & that only
affects 1 website so no problem to disable when I
go to that website.

Good to hear from you & that you're doing well.
Gonna get a fresh cuppa & a sweet roll.

Regards, OGSO

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0
Anthony Wells RE: Firefox 24 ESR not detected correctly
Expert Contributor 20th Nov, 2013 23:53
Score: 2437
Posts: 3,330
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Thanks for the info JR .

Like your good news , OGSO . My AMD is well in remission with a bunch of herbal stuff , or 'erbal to you , my transatlantic cousin . Looked like the very nasty "wet" version at first but it has been stopped dead in it's tracks for a long time now :))) Marigolds and AREDS forever :)))

Take care

Anthony



--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
This user no longer exists RE: Firefox 24 ESR not detected correctly
Secunia Official 16th Dec, 2013 15:30
Last edited on 16th Dec, 2013 15:33 Hi,

Due to the big interest within Firefox Esr., and mostly due to your feedback here within the Secunia CSI / PSI forums, Secunia improved the handling process of Firefox Esr. in the CSI and PSI software. Below you can see the actual changes implemented by Secunia :

"Going forward Mozilla products will receive only 1 package, regardless of whether or not itís the stable release or ESR release. The package will then select the appropriate installer to run, or be forced onto a certain branch by a flag (only available in the CSI 7).

The only time 2 packages will exist, is during the overlap period (first two releases of a new ESR branch), where one package will contain the old ESR installer and another will contain the new ESR installer. Customers will be offered the one applying to the version they already have installed."

This change is active for over a week already and it affects both Secunia CSI and Secunia PSI software. Please feel free to comment should you have additional comments or questions.

PS: Big thanks to Anthony Wells who assisted to ensure that all users (PSI and CSI) would receive the news.

Kind regards / Stay Secure
Rosen Danailov / Security+
Secunia Customer Support

PSIJB

RE: Firefox 24 ESR not detected correctly
[+]
This reply has been deleted

PSIJB

RE: Firefox 25 ESR not detected correctly
[+]
This reply has been deleted

Maurice Joyce

RE: Firefox 24 ESR not detected correctly
[+]
This reply has been deleted
Anthony Wells RE: Firefox 24 ESR not detected correctly
Expert Contributor 18th Dec, 2013 16:46
Score: 2437
Posts: 3,330
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi Rosen ,

Thank you for all your input .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability