Support Forum: Get Support for Patch My PC Products and Services

Microsoft Configuration Manager and Intune (Enterprises/Paid) => Report Publishing/Download/Hash Issues (Enterprises Using ConfigMgr and Intune) => Topic started by: AlkHacNar on July 27, 2022, 03:42:49 AM

Title: Firefox ESR 103 not available?
Post by: AlkHacNar on July 27, 2022, 03:42:49 AM
I'm sorry if it's a dumb question, but I'm new with PMPC.
In the catalog update is, finally, FireFox ESR 103 in, but how do I choose it in the App? It still shows me only 1 version and its the 91.12.0, which is the new one from the same catalog update.
Or am I too fast and it's become available later?

Greeting

Alexej
Title: Re: Firefox ESR 103 not available?
Post by: Scott (Patch My PC) on July 27, 2022, 03:50:17 AM
Hi AlkHacNar

Based on the Firefox release calendar, the current production release is 103 and the current ESR release is 91.12

https://wiki.mozilla.org/Release_Management/Calendar

There is currently no planned date for ESR 103 based on that calendar
Title: Re: Firefox ESR 103 not available?
Post by: AlkHacNar on July 27, 2022, 04:04:48 AM
Ah, I just saw that it's the normal one with 103, but what about the ESR 102.2? That's live already, dumb download search, but still available.

Greeting

Alexej
Title: Re: Firefox ESR 103 not available?
Post by: Andrew Jimenez (Patch My PC) on August 30, 2022, 05:26:55 PM
Copying from another thread:

The version of Firefox ESR in our catalog at this time is still up-to-date, it should contain the same security fixes that were added in version 102. The next ESR release will be 102,

The current version of Firefox ESR in our catalog is 91.13 released on 8/23/2022
https://www.mozilla.org/en-US/firefox/91.13.0/releasenotes/ (https://www.mozilla.org/en-US/firefox/91.13.0/releasenotes/)
Security Vulnerabilities fixed in Firefox ESR 91.13 — Mozilla (https://www.mozilla.org/en-US/security/advisories/mfsa2022-35/)

The current 102 release of ESR is 102.2 also released on 8/23/2022
Security Vulnerabilities fixed in Firefox ESR 102.2 — Mozilla (https://www.mozilla.org/en-US/security/advisories/mfsa2022-34/)

Patch My PC will be moving to Firefox ESR 102 upon the release of ESR 102.3 on 9/20/2022

I compared the list and 102 does indeed have 2 extra fixes over 91.13, however the only High criticality vulnerability that is fixed in 102 that is not fixed in 91.13  (CVE-2022-38477) is fixing a bug that only existed in the 102 and greater branch. The other, low impact CVE does not mention the versions affected.

Firefox keeps 2 versions of ESR alive for 3 point releases when they have a major ESR release, the older version is more stable, and this gives Mozilla time to stabilize the newer ESR release. Mozilla still provides the same vulnerability patches to both versions while they are both supported. Patch My PC has decided to stick with the more stable ESR, as we assume customers that choose the ESR release are doing so for the stability benefits.

We do not intend to add the newer ESR release at this time as it would significantly increase the number of Firefox updates in our catalog, it would also introduce complicated applicability considerations.