Mozilla will start Firefox silent updates in June
Patches Pwn2Own bug; also announces end of updates for Firefox 3.6
Computerworld - Mozilla yesterday reiterated that it's still working on silent updates for Firefox, and said it should have the Chrome-like service in place by early June.
In a sweeping summary of 2011's accomplishments and an outline of plans for 2012, Robert Nyman, a Mozilla technical evangelist, listed silent updates as one the projects the company will finish this year. "Updates will now be downloaded and installed silently in the background," wrote Nyman in a Wednesday post to the Hacks Mozilla blog. "Silent updates are currently planned to land in Firefox 13."
Mozilla unloads a Firefox upgrade every six weeks -- it launched Firefox 11 just two days ago -- and has Firefox 13's release on the calendar for June 5, 2012.
Mozilla has been working on silent updating for about 17 months. At one point, it thought it could add the feature to Firefox 4, which shipped in March 2011, but abandoned that work when the upgrade was delayed several times for other reasons.
Late last year, it said it was shooting for silent updating in Firefox 10, which debuted in January. Those plans were also revised, and Firefox 13 was tagged as the new goal.
Some of the components of silent updating have already made it into Firefox: Version 10 debuted automatic add-on compatibility marking, for example.
Implementing silent updating would make Firefox only the second browser to offer the feature. Google's Chrome has used automatic, in-the-background updates since its September 2008 debut.
Firefox silent updating would let Mozilla deploy emergency security fixes -- it calls those "chem spills" -- without bothering users, and potentially push more users to each new version.
Microsoft has also jumped on the silent update bandwagon: In December 2011, it announced it would automatically upgrade Internet Explorer (IE) to the newest browser suitable for each version of Windows. Before the scheme's January debut, Microsoft had asked users for their permission before upgrading IE from one version to the next, even if Windows' automatic update service was enabled.
Also this week, Mozilla released Firefox 11 with patches for 12 vulnerabilities, nine of them rated "critical."
For a short time, Firefox 11 faced a launch delay that would have broken Mozilla's perfect record of meeting release deadlines since it switched to an every-six-week pace last year.
The delay, which Mozilla announced last Monday morning and nixed later the same day, was necessary, said Mozilla, to patch a Firefox bug unveiled at the Pwn2Own hacking contest.
It turned out that Mozilla already knew of the vulnerability exploited by researchers Vincenzo Iozzo and Willem Pinckaers on Pwn2Own's last day, March 9. Iozzo and Pinckaers rode that exploit to take Pwn2Own's $30,000 second-place prize.
Mozilla also released Firefox 3.6.28, the latest security update for the two-year-old browser, to patch five or six vulnerabilities. Mozilla's advisories were unclear on the exact number.
Firefox 3.6 is on the verge of support retirement. Yesterday, in notes from a Wednesday planning meeting, Mozilla said, "Firefox 3.6.28 is our last planned 3.6 update (emphasis in original)."
Between now and April 24 -- the scheduled ship date for Firefox 12 -- Mozilla will only release fixes to 3.6 if it uncovers critical issues, said Johnathan Nightingale, senior director of Firefox engineering, in an email reply to questions. Mozilla calls such unexpected updates of critical bugs "chemspills."
"We don't plan to make further updates to the Firefox 3.6 product ... [and] we encourage our remaining Firefox 3.6 users to upgrade to a modern Firefox," said Nightingale.
To replace Firefox 3.6 -- which many enterprises retained when they balked at upgrading every six weeks -- the company has rolled out Firefox ESR, or Extended Support Release, a version that receives only security updates during its 54-week lifespan.
Windows, Mac and Linux editions of Firefox 11 can be downloaded manually from Mozilla's site. Users running Firefox 4 or later will be offered the upgrade through the browser's own update mechanism.
The next version of Firefox is scheduled to ship April 24.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, on Google+ or subscribe to Gregg's RSS feed . His email address is email@example.com.
- Mozilla ships Firefox 31, adds search to new tab page
- Microsoft's IE steps back from the brink of irrelevance
- Firefox falters, falls to record low in overall browser share
- Firefox risks user backlash by adding search box to new tab page
- Google unseats Microsoft as the U.S. browser powerhouse
- Safari, Chrome push to mask URLs
- Chrome on Windows champs at the 64-bit
- Google pulls trigger, cripples some Chrome add-ons
- Microsoft shoots to shorten Internet Explorer's long tail
- Firefox risks irrelevance as mobile browsing booms
Read more about Desktop Apps in Computerworld's Desktop Apps Topic Center.
- The Business Value of Continuous Delivery Download this whitepaper to learn more about the business value of Continuous Delivery and see why it could be a game changer for...
- Ten Factors Shaping the Future of Application Delivery Download this research report conducted by Enterprise Management Associates (EMA) to learn how those that are seeking to accelerate application delivery are leveraging...
- HTTP Status Code Cheat Sheet Look at the Graph, Find the Code and Boom - You're Solving Problems. Identifying and understanding common HTTP status codes can go a...
- Architects lead the next generation of data-driven applications Read this whitepaper to find out how application architects can quickly and confidently deliver long-lasting applications that minimize cost, complexity, and risk while...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Why Are Customers Really Deploying an NGFW? It seems every IT Security expert is talking about the NGFW, but what are people really doing? This webcast covers 5 real-world customer... All Desktop Apps White Papers | Webcasts