Win10)

fermt 2021-11-04 13:58:47 UTC #1

Is there any reason why the content to Patch the Firefox Browsers are made only available for end-user OSes(Win7/Win10/Win8)?

I found recently reviewing a vulnerability scan of our servers that some servers have very outdated versions of Mozilla Firefox.
When I go to the Firefox Fixlet I can see a relevance expression that restricts the OS versions to:

((name of it = "Win7") OR (name of it = "Win8") OR (name of it = "Win10")) of operating system

Meanwhile the Chrome Fixlets are relevant for Windows Server editions, why the difference?

baynes74 2021-11-04 14:06:32 UTC #2

This is due to the browser requirements:

https://www.mozilla.org/en-US/firefox/94.0/system-requirements/

My recommendation is to make a custom copy, then either add the server OS’s or replace the workstation OS’s with Server OS’s.
I also make the second action the default action as this will taskkill the browser if it is open.

dmccalla 2021-11-04 15:15:53 UTC #3

Just my personal take here so take it for what it is worth - but you should really reconsider having any web browser installed/available on a server. Lots of room for abuse and mistakes.