Pale Moon Version 28.2.2 Released

Pale Moon has been updated to version 28.2.2 to address a critical usability issue in the history and bookmarks window. The Linux versions will follow.

From the Release Notes:

Changes/fixes:

• Changed the about:feeds icon for external applications to a generic icon, since that kind of access to executables is no longer allowed for security reasons.
• Fixed issues with copying/pasting bookmarks in the Library View.
• Fixed a crash occurring when using HTTP pipelining over some (broken) proxies.
• Fixed several issues with animated WebP display (animations stopping, corrupted frames on lossy images, etc.)
• Fixed an issue with the display of truncated GIF images.
• Fixed an issue with deleting recent history not working properly.
• Fixed incorrect duplicate compatibility mode preferences in about:config.

Download:

• Pale Moon for Windows
• Pale Moon for Linux

Update

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Adobe Flash Player Critical Security Update Released

Adobe has released Version 32.0.0.101 of Adobe Flash Player and AIR for Windows, macOS, Linux and Chrome OS. one critical vulnerability in Adobe Flash Player and one important vulnerability in Adobe Flash Player installer. Successful exploitation could lead to Arbitrary Code Execution and privilege escalation in the context of the current user respectively. 

Adobe is aware of reports that an exploit for CVE-2018-15982 exists in the wild.

Release date:  December 5, 2018
Vulnerability identifier: APSB18-42
Platform:  Windows, Macintosh, Linux and Chrome OS

Vulnerability details

Vulnerability Category	Vulnerability Impact	Severity	CVE Number
Use after free	Arbitrary Code Execution	Critical	CVE-2018-15982
Insecure Library Loading (DLL hijacking)	Privilege Escalation	Important	CVE-2018-15983

Fixed Issues

Flash Player

• Assorted security and functional fixes

Update:

• With the option to 'Allow Adobe to install updates', the update will be automatic. Without that setting enabled, either install the update via the update mechanism when prompted or via the Download Center*.
• Windows 7 and earlier:  Installation links for Windows 7 and earlier are provided by Adobe at Installation problems | Flash Player | Windows 7 and earlier: 
• Flash Player for Internet Explorer - ActiveX 
• Flash Player for Firefox/Pale Moon - NPAPI
• Flash Player for Opera and Chromium-based browsers - PPAPI
• Microsoft Edge and Internet Explorer 11:  Adobe Flash Player will be automatically updated to the latest version for Windows 8.1 and 10.
• Google Chrome:  Adobe Flash Player will be automatically updated to the latest Google Chrome version.
• Flash Player Uninstaller:  http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe
• Adobe AIR:  Adobe - Adobe AIR

*Important Note:  Downloading the update from the Adobe Flash Player Download Center link includes a pre-checked option to install unnecessary extras, such as McAfee Scan Plus or Google Drive.  If you use the download center, uncheck any unnecessary extras that you do not want.  They are not needed for the Flash Player update.

Verify Installation

To verify the Adobe Flash Player version number installed on your computer, go to the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe Flash Player" from the menu. 

Do this for each browser installed on your computer.

To verify the version of Adobe Flash Player for Android, go to Settings > Applications > Manage Applications > Adobe Flash Player x.x.

References

• Adobe Priority Ratings
• AIR Download Center 
• Installing and Updating Flash Player - FAQ
• Release Notes:  Flash Player® 32 AIR® 32
• Security Bulletin
• PSIRT

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Windows 10 and Windows 7 Cumulative Updates Released

Microsoft has released cumulative updates with non-security improvements and fixes for Windows 10 versions 1803 and 1709 as well as for Windows 7.  The update for both versions 1803 and 1709 and Windows 7 (Preview of Monthly Rollup) includes quality improvements with no new operating system features introduced.

The updates are available from Windows Update or the Microsoft Update Catalog.  See the referenced links below for the changes.  

• Windows 10 Version 1803:  KB4467682
• Windows 10 Version 1709:  KB4467681
• Windows 7 KB4467198

Note:  Among other Known Issues, please note the following which applies to all systems:

"After installing this update, users may not be able to use the Seek Bar in Windows Media Player when playing specific files."

Microsoft is working on a resolution for the Seek Bar issue and will provide an update in an upcoming release.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...