Mozilla Firefox Version 97.0.1 Released

     Mozilla sent Firefox Version 97.0.1 to the release channel today.  

Fixed

• Fixed an issue where TikTok videos would fail to load when selected from a user's profile page (bug 1750973)

• Fixed an issue which led to Picture-in-Picture mode being unable to be toggled on Hulu (bug 1753401)

• Works around problems with WebRoot SecureAnywhere antivirus rendering Firefox unusable in some situations (bug 1752466)

• Fixed an issue causing users to see the Restore Session screen unexpectedly when starting Firefox (bug 1749996)

Security Updates
Release Notes
Rapid Release Calendar

February 2022 Windows 10 Non-Security Optional Preview "C" Release

     

Microsoft released KB5010415 (OS Builds 9042.1566, 19043.1566, and 19044.1566), the monthly “C” release preview cumulative update with non-security improvements and fixes for Windows 10.

The highlighted changes include the following:

• New!​​​​​​Provides the ability to share cookies between Microsoft Edge Internet Explorer mode and Microsoft Edge.  

• Updates an issue that causes Microsoft Edge Internet Explorer mode to stop working when you press the F1 key. 

• Updates an issue that affects dialog boxes in Microsoft Edge Internet Explorer mode. 

• Updates an issue that causes screen readers to describe a back button as "button" rather than "back button". 

• Updates an issue that sometimes causes the Chinese Simplified Input Method Editor (IME) to become completely unusable. 

For information about the types of updates released by Microsoft each month see Windows 10 update servicing cadence primer.

Update:  To get the update, go to Settings > Update & Security > Windows Update.  The link to download and install the update can be found in the Optional updates available area.  To get the standalone package for this update, go to the Microsoft Update Catalog website.

If your devices do not have the May 11, 2021 update (KB5003173) or later LCU, you must install the special standalone August 10, 2021 SSU (KB5005260).  For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Windows 10 update history

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

February 2022 Windows 11 Non-Security Optional Preview "C" Release

 Microsoft released the monthly “C” release preview cumulative updates with non-security improvements and fixes for Windows 11 and other supported versions of Windows.

Following are the highlights for KB5010414 (OS Build 22000.527) for Windows 11: 

• New! Provides the ability to shares cookies between Microsoft Edge Internet Explorer mode and Microsoft Edge.
• New! Adds the clock and date to the taskbars of other monitors when you connect other monitors to your device.
• New! Adds weather content to the left side of the taskbar if the taskbar is aligned in the center. When you hover over the weather, the Widgets panel will appear on the left side of the screen and will disappear when you stop hovering over the area.
• Updates an issue that affects dialog boxes in Microsoft Edge Internet Explorer mode.
• Updates an issue that causes Microsoft Edge Internet Explorer mode to stop working when you press the F1 key.
• Updates an issue that displays right-to-left (RTL) language text as left justified on File Explorer command menus and File Explorer context menus.
• Updates an issue that might cause the time zone list in Settings to appear blank for users who are not administrators.
• Updates an issue that displays right-to-left (RTL) language text as left justified on File Explorer command menus and context menus.
• Updates an issue that causes incorrect tooltips to appear in an empty area on the taskbar after you hover over other icons like battery, volume, or Wi-Fi.

Also check out the "Improvements and Fixes in the update link where a number of new improvements are included. 

Update:  To get the update, go to Settings > Update & Security > Windows Update.  The link to download and install the update can be found in the Optional updates available area.  To get the standalone package for this update, go to the Microsoft Update Catalog website.

See the referenced KB article for the long list of improvements and fixes included in the update.

Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest LCU.  For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

For information about the types of updates released by Microsoft each month see Windows 11 life cycle and servicing update.

Windows 11 update history

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft February 2022 Security Updates

        

The Microsoft February 2022 security updates have been released and consist of 51 CVEs.  Of these CVEs, 50 rated Important and one Moderate in severity.  At the time of release, one is listed as publicly known but none are listed as under active exploit.

The updates apply to Microsoft Windows and Windows Components, Azure Data Explorer, Kestrel Web Server, Microsoft Edge (Chromium-based), Windows Codecs Library, Microsoft Dynamics, Microsoft Dynamics GP, Microsoft Office and Office Components, Windows Hyper-V Server, SQL Server, Visual Studio Code, and Microsoft Teams.  

See the KBs listed at the bottom of the page at February 2022 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates as well as the CVEs with FAQs, Mitigations and/or Workarounds.

Recommended Reading:   See Dustin Childs review and analysis in Zero Day Initiative -- The February 2022 Security Update Review.

 

Additional Update Notes:

• MSRT -- The Malicious Software Removal Tool is now run on a quarterly basis rather than monthly.  See Remove specific prevalent malware with Windows Malicious Software Removal Tool. 
• Servicing Stack Updates -- Microsoft now combines the latest servicing stack update (SSU) for your operating system with the Latest Cumulative Updates (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
  
• Windows updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows, in addition to non-security updates. The updates are also available via search for the KB number in the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see Windows 10 Home and Pro - Microsoft Lifecycle | Microsoft Docs and Windows 11 Home and Pro (Version 21H2) - Microsoft Lifecycle | Microsoft Docs.
• Windows Update History:
• Windows 11
• Windows 10
• Windows 8.1

 

References

• Security Update FAQ
• Security Updates Guide

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

 

Mozilla Firefox Version 97.0 Released with Security Updates

         Mozilla sent Firefox Version 97.0 to the release channel today.  The update includes eighteen security updates of which five (5) are rated high, six (6) are rated moderate, and one (1) are rated low.

Firefox ESR was updated to Version 91.6.

 

High

• #CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
• #CVE-2022-22754: Extensions could have bypassed permission confirmation during update
• #CVE-2022-22762: JavaScript Dialogs could have been displayed over other domains on Firefox for Android
• #CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
• #CVE-2022-0511: Memory safety bugs fixed in Firefox 97

 

Moderate

• #CVE-2022-22755: XSL could have allowed JavaScript execution after a tab was closed
• #CVE-2022-22754: Extensions could have bypassed permission confirmation during update
• #CVE-2022-22755: XSL could have allowed JavaScript execution after a tab was closed
• #CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
• #CVE-2022-22757: Remote Agent did not prevent local websites from connecting
• #CVE-2022-22758: tel: links could have sent USSD codes to the dialer on Firefox for Android
• #CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
• #CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
• #CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

Low

• #CVE-2022-22762: JavaScript Dialogs could have been displayed over other domains on Firefox for Android

New 

Firefox now supports and displays the new style of scrollbars on Windows 11.

Fixed  

On macOS, we’ve made improvements to system font loading which makes opening and switching to new tabs faster in certain situations.

Changed

• On February 8, we will be expiring the 18 colorway themes of Firefox version 94. This signals the end of a special, limited-time feature set. However, you can hold onto your favorite colorway, as long as you’re using it on the expiration date. In other words, if a colorway is “enabled” in the add-ons manager, that colorway is yours forever. Read more about colorway updates here.

·        Support for directly generating PostScript for printing on Linux has been removed. Printing to PostScript printers still remains a supported option, however.

Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References

• Security Updates
• Release Notes
• Rapid Release Calendar