Mozilla Firefox Version 109.0.1 Released

 

Mozilla sent Firefox Version 109.0.1 to the Release Channel today.

Fixed

• Reverted changes to Windows font smoothing which caused poor rendering on some configurations (bug 1803154)

• Fixed jank when loading pages containing a large number of emoji characters (bug 1809081)

• Fixed an issue causing authentication prompts to not appear when loading pages in some enterprise environments (bug 1809151)

• Fixed inconsistent sizing of event listener checkboxes inside the Inspector developer tool (bug 1811760)

Release Notes

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

January 2023 Windows 11 Non-Security Optional Preview "C" Release

 Microsoft released the monthly “C” release preview cumulative updates with non-security improvements and fixes for Windows 11, Version 22H2.

Following are the highlights for KB5022360 (OS Build 22621.1194) for Windows 11: 

• This update addresses an issue that might occur when the Input Method Editor (IME) is active. Applications might stop responding when you use the mouse and keyboard at the same time.

• This update addresses an issue that might occur when you convert or reconvert Japanese Kanji using a multibyte character set (MBCS) app. The cursor might move to the wrong location when you type.

• This update addresses an issue that affects picture files you find using search on the taskbar. This issue stops you from opening those pictures.

• This update addresses an issue that stops you from searching for a file based on the file’s contents.

• This update addresses an issue that affects some game controllers. When the game controller is connected to the computer, the computer might not go to Sleep mode.

See the referenced KB article for the long list of improvements and fixes included in the update.

Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest LCU.  For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Update: To get the update, go to Settings > Update & Security > Windows Update. The link to download and install the update can be found in the Optional updates area.  To get the standalone package for this update, go to the Microsoft Update Catalog website.

For information about the types of updates released by Microsoft each month, see Windows 11 life cycle and servicing update.

Windows 11 update history

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Optional Hotfix Patch for Adobe Reader and Acrobat

 

Adobe has released an optional hotfix patch for Acrobat and Acrobat Reader that addresses some important bug fixes.updates for Adobe Acrobat DC and Reader DC for Windows and macOS. 

Bug Fixes

Editing: 4392068: Fixed IME experience for Japanese language on Windows

Viewer: 4391109: Reader showing Invalid plugin detected error after Jan release Update

Update or Complete Download

Reader DC and Acrobat DC were updated to version 22.003.20314 for Windows.  Updates should become available via the internal updater or checks can be manually activated by choosing Help/Check for Updates.  

Reader DC and other versions are available here: https://get.adobe.com/reader/

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

References

• Release Notes

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Pale Moon Version 32.0.0 Released with Security Updates

 

Pale Moon has been updated to version 32.0.0.  This is a milestone update.  

The primary focus for this milestone is web compatibility, in particular Regular Expression extensions, standards compliance issues and further JPEG-XL support.  This milestone now offers full coverage of the ECMAScript 2016-2020 JavaScript specifications, with the exception of BigInt primitives.

Most important changes:

• Implemented Regular Expression named capture groups.
• Implemented Regular Expression unicode property escapes.
• Re-implemented Regular Expression lookaround/lookbehind (without crashing this time).
• Implemented progressive decoding for JPEG-XL.
• Implemented animation for JPEG-XL.
• Renamed CSS offset-* properties to inset-* to align with the latest spec and the web.
• Fixed CSS inheritance and padding issues in some cases.
• Aligned parsing of incorrectly duplicated HSTS headers with expected behavior (discard all but the first one).
• Implemented a method to avoid memory exhaustion in case of (very) large resolution animated images.
• Updated the JPEG-XL and Highway libraries to a recent, stable version.
• Cleaned up some unused CSS prefixing code.
  
• Improved the ability to link on *nix operating systems with other linkers than gcc's default.
• Stability improvements (potential crash fixes).
• Security issues addressed: CVE-2023-23598, CVE-2023-23599 and several others that do not have a CVE number.
• UXP Mozilla security patch summary: 4 fixed, 2 DiD, 19 not applicable.

*DiD: This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

**Rejected security patches: This means that patches were theoretically applicable to our code but considered undesirable, which could be due to unwanted changes in behavior, known regressions caused by the patches, or unnecessary risks for stability, security or privacy.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes
Release Cycle

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

January 2023 Windows 11 Version 21H1 Non-Security Optional Preview "C" Release

 

   Microsoft released the monthly “C” release preview cumulative updates with non-security improvements and fixes for Windows 11, Version 21H1.  The preview update for Windows 11, version 22H2, will be available in the near term.

Following are the highlights for KB5019274 (OS Build 22000.1516) for Windows 11, 21h1:

• New! This update combines Windows Spotlight with Themes on the Personalization page. This makes it easier for you to discover and turn on the Windows Spotlight feature.

• New! This update displays storage alerts for Microsoft OneDrive subscribers on the Systems page in the Settings app. The alerts appear when you are close to your storage limit. You can also manage your storage and purchase additional storage, if needed.

• New! This update provides the full amount of storage capacity of all your OneDrive subscriptions. It also displays the total storage on the Accounts page in the Settings app.

• New! This update improves the Microsoft Account experience in Settings. For example, you can manage OneDrive subscriptions and storage alerts.

• New! This update displays Xbox subscription details on the Accounts page in the Settings app. Xbox subscribers can also manage their subscription on that page. Users who are not subscribers can explore Xbox subscription options on the Accounts page.

• This update addresses an issue that affects some modern applications. This issue stops them from opening.

• This update addresses an issue that might occur when the Input Method Editor (IME) is active. Applications might stop responding when you use the mouse and keyboard at the same time.

• This update addresses an issue the stops the touch keyboard from opening.

• This update addresses an issue that stops you from searching for a file based on the file’s contents.

See the referenced KB article for the list of improvements included in the update.

For information about the types of updates released by Microsoft each month, see Windows 11 life cycle and servicing update.

Update:  To get the update, go to Settings > Update & Security > Windows Update.  The link to download and install the update can be found in the Optional updates available area.  To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows 11 update history

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

January 2023 Windows 10 Non-Security Optional Preview "C" Release

 Microsoft released KB5019275 for all supported versions of Windows 10 20H2, 21H1, 21H2, and 22H2 (OS Builds 19042.2546, 19044.2546, and 19045.2546) optional “C” release preview cumulative updates with non-security improvements and fixes.

IMPORTANT: After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

The following are the highlighted changes included in the update:

• New! This update displays storage alerts for Microsoft OneDrive subscribers on the Systems page in the Settings app. The alerts appear when you are close to your storage limit. You can also manage your storage and purchase additional storage, if needed.

• This update addresses an issue that might affect news and interests. It might flicker on the taskbar and File Explorer might stop responding.

See the referenced KB Article for prerequisites and the additional improvements and fixes included in the update for each edition.

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Update:  To get the update, go to Settings > Update & Security > Windows Update. The link to download and install the update can be found in the Optional updates available area.  To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows 10 update history

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Oracle Java SE Update Released

Oracle released the scheduled update for its Java SE Runtime Environment software.  This is a bugfix update.

Download Information

Java SE Runtime Environment Version 8u361:  https://www.oracle.com/java/technologies/javase-jre8-downloads.html or https://java.com/en/download/manual.jsp.

Java Security Recommendations

1)  If Java is still installed on your computer, it is recommended that all updates be applied as soon as possible and older, less secure, versions uninstalled.  See Why should I uninstall older versions of Java from my system?.
2)  In the Java Control Panel, at minimum, set the security to high.
3)  Keep Java disabled until needed.  Uncheck the box "Enable Java content in the browser" in the Java Control Panel.

Notes:

• UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.  Preferably, see the instructions below on how to handle "Unwanted Extras".  
• Oracle does not plan to migrate desktops from Java 8 to Java 9 through the auto update feature.  Therefore, it is strongly recommended that you uninstall JRE 8 prior to updating.
• Verify your version:  http://www.java.com/en/download/testjava.jsp.   Note: The Java version verification page will only work if your browser has NPAPI support.  In that case, to check the version, open a cmd window and enter the following (note the space following Java):  java -version
• Important: The Edge browser does not support plug-ins.  In the event you still have a need for Java, it will be necessary to use Firefox or open with Internet Explorer mode (See Microsoft Edge Enhancements for IE Mode).

Patch Schedule

For Oracle Java SE, the next scheduled update is April 18, 2023.  The planned release schedule is available here.

Unwanted "Extras"

Although most people do not need Java on their computer, there are some programs and games that require Java.  In the event you need to continue using Java, How-to Geek discovered a little-known and publicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras that Oracle has long included with the updates.  Although the Ask Toolbar has been removed, that does not preclude the pre-checked option for some other unnecessary add-on.

Do the following to suppress the sponsor offers:

1. Launch the Windows Start menu
2. Click on Programs
3. Find the Java program listing
4. Click Configure Java to launch the Java Control Panel
5. Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
6. Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.

References

• Java, The Never-Ending Saga  
• Critical Patch Updates and Security Alerts
• Release Notes
• Oracle Java SE Risk Matrix 
• Oracle Security Blog 

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 109.0 Released with Security Updates

 Mozilla sent Firefox Version 109.0 to the release channel today.  The update includes ten security updates of which four (4) are rated high, four (4) moderate, and two (2) rated low.

Firefox ESR was updated to Version 102.7.

High

#CVE-2023-23597: Logic bug in process allocation allowed to read arbitrary files

#CVE-2023-23598: Arbitrary file read from GTK drag and drop on Linux

#CVE-2023-23605: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7

#CVE-2023-23606: Memory safety bugs fixed in Firefox 109


Moderate

#CVE-2023-23599: Malicious command could be hidden in devtools output on Windows

#CVE-2023-23600: Notification permissions persisted between Normal and Private Browsing on Android

#CVE-2023-23601: URL being dragged from cross-origin iframe into same tab triggers navigation

#CVE-2023-23602: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers

 

Low

#CVE-2023-23603: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive

#CVE-2023-23604: Creation of duplicate <code>SystemPrincipal</code> from less secure contexts

New

• Manifest Version 3 (MV3) extension support is now enabled by default (MV2 remains enabled/supported). This major update also ushers an exciting user interface change in the form of the new extensions button.

• The Arbitrary Code Guard exploit protection has been enabled in the media playback utility processes, improving security for Windows users.

• The native HTML date picker for date and datetime inputs can now be used with a keyboard alone, improving its accessibility for screen reader users. Users with limited mobility can also now use common keyboard shortcuts to navigate the calendar grid and month selection spinners.

• Firefox builds in the Spanish from Spain (es-ES) and Spanish from Argentina (es-AR) locales now come with a built-in dictionary for the Firefox spellchecker.

Changed

• Effective on January 16, Colorways will no longer be in Firefox. Users will still be able to access saved and active Colorways from the Add-ons and themes menu option.

• On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls the page instead of zooming. This avoids accidental zooming and matches the behavior of other web browsers on macOS.

• The Recently Closed section of Firefox View now equips users with the ability to manually close/remove url links from the list.

• The empty state messages and graphic components surfaced in Firefox View for the Tab Pickup and Recently Closed sections have been updated for an improved user experience.

Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References

• Security Updates
• Release Notes
• Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Windows Insider MVP! #WIMVP

Microsoft reorganized the MVP Program in October, 2015, changing the focus to Developers and IT Professionals.  As a result, Consumer MVPs were transitioned to the Windows group and, although I was re-awarded Microsoft MVP in 2016, I also received my first Windows Insider MVP award that year.  

I am proud to announce that, once again, I have been awarded Windows Insider  MVP! 

As described on the Windows Insider website,

"The Windows Insider Program is a community of millions of Windows' biggest fans who get to preview Windows features. While previewing Windows, Insiders can provide feedback and engage directly with Microsoft engineers to help shape the future of Windows."

The Windows Insider Program is critical to the development of the Windows operating system, testing changes, new features, and providing feedback.  For information on how to join the Windows Insider Program, see Getting started with the Windows Insider Program. 

Congratulations to all other re-awarded and newly awarded WIMVPs! 

 

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Adobe Acrobat DC and Reader DC Security Updates Released

 

Adobe has released updates for Adobe Acrobat DC and Reader DC for Windows and macOS. 

These updates address multiple critical and important vulnerabilities.  Successful exploitation could lead to arbitrary code execution and memory leak.

 

Release date: January 10, 2023
Vulnerability identifier: APSB23-01
Platform: Windows and MacOS

Update or Complete Download

Reader DC and Acrobat DC were updated to version 22.002.20310 for Windows.  Updates should become available via the internal updater or checks can be manually activated by choosing Help/Check for Updates.  

Reader DC and other versions are available here: https://get.adobe.com/reader/

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

References

• PSIRT
• Release Notes
• Security Bulletin
• System Requirements

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...