Tuesday, November 12, 2024

Microsoft November 2024 Security Updates

 

The Microsoft November 2024 security updates have been released and consist of 89 new patches to Microsoft products.


Of the Microsoft CVEs released, 4 are rated critical, 84 important, and 1 moderate in security. At the time of release, Microsoft lists three of the CVEs is listed as being publicly known and two are listed as being exploited.

The security updates apply to the following products, features and roles: Windows and Windows Components; Office and Office Components; Azure; .NET and Visual Studio; LightGBM; Exchange Server; SQL Server; TorchGeo; Hyper-V; and Windows VMSwitch.

See the list of KBs at the bottom of the page at November 2024 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates as well as the CVEs with FAQs, Mitigations and/or Workarounds.

Recommended Reading:   See Dustin Childs review and analysis in Zero Day Initiative -- The November 2024 Security Update Review.

Due to the holiday schedule, there will be no December 2024 non-security preview update but there will be a monthly security update for December 2024.

Additional Update Notes:

 

References




Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Thursday, November 07, 2024

Optional Hotfix Patch for Adobe Reader and Acrobat

 

Adobe
Adobe has released an optional hotfix patch that addresses some important bug fixes.

Update or Complete Download

Reader DC and Acrobat DC were updated to version 24.004.20243.  Updates should become available via the internal updater or checks can be manually activated by choosing Help/Check for Updates.  

Reader DC and other versions are available here: https://get.adobe.com/reader/

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

References

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Tuesday, November 05, 2024

Pale Moon Version 33.4.1 Released with Security Update

 Pale MoonPale Moon has been updated to version 33.4.1.  This is a minor security and bug fix update.

Changes/fixes:

  • Added a processor check to the 64-bit installer for Windows to check for AVX.
    Note: this check does not work on Window 7/8/8.1 and will allow installations on non-AVX processors there.
    Note: if you are running Windows 10 before build 2004 (before 20H1), this check may fail on AVX-capable CPUs and prevent installation.
  • Improved handling of multipart/mixed documents. (CVE-2024-10461 and CVE-2016-2816) DiD
  • Addressed CVE-2024-10463.

    Notes:  *DiD This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

    Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

    Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

    Release Notes
    Release Cycle

    Home
    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...

    Monday, November 04, 2024

    Mozilla Firefox Version 132.0.1 Released with Updates

      Mozilla sent Firefox Version 131.0.3 to the Release Channel.

    Fixed

    • Fixed issues causing intermittent video playback problems on some sites. (Bug 1928484Bug 1928798).
    • Fixed an issue causing themes to reset to default after restarting Firefox, in particular when using the Firefox Color add-on. (Bug 1928082).

    Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  For non-English versions, Fully Localized Versions are available for download.

    Release Notes


    Remember - "A day without laughter is a day wasted."
    May the wind sing to you and the sun rise in your heart...