Thursday, December 31, 2020

Adobe Flash Player Reaches EoL (End of Life)


Adobe Flashplayer

The final scheduled update of Adobe Flash Player for all regions outside of Mainland China was issued on December 8, 2020.  It will no longer be supported after December 31 2020, as having reached EoL (End of Life).  Beginning January 12, 2021, Adobe will block Flash content from running in Flash Player. 

Although Microsoft has made KB4577586 available in the Microsoft Update Catalog, it will also be released via Windows Update and is expected to be included in the Microsoft January 2021 Security Updates.

As indicated in the below-referenced Microsoft "Update for the removal of Flash Player", if you are using a browser that supports NPAPI (Firefox/Pale Moon/MyPal) or PPAPI (Opera and Chromium-based browsers), it is necessary to also use the referenced Flash Player Uninstaller. (Note:  a restart will be needed when running the Adobe Flash Player uninstaller.)

"This update only removes Adobe Flash Player that was installed by your version of Windows. If you installed Adobe Flash Player manually from another source, it will not be removed. For more information about how to remove Adobe Flash Player, see the Uninstall Flash Player | Windows topic on the Adobe website."

References


Home
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Tuesday, December 22, 2020

Mozilla Firefox Version 84.0.1 Released

Firefox


Mozilla sent Firefox Version 84.0.1 to the release channel today.  Firefox ESR remains at Version 78.6.

Fixed

  • Fixed problems loading secure websites and crashes for users with certain third-party PKCS11 modules and smartcards installed (bug 1682881).
  • Fixed slower than expected performance and flickering on Canvas elements for some Windows users (bug 1683116).
  • Fixed a bug causing some Unity JS games to not load on Apple Silicon devices due to improper detection of the OS version (bug 1680516).
  • Fixed crashes caused by various third-party antivirus software.

  References

Home
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Friday, December 18, 2020

Pale Moon Version 28.17.0 Released With Security Updates


Pale Moon

Pale Moon has been updated to version 28.17.0.  This is a development, bugfix and security update.

Changes/fixes:

  • Changed the way dates and times are formatted in the UI to properly adhere to the user's regional settings in the O.S.
  • Re-enabled the DOM Filesystem API for web compatibility.
  • Moved the global user-agent override to the networking component. See implementation notes.
  • Worked around crashes and run-time issues with module scripts. See implementation notes.
  • Fixed a website layout issue with table-styled elements potentially overlapping when placed inside a flexbox.
  • Fixed some code logic issues with websockets.
  • Fixed a regression when waking the computer from standby causing high CPU usage in some uncommon situations.
  • Updated the list of prohibited ports the browser can use. See implementation notes.
  • Updated root certificates.
  • Windows: Changed the way downloaded files without an extension are handled. See implementation notes.
  • Mac-beta: Improved version detection of MacOS including Big Sur.
  • Security issues addressed: CVE-2020-26978 and CVE-2020-35112.
  • Unified XUL Platform Mozilla Security Patch Summary: 2 fixed, 1 deferred to the next release, 16 not applicable.

 Implementation notes:

  • The global user-agent override was moved to the networking component where it is actually implemented. The new preference name is network.http.useragent.global_override. Please note that using a blanket override is normally (very) counterproductive and does not, in fact, help much with privacy. It would also override the compatibility modes (Native/Gecko/Firefox) in Pale Moon. As such, the browser will now warn you if the user-agent is globally overridden (in preferences) and allow you to easily reset that override and re-enable the various compatibility modes.
  • Module scripting caused some persistent and very hard to track browser crashes that we've narrowed down to a specific optimization in the JavaScript JIT (Just-In-Time) compiler (IonMonkey). This optimization is now disabled by default but if you need that little extra performance (usually only noticed in very optimized code or some benchmarks) then you can re-enable it, trading in stability, by setting the new preference javascript.options.ion.inlining to true.
  • Prohibited ports: Pale Moon maintains a blacklist of ports the browser may normally not connect to on servers, to mitigate abusive web scripting employing your browser as an attack bot on servers (e.g. by connecting to mail servers or what not), NAT slipstreaming, and similar security issues. To more thoroughly prevent known abusable ports on servers, this list was extended with a number of additional default ports for various non-http protocols.
  • Downloaded files without a file extension: When a file without an extension is downloaded, we will now open the download folder where you may choose to take any specific action manually, instead of trying to execute it as a program or through an associated program.

  Pale Moon includes both 32- and 64-bit versions for Windows:

Update

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes




Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...