Adobe Acrobat DC and Reader DC Security Updates Released

 

Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates address multiple critical vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user. 

 

Release date:  June 8, 2021
Vulnerability identifier: APSB21-37
Platform: Windows and MacOS

The update includes numerous new features.  See What's new in Adobe Acrobat DC.

Update or Complete Download

Reader DC and Acrobat DC were updated to version 21.005.20048.  Updates should become available via the internal updater or checks can be manually activated by choosing Help/Check for Updates.  Reader DC and other versions are available here: https://get.adobe.com/reader/

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

References

• PSIRT
• Release Notes
• Security Bulletin
• System Requirements

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Pale Moon Version 29.2.1 Released

 

Pale Moon has been updated to version 29.2.1.  This is a bugfix release.  Linux versions will follow soon.

Changes/Fixes:

• Worked around an issue with autocomplete popups sometimes failing to work (and added some debug console logging to it in case it happens to help find the root cause)
• Fixed an issue with DOM mouse scrolling throwing errors.
• Fixed a race with network detection routines firing incorrectly when resuming from standby.
• Fixed a crash when using large uploads through DOM.
• Fixed an issue where the menulist-button on editable menulist widgets was not visible on GTK3.
• Reduced the number of reported "important preferences" in troubleshooting information, excluding individual printer details.
• Fixed an issue with the JS JIT compiler not tracing debugger environments (DiD).

*DiD This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Pale Moon includes both 32- and 64-bit versions for Windows:  Pale Moon for Windows downloads.

Update

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 89.0 Released With Security Updates

 

Mozilla sent Firefox Version 89.0 to the release channel today.  The update includes eight security updates of which one (1) is rated high, five (5) moderate and two (2) rated low.

 

Firefox ESR was updated to Version 78.11.

 

High

 

• #CVE-2021-29967: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.1
  
  

Moderate

 

• #CVE-2021-29960: Filenames printed from private browsing mode incorrectly retained in preferences
• #CVE-2021-29961: Firefox UI spoof using `<select>` elements and CSS scaling
• #CVE-2021-29963: Shared cookies for search suggestions in private browsing mode
• #CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message
• #CVE-2021-29966: Memory safety bugs fixed in Firefox 89
  

 

Low

 

• #CVE-2021-29959: Devices could be re-enabled without additional permission prompt
• #CVE-2021-29962: No rate-limiting for popups on Firefox for Android

 

New

Mozilla made many new changes, best viewed in the illustrated Release Notes. 

Fixed

• Colors in Firefox on macOS will no longer be saturated on wide gamut displays, untagged images are properly treated as sRGB, and colors in images tagged as sRGB will now match CSS colors.
• In full screen mode on macOS, moving your mouse to the top of the screen will no longer hide your tabs behind the system menu bar.
• Also in full screen mode on macOS, it is now possible to hide the browser toolbars for a fully immersive full screen experience. This brings macOS in line with Windows and Linux.

Update 

To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References

• Security Updates
• Release Notes
• Rapid Release Calendar
  
  

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...