Adobe Acrobat DC and Reader DC Security Updates Released

 

Adobe has released updates for Adobe Acrobat DC and Reader DC for Windows and macOS. 

These updates address critical and important vulnerabilities.  Successful exploitation could lead to arbitrary code execution and memory leak.

 

Release date: April 11, 2023
Vulnerability identifier: APSB23-24
Platform: Windows and MacOS

New Features

See What's New in Acrobat to learn about the new features in this release.

Update or Complete Download

Adobe Acrobat and Reader were updated to version 23.001.20143.  Updates should become available via the internal updater or checks can be manually activated by choosing Help/Check for Updates.  

Reader DC and other versions are available here: https://get.adobe.com/reader/

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

References

• Release Notes
• PSIRT

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 112.0 Released with Security Updates

 Mozilla sent Firefox Version 112.0 to the release channel today.  The update includes twenty-one security updates of which nine (9) are rated high, eight (8) moderate, and four (4) rated low.

Firefox ESR was updated to Version 102.10.

High

#CVE-2023-29531: Out-of-bound memory access in WebGL on macOS

#CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass

#CVE-2023-29533: Fullscreen notification obscured

#CVE-2023-29534: Fullscreen notification could have been obscured on Firefox for Android

#CVE-2023-29535: Potential Memory Corruption following Garbage Collector compaction

#CVE-2023-29536: Invalid free from JavaScript code

#CVE-2023-29537: Data Races in font initialization code

#CVE-2023-29550: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10

#CVE-2023-29551: Memory safety bugs fixed in Firefox 112

Moderate

#CVE-2023-29538: Directory information could have been leaked to WebExtensions

#CVE-2023-29539: Content-Disposition filename truncation leads to Reflected File Download

#CVE-2023-29540: Iframe sandbox bypass using redirects and sourceMappingUrls

#CVE-2023-29541: Files with malicious extensions could have been downloaded unsafely on Linux

#CVE-2023-29542: Bypass of file download extension restrictions

#CVE-2023-29543: Use-after-free in debugging APIs

#CVE-2023-29544: Memory Corruption in garbage collector

#CVE-2023-29545: Windows Save As dialog resolved environment variables

 

Low

#CVE-2023-29546: Screen recording in Private Browsing included address bar on Android

#CVE-2023-29547: Secure document cookie could be spoofed with insecure cookie

#CVE-2023-29548: Incorrect optimization result on ARM64

#CVE-2023-29549: Javascript's bind function may have failed

New

• Right-clicking on password fields now shows an option to reveal the password.

• Ubuntu Linux users can now import their browser data from the Chromium Snap package. Currently, this will only work if Firefox is not also installed as a Snap package, but work is underway to address this!

• Do you use the tab list panel in the tab bar? If so, you can now close tabs by middle-clicking items in that list.

• You've always been able to un-close a tab by using (Cmd/Ctrl)-Shift-T. Now, that same shortcut will restore the previous session if there are no more closed tabs from the same session to re-open.

• For all ETP Strict users, we extended the list of known tracking parameters that are removed from URLs to further protect our users from cross-site tracking.

• Enables overlay of software-decoded video on Intel GPUs in Windows. Improves video down scaling quality and reduces GPU usage.

Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References

• Security Updates
• Release Notes
• Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Happy Easter! "Khrystos Voskres!"

 

"Khrystos Voskres!"
(Christ is Risen!)

"Voistyno Voskres!"
(He is Truly Risen!)

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...