Mozilla Firefox Version 117.0 Released with Security Updates

 Mozilla sent Firefox Version 117.0 to the release channel.  The update includes fourteen security updates of which eight (8) are rated high, four (4) moderate, and two (2) rated low.

Firefox ESR was updated to Versions 102.14 and 115.2.

High

#CVE-2023-4573: Memory corruption in IPC CanvasTranslator

#CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback

#CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback

#CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback

#CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation

#CVE-2023-4577: Memory corruption in JIT UpdateRegExpStatics

#CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2

#CVE-2023-4585: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2

Moderate

#CVE-2023-4578: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception

#CVE-2023-4579: Persisted search terms were formatted as URLs

#CVE-2023-4580: Push notifications saved to disk unencrypted

#CVE-2023-4581: XLL file extensions were downloadable without warnings

Low

#CVE-2023-4582: Buffer Overflow in WebGL glGetProgramiv

#CVE-2023-4583: Browsing Context potentially not cleared when closing Private Window

New

• Support for credit card autofill has been extended to users running Firefox in the IT, ES ,AT, BE, and PL locales.

• macOS users can now control the tabability of controls and links via about:preferences.
  

• To avoid undesirable outcomes on sites which specify their own behavior when pressing shift+right-click, Firefox now has a dom.event.contextmenu.shift_suppresses_event preference to prevent the context menu from appearing.

Fixed

• YouTube video lists now scroll correctly when navigating with a screen reader.

Changed

• Firefox no longer shows its own screen sharing indicator on Wayland desktop environments. The system default sharing indicator will be used instead.

Web Platform

• Support for improved CSS nesting is now enabled by default.

• Firefox now supports RTCRtpScriptTransform.

• ReadableStream.from is now supported, allowing creation of a ReadableStream from an (async) iterable.

• Firefox now supports the math-style and math-depth CSS properties and the font-size: math value.

Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox."  Mac users need to select "About Firefox" from the Firefox menu. If you do not use the English language version, Fully Localized Versions are available for download.

References

• Security Updates
• Release Notes
• Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Optional Hotfix Patch for Adobe Reader and Acrobat

 

Adobe has released an optional hotfix patch for Acrobat and Acrobat Reader that addresses some important bug fixes for Adobe Acrobat DC and Reader. 

Update or Complete Download

Reader DC and Acrobat DC were updated to version 23.003.20284 for Windows.  Updates should become available via the internal updater or checks can be manually activated by choosing Help/Check for Updates.  

Reader DC and other versions are available here: https://get.adobe.com/reader/

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

References

• Release Notes

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

August 2023 Windows 10 Non-Security Optional Preview "C" Release

 Microsoft released KB5029331 for Windows 10 version 22H2 optional non-security release preview (Windows monthly updates explained).

The following are the highlighted changes included in the update:

• This update addresses an issue that might affect your computer when you are playing a game. Timeout Detection and Recovery (TDR) errors might occur.

• This update addresses an issue that affects certain display and audio devices. They are missing after your system resumes from sleep.  

• This update addresses an issue that might affect some VPN clients. They might not establish a connection.

• This update addresses an issue that affects the Search app. It opens in full screen, blocks additional Start menu actions, and you cannot close it.

See the referenced KB Article for quality improvements included in the update.

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

Update:  To get the update, go to Settings > Update & Security > Windows Update. The link to download and install the update can be found in the Optional updates available area.  To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows 10 update history

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...