Updates 2026-01-13

Happy New Year!

Today is Patch Tuesday for January, 2026.

If your Windows 10 computer can not be upgraded to Windows 11 then you should either replace your device or use the Windows 10 ESU program to get another year out of it.

Windows 11 25H2 is now available and Windows 11 23H2 and older are no longer supported. Treat Windows 11 25H2 as beta software and wait a few months before upgrading.

macOS 26 Tahoe is now available and macOS 13 Ventura and older are no longer supported. macOS 26 is now stable and it’s important to update to 26.2 to resolve a critical security vulnerability.

There were 1325+ major hacks, and over 305 application updates this month. It’s a relatively small month, with about 3.0 GB of updates for most users.

This Month in Technology

1Cube, 3gh Informatica Integral, 47Club, 700Credit, A. Uzzo, A.S.A.P. Restoration, Aarong, Abacus Employment Services, ABECO Zumtech Drucklufttechnik AG Müliweg, About Women Ob Gyn, Abri Credit Union, acarlar.com.tr, Accela, Acme Electric, ACME Industrial, Ada Technologies, Adamson Ahdoot LLP, Adelman & Gettleman, Adnan Sundra & Low, AdonisJS, Advance Dent Denver, Advanced ENT & Allergy Center, Advanced Family Surgery Center, Advanced Technology Group, Aero Fabrications, Aflac, Aforeserve, AgeRight, Agfri, Agralite Electric Cooperative, Agrícola Cerro Prieto, Agrícola Don Ricardo, AH Group, AIPAC, AIRCOND SRL, Alex Rubbish & Recycling, ALGO 8180, All Rush, Allen Printing, AllerVie Health, Alliance Vape, AllRush Print & Apparel, Allure Home Creation, Alpha Alternatives, Alpha Systems, Alpine Lumber, Alt Alpha, Amazon Kindle, Ambiente e Sistemas de Informação Geográfica, ambisig.com, American Health, American Trust, American Vanguard, Ameriprise, Amla Commerce, AMW Treuhand & Immobilien, Anderson Engineering, Andover Eye Associates, Android (DroidLock), Android Dolby library, ANG BROTHERS (M&E) PTE LTD, Angstrom USA, Anritsu VectorStar, Anteriad, Anwalt Aktuell, Apache StreamPipes, APC Home Health Service, Apex Legends, Apex Spine and Neurosurgery, Appalachian Community Federal, Apple Safari, all Apple devices (iPhone, iPad, Apple Watch, Mac), Applied LNG, Apro, LLC, Arab Falcons, Arabian Desert Safari, ARC Community Services, Arcom Digital, Ariel Clinical Services, Armenian Government, ARO, Art City Dental, Artemis Healthcare, Artisans’ Bank, Ashton Thomas, Asiana Airlines, Askul Corporation, ASML, Aspen View Academy, Associated Radiologists of the Finger Lakes, PC, Associated Thermoforming, Assolim, Atalian, ATG, Atlantic Coast Life Insurance, Auforum, Aultman Health System, Aurora College, Austin Associates, Autodesk AutoCAD, Autohaus Elstermann, Autohaus Paschke, Autohaus Pichel GmbH, Autohaus Willy Ernst, autohaus-paschke.de, Automation One Business Systems, AUTOSUR, Avenira, Awakenings Center, AWS Auto Scaling, Axion50plus, Axxel Business Solutions, Ayelet Shaked Contact List, AySA, AzeoTech DAQFactory, B&J Transportation, baja.gob.mx, Baker University, Banco Vimenca, Bangchak, Barnes and Jones, Basecamp, Bauerfeind, BD Morning, Beausejour Co-op, Behr Enterprises, Behran Lift, Bell Lifestyle Products, Bengineered, Benise Dowling and Associates, Berkmann Wine Cellars, Bernaillio County, Besco Electrical, Best Hotels Spain, Best Insurance Agency, Betterment, beycelik, Beyer Law Group, Beyçelik Gestamp, BildungsWerk in Kreuzberg, Bina Darulaman Berhad, BioNet Asia, Black Dog Salvage, BLACKSTORE, Blaze Credit Union, blockchain contracts, BMW Guatemala, BNZ Materials, Boathouse on the Bay, BOC Oncology Center, Bolttech, Bonfilet, Boring Business Systems, BORING.COM, Bosch Choice Welfare Benefit Plan, Bouygues Energies and Services, Bowman Trailer Leasing, Box Elder County, Braemac, Brave, BreachForums (again), Brevard Skin and Cancer Center, Bridgewater Law Group, PC, Brightspeed, British Holiday & Home Parks Association, Brockhaus, Buhlmann Group, Building Trades, Burdette Dental Lab, Burnex, Burnham Brown, Busbusbus, bwk-berlin.de, Bäckerei Sipl, Bär Cargolift, C&R Electric, Cabinets 2000, LLC, Cal Spas, Callipo Group, CANCER, Canopy Health, Cape Fear Country Club, Capital + Safi, Capsum, Capuano Distribuzione Fresco, Caramel, Carbis Loadtec Group, Cardiovascular Medical Group of Southern California (CVMG), CareOregon, Carseo, Casa Botas, casabotas.es, cc-estuaire, CE-Edinger Medical Group BA, Cedar Valley Services Inc, CEIVA Logic, Center for Life Resources, Centro Médico Palafox, Centurion Security & Investigations, Cerenade, Charles Leonard Steel Services, charoenchai.com, Chastain & Associates, Chatham Asset Management, Chema Ballester, Chemirol, Chemstress Consultant, Chiesi USA, Chipotle, Choate’s HVAC, Chrome, all chromium-browsers, Chrysler, Church’s Chicken, CIDEF Argentina, CIIF Oil Mills Group, Cinema Concepts, Circuitronix, Cisco AsyncOS, Cisco ISE, Cisneros, Citizens Bank, City of Midway, City of Milton FL, City of Signal Hill, CJ Global, CKM Kondring Montagen, Clackamas College, Clarinda Health, Clarinda Regional Health Center, Clarksville ISD, Clemar Assessoria e Logística em Comércio Internacional, Clever Power, clipan.co.id, Cloudflare MCP Server Portal, Club Atlético River Plate, Clínica Dávila, CMAC LLC, cmc.com.br, Collins Computing, Colonial Metals, Colorado Powerline, Colégio Miguel de Cervantes, Comcast, Comercializadora Construtodo, Commercial Paving, Committee to Protect Journalists, Commonwealth Business Bank, Communauté de communes de l’Estuaire, CompactInd, Complexul Energetic Oltenia, Computing Dynamics, Conduent, Conifer Value-Based Care, LLC, consigaz.com.br, Construction Management and Consulting, Coolify, CoreHQ, Coupang, Covenant Health, Inc, CPJ.ORG, CPS, Cranford, Buckley, Schultze, Tomchin, Allen & Buie, Crawford Orthodontics, Crawford Software, Cressi, CSA Tax & Advisory, CSD Drancy, CSS Services, CSV Group, Culinary Jet Concierge, curl, CVK Hotels & Resorts, CVMG, CyberVector, Cyma Systems, Cytek Biosciences, D-Link DSL gateways, DABA Finance, Dacon Networks, daispa.it, Dan Technologies Group, David M. Schwarz Architects, David Rosen Bakery Supply, Debra L. Morrison Coaching & Consulting, Deerfield, Deibel Laboratories, Dekoyap, DELKO, Dem İlaç, Denk & Roche Builders, Denny’s 5th Avenue Bakery, Dentistry.One, Denton County MHMR Center, Depth, Dermatology Associates, Desjardins, DESY, Deutsches Elektronen Synchrotron, Devereux Foundation, DFC Systems, DGM, DGP Commercialisti, Dhow Cruise Dubai Harbour, Diaz Gill Medicina Laboratorial, DIF Guadalajara, Dill Dill, Dillon Yarn, Discord, Distribuciones Notariales, Distribuzione Automatica Italiana, Distron, Docs Medical Group, Inc, Dolan Construction, Dom Development, Donaghy Sales LLC, Dot Foods, Dr. Busso Peus, drako.com.mx, Drivestream, Inc, Drogaria Drogales, DSM Bilişim Teknolojileri, DSM Information Technology Trade Ltd, Dublin Medical Center, Due Doyle Fanning and Alderfer, DXS International, D’Klima, E-apostille, EAG Realty International, Eagle Stores, Eanes Independent School District, East Bay Regional Park District, Eastern Townships School Board, Eastman Cooke, EazyTick, Eco Green Group, Edge, Edward J Kone, EGP Comunicaciones Sac, EI Connect, Elad, ELC Electroconsult, Electricidad Panamericana, Electronic Interconnect, Elford, Inc. Construction, Elite Auto, Ellison Educational Equipment, EM Resorts, EmEditor, EMP Closures, Empire Screen Printing, Empresas Maggi, Endesa, Enel X, Energogroup, Energy Capital Credit Union, Enerparc AG, Entreprise Menuiserie Bâtiment, Envases Group, EPI du Rouergue, Epport Richman & Robbins, Equans, Ericher, Erie Molded Plastics, Ernst Auto, Eros Elevators and Escalators, Escuela Técnica Roberto Rocca, ESOP Direct, Esquire Brands, ESSPL, estrumar.es, Ets Puzio, Eurofret Transports Et Logistique, European Space Agency (ESA), European Vegetarian, Eurostar, Event Rental Systems, Ever Green Industria e Comercio, Evercover, Evergreen Printing, Evoke Wellness at Hilliard, ExamRoom.AI, Excellent Home Care Services, Exms Expertise Mobsign, Expert MRI, Facebook, Fairgrove Oil & Propane, Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics, Farmacia San Pablo, Farwest Fabrication, FASSIC, FCL Components, fecrwy.com, Fedcap, Federal University of Sergipe, FedEx, Feldman and Lopez, Felix Gonzalez Law Firm, Ferreteria Scopazzo, Fest Group, FHIABA, Fieldtex, FilmRise, Firmengruppe Hoffmann, First Federal Savings & Loan Association of Pascagoula Moss Point, First Rate Financial, Fit-Line Global, Fitzpatrick Hotel Group, Flavor Producers, Flock cameras, Florida East Coast Railway, Florida Orthopaedic Associates, Flowty, FontForge, FortiCloud, Fortinet firewalls, Fortinet FortiSandbox, Fortrex, Foshee Architecture, Foundation Agents, FOX Architects, Foxit PDF Reader, FPMCM LLC, Framelink Figma, Freedom Chat, FreePBX, French Interior Ministry, French postal service, Fresh2You, Friends of Family Health Center, Friis & Moltke Architects, Fuji Electric Monitouch V-SFT, Fujitsu Component (Malaysia) SDN, Fundação do Câncer, Fyzical Therapy & Balance Centers, Fürth, G & L Mechanical Systems, G-WAY Microwave, G5 Enterprises, Galine, Frye, Fitting & Frangos, LLP, Gardner Health Services, Garner Foods, Garrett Leather, Gateway Fiber, Gaviota, GCC Services, GDEV, GearGrid, Gebrüder Bagusat, Gemini MCP, Gemotest, Genoa Lakes Golf Club, Gentex Optics, Geometrics, Georgia Dermatology & Skin Cancer Center, GeoServer, GES Elektrik, GIMP, github-kanban-mcp-server, GIV SRL, Gladinet CentreStack, Glassers TV, Global Miami JV, Global-e, Gobierno de Baja California, Gogs, GoldenLine, Goldman Sachs Investments, Golf Manor, Good Plus Foundation, Goodwin University, Google Chrome, Gordon Clifford Properties, Gordon Companies, GPC Industries, GPT Academic, Grade Results, Grafana, Grandes Vinos, Granos y Cereales de Colombia, Granville Inn, Grassroot DICOM, Greater St. Louis Oral & Maxillofacial Surgery, GreenBills, Greene Metal Products, GreenValley International, Group Echo, GROUPE ETMB, Grupo Amanus, Grupo Construtodo, Grupo Drako, Grupo Hafesa, Grupo Logistics, Grupo Olé, Grupo Panamá, Grupo Puma, Grupo Ruiz, Guan Chong Berhad, Gulshan Management Services, gumustasmaden.com.tr, Guttenberg Industries, Gümüştaş Madencilik ve Ticaret, Hale Makua Health Services, Hama Film, Hanlon Electric, Happy Telecom, Harbour Town Doctors, Hardesty & Hanover, Harmony Health Medical Clinic and Family Resource Center, Harris Consulting Engineers, Harrison Design, Hart, Hartford, Harvey & Martin, Hatta Heritage Village, Hauken Engineering, HAXcms, Hayden Safe & Lock, Health Bridge Chiropractic, Health Management Systems of America, Health Share of Oregon, Healthbridge MultiSpecialty Group, Healthcare Interactive, Heart of Texas Behavioral Health Network, heatcel.co.uk, Heating Components & Equipment, Henry Ford Health, Heritage Engineering, Hermes Medical Solutions, Hernando County, Hexacon Construction, Higham Lane School, Hikvision, hilden.in, Hintenberger Dächer, HKR Architects, HMPC CPA, Hodgins Devereaux, Hodgins Law Group, Hog Sla, Holiday Tours, Home Depot, Homestead Electrical Contracting, Hometech Window, Hongfa America, Hood River Dentist, Hope Cooperative, Hopital La Rabta, Hopper Developments, Household & Commercial Products Association, HPE OneView, Hr Björkmans Entrémattor, HSR Specialist, Huebsch Services, Hugging Face smolagents, Hugging Face Transformers, Hunneman Real Estate, Hydraulic Technologies, Hydrodiseño, Hyfresh, Hytec South Africa, Häussermann Stauden Gehölze GMBH, IAPMO, IATTC, IBM API Connect, IceWarp, IDeaS Revenue Solutions, Illinois Department of Human Services (IDHS), Illumina, Imperial Beach Community Clinic, Infinite Computing Systems, Ingomar Church, Inha University, Inotiv, Inc, inpipeproducts.com, Insight Enterprises, Inspired Universal McCann, Instagram, Institut Teccart, Institute for Biology of Inland Waters IBIW, Institute for Design Problems in Microelectronics, Integrated Technology Group, Inter-American Tropical Tuna Commission (IATTC), International Association of Plumbing and Mechanical Officials, International Door, International Freight & Commerce, International Pipeline Products, International Standard Valve, Intonu, IntraCare, InTTrust, Investigaciones Medicas, InvivoGen, Ireland Ombudsman’s office, Italgrafica Sistemi, Italian ferry, ITG Electronics, ITG Solutions, J. Grennan & Sons, Jabezco Industrial Group, Jaf Gifts, James Free Jewelers, JBS Foods, JBS Mental Health Authority, Jefar, Jeff D’Ambrosio Auto Group, Jennings School District, Jewish Family and Community Services, Jing Cheng Enterprise, JJ White, John Buck Company, Josh Steel, jsPDF, JumpCloud Windows Agent, JVDB Assoc, JZ Russell Industries, Kalamazoo Valley Community College, Kamunikat, Kasetsart University, Katana Network, kavi.fi, Keio University, Kelsey School Division, Kenalex Construction, Keycodes Inspection Agency, Keylogistics Chile, Keys to Literacy, Kidd’s Services, Kier & Wright, Kirby Agri, Kirloskar Oil Engines, Klax Gruppe, KLH Industries, Klingele Paper & Packaging Group, Knight Group, KOEL.CO.IN, Konig Print, Kontigo, Kopaş Kozmetik, Korean Air, Korean Air Catering & Duty-Free, Korean Association for Public Administration, kraslice.cz, Krenzer Marine Overview Metrics, KSL Ingenieure, KTL Group, Kuaishou, Kucera International, Kumpulan Prasarana Rakyat Johor, Kwik Ledgers, L Pollock PR, La Banque Postale, La Papelera, La Rosa Del Monte Express, Labayen y Laborde, Labeltex Group, Laidley Family Doctors, Lakeside Title Company, Lampire Biological Laboratories, lampus.com, Langflow, Lanmark Group, LAOC Building and Construction Trades, Lares, larosadelmonte.com, Larry Pitt & Associates, Lasercomb, Latitude 33 Planning & Engineering, Launie & Marino, Laurenzano Logistica, Laurysen Kitchens, Laval Virtual, Lawrence Family Jewish Community Center, LawSoft, Inc, Leadway Assurance, Leandri & Associés, Leco Switchgear, Ledger, Leduc County, Leger & Shaw, Leidos QTC Health First Rehabilitation Resources, lfval.net, Libya Telecommunications Company, LiftPRO International, Line, Linemaster Switch, Linux kernel, LiteConn Technology, LKQ, LO Trading, LogicVein, loginport, Lonich Patton Ehrlich Policastri, Louisiana Office of Student Financial Assistance, LPL, LS GRIM, Lugiano Medical, Luminex Software, Luxshare Precision Industry, Lycée Français International de Valence, Lynn Community Health Center, Lynn Electrical, L’Orange Bleu, L’Épi du Rouergue, M&M Auto Parts, maasa.com.ar, macOS, Madera County Superintendent of Schools, Madison Area YMCA Association, Madison Healthcare Services, Mailpit, Maison Law, ManageMyHealth, NZ, Manuaco, MariaDB, Marine Systems, Markham Stouffville Hospital, Marquis Software Solutions (700 banks and credit unions), Marshfield Clinic, Masarykova základní škola a mateřská škola Železnice, Massapequa Fire District, Mastermedia International, MAT 4Site Engineers, Maven Solutions, maxdream.tur.ar, Maypay Farms Inc, MC Squared, McAfee Trellix, McCraw Oil, McElroy & Associates, McIntosh Laboratory, Inc, McKee-Pownall Equine Services, McKenzie SewOn, MCP Manager for Claude Desktop, McPhillamys Gold Project, mdm NT, Med Atlantic, MedHelp Clinics, Medical Asset Management, MedStar Health, Mega Alfalfa Argentina, Melsing Engineering & Consulting, Mercadien PC, Mercury Wire Products, Merko Ehitus, Methodist Homes, MetroWest Community Federal Credit Union, Metálicas Estrumar, Meyer Lift, MG Chartered Professional Accountant, Microf, Microsoft Edge Mark-Of-The-Web, Microsoft Edge, Microsoft Visual Studio, Midkiff Muncie and Ross, Milhench Supply, Mill Brothers, Millcreek Pediatrics, Milton FL, MindsDB, Minersville Schools, Mission Neighborhood Health Center, Mohammad Omar Bin Haider Holding Group, Molecular Testing Labs, Money Mart, MongoDB, Moonachie Borough, Moore Lumber, Morgan Records Management, Morning Desert Safari, Morningstar Properties, Morton Buildings, Morton Drug Company, Mosty Katowice, MP Filtri, MS Corp, Mt. Spokane Pediatrics, Murray Irrigation Limited, Mutti Parma, MyTunes, MyVete, Město Kraslice, n8n, Naftali Bennett Chats, NAHGA Claim Services, Nartis Plant, Nashua Botswana, National Audiovisual Institute, National Biscuit Industries, National Credit Regulator, National Equipment, National Guard website, National Water Authority, Native American Health Center, NBS Canada, NCH Corporation Employee Benefits Plan, NECO Equipment, Neighbourly, Nepes, Net-SNMP, Netanyahu’s Cabinet Awaits Handala’s Next Move, Netstar Australia, Network of Biblical Storytellers, Canada, Neurological Associates of Washington, New High Pack, New Obscura 2.0!, News-Press & Gazette Company, Next Capital, Next.js servers, Nextclode, nhpsa.com.ar, Niradia Enterprises, Nissan Motor Co, NK Technologies, NLFX Professional, NordVPN, North Atlantic States Carpenters Health Benefits Fund, North Perth, North Star Asset Management, Northern Air Systems, NorthStar Asset Management, Notariat Gerresheim, Notepad++, Notin, NovaBio, Novelty Technology Care Espana, npm, NS Pharma, NS Support LLC, NSE Insurance Agencies, NSF Unidata, NT Tool Thai, NTC Pharma, NTH Consultants, Nura Clinics, NZ ManageMyHealth patient portal, Oakland Smile Dental, OCC Marketing Communication & Technologies, Ochsner LSU Health System, Office of Public Sector Anti-Corruption Commission, oFono, OGI Groupe, Ohio Public Safety, Oklahoma Spine Hospital, Ollama MCP, Oltenia Energy Complex, Oman Football Association, OMF International, Omnibus Japan, Omrania, One Community Health, Open Door Community Health Centers, Open WebUI, Optimum Window Manufacturing, Options Community Services Society, Optral, OPTUM-IES, Oracle Health, Oregon Department of Environmental Quality, Ortho Mattress, OSI Systems, OSSE San Juan, Outdoor Smart! Inc, ownCloud, Oxford Rehabilitation Center, Pacific Railway Enterprises, Pacific Rim Mechanical, Paizo GPS Solutions, Parexel International, LLC, Partido Revolucionario Institucional, PAUAT Architekten, pdfforge PDF Architect, PDFsam, Peaker Services, Pearlman Aesthetic Surgery and Associated Radiologists, Pecan Tree Dental, Pediatric Dentistry of Oklahoma, Pell City Schools, Pensam Capital, Pensam Residential, Pentadiet, Pernec, Pernel Media, Petco, Petróleos de Venezuela (PDVSA), Peugeot Motocycles, peus-muenzen.de, Pewarchuk, Phillipine Department of Trade and Industry, Phillips Scales, Physicians to Children & Adolescents, Pickett USA, Pierce County Library System, Pilot automotive, Pin Hwa High School, PJSC Quadra Power Generation, Planned Parenthood Northern California, PlayStation, Plonter Technologies, Podovia, POL-HUN, Polaris Parks, polhun.pl, Pollock Communications, Pools by Bradley, Pornhub, PortSwigger Web Security, Posillico, PostgreSQL, Power Curbers, Powerscourt, Precise Benefits Group, Precision Aluminum, Premier Auto Credit, Prime Label Consultants, Print-O-Tape, Productos Lácteos Flor de Aragua CA, Progressive Laboratories, Promm Group, Prosura, Proton System, PT Clipan Finance Indonesia Tbk, PTS Goldkist Industries Sdn Bhd, Publicidad Sarmiento, Pueblo West Colorado, Pueblo West Metropolitan District, Pulse Urgent Care, Purcell Architects, puzio-saunierduval.fr, Quasar Data Center, Questica, Quezon Power, Q‑Ads, R.I. Lampus, Rafael Construction, Ragland Law Firm, Rain Bird Corporation, Rainbow Communications, Rameder, Ramside Hall, Ranger Investigation Guard, Raritan Yacht Club, Rconcept, RD Metals, React Server, Real Tech, Red Star Studio Ltd, Redis, REDtone, Reger Zahntechnik, Region of Istria, Rene Industries, Republica Federative do Brasil, Resecurity, Resource Corporation of America, Retrofit Service, Revere Health, Revoil, RGD Consulting Engineers, Richmond Behavioral Health Authority, Right Power Technology, Rio Farms, LLC, Rio supermarket, RJ Enterprise, RJS Logistics, RK Centers, RM Medics, Rockport Technology Group, Rockrose Development LLC, Rod Danielson, Rodenburg Law Firm, Rodney’s Sign Company, Roebbelen Contracting, Inc, Rogitz & Associates, Romanian Waters, Roose Ressler & Green, Ruhrpumpen, Rusk County, WI, Rust on Linux, RustCrypto, RYC, Röben Tonbaustoffe, S.Med Handels, Saar Engineering, Sai Oral Surgery, Saint Petersburg State University of Economics, Salcom, Salvation Army, Samkee America, Sampoerna Agro, San Francisco Community Health Center, San Silvestre School, Sanchez Vadillo, Sanko Gosei UK, Santa Casa de Assis, Santa Rosa Community Health Centers, Sante PACS Server, Sanyang Motor, SapLog Italia, Sapphire Health, Sarl Alliance, Saudi Icon, SAV Antivibranti, Sax LLP, sbws.org.sg, Scenic Solutions, Schneider Prototyping, Scipioni, SEAC SUB, Seac, Seal Beach, CA, Seal Beach CA Police Department, Secorp Industries, Security ONE Alarm Systems, Sedgwick Government Solutions, Seeberger Appel, Seguridad Las Americas, SEIMITSU THAI COMPANY LIMITED, Self-Help Addiction Rehabilitation, SELP, Sem Plastik, SEM Val de Bourgogne, Sense Eletronica, Senstar Symphony, Sentinel Security, Sentry Advisors, SETEX Textil, Shah Law Office, Shamrock Technologies, Share Ourselves, sharinc.org, Shinhan Card, Shinsegae, Shlansky Law Group, SHOFCO, Shore Gardens Rehabilitation & Nursing Center, Shout Factory, Shwapno, Siemens Simcenter, Silverline Group, SINBON Electronics, Sindicato dos Professores da Zona Centro, Singapore Buddhist Welfare Services, Singing River Health System, Singular Genomics, Sintac Recycling, Sipl, SIRH Mexico, Sirio Pharma, sje.vic.edu.au, smallstep Step-CA, SMC Global Securities, smed.at, Smile Center Utah, Smith Hawks, Smith Roberts Baldischwiler, Snapchat, SNCC Automatisme Solutions Process, SOA People, Soapy Joe’s Car Wash, Société Tunisienne de Radiologie, Soda PDF Desktop, soeuae.ae, Softlab SpA, Solarpro Holding, Solumek SAS, Solus Tecnologia em Sistemas, SonicWall SMA1000, Sortimage Communications, SoundCloud, South Shore Tool & Die, South West Development Commission, Southern Oregon Neurosurgical and Spine Associates, Spartan Carbide, Spitzer Auto Group, Sponseller Group, Spring Grove Area School District, Springer’s Jewelers, SproutNet, SPZC, SSL and ACL, St Charles Preparatory School, St Ignatiusi Jamsville, St Josephs College Echuca, St Anthony Regional Hospital, St John’s Riverside Hospital, Stadt Fürth, Stadtwerke Clausthal-Zellerfeld, Stanley Co Malaysia, Startek Engineering Inc, STC Concrete Products, Steel Corners Industrial, Steel Dynamics, Inc, Steelworks Inc, Stesad, Stewart Engenharia, STIC Investments, stimgroup, Stipe Law Firm, Stoughton Steel, Strategic Technology, strtn.org, Studio DGP Dottori Commercialisti, studioelad.it, Sudamerica, Sugawara Laboratories, Sunair Electronics, Sunshine Group, Sunzen Biotech Berhad, SUPERAntiSpyware, Superior Water Conditioning, Surfish Trade, Susquehanna Glass, SV-Büro Ing. Schulz GmbH, SVA y Tecnología Móvil de España, svlawus.com, SW Automation, SW WireTerminal, SW/WC Service Cooperative, Swartz Campbell, Swavelle Group, swdc.wa, Swift Institute, Syrstone, Systherm Grupa, Sönmezler Metal, TACK Electronics, TaLachaim, Talarico, Taminsho, TapestryHealth, Target, TEALCA, teccart.qc.ca, Technicare Instrumental Cirúrgico, tecnicarobertorocca.edu.ar, Tecno Electric, Tein, Teknequip, Tele-Fonika Cable Americas, Telechaim, Telegram, Telstar Hommel, Temple Shalom, Tencent FaceDetection, Terminales Portuarias, Terport, Teruya Brothers, Texas Pete, Thai Pet Food Group, The Araneta Group, The Biosig Project, The Boathouse on the Bay, The Botting Network, The Carlson Law Firm, The Center of Association Management, The Cressi, The Day of Reckoning Awaits the Child-Killers, The Genesis Group, The Lewis Bear, The Outdoor Recreation Group, The Parkes, The Salarpuria Sattva Group, The Sonnenschein Groupe, The Structures Group, The Wardlaw + Hartridge School, ThermoEx Company Limited, Thrings Solicitors and Lawyers, THT Bio-Science, Thunder Bay Counselling, Titan Motor Group, Tlechaim, Tokyo FM, Tommotek, Top Dest, Topstep, TorHoerman Law, LLC, Total Wireless, Towell International Holding, TradingView Desktop, Transpedrosa, Transport Scolaire, Transrocamar, Trend Import Export, Trend Micro Apex Central, Trend Micro Cleaner One, Tri-State Metal Roofing Supply, Triad Packaging Inc, Trimble SketchUp, Trine Access Technology, Triple Eight Transport, TriVector Services, TriZetto Provider Solutions, Trubee Wealth Advisors, TrustWallet, Tucson Independent Physicians and Surgeons, TUPI, Turing & EDU Arena, Turnamics, Tuscon Physicans, Twinsoft, Typhoo Tea, Ubisoft’s Rainbow Six Siege, UBS Office, Udall Law Firm, UEFI, UK Foreign Office, UK Free Speech Union, UK Home Office, Unified Assessment Platform ExamRoom.AI, Union Home Mortgage Corp, Union of Shop, Distributive and Allied Workers, uniplaclages.edu.br, Unipres Alabama Inc, United Keetoowah Band of Cherokee Indians in Oklahoma, United Pacific, Universidad Nacional Autónoma de México, Universidade do Planalto Catarinense, Universiti Sains Islam Malaysia, University of Hawaii Cancer Center, University of Phoenix, University of Sydney, Unleash Protocol, UNRE AI, UPC Precision Castings, Upsonic, Urban Remedy, Urban VPN, urfishtrade.com, uro.com, US Art, US Dept Of Defense (hundreds!), US Equal Employment Opportunity Commission (EEOC), usdaw.org.uk, Usina Sao Jose do Pinheiro, Utair, Valle Redondo, Van Venrooy, Varimed Medikal, Veeam Backup, Veplastic, VeraBank, Veradigm LLC, Vereinigte Stadtwerke, Vernon Sales, Vestil Manufacturing, Vetco, VFM Systems & Services, Victoria Benelux, Victorian Catholic College, Victory Disability, Vida Y Salud, Viga Eatery, Village of Franklin, Ville de Dunkerque, Vim for Windows, Virginia Mental Health Authority, Virginia Records, Virginia Urology, Vishnick McGovern Milizio, Vision Wheel, VisionPoint Eye Center, Vitatrac, Vivaldi, VLP Hellas, VMware ESXi, Voltech Rebuilders, Voltras International, VroomVroomVroom, Váhostav, Wadzeck-Stiftung, Wall Street English, Walltopia, Walters Group Inc, Wamtechnik, Wardell Builders, Warka Bank for Investment and Finance, Warren County Treasurer’s Office, Warrior Crane Service, WatchGuard Firebox, WatchYourLan, Watermark Beach Resort, Watertech of America, Wavenet, Wavlink routers, Wearbest Sil Terhar, Web Hosting Talk, Wedbush Securities Inc, Wellcare, Wellpoint, Wesley Heating and Cooling, Westlake Christian Academy, Westminster City Council, Westquay, WhiteDate, Wilbarger General Hospital, Wild Bunch Distribution, Willowdale Steeplechase, Wilmington Community Clinic, Wilson Smith Cochran Dickerson, Windows Remote Access Connection Manager (RasMan), Windscribe, Windward Life Care, WIRED, Wisanka Indonesia, Wizix Technology, WJ Professional, Wood Personnel Services, Woodard, Emhardt, Henry, Reeves & Wagner, LLP, Woodglen Medical Group, WordPress Motors theme, Workers Compensation Insurance Rating Bureau of California, WorldPoint, Wright Architectural Millwork, WSI, XSpeeder, Yalidine Express, Yavne Educational Center, Yokosuka Gakuin, YoPipe, York Hospital, Young Wealth Management, Youngblood Tyler and Associates, Youngstown Pipe & Steel, Z-Tronix, Zenflow, Zimeda, Zoom, and zszeleznice.cz have reported hacking or compromises this month.

Microsoft Exchange Online, Microsoft Teams, and X/Twitter have suffered from outages this month.

Internet access throughout Congo-Brazzaville, Finland, Guinea, Iran, Montana, San Francisco, CA, Ukraine, and Venezuela has been blocked our down for extended periods.

Last months updates broke Classic Outlook, VPN access, and Windows Message Queuing (MSMQ).

Microsoft is going to start blocking older, insecure and unsupported hardware from accessing their email platform, Exchange Online.

For all their blather, Apple will be using Google Gemini to power Siri.

Crucial is ending consumer sales. This is going to be bad for computer pricing.

It’s insanely easy to map out human movement within your home (or someone else’s) using your existing Wi-Fi routers.

Let’s Encrypt (the service behind most current website secure certificates) is shortening the expiration term for their certificates. By a lot. It’s almost completely automated so probably not going to be a bit deal.

California has added a privacy tool to request that data brokers remove your information. It uses a third-party precheck service responsible for breaking the Internet several times last year (CloudFlare) and one of the worst privacy violating services out there (login.gov), then requires you to give the California government all of the information about you (name, SSN, date of birth, email address, phone numbers, addresses and so much more) for the state to store so that participating data brokers know what to remove. My opinion: government is the worst of the worst when it comes to getting hacked and exploited, so if you’re concerned about dubious storage of your data, giving it to the state is literally the worst possible option. It might be more work, but it’s better to do it yourself.

Now for the good news:

Google is finally adding an option to remove information about you.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is relatively small this month. The typical computer should see roughly 3.0 GB in updates today. Let’s get started.

Microsoft released 60 updates to address 115 vulnerabilities in Agere Windows Modem Driver, Azure Connected Machine Agent, Azure Core shared client library for Python, Capability Access Management Service (camsvc), Connected Devices Platform Service (Cdpsvc), Desktop Window Manager, Dynamic Root of Trust for Measurement (DRTM), Graphics Kernel, Host Process for Windows Tasks, Inbox COM Objects, Microsoft Edge (Chromium-based), Microsoft Graphics Component, Microsoft Office, Microsoft Office Excel, Microsoft Office SharePoint, Microsoft Office Word, Printer Association Object, SQL Server, Tablet Windows User Interface (TWINUI) Subsystem, Windows Admin Center, Windows Ancillary Function Driver for WinSock, Windows Client-Side Caching (CSC) Service, Windows Clipboard Server, Windows Cloud Files Mini Filter Driver, Windows Common Log File System Driver, Windows Deployment Services, Windows DWM, Windows Error Reporting, Windows File Explorer, Windows Hello, Windows HTTP.sys, Windows Hyper-V, Windows Installer, Windows Internet Connection Sharing (ICS), Windows Kerberos, Windows Kernel, Windows Kernel Memory, Windows Kernel-Mode Drivers, Windows LDAP – Lightweight Directory Access Protocol, Windows Local Security Authority Subsystem Service (LSASS), Windows Local Session Manager (LSM), Windows Management Services, Windows Media, Windows Motorola Soft Modem Driver, Windows NDIS, Windows NTFS, Windows NTLM, Windows Remote Assistance, Windows Remote Procedure Call, Windows Remote Procedure Call Interface Definition Language (IDL), Windows Routing and Remote Access Service (RRAS), Windows Secure Boot, Windows Server Update Service, Windows Shell, Windows SMB Server, Windows Telephony Service, Windows TPM, Windows Virtualization-Based Security (VBS) Enclave, Windows WalletService, Windows Win32K – ICOMP, and MSRT. This includes security updates. A reboot is required.

Apple released updates for iOS 26.2, iPadOS 26.2, macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, macOS Tahoe 26.2, Safari 26.2, tvOS 26.2, visionOS 26.2, and watchOS 26.2. This includes security updates. Use Apple Software Update to install the most current versions.

iOS 26.2 is a security update. Use Settings, General, Software Update to install the most current update.

iPadOS 26.2 is a security update. Use Settings, General, Software Update to install the most current update.

watchOS 26.2 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 26.2 is a security update. Use System, Software Update to install the most current version.

visionOS 26.2 is a security update. Use System, Software Update to install the most current version.

Google ChromeOS 143.0.7499.196 and ChromeOS LTS 138.0.7204.300 are security updates. Use Menu, Help, About to install the most current version. A reboot is required.

Fedora 45 is a major update. This is a security update.
https://getfedora.org/en/workstation/download/

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Tahoe (26.x) means that macOS Ventura (13.x) and older are no longer supported. If you can not install at least macOS Sonoma (14) on your Mac then you should immediately remove your device from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

Windows 10 (all consumer versions) is end of life (EOL). All non-LTS versions of Windows 10 without ESU are now out of support, with the sole alternatives being to upgrade to Windows 11 or enable Extended Service Updates (ESU). If you aren’t sure whether you are using LTS, you aren’t. Enable the ESU now.

The current release of the Windows 11 (v25H2) is very large (30% larger than any previous release) so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is now stable and can be upgraded to if your hardware supports it. If not, switch to Linux (Mint is nice) or replace your computer.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, drivers for hardware you’re not using (like old printers), and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with a SaferPC Subscription and we will install updates each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Logitech Options 10.26.14 fixes a MS Office compatibility issue. This is not a security update.
https://support.logi.com/hc/en-us/articles/360025297893

MTPdrive 5.1.202 improves compatibility. This is not a security update.
https://www.mtpdrive.com/

RICOH IM C4510 1.5.0.0 adds new languages. This is not a security update.
https://support.ricoh.com/bb/html/dr_ut_e/rc3/model/imc4510/imc4510.htm

Stream Deck 7.2.0 adds support for new hardware.
https://help.elgato.com/hc/en-us/categories/360001636492-Stream-Deck

TP-Link Archer AX55 v1 251119 is a security update.
https://www.tp-link.com/us/support/download/archer-ax55/v1/#Firmware

TP-Link Archer AX73 v2.0 250717 is a security update.
https://www.tp-link.com/us/support/download/archer-ax73/v2.0/#Firmware

UniFi airMAX NanoStation 5AC Loco 8.7.21 is a security update.
https://www.ui.com/download/software/loco5ac

VIISAN OfficeCam 7.2.15 doesn’t provide a change log so should be treated as a security update.
https://www.viisan.com/en/download/type1.html

Xerox Smart Start 2.1.24.0 doesn’t provide a detailed change log so should be treated as a security update.
https://www.support.xerox.com/en-us/content/143617

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.85.120 is a security update.
https://brave.com/

Firefox 147.0 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Firefox ESR 140.7.0 is a security update.
https://www.mozilla.org/en-US/firefox/organizations/all/

Google Chrome 143.0.7499.192 is a security update.
https://www.google.com/chrome/

Microsoft Edge 143.0.3650.139 is a security update.
https://www.microsoft.com/en-us/edge/business/download

SeaMonkey 2.53.23 is a security update.
https://www.seamonkey-project.org/

Vivaldi 7.7.3851.67 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Spark 3.27.5.126936 improves layout and adds sharing controls, recent activity folder and new display options. This is not a security update.
https://sparkmailapp.com/

Spark (macOS) 3.27.5.126935 improves layout and adds sharing controls, recent activity folder and new display options. This is not a security update.
https://sparkmailapp.com/

Thunderbird 146.0.1 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 9.6.7 resolves dozens of bugs, improves stability and cosmetics. This is a security update.
https://anydesk.com/en/downloads

AnyDesk (macOS) 9.6.1 improves reliability. This is not a security update.
https://anydesk.com/en/downloads

curl 8.18.0 updates libraries, removes support for older technology, and resolves over a hundred bugs. This is a security update.
https://curl.haxx.se/windows/

Dropbox 238.4.6305 doesn’t provide a detailed change log so should be treated as a security update.
https://www.dropbox.com/

FileZilla Server 1.12.1 resolves a stability bug. This is not a security update.
https://filezilla-project.org/

Google Drive 119.0 resolves several bugs. This is not a security update.
https://drive.google.com/start

MeshCentral 1.1.55 resolves over a dozen bugs. This is not a security update.
https://meshcentral.com/info/downloads.html

Nextcloud Server 31.0.2 updates libraries and resolves dozens of bugs. This is not a security update.
https://nextcloud.com/

Npcap 1.86 is a security update.
https://nmap.org/npcap/

OneDrive 25.222.1112.0002 resolves several bugs and increases AI integration with Copilot. This is not a security update.
https://support.microsoft.com/en-us/onedrive

Rclone 1.72.1 is a security update.
https://rclone.org/

Signal 7.84.0 resolves a cosmetic bug. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 7.68.4 adds polls and resolves a cosmetic bug. This is not a security update.
https://signal.org/android/apk/

Syncthing 2.0.13 resolves several bugs. This is not a security update.
https://syncthing.net/

Technitium DNS Server 14.3 resolves several bugs and updates included apps. This is not a security update.
https://technitium.com/dns/

Telegram 6.4.2 resolves several bugs. This is not a security update.
https://telegram.org/

Media Updates

These are unlikely to be of interest to most people.

3tene 4.0.24 resolves several cosmetic bugs. This is not a security update.
https://en.3tene.com/

darktable 5.4.0 resolves many bugs, and improves user interface and performance. This is not a security update.
https://www.darktable.org/

Grayjay 363 improves DASH & UMP support and improves language filters. This is not a security update.
https://grayjay.app/index.html

KaraFun Player 3.10.6 resolves an updater bug, improves cosmetics for currently playing item, and resolves several other bugs. This is not a security update.
https://www.karafun.com/karaoke-windows/

VLC Media Player 3.0.23 is a security update.
https://www.videolan.org/vlc/

Game Updates

These are unlikely to be of interest to most people.

Minecraft Server (Bedrock) 1.21.132.3 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server/bedrock

Nintendo Switch 21.2.0 improves stability. This is not a security update.
https://en-americas-support.nintendo.com/app/answers/detail/a_id/22525/kw/system%20updates/p/989

Steam 2025.12.19 is the last build with 32-bit support, resolves stability bugs with controllers and resolves over a dozen bugs. This is not a security update.
https://store.steampowered.com/news/app/593110

SteamOS SteamDeck Update 3.7.19 resolves several bugs. This is not a security update.
https://store.steampowered.com/news/app/1675200/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Bridge 15.1.3 and 16.0.1 are security updates.
https://helpx.adobe.com/security/products/bridge/apsb26-07.html

Adobe ColdFusion 2025 Update 6 and 2023 Update 18 are security updates.
https://helpx.adobe.com/security/products/coldfusion/apsb26-12.html

Adobe DreamWeaver 21.7 is a security update.
https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html

Adobe Illustrator 29.8.4 and 30.1 are security updates.
https://helpx.adobe.com/security/products/illustrator/apsb26-03.html

Adobe InCopy 21.1 is a security update.
https://helpx.adobe.com/security/products/incopy/apsb26-04.html

Adobe InCopy 20.5.1 is a security update.
https://helpx.adobe.com/security/products/incopy/apsb26-04.html

Adobe InDesign ID21.1 and ID20.5.1 are security updates.
https://helpx.adobe.com/security/products/indesign/apsb26-02.html

Adobe Substance 3D Designer 15.1.0 is a security update.
https://helpx.adobe.com/security/products/substance3d_designer/apsb26-13.html

Adobe Substance 3D Modeler 1.22.5 is a security update.
https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html

Adobe Substance 3D Painter 11.1.2 is a security update.
https://helpx.adobe.com/security/products/substance3d_painter/apsb26-10.html

Adobe Substance 3D Sampler 5.1.3 is a security update.
https://helpx.adobe.com/security/products/substance3d-sampler/apsb26-11.html

Adobe Substance 3D Stager 3.1.6 is a security update.
https://helpx.adobe.com/security/products/substance3d_stager/apsb26-09.html

Artweaver 8.1.2 resolves several bugs. This is not a security update.
https://www.artweaver.de/

Audiate 2026.1.0 improves cosmetics and resolves several bugs. This is a security update.
https://www.techsmith.com/camtasia/audiate/

GnuCash 5.14 resolves several bugs. This is not a security update.
https://www.gnucash.org/

ImageMagick 7.1.2-12 resolves several bugs. This is not a security update.
https://imagemagick.org/

Inkscape 1.4.3 resolves dozens of bugs. This is not a security update.
https://inkscape.org/release/

Krita 5.2.14 resolves over a dozen bugs. This is not a security update.
https://krita.org/en/download/

LibreOffice 25.8.4 and LibreOffice Fresh 25.8.4 resolves over 70 bugs. This is not a security update.
https://www.libreoffice.org/

Nextcloud Desktop 4.0.4 resolves several bugs. This is not a security update.
https://nextcloud.com/

Notepad++ 8.9 is a security update.
https://notepad-plus-plus.org/

PDF-XChange Editor 10.8.2.407 is a security update.
https://www.pdf-xchange.com/product/pdf-xchange-editor

Scribus 1.6.5 is a security update.
https://www.scribus.net/

Operating System Updates

These are for specific Linux flavors and alternative operating systems and, sadly, are unlikely to be of interest to most people.

ChromeOS 143.0.7499.196 is a security update.
https://chromereleases.googleblog.com/search/label/Stable%20updates+ChromeOS

Fedora 43.0 updates apps and libraries, upgrading many services and systems to new current builds. This is a security update.
https://getfedora.org/en/workstation/download/

iOS 26.2 is a security update.
https://support.apple.com/kb/HT204204

iPadOS 26.2 is a security update.
https://support.apple.com/kb/HT204204

Linux Mint 22.3 adds support for newer hardware and removes support for some older hardware, updates drivers and changes defaults. This should be treated as a security update.
https://www.linuxmint.com/download.php

macOS 26.2 is a security update.
https://support.apple.com/kb/HT201541

Tails 7.3.1 is a security update.
https://tails.net/install/download/index.en.html

TOS 6 6.0.794 resolves several bugs. This should be treated as a security update.
https://support.terra-master.com/posts/TOS6_Release_Notes

tvOS 26.2 is a security update.
https://support.apple.com/kb/HT202716

watchOS 26.2 is a security update.
https://support.apple.com/kb/HT204641

Security Software Updates

One or more of these is likely to be of interest to most people.

.NET Runtime 10.0.1 improves stability and reliability. This is not a security update.
https://dotnet.microsoft.com/en-us/download/dotnet

HTTP Toolkit 1.24.2 doesn’t provide a change log so should be treated as a security update.
https://httptoolkit.tech/

ProtonVPN 4.3.9 improves stability and resolves several bugs. This is not a security update.
https://github.com/ProtonVPN/win-app/releases/latest

RogueKiller 16.5.4 resolves several bugs. This is a security update.
https://www.adlice.com/download/roguekiller/

Stinger 13.0.0.588 adds new detections
https://www.mcafee.com/us/downloads/free-tools/stinger.aspx

Capture Updates

These are unlikely to be of interest to most people.

Greenshot 1.3.312 is a security update.
https://github.com/greenshot/greenshot/releases

Open Broadcaster Software 32.0.4 resolves three minor bugs. This is not a security update.
https://obsproject.com/

Converter Updates

These are unlikely to be of interest to most people.

BookFab 1.2.1.8 improves TTS (text to speech), conversion, and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/kindle-converter.htm

DVDFab 13.0.5.4 resolves a stability bug. This is not a security update.
https://www.dvdfab.cn/download.htm

StreamFab 7.0.0.6 resolves dozens of bugs and improves reliability and consistency. This is not a security update.
https://streamfab.dvdfab.cn/downloader.htm

UniFab 4.0.0.0 is a major update adding new upscaling and conversion abilities. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero 7.0.31 adds several new fields and creator types and resolves several bugs. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password 8.11.23 resolves a stability bug when using passkeys. This is not a security update.
https://1password.com/downloads/windows/

AOMEI Partition Assistant 10.10.0 adds a disk space analyzer and resolves partition alignment bug. This is not a security update.
https://www.diskpart.com/

Beyond Compare 5.1.7.31736 improves stability and updates signing. This is not a security update.
https://www.scootersoftware.com/download

Bitwarden 2025.12.2 resolves several bugs. This is not a security update.
https://bitwarden.com/

CCleaner 7.03.1120 updates cleaning and improves analysis. This is not a security update.
https://www.ccleaner.com/

Coreinfo 4.0 adds a GUI version and newer CPU checks. This is not a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/coreinfo

CPU-Z Installer 2.18 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

DesktopOK 12.26 resolves a couple bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

dnGrep 4.6.63.0 adds ability to search within office documents that are already open and updates libraries. This should be treated as a security update.
https://dngrep.github.io/

GoodSync 12.9.22 updates libraries and cleans up cosmetics. This is not a security update.
https://www.goodsync.com/

HWMonitor 1.61 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/hwmonitor.html

LessMSI 2.11.6 updates table layout display and translations. This is not a security update.
https://lessmsi.activescott.com/

NConvert 7.230 doesn’t provide a change log so should be treated as a security update.
https://www.xnview.com/en/nconvert/

NotMyFault 4.30 adds Arm64 support and new crash types. This is not a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/notmyfault

NTLite 2025.12.10736 splits downloads for older versions of Windows and updates components. This is not a security update.
https://www.ntlite.com/download/

OSForensics 11.1.1014 resolves two crash bugs. This is not a security update.
https://www.osforensics.com/download.html

osquery 5.21.0 improves macOS integration, adds several new tables and sources, and resolves a couple bugs. This is not a security update.
https://osquery.io/downloads

Password Security Scanner 1.65 improves compatibility with newer browsers. This is not a security update.
https://www.nirsoft.net/utils/password_security_scanner.html

PointerStick 6.88 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

Process Explorer 17.09 fixes an image detection bug and adds details for .NET processes. This is not a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorer

Raspberry PI Imager 2.0.3 improves performance, networking, device and drive handling, and adds a custom URI scheme for custom distributions. This is not a security update.
https://www.raspberrypi.com/software/

Remotly 1.37.0 adds support for newer hardware and improves stability. This is not a security update.
https://remotly.com/

RoboForm 9.9.1 updates the icon and adds a caps lock indicator. This is not a security update.
https://www.roboform.com/

SetUserFTA 2.7.3 removes the DLL dependency for UCPD support. This is not a security update.
https://setuserfta.com/download-setuserfta/

Ventoy 1.1.10 resolves several bugs. This is not a security update.
https://www.ventoy.net/en/index.html

WinGet 1.12.440 adds font support, MCP server, and resolves several bugs. This is not a security update.
https://github.com/microsoft/winget-cli/releases/latest

WinScan2PDF 9.51 resolves a couple bugs. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

Developer Updates

These are unlikely to be of interest to most people.

ADB 36.0.2 improves reliability and resolves a few bugs. This is not a security update.
https://developer.android.com/studio/releases/platform-tools

Android Studio 2025.2.2.8 resolves several bugs. This is a security update.
https://developer.android.com/studio

GameMaker Studio 2024.14.2.213 improves stability and resolves several bugs. This is not a security update.
https://www.yoyogames.com/en/gamemaker

GDevelop 5.6.251 improves performance, history, and resolves several bugs. This is not a security update.
https://gdevelop.io/download

Inno Setup 6.7.0 adds new cosmetics and compiling improvements, various scripting and control improvements, and a security change to add RedirectionGuard support. This should be treated as a security update.
https://www.jrsoftware.org/isdl.php

Node.js 20.20.0 is a security update.
https://nodejs.org/en/

Node.js 22.22.0 is a security update.
https://nodejs.org/en/

Node.js 24.13.0 is a security update.
https://nodejs.org/en/

Node.js 25.3.0 is a security update.
https://nodejs.org/en/

SQLite 3.51.2 resolves a couple stability bugs. This is not a security update.
https://www.sqlite.org/download.html

Visual Studio Code 1.108 resolves thousands of bugs and updates cosmetics, AI integration, and more. This is not a security update.
https://code.visualstudio.com/

Web Package Updates

These are likely to be of interest only to web developers.

HumHub 1.17.5 resolves several bugs. This is not a security update.
https://www.humhub.com/en

Joomla 6.0.2 & 5.4.2 are security updates.
https://www.joomla.org/

OpenPetra 2025.12 resolves several bugs and improves performance. This is not a security update.
https://www.openpetra.org/

Piwigo 16.2.0 resolves several bugs. This is not a security update.
https://piwigo.org/

My Sticky Bar 2.8.6 resolves a stability bug. This is not a security update.
https://wordpress.org/extend/plugins/mystickymenu/

Postie 1.9.74 is a security update.
https://wordpress.org/extend/plugins/postie/

Redirection 5.6.0 reduces size. This is not a security update.
https://wordpress.org/extend/plugins/redirection/

Sucuri Security 2.6 adds a new permissions library and resolves a cache bug. This is not a security update.
https://wordpress.org/extend/plugins/sucuri-scanner/

Top Commentators Widget 1.7 doesn’t provide a change log so should be treated as a security update.
https://wordpress.org/extend/plugins/top-commentators-widget/

WP Cerber Security 9.6.11 improves browser detection, translation, and DoS hardening. This should be treated as a security update.
https://wpcerber.com/

YOURLS 1.10.3 resolves over a dozen bugs. This is not a security update.
https://yourls.org/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

 

Updates 2025-10-14

Welcome back, Folks!

Today is Patch Tuesday for October, 2025.

If your Windows 10 computer can not be upgraded to Windows 11 then you should either replace your device or use the Windows 10 ESU program to get another year out of it.

Windows 11 25H2 is now available and Windows 11 23H2 and older are no longer supported. Treat Windows 11 25H2 as beta software and wait a few months before upgrading.

macOS 26 Tahoe is now available and macOS 13 Ventura and older are no longer supported. Treat macOS 26 as beta software and wait a few months before upgrading.

There were 560+ major hacks, and over 390 application updates this month. It’s a very large month, with about 4.5 GB of updates for most users.

This Month in Technology

2GO Group, 7-Zip, Action Property Management, Inc, Acuna Fombona, Adobe Acrobat Reader, Adobe Analytics, Adpost, AES Clean Technology, AGETIC Bolivia, AIP Asset Management, Airspan Networks, Akulaku, Albany Gastroenterology Consultants, Alexander McQueen, Allegra DatabaseBackupBL, Allgäu Stern Hotel, Allianz Life Insurance Company of North America, Allied Services Division Welfare Fund, Altos, AMD SEV-SNP, Amelia Overhead Doors, American Archive of Public Broadcasting, American First Finance, American Income Life Insurance, Amos Space, AMS Fulfillment, Anchorage Neighborhood Health Center, Animeify, Ansell, António Belém & António Gonçalve, AOS, Inc, ApolloMD Business Services, AppFolio, Inc, Apple, Apple macOS, Aquarium of the Pacific, Archer Health, Archway Cookies, ARINC, Armalife, Artists&Clients, Asahi, Assaf Harofeh Medical Center, Asserson, Assisted Living Pharmacy Service, Astra Otoparts, AT&T, Atlas Pressed Metals, Aurora Emergency Physicians, Australia NSW Reconstruction Authority, Autodesk AutoCAD, Autodesk Revit, AutohausMalin, AV Services Barcelona, Avalara, Inc, Avira Prime, Avnet, AZpro Group, Bader Gruppe, Balenciaga, BAM, BancoCapital Ecuador, Batesky Law Office, BBOT, BCR Recouvrement, Belkorp Ag, LLC, Benworth Capital Partners, Bignault & Carter, BK Technologies, Black Hills Regional Eye Institute, BMW Group, BNB Chain, Bortolazzo Group, Bouygues Telecom, Boyd Gaming Corporation, Brancosoft, Braun Electric Company, Inc, Brightstar Lottery, Brunei Postal Services Department, Burlingame School District, Business Integra, BW-RF, Bykea, California Golf Club of San Francisco, California International Bank, NA, Cancel the Hate, Cardinal Machinery, Cascade Pacific Pulp LLC, Cayetano Heredia National Hospital of Peru, CCI Financial, Inc, CCleaner, CCMC, Cell Journal, Centers Laboratory, Central Valley Regional Center, Cesanta Mongoose, Chapter 13 Texas, ChatGPT Deep Research, Chess.com, Chicago Botanic, China’s Great Firewall, Chroma ATE, CIC Vietnam, Cineplanet, Circle K, Cisco Adaptive Security Appliance, City of Pittsburg, California, City of St Joseph, MO Health Department, City of Sugar Land, Texas, ClaimPix, Clarins, Clifford Paper Inc, CNH Industrial, Cobra Rolamentos, Cofiex Asesoría de Empresas, Coinbase, College Hometown Pharmacy, College Parkside Pharmacy, Collins Aerospace, Collins Systems, Comcast, Community Health Network, ComTec Systems, Conduent Business Services, LLC, Cookeville Regional Medical Center, Corban OneSource, Cornwall Council, Cornwell Quality Tools, County of Orange Office of Care Coordination, County of Stanislaus, CA, Credera, Crenshaw Community Hospital, occupied Crimea, Crypto.com, Cultura, Cyprus Post, Daily Printing, Dana-Farber Cancer Institute, Dassault Systèmes eDrawings Viewer, Dataforth, DDR5 Memory (Phoenix RowHammer), Decisely Insurance, Delek Group, Delta Electronics COMMGR, Delta Electronics DIALink, Department of Information and Communications Technology, Derriford Hospital, Digilent WaveForms, Digital Charging Solutions, Dimensional Control Systems, Discord, Django, DNC, Doctors Imaging Group, Dorset Council, DraftKings, DrayTek Vigor routers, E3 Site Supervisor, Earthadelic, EBA Engineering, eCapital Corp, Eckerd Connects, Edro Real Estate, Electoral Court of Uruguay, ELS Surveying, Emergency Responders Health Center, EMPIRE Distribution Inc, Episource, LLCEuropean airports, FAI Aviation Group, Fairmont Federal Credit Union, Falco Electronics, Family & Community Services, Fast Track, Feathers.ae, Ferus Smit, Field and Goldberg, FinWise Bank, Five Star Mechanical Inc, Flowise, Fort Wayne Medical Education Program, Fortra GoAnywhere MFT, Franklin Dermatology Group, PLC, FreeOnes, FreshRSS, Friedrich-Alexander-Universität, Friends of National Rifle Association of America (NRA), FTCS Forage, Fuji Electric FRENIC-Loader, Fundline Finance Corporation of the Philippines, Future Generali, FysioRoadmap, Gaylord Specialty Healthcare, General Directorate of Taxes and Estates, Generali Central Life Insurance, GIMP, GitHub Copilot, GitHub, GITSIT Solutions, LLC, Gladinet CentreStack and Triofox, Glenwood Management, Global Sumud Flotilla, GloboTech Communications, Google Chrome, Google Gemini, Google Law Enforcement Request System (LERS), Goosehead Insurance Agency, LLC, Goshen Medical Center, Grupo Serex, Gucci, Hacienda La Puente Unified School District, Hamdard Pakistan, Hampton Regional Medical Center, Hana Financial Inc, Harbor Diesel & Equipment, Harris Health, Harrods, Harvard University, Hathijobs, Hauts-de-France, HE Parks, Healthcare Interactive, Helity Copter Airlines, Hello Cake, Inc, HIEC, Hillside Library, Hitachi HTA, HomeRefill, Huawei Technologies, Hub Asset Management, Ideal Bathrooms, IMSS, Indian government’s tax authority, Indonesia Ministry of Education, Indonesian National Police, Insight Partners, Insightin Health, Insightly, Institute of Culinary Education, Integrity Testing & Safety Administrators, Intelliloan, Invoicely, IONODES, Israeli Nuclear Program, Ivanti Endpoint Manager, J E Stacey & Co, J Lorber, JASCO Applied Sciences, Jaspersoft Jasper Reports, K Shipbuilding, Kanal ZERO, Kering, Kevmor Trade Supplies, Key 4 Energy, Keys Pathology Associates, KFC Venezuela, Khan Academy, Kido nurseries, KillSec, Kiple, Kitevuc, Kronospan, Kstati, KT Corp, Kubernetes elections.k8s.io, a major Kuwaiti Construction Firm, La Perouse Medical Billing, Lake Haven, LAMMCO, Latest Pilot Jobs, Lautrec, Law Offices of James Scott Farrin, Lawrence Berkeley National Laboratory, Legacy 5, Legal Practice Board of Western Australia, Leprohon, LGB, Liberty Dental Town, Libraesva, LIC India, Linux Kernel, Linxx Global Solutions, Lipapromet, LiteLLM, Liverpool City Council, LNER, Lorain Emergency Physicians, Loteria de Medellin, Lotte Card, Ludlow Construction, Lux Actuaries & Consultants, LWG Inc, Maida.health, Main Electric Supply Company, Marshall County Schools, Maruji & Raines, Maryland Transit Administration, Mavis Tire Supply, MCBS, LLC, McDonald’s, Mecklenburg County Public Schools, Medical Associates of Brevard, Medicare Compare, Medkar, Medstar Health, Melis Platform CMS, Memphis Millwork, Meridian Valley Laboratories, MetalSoft, Methodist University, MFO ITALIA, Michael Strain Builders, Michigan City, Indiana, Microsoft, Microsoft .NET, Microsoft Entra ID, Microsoft IE mode, Mid South Rehab Services, Migración Colombia, Milesight Industrial Cellular Routers, Miljödata, Mill Bay Marine Group, Milliman Financial Risk Management LLC, MindManager, Mission City Community Network, MLflow, Mobydick Asset Management, Monero, Monterey Mushrooms, LLC, Motility Software Solutions, MPM Imports, MSB, MyHomemadePorn, Naftali Group, Namibia Student Financial Assistance Fund, Natoli Engineering, Neon, New York Blood Center Enterprises, News-Press & Gazette, Nintendo, Normandy, North America Construction (NAC), North Oaks Health System, Northern Rivers Resilient Homes Program, Northwest Medical Specialties, NP3 Benefícios, Nurture Care, Nvidia Merlin, OC Maine, Olive Branch Emergency Physicians, Omise, OneBlood, OneLogin, OnePlus OxygenOS, Open Practice Solutions, LTD, OpenPLC, Oracle E-Business Suite, Organon, Orion Engineering, Orwell Housing Association, OutcomesOne, Panama’s Ministry of Economy and Finance, Pangborn, Parivesh, Passaic Hospitalist Services, Passaic River Physicians, Paul Rossi Law Offices, Payactiv, Inc, Pays de la Loire, Peavey Electronics Corporation, Pediatric Otolaryngology Head & Neck Surgery Associates, Pennsylvania Attorney General’s Office, Pennsylvania Hospitalist Group, Pensacola Hospitalist, People Encouraging People, Perennial, Perplexity’s Comet AI browser, Perth Operationnal Technology, Pestbusters, Petro-Diamond, PGA Development, Inc, Pharmacie.ma, PHI Centre, Philippine Department of the Interior and Local Government, Philippine Land Transportation Office, Planet WGR-500, Plex, Podo Asset Management, PortSwigger Burp Suite MCP, PowerSchool, Preccs, Print Media Association, Professional Trust Company, Promchimexport, Prospect, Prosper, PS&KP Motor, PTR Asset Management, Pulkovo Airport, Pyramid Global Hospitality, R3 Consulting, Radiology Associates of San Luis Obispo, Razer Synapse 3, Red Coats Inc, Red Hat, Redis, Regal Mold, RemoteCOM, Renault, Reportage Empire Properties, Retina Group, River Learning Trust, Rocket TRUfusion Enterprise, Rockhill Women’s Care, Rockstar Games, Rogue Valley Door, Rosco Vision Systems, Roush Fenway Keselowski Racing, LLC, RTX Corporation, S&P Global, Sacada, Salesforce AgentForce, SalesLoft, Salud Consultorios, Samsung devices, Sanatorio Esperanza, Sanatorio Privado Punilla, Sapp Bros, SD Soluciones Digitales, Shamir Medical Center, Sharp Community Medical Group (SCMG), Sheheen, Hancock & Godwin, LLP, Sher Tremonte LLP, Shibarium, Shondeck, Shuffle, SI-Bone, Inc, Siemens Simcenter, SimonMed, Singburi Hospital, Sky Airline, SMP Europe, Software Unlimited Corp, SolarWinds Web Help Desk, SonicWall Firewalls, SonicWall SSLVPN, South Lyon Schools, Sri Lanka Ministry of Finance, SSA Group, St. John Ambulance Canada, Standard Fiber, State Bank of Vietnam, State of California, Department of Industrial Relations, Statewide Enterprises, Inc, Stellantis, Steve Basso Plumbing Heating, STMicroelectronics, Studio Legale Tisot Iuris, Study Gate, Sturgis Hospital, Suffolk County Council, Sunnyvale Elementary School District, SuperEd, Superior Vision Benefit Provider, Superior Vision Service, Survival Flight, Systeme AG, T Choithram And Sons, T-Mobile, Teamsters Union 25 Health Services & Insurance Plan, Tekni-Plex, Inc, Telstra, Texas Center for Infectious Disease Associates, Thai Future, The Daily Sentinel, The Institute of Culinary Education, The Job Shop, The Methodist Church of Southern Africa, The Moinian Group, The Property Business Australia, The Science Fiction Forum, Thomas M Hughes, Tiffany & Co, TLD Law, TOTOLINK X6000R, TransUnion, TraxNYC, Treasure Coast Hospice, Trinity Emergency Physicians, True World Group, Trustar Capital Management, Trusteed Plans Service Corporation, Tucows, Twin Cities Pain Clinic, UAE Society of Engineers, UHL, UNC Hospitals, Union County, Ohio, Unity game engine, University of North Carolina at Chapel Hill – School of Medicine, Uruguayan Government, US Air Force, US Customs and Border Protection (CBP), US Defense Advanced Research Projects Agency (DARPA), US Department of Homeland Security (DHS), US Federal Emergency Management Agency (FEMA), US Firms Heritage Growth Partners, US GeoServer, US HealthConnect, Uvalde Consolidated Independent School District, Valparaiso University, Vantage Finance, Vastaamo psychotherapy, Veradigm, Verily, Victor A. Campanile Insurance Agency, Viessmann Vitogate, Vietnam Airlines, VIM Technologies, VIR, Virtual Projects, VIVA Health, VMware NSX, Volvo Group North America, Vtenext, Vurbis Interactive, WagnerTech UG, Washington Prime Group, WatchGuard Firebox firewalls, Waterborne Environmental, Watsonville Community Hospital, Wayne Memorial Hospital, Webville, WEST Inc, Western Digital My Cloud NAS, Western Orthopaedics, Western Skies Wellness LLC, WestJet, WhatsApp, Williams & Connolly, win-cli-mcp-server, Wondershare Repairit, WordPress bbPress plugin, WordPress Community Events plugin, WordPress Ovatheme Events Manager plugin, WordPress RestroPress plugin, WordPress Service Finder theme, WordPress WooCommerce Designer Pro plugin, WordPress WP Freeio plugin, WordPress WP Travel Engine plugin, X (Twitter), XCAssociates, XChief, Yooshin Engineering Corporation and Zimbra Collaboration Suite have reported hacking or compromises this month.

Azure, Belgorod, Russia, Bermuda, Gaza, Palestine, Guinea, Kandahar, Afghanistan, Kyiv, Ukraine, Mexico, Microsoft 365 (more than once),  Oblast, Ukraine, Odessa, Ukraine, Outlook encrypted messages, Spectrum, Starlink, Truth Social, Uttar Pradesh, India and Vodafone UK have suffered from outages this month.

Last months updates broke DRM video playback, Windows 11 Media Creation Tool, Windows Server 2025 Active Directory trust relationships, Windows SMVv1 shares (a good thing).

Michigan is trying to make it illegal for people to kiss on television.

Microsoft will be force-installing Microsoft 365 Copilot this month. Microsoft will be providing the ESU to everyone in the EU without requiring action on their part. Microsoft has confirmed that running multiple Office applications will cause problems with Copilot. Microsoft Office 2016 and 2019 are now end of life. Microsoft Exchange 2016 and 2019 are also now end of life.

Steam is going to end support for 32-bit hardware in January 2026.

A company refuses to do what their techs and consultants recommend (blaming costs, labor and training), then they get hacked, and ultimately the insurance company sues the techs instead of the executives? Dude. Just…dude.

Now for the good news:

Brave now has over 100 million active users. If you haven’t switched yet, you should.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is very large this month. The typical computer should see roughly
GB in updates today. Let’s get started.

Microsoft released 101 updates to address 196 vulnerabilities in .NET, .NET Framework, Visual Studio, Active Directory Federation Services, Agere Windows Modem Driver, AMD Restricted Memory Page, ASP.NET Core, Azure Connected Machine Agent, Azure Entra ID, Azure Local, Azure Monitor, Azure Monitor Agent, Azure PlayFab, Confidential Azure Container Instances, Connected Devices Platform Service (Cdpsvc), Copilot, Data Sharing Service Client, Games, GitHub, Inbox COM Objects, Internet Explorer, JDBC Driver for SQL Server, Microsoft Brokering File System, Microsoft Configuration Manager, Microsoft Defender for Linux, Microsoft Edge, Microsoft Exchange Server, Microsoft Failover Cluster Virtual Driver, Microsoft Graphics Component, Microsoft Office, Microsoft Office Excel, Microsoft Office PowerPoint, Microsoft Office SharePoint, Microsoft Office Visio, Microsoft Office Word, Microsoft PowerShell, Microsoft Windows, Microsoft Windows Codecs Library, Microsoft Windows Search Component, Microsoft Windows Speech, Network Connection Status Indicator (NCSI), NtQueryInformation Token function (ntifs.h), Redis Enterprise, Remote Desktop Client, Software Protection Platform (SPP), Storport.sys Driver, TCG TPM2.0, Virtual Secure Mode, Visual Studio, Windows Ancillary Function Driver for WinSock, Windows Authentication Methods, Windows BitLocker, Windows Bluetooth Service, Windows Cloud Files Mini Filter Driver, Windows COM, Windows Connected Devices Platform Service, Windows Core Shell, Windows Cryptographic Services, Windows Device Association Broker service, Windows Digital Media, Windows DirectX, Windows DWM, Windows DWM Core Library, Windows Error Reporting, Windows ETL Channel, Windows Failover Cluster, Windows File Explorer, Windows Health and Optimized Experiences Service, Windows Hello, Windows High Availability Services, Windows Hyper-V, Windows Kernel, Windows Local Session Manager (LSM), Windows Management Services, Windows MapUrlToZone, Windows NDIS, Windows NTFS, Windows NTLM, Windows PrintWorkflowUserSvc, Windows Push Notification Core, Windows Remote Access Connection Manager, Windows Remote Desktop, Windows Remote Desktop Protocol, Windows Remote Desktop Services, Windows Remote Procedure Call, Windows Resilient File System (ReFS), Windows Resilient File System (ReFS) Deduplication Service, Windows Routing and Remote Access Service (RRAS), Windows Secure Boot, Windows Server Update Service, Windows SMB Client, Windows SMB Server, Windows SSDP Service, Windows StateRepository API, Windows Storage Management Provider, Windows Taskbar Live, Windows USB Video Driver, Windows Virtualization-Based Security (VBS) Enclave, Windows WLAN Auto Config Service, Xbox, XBox Gaming Services, and MSRT. This includes security updates. A reboot is required.

Apple released updates for iTunes 12.13.8.3, iOS 15.8.5, iOS 16.7.12, iOS 18.7.1, iOS 26.0.1, iPadOS 15.8.5, iPadOS 16.7.12, iPadOS 18.7.1, iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, Safari 26, tvOS 26.0.1, visionOS 26.0.1, watchOS 26.0.2, and Xcode 26. This includes security updates. Use Apple Software Update to install the most current versions.

iOS 15.8.5, 16.7.12, 18.7.1, and 26.0.1 are security updates. Use Settings, General, Software Update to install the most current update.

iPadOS 15.8.5, 16.7.12, 18.7.1, and 26.0.1 are security updates. Use Settings, General, Software Update to install the most current update.

watchOS 26.0.2 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 26.0.1 is a security update. Use System, Software Update to install the most current version.

visionOS 26.0.1 is a security update. Use System, Software Update to install the most current version.

Google ChromeOS 140.0.7339.242, ChromeOS LTC 138.0.7204.293, and ChromeOS LTS 132.0.6834.245 are security updates. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Tahoe (26.x) means that macOS Ventura (13.x) and older are no longer supported. If you can not install at least macOS Sonoma (14) on your Mac then you should immediately remove your device from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The current — and final — release of the Windows 10 (v22H2) is end of life (EOL). All non-LTS versions of Windows 10 without ESU are now out of support, with the sole alternatives being to upgrade to Windows 11 or enable Extended Service Updates (ESU). If you aren’t sure whether you are using LTS, you aren’t. Enable the ESU now.
https://12pd.com/s/win10esu

The current release of the Windows 11 (v25H2) is very large (30% larger than any previous release) so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is now stable and can be upgraded to if your hardware supports it. If not, switch to Linux (Mint is nice) or replace your computer.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, drivers for hardware you’re not using (like old printers), and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with a SaferPC Subscription and we will install updates each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

GoXLR Utility 1.2.3 resolves several bugs and improves sampling and hardware support. This is not a security update.
https://github.com/GoXLR-on-Linux/goxlr-utility/

Plustek ePhoto Z300 6.7.0.4 resolves a Google Drive upload bug. This is not a security update.
https://plustek.com/us/products/film-photo-scanners/ephoto-z300/support.php

RICOH IM C4510 1.4.0.0 resolves a minor bug. This is not a security update.
https://support.ricoh.com/bb/html/dr_ut_e/rc3/model/imc4510/imc4510.htm

TP-Link Archer AX21 v1.20 250424 is a security update.
https://www.tp-link.com/us/support/download/archer-ax21/v1.20/#Firmware

UniFi Network Server 9.5.21 adds channel AI, multicast filtering, VLAN bridging, improved port management, and resolves several bugs. This is not a security update.
https://www.ui.com/download/releases/network-server

Xerox Smart Start 2.1.23.0 doesn’t provide a change log so should be treated as a security update.
https://www.support.xerox.com/en-us/content/143617

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.83.112 is a security update.
https://brave.com/

Firefox 144.0 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Firefox ESR 140.4.0 is a security update.
https://www.mozilla.org/en-US/firefox/organizations/all/

Google Chrome 141.0.7390.76 is a security update.
https://www.google.com/chrome/

Microsoft Edge 141.0.3537.71 is a security update.
https://www.microsoft.com/en-us/edge/business/download

Vivaldi 7.6.3797.63 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Spark 3.26.0.117234 adds Slack, Outlook, and Microsoft 365 integration, resolves several bugs. This is not a security update.
https://sparkmailapp.com/

Spark (macOS) 3.26.0.117233 adds Slack, Outlook, and Microsoft 365 integration, resolves several bugs. This is not a security update.
https://sparkmailapp.com/

Thunderbird 143.0.1 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 9.6.2 resolves several bugs. This is not a security update.
https://anydesk.com/en/downloads

curl 8.16.0 adds a couple new features, updates libraries and dependencies, and resolves over 250 bugs. This is a security update.
https://curl.haxx.se/windows/

Discord October 7, 2025 slows the forced update cycle and resolves dozens of bugs. This is not a security update.
https://discord.com/download

Dropbox 234.4.5591 resolves several stability bugs. This is not a security update.
https://www.dropbox.com/

FileZilla Server 1.11.1 resolves several bugs. This is not a security update.
https://filezilla-project.org/

FreeFileSync 14.5 resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Google Drive 115.0 doesn’t provide a detailed change log so should be treated as a security update.
https://drive.google.com/start

MeshCentral 1.1.51 resolves several bugs. This is not a security update.
https://meshcentral.com/info/downloads.html

Microsoft Teams 1.8.00.27654 adds slide controls, threading improvements and rich query for search. This is not a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 32.0.0 is a major update that makes almost 3,000 changes to the server, including new features, improved responsiveness, and updating libraries and dependencies. This is a security update.
https://nextcloud.com/

Npcap 1.84 resolves several bugs. This is not a security update.
https://nmap.org/npcap/

OneDrive 25.159.0817.0003 improves reliability and performance, and renames the offline mode process. This is not a security update.
https://support.microsoft.com/en-us/onedrive

Rclone 1.71.1 resolves several bugs and improves stability. This is not a security update.
https://rclone.org/

Signal 7.74.0 improves performance and resolves several bugs. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 7.58.2 improves performance. This is not a security update.
https://signal.org/android/apk/

Syncthing 2.0.10 resolves several bugs. This is not a security update.
https://syncthing.net/

Telegram 6.2.3 resolves over a dozen bugs including stability issues. This is not a security update.
https://telegram.org/

Zoom 6.6.1.15968 resolves several bugs. This is not a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

Grayjay 340 resolves several reliability bugs. This is not a security update.
https://grayjay.app/index.html

iTunes 12.13.8.3 doesn’t provide a change log so should be treated as a security update.
https://www.apple.com/itunes/download/

Plex Media Server 1.42.2.10156 resolves several bugs (including credit detection) and improves transcoding options. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-media-server

Game Updates

These are unlikely to be of interest to most people.

Minecraft Server (Bedrock) 1.21.113.1 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server/bedrock

Minecraft Server (Java) 1.21.10 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server

Nintendo Switch 20.5.0 improves stability. This is not a security update.
https://en-americas-support.nintendo.com/app/answers/detail/a_id/22525/kw/system%20updates/p/989

PS5 2025.924 is a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

Steam 2025.10.03 is a security update.
https://store.steampowered.com/news/app/593110

SteamOS SteamDeck Update 2025.10.01 is a security update.
https://store.steampowered.com/news/app/1675200/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Reader DC 25.001.20756 resolves integration bugs. This is a security update.
https://get.adobe.com/reader

Calibre 8.12.0 adds support for newer hardware, resolves several bugs, and adds optional AI integration. This is not a security update.
https://calibre-ebook.com/

GIMP 3.0.6 resolves over a dozen bugs. This is a security update.
https://www.gimp.org/

GnuCash 5.13 resolves several bugs. This is not a security update.
https://www.gnucash.org/

Kindle for PC 2.8.70980 doesn’t provide a change log so should be treated as a security update.
https://www.amazon.com/kindleforpc

Krita 5.2.13 resolves several bugs. This is a security update.
https://krita.org/en/download/

LibreOffice Fresh 25.8.2 resolves 70 bugs. This is a security update.
https://www.libreoffice.org/

Nextcloud Desktop 3.17.3 resolves over a dozen bugs. This is not a security update.
https://nextcloud.com/

Notepad++ 8.8.6 resolves over a dozen bugs. This is a security update.
https://notepad-plus-plus.org/

PDF-XChange Editor 10.7.3.401 resolves several bugs. This is not a security update.
https://www.pdf-xchange.com/product/pdf-xchange-editor

Operating System Updates

These are for specific Linux flavors and alternative operating systems and, sadly, are unlikely to be of interest to most people.

ChromeOS 140.0.7339.242 is a security update.
https://chromereleases.googleblog.com/search/label/Stable%20updates+ChromeOS

iOS 15.8.5, 16.7.12, 18.7.1, and 26.0.1 are security updates. Use Settings, General, Software Update to install the most current version.

iPadOS 15.8.5, 16.7.12, 18.7.1, and 26.0.1 are security updates. Use Settings, General, Software Update to install the most current version.

macOS Sequoia 15.7.1 is a security update. Use Settings, General, Software Update to install the most current version.

macOS Sonoma 14.8.1 is a security update. Use Settings, General, Software Update to install the most current version.

macOS Tahoe 26.0.1 is a security update. Use Settings, General, Software Update to install the most current version.

Tails 7.1 is a major update. This version improves startup and performance, and updates all included software and libraries. Hardware requirements have also changed. This is a security update.
https://tails.net/install/download/index.en.html

tvOS 26.0.1 is a security update. Use Settings, General, Software Update to install the most current version.

visionOS 26.0.1 is a security update. Use Settings, General, Software Update to install the most current version.

watchOS 26.0.2 is a security update. Use Settings, General, Software Update to install the most current version.

Zorin OS 18.0 is a major update offering cosmetic improvements, window arrangement and tiling options, web app support, M365 and OneDrive support (yuck!), and more. This is not a security update.
https://zorin.com/os/mirrors/

Security Software Updates

One or more of these is likely to be of interest to most people.

Chainsaw 2.13.1 resolves several bugs. This is not a security update.
https://github.com/countercept/chainsaw

OpenSSL 3.6.0 is a security update.
https://slproweb.com/products/Win32OpenSSL.html

ProtonVPN 4.3.1 improves compatibility and reliability. This is not a security update.
https://github.com/ProtonVPN/win-app/releases/latest

Radmin VPN 2.0.4899.9 doesn’t provide a change log so should be treated as a security update.
https://www.radmin-vpn.com/

RogueKiller 16.4.1 is a security update.
https://www.adlice.com/download/roguekiller/

Stinger 13.0.0.547 improves detection. This is not a security update.
https://www.mcafee.com/us/downloads/free-tools/stinger.aspx

uBlock Origin 1.66.4 resolves a resource bug. This is not a security update.
https://github.com/gorhill/uBlock/releases/latest

VT-CLI 1.2.0 adds “–private” syntax option. This is not a security update.
https://github.com/VirusTotal/vt-cli/releases/latest

Capture Updates

These are unlikely to be of interest to most people.

Open Broadcaster Software 32.0.1 resolves several bugs and improves performance. This is not a security update.
https://obsproject.com/

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 13.0.4.9 adds support for new encodings and improves UHD Creator design. This is not a security update.
https://www.dvdfab.cn/download.htm

MakeMKV 1.18.2 improves reliability and resolves several bugs. This is not a security update.
https://www.makemkv.com/download/

StreamFab 6.2.5.7 improves reliability and compatibility, and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

UniFab 3.0.2.9 improves performance and hardware compatibility. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero 7.0.26 resolves a bug in plugin installation. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password 8.11.14 resolves several bugs and improves biometrics, QR code scanning and JSON parsing. This is not a security update.
https://1password.com/downloads/

Agent Ransack 2022.3536 resolves several bugs. This is not a security update.
https://www.mythicsoft.com/agentransack/download/

AOMEI Partition Assistant 10.9.1 adds virtual disk support and resolves several bugs. This is not a security update.
https://www.diskpart.com/

Bitwarden 2025.9.0 improves performance, adds support for organization keys, and biometrics improvements. This is a security update.
https://bitwarden.com/

CCleaner 7.00.984 adds package uninstaller support, ARM64 support and improved duplicate identification. This is not a security update.
https://www.ccleaner.com/

CPU-Z Installer 2.17 adds support for new hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

DesktopOK 12.14 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

dnGrep 4.6.7.0 improves CLI and search result copy. This is a security update.
https://dngrep.github.io/

email-oauth2-proxy 2025-10-04 resolves several bugs. This is not a security update.
https://github.com/simonrob/email-oauth2-proxy

ESEDatabaseView 1.79 adds option to perform case sensitive searches. This is not a security update.
https://www.nirsoft.net/utils/ese_database_view.html

Everything 1.4.1.1029 improves msi installation, shell extension compatibility and localization. This is not a security update.
https://www.voidtools.com/

Everything SDK 1.4.1.1029 improves shell extension compatibility. This is not a security update.
https://www.voidtools.com/support/everything/sdk/

Everything Toolbar 2.1.0 adds ARM64 support and resolves several bugs. This is not a security update.
https://github.com/stnkl/EverythingToolbar/

ExplorerPatcher 26100.4946.69.4 resolves over a dozen bugs and improves compatibility. This is not a security update.
https://github.com/valinet/ExplorerPatcher/

Fido 1.66 adds support for Windows 11 25H2. This is not a security update.
https://github.com/pbatard/Fido/releases

FileLocator Pro 2022.3536 resolves several bugs. This is not a security update.
https://www.mythicsoft.com/filelocatorpro/download

Free Virtual Serial Ports 7.05.00.1623 adds the CLI app the distribution and improves stability. This is not a security update.
https://freevirtualserialports.com/

GadgetPack 39.0 updated outdated gadgets and resolves several bugs. This is not a security update.
https://8gadgetpack.net/

Git SCM 2.51 improves compatibility and resolves a dozen bugs. This is not a security update.
https://git-scm.com/

GoodSync 12.9.11 resolves several bugs. This is not a security update.
https://www.goodsync.com/

grepWin 2.1.12 resolves context menu bug. This is not a security update.
https://github.com/stefankueng/grepWin/releases/latest

Homedale 2.21 improves user interface. This is not a security update.
https://www.the-sz.com/products/homedale/

HWMonitor 1.60 adds support for new hardware. This is not a security update.
https://www.cpuid.com/softwares/hwmonitor.html

IsMyHdOK 4.44 updates language files. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/IsMyHdOK

Kingston SSD Manager 1.5.6.0
https://www.kingston.com/us/support/technical/ssdmanager

LessMSI 2.10.3 improves help, layout, and adds Japanese translation. This is not a security update.
https://lessmsi.activescott.com/

NTLite 2025.10.10631 resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

OSForensics 11.1.1011 enables forensic image creation, password collection, and resolves a couple bugs. This is not a security update.
https://www.osforensics.com/download.html

PowerToys 0.94.2 resolves stability issues. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest

Remotly Android 2.0 improves connectivity and controls, adds hardware support, and adds Multi-Join support. This is not a security update.
https://remotly.com/

RoboForm 9.8.2 resolves several bugs and improves import. This is not a security update.
https://www.roboform.com/

Rufus 4.11 adds support for Windows 11 25H2, adds dark mode support, drive conversion, UEFI improvements and resolves several bugs. This is not a security update.
https://rufus.ie/en_US/

SpaceSniffer 2.0.5.18 improves cosmetics and Hi-DPI support, improved OS integration, and resolves several bugs. This is not a security update.
https://www.uderzo.it/main_products/space_sniffer/

WhyNotWin11 2.7.0 improves hardware detection and resolves several bugs. This is not a security update.
https://github.com/rcmaehl/WhyNotWin11

WinGet 1.11.510 removes 32-bit ARM support, adds Microsoft DSC v3 support, and resolves a couple bugs. This is not a security update.
https://github.com/microsoft/winget-cli/releases/latest

WinScan2PDF 9.41 improves compatibility. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

XnConvert 1.106.0 doesn’t provide a detailed change log so should be treated as a security update.
https://www.xnview.com/en/xnconvert/

ZoomIt 9.10 adds image smoothing. This is not a security update.
https://learn.microsoft.com/en-us/sysinternals/downloads/zoomit

Developer Updates

These are unlikely to be of interest to most people.

Android 2025.1.4.8 resolves large APK redeployment and resolves several bugs. This is not a security update.
https://developer.android.com/studio

Docker Desktop 4.48.0 updates libraries and resolves several bugs. This is a security update.
https://www.docker.com/products/docker-desktop

GDevelop 5.5.243 resolves several bugs. This is not a security update.
https://gdevelop.io/download

GitHub Desktop 3.5.3 adds support for Ptyxis shell, upgrades libraries and resolves several bugs. This is not a security update.
https://desktop.github.com/

Go 1.25.3 is a security update.
https://go.dev/

Godot 4.5 improves accessibility, precomposition, backtracing, logging and more. This is not a security update.
https://godotengine.org/

Inno Setup 6.5.4 resolves several bugs. This is not a security update.
https://www.jrsoftware.org/isdl.php

NASM 3.01 is a major update adding support for APX, preprocessing and resolves more than a dozen bugs. This is not a security update.
https://www.nasm.us/index.php

Node.js 22.20.0 updates libraries and resolves dozens of bugs. This is a security update.
https://nodejs.org/en/

Node.js 24.10.0 updates libraries and resolves dozens of bugs. This is a security update.
https://nodejs.org/en/

Python 3.14.0 is a security update.
https://www.python.org/downloads/macos/

Visual Studio Code 1.105 resolves several bugs. This is not a security update.
https://code.visualstudio.com/

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 7.2.2 resolves over a dozen bugs. This is not a security update.
https://www.virtualbox.org/wiki/Downloads

Web Package Updates

These are likely to be of interest only to web developers.

Adminer 5.4.1 resolves several bugs. This is not a security update.
https://www.adminer.org/en/

Joomla 5.4 is a security update.
https://www.joomla.org/

Joomla 6.0.0 is a new major release with many new features, options and controls. This is not a security update.
https://www.joomla.org/

phpMyAdmin 5.2.3 resolves several bugs. This is not a security update.
https://www.phpmyadmin.net/

WordPress 6.8.3 is a security update.
https://wordpress.org/

BuddyPress 14.4.0 is a security update.
https://wordpress.org/extend/plugins/buddypress/

Contact Form 7 6.1.2 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/contact-form-7/

Duplicator 1.5.14 improves settings layout. This is not a security update.
https://wordpress.org/plugins/duplicator/#developers

My Sticky Bar 2.8.3 resolves a cosmetic bug. This is not a security update.
https://wordpress.org/extend/plugins/mystickymenu/

Postie 1.9.73 improves error handling. This is not a security update.
https://wordpress.org/extend/plugins/postie/

Sucuri Security 2.5 adds support for 2FA, QR code generation, and updates ignore list. This should be treated as a security update.
https://wordpress.org/extend/plugins/sucuri-scanner/

Theme My Login 7.1.14 resolves a bug. This is not a security update.
https://wordpress.org/extend/plugins/theme-my-login/

WordPress Importer 0.9.4 resolves a coupls bugs. This is not a security update.
https://wordpress.org/extend/plugins/wordpress-importer/

WP Cerber Security 9.6.10 resolves a couple bugs. This is not a security update.
https://wpcerber.com/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2025-07-08

Welcome back, Folks!

Today is Patch Tuesday for July, 2025.

It’s as safe as it’s going to be to upgrade to Windows 11 24H2 or macOS 15/Sequoia.

There were over 200 application updates this month. It’s a very small month, with only about 1.5 GB of updates for most users.

This Month in Technology

(( News was added to the August newsletter. ))

Now for the good news:

Microsoft has finally published their consumer ESU program (Extended Security Updates) for Windows 10. The program will last only one year (not three as is typical of ESU) and there are three different options for enrolling. Enrollment applies to as many as 10 devices once you’re enrolled and requires use of a Microsoft account login (at least one) on the device. Options are either $30 (one-time), enable PC Settings Sync (for the Microsoft Account) or redeem 1,000 Microsoft Rewards points.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is very small this month. The typical computer should see roughly 1.5 GB in updates today. Let’s get started.

Microsoft released 72 updates to address 140 vulnerabilities in AMD L1 Data Queue, AMD Store Queue, Azure Monitor Agent, Capability Access Management Service (camsvc), HID class driver, Kernel Streaming WOW Thunk Service Driver, Microsoft Brokering File System, Microsoft Edge, Microsoft Graphics Component, Microsoft Input Method Editor (IME), Microsoft Intune, Microsoft MPEG-2 Video Extension, Microsoft Office, Microsoft Office Excel, Microsoft Office PowerPoint, Microsoft Office SharePoint, Microsoft Office Word, Microsoft PC Manager, Microsoft Teams, Microsoft Windows QoS scheduler, Microsoft Windows Search Component, Office Developer Platform, Remote Desktop Client, Role: Windows Hyper-V, Service Fabric, SQL Server, Storage Port Driver, Universal Print Management Service, Virtual Hard Disk (VHDX), Visual Studio, Visual Studio Code – Python extension, Windows Ancillary Function Driver for WinSock, Windows AppX Deployment Service, Windows BitLocker, Windows Connected Devices Platform Service, Windows Cred SSProvider Protocol, Windows Cryptographic Services, Windows Event Tracing, Windows Fast FAT Driver, Windows GDI, Windows Imaging Component, Windows KDC Proxy Service (KPSSVC), Windows Kerberos, Windows Kernel, Windows MBT Transport driver, Windows Media, Windows Netlogon, Windows Notification, Windows NTFS, Windows Performance Recorder, Windows Print Spooler Components, Windows Remote Desktop Licensing Service, Windows Routing and Remote Access Service (RRAS), Windows Secure Kernel Mode, Windows Shell, Windows SmartScreen, Windows SMB, Windows SPNEGO Extended Negotiation, Windows SSDP Service, Windows StateRepository API, Windows Storage, Windows Storage VSP Driver, Windows TCP/IP, Windows TDX.sys, Windows Universal Plug and Play (UPnP) Device Host, Windows Update Service, Windows User-Mode Driver Framework Host, Windows Virtualization-Based Security (VBS) Enclave, Windows Visual Basic Scripting, Windows Win32K – GRFX, Windows Win32K – ICOMP, Workspace Broker and MSRT. This includes security updates. A reboot is required.

Google ChromeOS 137.0.7151.132 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Sequoia (15.x) means that macOS Monterey (12.x) and older are no longer supported. If you can not install at least macOS Ventura (13) on your Mac then you should immediately remove your device from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current — and final — release of the Windows 10 (v22H2) is very large so will take a long time to download on slower connections. All non-LTS versions of Windows 10 other than v22H2 are now out of support, upgrade to v22H2 now. If you aren’t sure whether you are using LTS, you aren’t. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v24H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is now stable and can be upgraded to if your hardware supports it. If not, switch to Linux (Mint is nice) or replace your computer.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with a SaferPC Subscription and we will install updates each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Crucial Storage Executive 11.05 doesn’t provide a change log so should be treated as a security update.
https://www.crucial.com/support/storage-executive

Display Driver Uninstaller 18.1.2.0 improves cleanup.
https://www.wagnardsoft.com/forums/viewforum.php?f=5

UniFi airMAX NanoStation 5AC Loco 8.7.17 changes hardware to comply with regulatory requirements. This is not a security update.
https://www.ui.com/download/software/loco5ac

VIISAN OfficeCam 7.2.9 doesn’t provide a change log so should be treated as a security update.
https://www.viisan.com/en/download/type1.html

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.80.115 is a security update.
https://brave.com/

Google Chrome 138.0.7204.100 is a security update.
https://www.google.com/chrome/

Microsoft Edge 138.0.3351.77 is a security update.
https://www.microsoft.com/en-us/edge/business/download

Firefox 140.0.4 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Vivaldi 7.5.3735.44 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Spark 3.24.2.111438 resolves several bugs and improves stability. This is not a security update.
https://sparkmailapp.com/

Spark (macOS) 3.24.2.111441 resolves several bugs, improves compatibility and stability. This is not a security update.
https://sparkmailapp.com/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 9.5.7 resolves over a dozen bugs including stability, performance and reliability issues. This is not a security update.
https://anydesk.com/en/downloads

Discord July 7, 2025 improves media support and resolves several bugs. This is not a security update.
https://discord.com/download

Dropbox 227.4.4774 resolves a crash bugs. This is not a security update.
https://www.dropbox.com/

jq 1.8.1 is a security update.
https://jqlang.github.io/jq/

MeshCentral 1.1.46 resolves dozens of bugs and improves stability. This is not a security update.
https://meshcentral.com/info/downloads.html

Microsoft Teams 1.8.00.17054 adds sensitive content detection and better unifies the interface between platforms. This is not a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 31.0.6 updates dependencies and resolves dozens of bugs. This is a security update.
https://nextcloud.com/

OneDrive 25.080.0427.0003 improves stability. This is not a security update.
https://support.microsoft.com/en-us/onedrive

OneDrive (macOS) 25.105.0601.0002 improves stability and adds the ability to map OneDrive to a non-home volume. This is not a security update.
https://support.microsoft.com/en-us/onedrive

Pocketnet-GUI 0.9.124 resolves dozens of bugs. This is not a security update.
https://pocketnet.app/

Qbox 4.0.5.72 doesn’t provide a change log so should be treated as a security update.
https://www.coraltreetech.com/qbox

Rclone 1.70.2 is a security update.
https://rclone.org/

Signal 7.60.0 resolves several bugs. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 7.47.2 improves sticker management. This is not a security update.
https://signal.org/android/apk/

Syncthing 1.30.0 improves stability and resolves several bugs. This is not a security update.
https://syncthing.net/

Telegram 5.16.2 resolves several bugs. This is not a security update.
https://telegram.org/

WinSCP 6.5.2 is a security update.
https://winscp.net/eng/index.php

Zoom 6.5.3.7509 integrates Zoom AI Companion. This is not a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

3tene 4.0.18 improves performance and resolves several bugs. This is not a security update.
https://en.3tene.com/

darktable 5.2.0 resolves dozens of bugs and improves default behaviors. This is not a security update.
https://www.darktable.org/

Grayjay 330 resolves several bugs. This is not a security update.
https://grayjay.app/index.html

Plex Home Theater 1.71.0.334 updates web-tv-client and resolves a couple bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Wave Cast 1.0.0.1642 doesn’t provide a change log so should be treated as a security update.
https://marketplace.elgato.com/product/wave-cast-2c92e60c-8508-4d5c-8b5f-8d02029b881c

Game Updates

These are unlikely to be of interest to most people.

Minecraft Server (Bedrock) 1.21.93.1 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server/bedrock

Minecraft Server (Java) 1.21.7 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server

Nintendo Switch 20.1.5 improves stability. This is not a security update.
https://en-americas-support.nintendo.com/app/answers/detail/a_id/22525/kw/system%20updates/p/989

PS5 2025.626 improves messaging. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

Steam 2025.06.30 resolves dozens of bugs. This is not a security update.
https://store.steampowered.com/news/app/593110

SteamOS SteamDeck Update 2025.07.07 resolves dozens of bugs. This is not a security update.
https://store.steampowered.com/news/app/1675200/

Office Updates

One or more of these are likely to be of interest to most people.

Artweaver 8.0.5 resolves several errors. This is not a security update.
https://www.artweaver.de/

Calibre 8.5.0 improves display and hardware compatibility. This is not a security update.
https://calibre-ebook.com/

GnuCash 5.12 resolves dozens of bugs. This is not a security update.
https://www.gnucash.org/

Manager 25.7.8.2482 doesn’t provide a detailed change log so should be treated as a security update.
https://www.manager.io/

Nextcloud Desktop 3.16.6 resolves several bugs. This is not a security update.
https://nextcloud.com/

Notepad++ 8.8.2 is a security update for the installer. The application itself is not vulnerable.
https://notepad-plus-plus.org/

Operating System Updates

These are for specific Linux flavors and alternative operating systems and, sadly, are unlikely to be of interest to most people.

ChromeOS 137.0.7151.132 is a security update.
https://chromereleases.googleblog.com/search/label/Stable%20updates+ChromeOS

Tails 6.17 is a security update.
https://tails.net/install/download/index.en.html

Security Software Updates

One or more of these is likely to be of interest to most people.

.NET Runtime 9.0.6 is a security update.
https://dotnet.microsoft.com/en-us/download/dotnet

DNSQuerySniffer 1.96 resolves a protocol bug. This is not a security update.
https://www.nirsoft.net/utils/dns_query_sniffer.html

JShelter 0.21 improves timestamping control. This is not a security update.
https://jshelter.org/install/

OpenSSL 3.5.1 is a security update.
https://slproweb.com/products/Win32OpenSSL.html

ProtonVPN 4.2.0 improves tray capabilities, better segregates LAN from the VPN and improves stability. This is not a security update.
https://github.com/ProtonVPN/win-app/releases/latest

RogueKiller 16.2.3 resolves several bugs. This is not a security update.
https://www.adlice.com/download/roguekiller/

SanDisk PrivateAccess 6.4.13.0 does not provide a change log so should be treated as a security update.
https://support-en.wd.com/app/answers/detailweb/a_id/48025

Stinger 13.0.0.388 adds and updates detections. This should be treated as a security update.
https://www.mcafee.com/us/downloads/free-tools/stinger.aspx

Wireless Network Watcher 2.43 increases the maximum number of custom menu items. This is not a security update.
https://www.nirsoft.net/utils/wireless_network_watcher.html

Capture Updates

These are unlikely to be of interest to most people.

Open Broadcaster Software 31.0.4 adds several new features and resolves dozens of bugs. This is not a security update.
https://obsproject.com/

SnagIt 25.2.1 resolves a couple bugs with image tagging and stability. This is not a security update.
https://www.techsmith.com/screen-capture.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 13.0.4.4 updates templates and resolves a couple bugs. This is not a security update.
https://www.dvdfab.cn/download.htm

PDF Creator 6.1.0 improves rotation controls, tokens, merge improvements and resolves several bugs. This is a security update.
https://www.pdfforge.org/pdfcreator

StreamFab 6.2.4.4 improves compatibility and resolves dozens of bugs. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

UniFab 3.0.2.1 resolves several bugs. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero 7.0.19 resolves several bugs. This is not a security update.
https://www.zotero.org/

Zotero (macOS) 7.0.18 resolves several bugs. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password 8.11.0 improves reliability. This is not a security update.
https://1password.com/downloads/

7-Zip 25.00 improves performance and file type support. This is a security update.
https://www.7-zip.org/

Agent Ransack 2022.3522 improves management controls and resolves several bugs. This is not a security update.
https://www.mythicsoft.com/agentransack/download/

Bitwarden 2025.6.2 fixes password generator and resolves several bugs. This is not a security update.
https://bitwarden.com/

CCleaner 6.37.11523 resolves a couple bugs. This is not a security update.
https://www.ccleaner.com/

CPU-Z Installer 2.16 adds support for new hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

DesktopOK 11.91 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

dnGrep 4.5.41.0 resolves several bugs and updates libraries. This is a security update.
https://dngrep.github.io/

email-oauth2-proxy 2025-06-25 resolves a certificate override bug. This should be treated as a security update.
https://github.com/simonrob/email-oauth2-proxy

Everything 1.4.1.1028 resolves a crash bugs. This is not a security update.
https://www.voidtools.com/

Fido 1.65 adds support for UEFI Shell 25H1. This is not a security update.
https://github.com/pbatard/Fido/releases

FileLocator Pro 2022.3522 improves management controls and resolves several bugs. This is not a security update.
https://www.mythicsoft.com/filelocatorpro/download

Free Virtual Serial Ports 7.01.00.1602 includes a rewrite of the VSPT driver and resolves several bugs. This is not a security update.
https://freevirtualserialports.com/

grepWin 2.1.10 resolves a couple bugs. This is not a security update.
https://github.com/stefankueng/grepWin/releases/latest

HWiNFO 8.28 adds support for newer hardware and improves hardware detection and compatibility. This is not a security update.
https://www.hwinfo.com/download/

Kingston SSD Manager 1.5.5.6 doesn’t provide a change log so should be treated as a security update.
https://www.kingston.com/us/support/technical/ssdmanager

LiveTcpUdpWatch 1.56 adds an option to clear results. This is not a security update.
https://www.nirsoft.net/utils/live_tcp_udp_watch.html

NTLite 2025.07.10512 adds new components, controls and resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

OSForensics 11.1.1008 improves stability and resolves several bugs. This should be treated as a security update.
https://www.osforensics.com/download.html

Password Security Scanner 1.64 improves compatibility. This is not a security update.
https://www.nirsoft.net/utils/password_security_scanner.html

PowerToys 0.92.1 improves reliability and resolves several bugs. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest

Remotly 1.33.1 adds reboot control and resolves several bugs. This is not a security update.
https://remotly.com/

RoboForm 9.7.7 improves unlock UI and resolves several bugs. This is not a security update.
https://www.roboform.com/

Rufus 4.9 updates WIM engine and resolves URL parsing. This is not a security update.
https://rufus.ie/en_US/

ScreenConnect 25.4.25 is yet another security update that doesn’t provide a detailed change log. Release notes have not been updated for ScreenConnect in over a month and the limited information they have exposed is that new roadblocks are being implemented, the client installs are no longer signed, and the ability to customize branding for the installation packages (filenames, images, and custom properties), as well as the ability to customize portions of the server user interface, has been completely removed. If you haven’t started yet you should begin researching alternatives. ScreenConnect is not long for this world.
https://screenconnect.connectwise.com/download

Starwind V2V Converter 9.757 resolves a compatibility bug. This is not a security update.
https://www.starwindsoftware.com/starwind-v2v-converter

Synergy 1.18.0 improves reliability and resolves over a dozen bugs. This is not a security update.
https://symless.com/synergy/

WifiInfoView 2.97 adds option to clear the network list. This is not a security update.
https://www.nirsoft.net/utils/wifi_information_view.html

WinGet 1.11.400 improves compatibility and resolves dozens of bugs. This is not a security update.
https://github.com/microsoft/winget-cli/releases/latest

WinRAR 7.12 is a security update.
https://www.rarlab.com/

WizTree 4.26 improves cosmetics and resolves several bugs. This is not a security update.
https://www.diskanalyzer.com/

ZoomText 2025.2506.86.400 resolves several bugs. This is not a security update.
https://support.freedomscientific.com/Downloads/ZoomText

Developer Updates

These are unlikely to be of interest to most people.

Android Studio 2025.1.1 resolves several bugs. This is not a security update.
https://developer.android.com/studio

GDevelop 5.5.236 adds shadow support and resolves several bugs. This is not a security update.
https://gdevelop.io/download

GitHub Desktop 3.5.0 adds AI-generated commit messages. This is not a security update.
https://desktop.github.com/

Go 1.24.5 is a security update.
https://go.dev/

Node.js 20.19.3 updates root certificates and dependencies, and resolves dozens of bugs. This is not a security update.
https://nodejs.org/en/

Node.js 22.17.0 resolves several bugs. This is not a security update.
https://nodejs.org/en/

Node.js 24.3.0 resolves several bugs. This is not a security update.
https://nodejs.org/en/

Python 3.13.5 resolves several bugs. This is not a security update.
https://www.python.org/downloads/

SQLite 3.50.2 resolves several bugs. This is not a security update.
https://www.sqlite.org/download.html

Visual Studio Code 1.101.2 resolves several bugs. This is not a security update.
https://code.visualstudio.com/

Web Package Updates

These are likely to be of interest only to web developers.

Invision Community 4.7.22 adds Cloudflare Turnstile CAPTCHA. This is not a security update.
https://invisioncommunity.com/

Joomla 5.3.2 resolves several bugs. This is not a security update.
https://www.joomla.org/

MailEnable Enterprise 10.53 resolves several bugs. This is not a security update.
https://www.mailenable.com/

SMF 2.1.6 resolves several bugs. This is not a security update.
https://www.simplemachines.org/

bbPress 2.6.14 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/bbpress/

Contact Form 7 6.1 adds Cloudflare Turnstile CAPTCHA and removes Constant Contact integration. This is not a security update.
https://wordpress.org/extend/plugins/contact-form-7/

Interactive World Map 3.5.1 is a security update.
https://wordpress.org/extend/plugins/interactive-world-map/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2025-04-08

Happy Easter, Folks!

Today is Patch Tuesday for April, 2025.

It’s as safe as it’s going to be to upgrade to Windows 11 24H2 or macOS 15/Sequoia.

If your Windows 10 (or older) computer can not be upgraded to Windows 11, or if you used a registry or installation bypass to install an older version of Windows 11 on it that is no longer supported, then it’s time for you to start looking for a replacement computer. Actually, the time was 3 months ago. Pickin’s are thin right now. 🙁

There were 320+ major hacks, and over 360 application updates this month. It’s a relatively small month, with about 2.5 GB of updates for most users.

This Month in Technology

13cabs, 9,300 WordPress websites (ClearFake), 150,000 WordPress websites (DollyWay), 70mai A510, Abracadabra, Access TeleCare, Adobe Acrobat Reader, ALN Medical Management, Amazon AWS CloudFormation, AMI MegaRAC, an Asian telecom, Android, Apache Parquet, Apache Pinot, Apache Tomcat, APIsec, Apple macOS, Apple Passwords app, Apple WebKit, Arista NG Firewall, Around the Clock Companies, Arts Council England, Ascoma Group, Association of Superannuation Funds of Australia, Astral Foods, Atlantis Operating LLC, Atlas CPAs & Advisors, Atutech, AustralianSuper, Autodesk AutoCAD, Autodesk Navisworks, Autodesk Payapps, Baidu, Bank of China, Barebox, Baylor Scott & White Texas Spine & Joint Hospital, Bdrive NetDrive, BDSM People, Beacon Health System, BEC Technologies Routers, Bigfork Valley Hospital, Blue Shield of California, Boulanger, Brave browser, Brish, Brocade Fibre Channel switches, BTS member Jungkook, Buckinghamshire Council, Bybit, California Cryobank, Canon printers, Capilano University (CapU), Cardiff City Council Department of Children’s Services, Cargills Bank, CarlinKit CPC200-CCPA, CDHA Management, Center for Digestive Health, CHC Solutions, Inc, Check Point, Check Point ZoneAlarm, Cherokee County School District, Chica, Choco Tei Camera, Chord Specialty Dental Partners, Chrome, Cisco IOS XR, Cisco Smart Licensing Utility, City of Lubbock, Ciuni & Panichi, Clinic’s Patient Management System, Cloudflare WAF, Columbia Eye Clinic, Compumedics, Concord Orthopaedics, Costa Rican President’s YouTube, Cottrill’s Pharmacy, Crossroads Trading Co, CrushFTP, CSG Consultants, D&S Insurance Agency, Dameron Hospital, DBS Signapore, Dell Unity, Dignity Health Lassen Medical Clinic, Dove Healthcare, DrayTek routers, Drugs.com, Dutch Public Prosecution Service, Edimax Cameras, El Camino Real Academy, Eprice, Erickson Companies, ESET security, ESHYFT, Europcar Mobility Group, Everest ransomware gang, Exim, Facebook FreeType 2, FacePass, Fidelity Life, First City Credit Union, Food For The Poor, Fortinet FortiWeb, French Department of Education, Gay Daddy, Georgia Urology, German Doner Kebab, Gilead Sciences, GIMP, GitLab Community Edition, GitLab Enterprise Edition, Google Quick Share, Grede Holdings, Growatt, GRUB2, Guardian Life Insurance, Hamilton County, Hand & Plastic Surgery Centre, Harcourts Prime Properties, Health NZ, HealthEquity, Hellenic Open University, HHH Acquisition, LLC, Highline Public Schools, Hillcrest Convalescent Center, Hokkaido Jalan, Houston Housing Authority, Houston Surgery Center, HTW Dresden, Hydro-Vacuum SA, ImagineX, Infosys McCamish Systems, Insignia, IOU Financial, Iraqi Council of Ministers, Iraqi Ministry of Finance, Islamic Republic of Iran Shipping Company, Ivanti Connect Secure, Jaguar Land Rover, Jira, Junos OS, Karl Malone Auto Group, Keeco Home, Klickitat Valley Health, Korea Aerospace Research Institute, Kronick Moskovitz Tiedemann & Girard, Kuala Lumpur Airport, Kubernetes Ingress Nginx Controller, LA Financial Federal Credit Union, Laborers’ International Union of North America, Local 1184, Lafayette Federal Credit Union, Lake Psychological Services, Lake Washington Vascular, Lee University, Legacy Professionals LLP, Lena Pope Home Inc, LensDeal, Lexipol, Life University, LiUNA, Lloyds Bank, Lukoil, Luxion KeyShot, Lyon Living, Lyon Management Group, M.A.D Mobile, Madison County, Mississippi, Malaysia Airports Holdings Bhd, Marina Bay Sands Singapore, Mark Thomas, Medway Community Healthcare, Meigs County Emergency Medical Services, MercadoLibre, Mercer County Joint Township Community Hospital, Merkur, Microsoft Exchange Online and M365, Microsoft SharePoint, Microsoft’s Trusted Signing platform, Microsoft’s Visual Studio Code Marketplace, Millennium Home Health Care, Mirror Mirror Beauty Boutique, Mission Bell Mfg, Mission, Texas, Monro, Inc, Morton Golf LLC, mySCADA myPRO, NAKIVO Backup & Replication, National Defense Corporation, National Iranian Tanker Company, NetApp SnapCenter, Nevro, New Era Life Insurance Companies, New South Wales Court Registry, New York University (NYU), NewAgeSys, NexOpt, Next.js, NI FlexLogger, NI Vision Builder AI, Nice Healthcare, Northern Ireland Commission, Northwest Retirement Plan Consultants, NTT, Numotion, NVIDIA Riva, OBI Seafoods, Oracle Cloud (from 2017!), Oracle Health, OrthoMinds, Pacific Residential Mortgage, Palmetto Subacute Care Center, Palo Alto Deep Packet Inspection, PAR Rehab, Parascript, Parcel Plus, PDF-XChange Editor, Pennsylvania State Education Association, pgAdmin, Pinehurst Radiology Consultants, Pineland Community Service Board, Pink, Port of Seattle, Presbyterian Health Plan, Progress Software Kemp LoadMaster, PTS News, Rakuten Securities, RansomHub, Red Lion Borough, PA, Rinehart Dentistry, Riverdale Joint Unified School District, Rodl Management, Royal Mail, SAG-AFTRA Health Plan, Sam’s Club, Samsung Germany, Sentara Health, Shopify Collabs, Shopify Pitchfork, Siegel Group, Siemens Simcenter, SimonMed, SIR.trading, SMA, Smart ERP Solutions, SoloPoint Solutions, Southeast Series of Lockton Companies, Spark DSO, SpotBugs, SpyX, St. Joseph’s College of Maine, State Bar of Texas, State of California, Department of Child Support Services, STE Group, STMicroelectronics X-CUBE, Stram Center for Integrative Medicine, StreamElements, Sungrow, Sydney Tools, Tata AIG, Tata Technologies, Tesla, TFE hotels group, Thailand Post, The Junction Casino Hotel, The Pension Specialist, Three Rivers Hospital, Toppan Next Tech, Topy America Inc, Tor Browser, Translove, Trend Micro Cleaner One, Trinity Petroleum Management, Troy Hunt’s Mailchimp List, Twilio SendGrid, Twitter (X), U-Boot, UAE Water & Electric Power, Ubuntu Linux, Ukrzaliznytsia, Ulrich Investment Consultants, Union County, United Domestic Workers of America, United Faith Ministries, United Seating and Mobility, Unitree Go1 robot dogs, University Diagnostic Medical Imaging, University of Notre Dame Fremantle, Urban Dictionary, Verizon Call Filter, VF Outdoor, Virginia Attorney General’s Office, Vista Point Mortgage, Vitenas Cosmetic Surgery, VMware Tools for Windows, Vroom, Watcher Guru, Welts, White, & Fontaine, WEMIX, Wesizwe, Western Alliance Bank, Western Wayne Family Physicians, WhatsApp, Whitman Hospital & Medical Clinics, WideOpenWest, William F Rinehart DMD PA, Windows, Windows Kernel, WinRAR, WK Kellogg Co, Woori Card, Word & Brown Insurance Administrators, WordPress Simple WP Events plugin, WordPress WooCommerce plugin, WordPress WP Ghost plugin, WordPress WP RealEstate plugin, WordPress WP Ultimate CSV Importer plugin, X.Org Server, Xen HVM, YAP Health Services, Yucatán Government, ushin America, zkLend hacker (lol), and Zoth Protocol have reported hacking or compromises this month.

ChatGPT, Cloudflare R2, DrayTek routers, Microsoft Exchange Online, Moscow Metro, and Naval Station Norfolk have suffered from outages this month.

Last months updates broke Microsoft Snipping Tool, Remote Desktop, security services including SenseShield on Windows 11 24H2, the ability to return to Outlook “Classic”, USB printers, Veeam recovery, and VMware Workstation updates.

23andMe has filed for bankruptcy, but not before they created plans to sell off all your DNA details.

Apple broke their N+2 trend and released security updates for much older devices to address critical vulnerabilities.

DoH (DNS over HTTPS) is being used to hijack mail accounts with extremely well-targeted phishing pages. How effective are phishing websites? Effective enough to get even the creator of Have I Beep Pwned to fall for it.

Microsoft has changed their mind on disabling WSUS driver sync. Microsoft is testing a new “quick machine recovery” platform to recover from buggy driver updates preventing the operating system from booting. Microsoft is removing the BypassNRO script from Windows 11 installers, but the underlying registry settings will still be available (for now).

Now for the good news:

Linux is making headway – more than 2% of devices running Steam are now actively using Linux.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is relatively small this month. The typical computer should see roughly 2.5 GB in updates today. Let’s get started.

Microsoft released 78 updates to address 128 vulnerabilities in Active Directory Certificate Services, Active Directory Domain Services, ASP.NET Core, Azure Local, Azure Local Cluster, Azure Portal Windows Admin Center, DirectX Graphics Kernel, HTTP.sys, Kerberos Key Distribution Proxy, Microsoft AutoUpdate (MAU), Microsoft Dynamics Business Central, Microsoft Edge, Microsoft Edge for iOS, Microsoft Excel, Microsoft Message Queuing (MSMQ), Microsoft Office, Microsoft Office Excel, Microsoft Office OneNote, Microsoft Office SharePoint, Microsoft Office Word, Microsoft OneNote, Microsoft SharePoint, Microsoft Streaming Service, Microsoft System Center, Microsoft Virtual Hard Drive, Microsoft Word, OpenSSH for Windows, Outlook for Android, Remote Desktop Client, Remote Desktop Gateway Service, RPC Endpoint Mapper Service, Servicing Stack Updates, Visual Studio, Visual Studio Code, Visual Studio Tools, Windows Active Directory Certificate Services, Windows BitLocker, Windows Bluetooth Service, Windows Common Log File System Driver, Windows Cryptographic Services, Windows Defender Application Control (WDAC), Windows Digital Media, Windows Hello, Windows Hyper-V, Windows Installer, Windows Kerberos, Windows Kernel, Windows Kernel Memory, Windows Kernel-Mode Drivers, Windows Lightweight Directory Access Protocol (LDAP), Windows Local Security Authority (LSA), Windows Local Session Manager (LSM), Windows Mark of the Web (MOTW), Windows Media, Windows Mobile Broadband, Windows NTFS, Windows Power Dependency Coordinator, Windows Process Activation, Windows Remote Desktop Services, Windows Resilient File System (ReFS), Windows Routing and Remote Access Service (RRAS), Windows Secure Channel, Windows Security Zone Mapping, Windows Shell, Windows Standards-Based Storage Management Service, Windows Subsystem for Linux, Windows TCP/IP, Windows Telephony Service, Windows Universal Plug and Play (UPnP) Device Host, Windows Update Stack, Windows upnphost.dll, Windows USB Print Driver, Windows Virtualization-Based Security (VBS) Enclave, Windows Win32K – GRFX, and MSRT. This includes security updates. A reboot is required.

Apple released updates for iOS 15.8.4, iOS 16.7.11, iOS 18.4, iPadOS 15.8.4, iPadOS 16.7.11, iPadOS 17.7.6, iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, Safari 18.4, tvOS 18.4, visionOS 2.4, watchOS 11.4, and Xcode 16.3. This includes security updates. Use Apple Software Update to install the most current versions.

iOS 15.8.4, 16.7.11, and 18.4 are security updates. Use Settings, General, Software Update to install the most current update.

iPadOS 15.8.4, 16.7.11, 17.7.6, and 18.4 are security updates. Use Settings, General, Software Update to install the most current update.

watchOS 11.4 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 18.4 is a security update. Use System, Software Update to install the most current version.

visionOS 2.4 is a security update. Use System, Software Update to install the most current version.

Google ChromeOS 134.0.6998.183 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Sequoia (15.x) means that macOS Monterey (12.x) and older are no longer supported. If you can not install at least macOS Ventura (13) on your Mac then you should immediately remove your device from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current — and final — release of the Windows 10 (v22H2) is very large so will take a long time to download on slower connections. All non-LTS versions of Windows 10 other than v22H2 are now out of support, upgrade to v22H2 now. If you aren’t sure whether you are using LTS, you aren’t. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v24H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is now stable and can be upgraded to if your hardware supports it. If not, switch to Linux (Mint is nice) or replace your computer.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with a SaferPC Subscription and we will install updates each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

GoXLR Utility 1.2.0 resolves several bugs and improves firmware update. This is not a security update.
https://github.com/GoXLR-on-Linux/goxlr-utility/

Logitech Options 10.24.3 improves compatibility with Microsoft Office. This is not a security update.
https://support.logi.com/hc/en-us/articles/360025297893

TP-Link Archer AX73 v2.0 250210 is a security update.
https://www.tp-link.com/us/support/download/archer-ax73/v2.0/#Firmware

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.77.95 is a security update.
https://brave.com/

Firefox 137.0.1 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Firefox ESR 128.9.0 is a security update.
https://www.mozilla.org/en-US/firefox/organizations/all/

Google Chrome 135.0.7049.52 is a security update.
https://www.google.com/chrome/

Vivaldi 7.3.3635.7 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Spark 3.22.6.104601 resolves several bugs. This is not a security update.
https://sparkmailapp.com/

Spark (macOS) 3.22.6.104600 resolves several bugs. This is not a security update.
https://sparkmailapp.com/

Thunderbird 137.0.1 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 9.5.0 resolves more than a dozen bugs and improves multiple monitor support and AnyDeskOne compatibility. This is not a security update.
https://anydesk.com/en/downloads

AnyDesk (macOS) 9.0.1 is a security update.
https://anydesk.com/en/downloads

BrowsingHistoryView 2.60 adds black background support. This is not a security update.
https://www.nirsoft.net/utils/browsing_history_view.html

curl 8.13.0 improves debugging and resolves nearly 300 bugs. This should be treated as a security update.
https://curl.haxx.se/windows/

Discord April 3, 2025 resolves dozens of bugs. This is not a security update.
https://discord.com/download

Dropbox 221.4.5365 resolves a cosmetic bug. This is not a security update.
https://www.dropbox.com/

FileZilla Server 1.10.1 resolves several bugs. This is not a security update.
https://filezilla-project.org/

FreeFileSync 14.3 adds IDN support and resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Google Drive 106.0 now officially supports ARM64 on Windows. This is not a security update.
https://drive.google.com/start

Grocy Desktop 2.14.0 improves compatibility. This is not a security update.
https://github.com/grocy/grocy-desktop

MeshCentral 1.1.43 resolves several bugs. This is not a security update.
https://meshcentral.com/info/downloads.html

Microsoft Teams 1.8.00.6262 adds one-time passcode authentication, Storyline integration, chat controls and increases attendees to a max of 50,000 for Premium. This is not a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 31.0.2 updates libraries and resolves dozens of bugs. This is not a security update.
https://nextcloud.com/

Pocketnet-Core 0.22.14  resolves several bugs. This is not a security update.
https://pocketnet.app/

Pocketnet-GUI 0.9.116 is a security update.
https://pocketnet.app/

Signal 7.49.0 now synchronizes recent activity to new devices. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 7.38.7 now synchronizes recent activity to new devices. This is not a security update.
https://signal.org/android/apk/

Syncthing 1.29.4 resolves a couple bugs. This is not a security update.
https://syncthing.net/

Technitium DNS Server 13.5  resolves several bugs and implements new features. This is not a security update.
https://technitium.com/dns/

Telegram 5.13.1 resolves a crash bug. This is not a security update.
https://telegram.org/

WinSCP 6.5 resolves several bugs. This is not a security update.
https://winscp.net/eng/index.php

Zoom 6.4.3.63669 resolves several bugs. This is not a security update. The recent 6.4 update adds dozens of new features and a new user interface – it is also a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

3tene 4.0.16 adds several new 3D environments. This is not a security update.
https://en.3tene.com/

Grayjay 291 adds search and sorting to playlists, improves filters and search, and resolves several bugs. This is not a security update.
https://grayjay.app/index.html

iTunes 12.13.7.1 improves compatibility. This is a security update.
https://www.apple.com/itunes/download/

Game Updates

These are unlikely to be of interest to most people.

Minecraft Server (Bedrock) 1.21.72.01 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server/bedrock

Minecraft Server (Java) 1.21.5 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server

PS5 2025.314 improves compatibility and parental controls. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

Steam 2025.04.01 improves compatibility and resolves several bugs. This is not a security update.
https://store.steampowered.com/news/app/593110

SteamOS SteamDeck Update 2025.03.31 improves compatibility and resolves several bugs. This is not a security update.
https://store.steampowered.com/news/app/1675200/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe AEM Forms 6.5.22.0 is a security update.
https://helpx.adobe.com/security/products/aem-forms/apsb25-27.html

Adobe AEM Screens 6.5 FP11.4 is a security update.
https://helpx.adobe.com/security/products/aem-screens/apsb25-32.html

Adobe After Effects 24.6.5 and 25.2 are security updates.
https://helpx.adobe.com/security/products/after_effects/apsb25-23.html

Adobe Animate 23.0.11 and 24.0.8 are security updates.
https://helpx.adobe.com/security/products/animate/apsb25-31.html

Adobe Bridge 14.1.6 and 15.0.3 are security updates.
https://helpx.adobe.com/security/products/bridge/apsb25-25.html

Adobe ColdFusion 2025.1, 2023.13 and 2021.19 are security updates.
https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html

Adobe Commerce B2B 1.5.2, 1.4.2-p5, 1.3.5-p10, 1.3.4-p12, and 1.3.3-p13 are security updates.
https://helpx.adobe.com/security/products/magento/apsb25-26.html

Adobe Commerce 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, and 2.4.4-p13 are security updates.
https://helpx.adobe.com/security/products/magento/apsb25-26.html

Adobe FrameMaker 2020.8 and 2022.6 are security updates.
https://helpx.adobe.com/security/products/framemaker/apsb25-33.html

Adobe Magento Open Source 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, and 2.4.4-p13 are security updates.
https://helpx.adobe.com/security/products/magento/apsb25-26.html

Adobe Media Encoder 24.6.5 and 25.2 are security updates.
https://helpx.adobe.com/security/products/media-encoder/apsb25-24.html

Adobe Photoshop 26.5 and 25.12.2 are security updates.
https://helpx.adobe.com/security/products/photoshop/apsb25-30.html

Adobe Premiere Pro 25.2 and 24.6.5 are security updates.
https://helpx.adobe.com/security/products/premiere_pro/apsb25-28.html

Adobe XMP Toolkit SDK 2025.03 is a security update.
https://helpx.adobe.com/security/products/xmpcore/apsb25-34.html

Aronium 1.45.0.1 resolves a bug in the Z report. This is not a security update.
https://aronium.com/

Artweaver 7.0.18 is a security update.
https://www.artweaver.de/

Audacity 3.7.3 resolves several bugs. This is not a security update.
https://www.audacityteam.org/download/

Calibre 8.2.1 improves compatibility and resolves a couple bugs. This is not a security update.
https://calibre-ebook.com/

Ghostscript 10.05.0 adds several new syntax controls. This is a security update.
https://www.ghostscript.com/releases/gsdnld.html

GIMP 3.0 is a major update (the first in 7 years!) which adds huge strides in many features and improves compatibility and stability. GIMP 3.0.2 resolves several bugs. This is not a security update.
https://www.gimp.org/

GnuCash 5.11 resolves almost 20 bugs and improves stability. This is not a security update.
https://www.gnucash.org/

LibreOffice 24.8.6 resolves over 30 bugs. This is not a security update.
https://www.libreoffice.org/

LibreOffice Fresh 25.2.2 resolves over 80 bugs. This is a security update.
https://www.libreoffice.org/

Manager 25.4.3.2227 doesn’t provide a detailed change log so should be treated as a security update.
https://www.manager.io/

Nextcloud Desktop 3.16.2 resolves several bugs. This is not a security update.
https://nextcloud.com/

Notepad++ 8.7.9 resolves several bugs. This is not a security update.
https://notepad-plus-plus.org/

Paint.net 5.1.7 resolves a couple bugs. This should be treated as a security update.
https://www.getpaint.net/

Operating System Updates

These are for specific Linux flavors and alternative operating systems and, sadly, are unlikely to be of interest to most people.

ChromeOS 134.0.6998.183 is a security update.
https://chromereleases.googleblog.com/search/label/Stable%20updates+ChromeOS

iOS 18.4 is a security update.
https://support.apple.com/kb/HT204204

iPadOS 18.4 is a security update.
https://support.apple.com/kb/HT204204

macOS Sequoia 15.4, Sonoma 14.7.5 and Ventura 13.7.5 are security updates.
https://support.apple.com/kb/HT201541

Tails 6.14.1 is a security update.
https://tails.net/install/download/index.en.html

tvOS 18.4 is a security update.
https://support.apple.com/kb/HT202716

watchOS 11.4 is a security update.
https://support.apple.com/kb/HT204641

Zorin OS 17.3 is a huge compatibility update, adds improved alternative detections and suggestions, changes the default browser to Brave, and improves the Zorin Connect app to better function as an input device for the latest Zorin OS release. This should be treated as a security update.
https://zorin.com/os/mirrors/

Security Software Updates

One or more of these is likely to be of interest to most people.

Caine 14.0 improves UEFI support and updates kernel. This is a security update.
https://www.caine-live.net/

Chainsaw 2.12.2 is a housekeeping release. This is not a security update.
https://github.com/countercept/chainsaw

MalwareBytes Desktop Security 5.2.10.182 is a security update.
https://www.malwarebytes.org/antimalware/

ProtonVPN 4.1.10 updates the user interface, adds a list of recent connections to quick access, and adds advanced profile settings such as port forwarding and autolaunch behaviors. This is not a security update.
https://github.com/ProtonVPN/win-app/releases/latest

RogueKiller 16.1.2 expands the monitoring capabilities and improves detection logic. This should be treated as a security update.
https://www.adlice.com/download/roguekiller/

Stinger 13.0.0.342 adds support for new detections. This is not a security update.
https://www.mcafee.com/us/downloads/free-tools/stinger.aspx

SuperAntiSpyware 10.0.1274 resolves several bugs. This is not a security update.
https://www.superantispyware.com/download.html

uBlock Origin 1.63.2 resolves a major stability issue. This should be treated as a security update.
https://github.com/gorhill/uBlock/releases/latest

Velociraptor 0.74.1 improves the Sigma editor and adds new live event sources. This is not a security update.
https://github.com/Velocidex/velociraptor/releases/latest

Capture Updates

These are unlikely to be of interest to most people.

ScreenToGif 2.41.2 adds AVIF support and resolves a couple bugs. This is not a security update.
https://github.com/NickeManarin/ScreenToGif/releases/latest

SnagIt 25.1.0 updates libraries, improves step capture, smart redact, stability and performance, and resolves several bugs. This is a security update.
https://www.techsmith.com/screen-capture.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 13.0.3.8 adds support for new encodings and improves OCR detection for subtitles. This is not a security update.
https://www.dvdfab.cn/download.htm

MakeMKV 1.18.1 adds support for new encodings and resolves a couple bugs. This is not a security update.
https://www.makemkv.com/download/

StreamFab 6.2.2.8 improves compatibility, adds support for newer playlist and distribution formats, and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

UniFab 3.0.1.2 resolves several bugs and adds faster upscaling model. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero 7.0.15 resolves several bugs. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password 8.10.70 adds new internetional keyboard layout support. This is not a security update.
https://1password.com/downloads/

AOMEI Partition Assistant 10.8.0 finally adds a built-in update mechanism, improves Windows-To-Go support, and resolves several bugs. This is not a security update.
https://www.diskpart.com/

Bitcoin 28.1 adds new features, bug fixes and performance improvements. This is not a security update.
https://bitcoin.org/en/download

Bitwarden 2025.3.0 adds 2SL login support to the user interface and resolves several bugs. This is not a security update.
https://bitwarden.com/

CCleaner 6.34.11482 resolves several bugs. This is not a security update.
https://www.ccleaner.com/

CPU-Z Installer 2.15 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

Cygwin 3.6.0-1 adds several new APIs, improves compatibility and resolves several bugs. This is not a security update.
https://cygwin.com/

Dell Command Update 5.5 adds automatic driver downloads to the Advance Driver Restore operation. This is not a security update.
https://www.dell.com/support/article/us/en/04/sln311129/dell-command-update?lang=en

DesktopOK 11.71 resolves a couple bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

DiskCheckup 3.6 doesn’t provide a detailed change log so should be treated as a security update.
https://www.passmark.com/products/diskcheckup/

dnGrep 4.4.9.0 resolves several bugs. This is a security update.
https://dngrep.github.io/

email-oauth2-proxy 2025-03-14 resovles several bugs. This is not a security update.
https://github.com/simonrob/email-oauth2-proxy

Eraser 6.2.0.2996 doesn’t provide a change log so should be treated as a security update.
https://eraser.heidi.ie/download/

ESEDatabaseView 1.78 adds an optional black background. This is not a security update.
https://www.nirsoft.net/utils/ese_database_view.html

Everything Toolbar 1.5.2 improves compatibility and resolves a couple bugs. This is not a security update.
https://github.com/stnkl/EverythingToolbar/

FoneTool 2.10.0 adds support to back up ringtones, improves System Repair and iTunes compatibility and resolves several bugs. This is not a security update.
https://www.fonetool.com/download.html

GoodSync 12.8.7 resolves several bugs. This is not a security update.
https://www.goodsync.com/

HWiNFO 8.24 adds support for newer hardware. This is not a security update.
https://www.hwinfo.com/download/

ImageUSB 1.5.1007 resolves a hardware compatibility bug. This is not a security update.
https://www.osforensics.com/tools/write-usb-images.html

Kingston SSD Manager 1.5.4.9 doesn’t provide a change log so should be treated as a security update.
https://www.kingston.com/us/support/technical/ssdmanager

ManageWirelessNetworks 1.16 adds option to save all items. This is not a security update.
https://www.nirsoft.net/utils/manage_wireless_networks.html

NConvert 7.221 doesn’t provide a change log so should be treated as a security update.
https://www.xnview.com/en/nconvert/

NTLite 2025.03.10351 improves new Windows UEFI build behavior and updates libraries. This is not a security update.
https://www.ntlite.com/download/

OSForensics 11.1.1004 resolves several bugs. This is not a security update.
https://www.osforensics.com/download.html

PowerToys 0.90.0 adds several new features and resolves a bunch of bugs. This is a security update.
https://github.com/microsoft/PowerToys/releases/latest

RoboForm 9.6.6 changes a couple behaviors and resolves several bugs. This is not a security update.
https://www.roboform.com/

ScreenConnect 25.2.3.9216 resolves several bugs and now imposes a hardcoded email limit in the name of security – which means that monitoring events using the email action will no longer be reliable.
https://screenconnect.connectwise.com/download

SSD Life 2.5.82 adds support for newer hardware. This is not a security update.
https://ssd-life.com/eng/download-ssdlife.html

Starwind V2V Converter 9.626 improves conversions from Hyper-V to ESXi. This is not a security update.
https://www.starwindsoftware.com/starwind-v2v-converter

TeamViewer 15.64.3 adds several new management features and resolves a couple bugs. This is not a security update.
https://www.teamviewer.com/en-us/download/windows/

WakeMeOnLan 1.93 adds a black background option. This is not a security update.
https://www.nirsoft.net/utils/wake_on_lan.html

WinRAR 7.11 resolves several bugs. This is not a security update.
https://www.rarlab.com/

WinScan2PDF 9.31 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

WizFile 3.12 resolves a bug. This is not a security update.
https://antibody-software.com/wizfile/

Developer Updates

These are unlikely to be of interest to most people.

Android Studio 2024.3.1.14 resolves several bugs. This is not a security update.
https://developer.android.com/studio

cx_Freeze 8.1 updates libraries and resolves several bugs. This should be treated as a security update.
https://cx-freeze.readthedocs.io/en/latest/index.html

GameMaker Studio 2024.13.0.190 resolves over 500 bugs. This should be treated as a security update.
https://www.yoyogames.com/en/gamemaker

GDevelop 5.5.228 resolves a couple cosmetic bugs. This is not a security update.
https://gdevelop.io/download

Go 1.24.2 is a security update.
https://go.dev/

Godot 4.4.1 is a security update.
https://godotengine.org/

Inno Setup 6.4.2 adds a new setup directive. This is not a security update.
https://www.jrsoftware.org/isdl.php

Node.js 18.20.8 is a security update.
https://nodejs.org/en/

Node.js 20.19.0 resolves several bugs. This is not a security update.
https://nodejs.org/en/

Node.js 23.11.0 updates libraries and resolves several bugs. This is not a security update.
https://nodejs.org/en/

Python 3.13.3 resolves dozens of bugs. This is a security update.
https://www.python.org/downloads/windows/

Visual Studio Code 1.99.1 resolves several bugs. This is a security update.
https://code.visualstudio.com/

Web Package Updates

These are likely to be of interest only to web developers.

Adminer 5.2.0 resolves several bugs and adds cosmetic improvements. Adminer has been under very active development the last couple months so expect many more future updates over time.
https://www.adminer.org/en/

Grocy 4.5.0 implements a new barcode reader and resolves a couple bugs. This is not a security update.
https://github.com/grocy/grocy

HumHub 1.17.2 resolves several bugs. This is not a security update.
https://www.humhub.com/en

Joomla 5.2.6 and 4.4.13 are security updates.
https://www.joomla.org/

MailEnable 9.88 and 10.52 are security updates.
https://www.mailenable.com/

OpenCart 4.1.0.3 resolves several bugs. This is not a security update.
https://www.opencart.com/

Piwigo 15.5.0 resolves several bugs. This is not a security update.
https://piwigo.org/

YOURLS 1.10.0 updates requirements, dependences and resolves several bugs. This is not a security update.
https://yourls.org/

BuddyPress 14.3.4 is a security update.
https://wordpress.org/extend/plugins/buddypress/

My Sticky Bar 2.7.8 improves user interface. This is not a security update.
https://wordpress.org/extend/plugins/mystickymenu/

WordPress Importer 0.8.4 resolves a couple bugs. This should be treated as a security update.
https://wordpress.org/extend/plugins/wordpress-importer/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

 

Updates 2025-02-11

Happy Valentines, Folks!

Today is Patch Tuesday for February, 2025.

It’s as safe as it’s going to be to upgrade to Windows 11 24H2 or macOS 15/Sequoia.

If your Windows 10 (or older) computer can not be upgraded to Windows 11, or if you used a registry or installation bypass to install an older version of Windows 11 on it that is no longer supported, then it’s time for you to start looking for a replacement computer. Actually, that time was about 5 weeks ago. Pickin’s are thin right now. 🙁

There were 275+ major hacks, and over 640 application updates this month. It shouldn’t be that bad though, with about 3.5 GB of updates for most users.

This Month in Technology

1win, 9Lives, Addison Northwest School District, Adobe Photoshop, Adopt Me Trading Values, an airline travel integration service, Allegheny Health Network, Alltours, Alpine iLX-507, Alpine IVI, AMD CPUs, American National Insurance Company, Android, AngelSense, Aoki Holdings, Apex Custom Software, Apple Core Media, Apple CPUs, Apple iPad, Apple iPhone, Apple macOS, Apple WebKit, Aprendamos Intervention Team, Arab Civil Aviation Organization, Arlington Westend Dental, Ascension Health, Asheville Eye Associates, AT&T, Autel MaxiCharger, AuthoraCare Collective, Automotive Grade Linux, Avery Products Corporation, AVTECH cameras, Bank Central Asia, Bankers Cooperative Group, Bayhealth Medical Center, BCP Council, Behavioral Health Resources, Benefits Management Group, Berman & Rabin, PA, Big Cheese Studio, Biomedical Caledonia Medical Laboratory Limited, Bitbucket Server, Blacon High School, Cabrillo College, Cacti, Canon imageCLASS MF656Cdw, Casio UK, Catholic Charities of Southern Nevada, ChargePoint EV charger, ChargePoint HomeFlex, Chicago Department of Public Health, Christian Community Aid, Circle K, Cisco, Cisco Identity Services Engine (ISE), City of Hayward, City of McKinney, City of Tarrant, City of Ulster, Cityworks, ClamAV, ClearML, Cleo, Comhairle nan Eilean Siar, Communicare, Community Health Center, Conduent, CR&R Incorporated, Cracked.io, Craft CMS, Crayfish, Crunchyroll, Daytrip, DeepSeek, Delaware Valley School District, Delta County Memorial Hospital District, Dignity Health Lassen Medical Clinic, Django, DogWifTools, Doxbin, DragonNest, E-Benefit Solution, Econet Wireless, Endo Group, ENGlobal, Ethereum, FC Barcelona, FortiOS and FortiProxy, Fota Wildlife Park, Frame & Optic, Frederick Health, Garden of Life, LLC, GeoTools, GitHub Copilot, Globe Life, Google Chrome, Google Gemini AI, Google’s OAuth, Gravy Analytics, GrubHub, H&M, Hakko Corporation, Han Van Duong, MD, Hanover County Public Schools, Harmonyland, Harrison County Schools, Harvard Pilgrim Health Care, HCF Management, Heart Centre, HeatGames, Hewlett Packard Enterprise (HPE), Hikari Seiko, Holdrege Memorial Homes, Hospital El Cruce, Hospital Sisters Health System, Huawei HG532 routers, Iannuzzi Manetta & Co, IMI plc, InterCon Construction, International AIDS Vaccine Initiative, IntraSystems, IPany VPN, Israel Police Systems, Ivanti Avalanche, Ivanti Endpoint Manager, Jefferson School District, Juniper VPN gateways, Kafene, Inc, Kenwood DMX958XR, Kenwood IVI, Kenya’s Business Registration Service, 12,000+ KerioControl firewalls, KraftCPAs, LandAirSea, Laravel Voyager, LCPtracker, Inc, Le Coq Sportif Columbia, Let’s Secure Insurance Brokers Pvt Ltd, LifeBridge Health, Lightning AI, Logsign Unified SecOps, Lucent Health, Magento, Malaysia’s National Tuberculosis Registry, Marina Family Medical, Matagorda County, MedSave Health Insurance, Microsoft Edge, Microsoft Office Word, Microsoft Outlook, Microsoft Windows Installer Service, 13,000 MikroTik routers, Mintty Sixel, Mission Bank, Mity, Inc, Mizuno USA, Mongoose, Moniepoint, Mortgage Investors Group, MSI, NASAMS, Nash County Public Schools, Netgear WiFi routers, New York Blood Center, NI Vision Builder, NoMachine, NorthBay Health, Nulled.to, OneBlood, OnePoint Patient Care, OpenAI ChatGPT, OpenMRS, Oppo, OrthoMinds, Otelier, OU Medicine, over 660,000 Rsync servers, Oxfam Hong Kong, O’Connor Corporation, Palo Alto firewalls, Parallels Desktop, PDF-XChange Editor, PFS Investments, Phemex, Philippines National Bureau of Investigation, Phoenix Contact CHARX SEC-3150, Planet Technology WGS-804HPT, PoinCampus, Portola Valley School District, PowerSchool Group LLC, Puroland, QNAP NAS, Ramona Unified School District, Rebound Orthopedics & Neurosurgery, Regence BlueShield, Republic of Georgia, Rhode Island Health Information Exchange, River Region Cardiology, RM Group of Education, Rochester City School District, Salinas City Elementary School District, San Francisco-Marin Food Bank, Sanrio Entertainment, Sante PACS Server, Santee School District, SAP NetWeaver, Scholastic, Self Esteem Brands, LLC, Siemens Tecnomatix, SimpleHelp RMM, SkilloVilla, Smiths Group, SonicWall SMA1000, Sony IVI, Sony XAV-AX8500, South African Weather Service, Speedio, Spring River Mental Health & Wellness, Square Medical Group, Stark AeroSpace, Sterling Bank, Subaru’s Starlink service, SuperDraft, the Taliban, TalkTalk, Tata Technologies, TD Bank, TeamViewer, Telefónica, Tesla Wall Connector, Texas Health and Human Services, Texas Tech University Health Sciences Center, The O’farrell Charter School, The Reshaping and Nutritional Company LLC, Thermomix Recipe World Forum, Tokio Marine HCC, Tornillo Independent School District, Trump Hotels, Tycon Medical Systems, Ubiquiti charger, UEFI, UFCW Local 135, University Diagnostic Medical Imaging, University of Notre Dame, Upper Canada District School Board, Valio, Valley News Live, Veeam, VMware Avi Load Balancer, VSCode SSH Agent, W3 Total Cache, Wacom, Wavlink AC3000, Welhof, Westend Dental, Wetaskiwin Regional Public Schools, WhoDB, Willow Pays, WinZip, Wolf Haldenstein, WOLFBOX EV charger, WOLFBOX Level 2 EV Charger, WordPress ASE Plugin, Ya-Moon, Yazoo Valley Electric Power Association, YesWiki, York Region District School Board, Young Consulting LLC, Youthmanual, Yubico pam-u2f, ZAR rehab clinics, Zendesk, Zimbra, Zyxel CPE routers, and Zyxel USG Flex and ATP firewalls, have reported hacking or compromises this month.

Bitbucket, Bohemia Interactive (DayZ and Arma Reforger), Cloudflare’s R2 object storage, Conduent, Garmin GPS watches, GitHub, Lee Enterprises, Microsoft 365, and PlayStation Network have suffered from outages this month.

Last months updates broke Microsoft 365 on Windows Server OS, “New” Outlook, Outlook email composition, Outlook search, USB audio drivers, Windows Activation, and Windows Server 2022.

Microsoft is now force-installing “new” Outlook (“Outlook Fred” for those in the know). Recently, Microsoft has been changing the management methods to prevent installation faster than they release updates to the software or tell their customers of the new policy changes, making it an administrative nightmare. I figure it will be either a class-action lawsuit, a federal (or EU) racketeering case, or an enterprise-wide wake-up to switch to Thunderbird that will finally get Microsoft to (briefly) start respecting their customers that have (oft repeatedly) expressly signalled their desire to opt out of this crap.

Microsoft is saying they’re going to stop supporting installing updates for Office apps on Windows 10 after it reaches end-of-life in October. This is probably BS, since they’ve never prevented installing Office updates on previous operating systems when they reached end-of-life, but you should switch from Windows 10 by then for other reasons anyway.

This doesn’t bode well for Let’s Secure Insurance. Ouch.

A year after announcing that it would be imposing a new UEFI signature and mere months before mandatory enforcement, Microsoft has finally released a script to create media that can boot using the new requirements.

Amazon has (finally) improved the default settings for Redshift to reduce the number of data leaks using their platforms.

The FTC has ordered GM to stop selling OnStar customer data (such as precise geolocation and driving behavior) without obtaining express consent.

In a surprise to literally nobody, security researchers learned that if you install bad things on your device, bad things can happen!

Now for the good news:

A lawsuit against automatic license plate readers is allowed to proceed.

Brave now allows you to inject custom JavaScript to tweak websites without an extension. 🙂  This comes only weeks after adding the ability to Rerank websites in the Brave Search engine.

Most importantly: Ross Ulbricht is free.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is not that bad this month. The typical computer should see roughly 3.5 GB in updates today. Let’s get started.

Microsoft released 41 updates to address 67 vulnerabilities in Active Directory Domain Services, Azure Network Watcher, Microsoft AutoUpdate (MAU), Microsoft Digest Authentication, Microsoft Dynamics 365 Sales, Microsoft Edge (Chromium-based), Microsoft Edge for iOS and Android, Microsoft High Performance Compute Pack (HPC) Linux Node Agent, Microsoft Office, Microsoft Office Excel, Microsoft Office SharePoint, Microsoft PC Manager, Microsoft Streaming Service, Microsoft Surface, Microsoft Windows, Open Source Software, Outlook for Android, Visual Studio, Visual Studio Code, Windows Ancillary Function Driver for WinSock, Windows CoreMessaging, Windows DHCP Client, Windows DHCP Server, Windows Disk Cleanup Tool, Windows DWM Core Library, Windows Installer, Windows Internet Connection Sharing (ICS), Windows Kerberos, Windows Kernel, Windows LDAP, Windows Message Queuing, Windows NTLM, Windows Remote Desktop Services, Windows Resilient File System (ReFS) Deduplication Service, Windows Routing and Remote Access Service (RRAS), Windows Setup Files Cleanup, Windows Storage, Windows Telephony Server, Windows Telephony Service, Windows Update Stack, Windows Win32 Kernel Subsystem, and MSRT. This includes security updates. A reboot is required.

Oracle released 301 security updates this quarter to address vulnerabilities in 109 applications.

Apple released updates for GarageBand 10.4.12, iOS 18.3, iOS 18.3.1, iPadOS 17.7.4, iPadOS 17.7.5, iPadOS 18.3, iPadOS 18.3.1, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, Safari 18.3, tvOS 18.3, visionOS 2.3, and watchOS 11.3. This includes security updates. Use Apple Software Update to install the most current versions.

iOS 18.3 and 18.3.1 are security updates. Use Settings, General, Software Update to install the most current update.

iPadOS 17.7.4, 17.7.5, 18.3 and 18.3.1 are security updates. Use Settings, General, Software Update to install the most current update.

watchOS 11.3.1 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 18.3 is a security update. Use System, Software Update to install the most current version.

visionOS 2.3.1 is a security update. Use System, Software Update to install the most current version.

Google ChromeOS 132.0.6834.98 and Google ChromeOS LTS 126.0.6478.264 are security updates. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Sequoia (15.x) means that macOS Monterey (12.x) and older are no longer supported. If you can not install at least macOS Ventura (13) on your Mac then you should immediately remove your device from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current — and final — release of the Windows 10 (v22H2) is very large so will take a long time to download on slower connections. All non-LTS versions of Windows 10 other than v22H2 are now out of support, upgrade to v22H2 now. If you aren’t sure whether you are using LTS, you aren’t. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v24H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is now stable and can be upgraded to if your hardware supports it. If not, switch to Linux (Mint is nice) or replace your computer.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with a SaferPC Subscription and we will install updates each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Epson ET-2750 2.71.00 doesn’t provide a change log so should be treated as a security update.
https://epson.com/Support/Printers/All-In-Ones/ET-Series/Epson-ET-2750/s/SPT_C11CG22201

Epson ET-3760 2.68.02 doesn’t provide a change log so should be treated as a security update.
https://epson.com/Support/Printers/All-In-Ones/ET-Series/Epson-ET-3760/s/SPT_C11CG20203

Epson ET-3850 3.01 doesn’t provide a change log so should be treated as a security update.
https://epson.com/Support/Printers/All-In-Ones/ET-Series/Epson-ET-3850/s/SPT_C11CJ61201

Epson ET-4800 3.05 doesn’t provide a change log so should be treated as a security update.
https://epson.com/Support/Printers/All-In-Ones/ET-Series/Epson-ET-4800/s/SPT_C11CJ65201

Epson ET-5880 3.04.00 doesn’t provide a change log so should be treated as a security update.
https://epson.com/Support/Printers/All-In-Ones/ET-Series/Epson-ET-5880/s/SPT_C11CJ28201

UniFi Network Server 9.0.114 resolves over a dozen bugs and improves Zone controls. This is not a security update.
https://www.ui.com/download/releases/network-server

VIISAN OfficeCam 7.2.6.0 doesn’t provide a change log so should be treated as a security update.
https://www.viisan.com/en/download/type1.html

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.75.175 is a security update.
https://brave.com/

Google Chrome 133.0.6943.53 is a security update.
https://www.google.com/chrome/

Firefox 135.0 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Firefox ESR 128.7.0 is a security update.
https://www.mozilla.org/en-US/firefox/organizations/all/

Vivaldi 7.1.3570.48 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Mailspring 1.15.1 resolves several bugs. This is not a security update.
https://getmailspring.com/

Spark 3.20.4 resolves several bugs. This is not a security update.
https://sparkmailapp.com/

Thunderbird 128.7.0 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 9.0.2 resolves several bugs. This is not a security update.
https://anydesk.com/en/downloads

curl 8.12.0 is a security update.
https://curl.haxx.se/windows/

Discord February 3, 2025 adds several new performance improvements and privacy controls, as well as cosmetic and stability improvements. This is not a security update.
https://discord.com/download

Dropbox 217.4.4417 doesn’t provide a detailed change log so should be treated as a security update.
https://www.dropbox.com/

FreeFileSync 14.0 adds dark mode support, improves cosmetics and resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Google Drive 104.0 is a security update.
https://drive.google.com/start

Grocy Desktop 2.12.1 updates the Grocy release and fixes dependencies. This is not a security update.
https://github.com/grocy/grocy-desktop

Microsoft Teams 1.8.00.1362 adds several new management and organizational features. This is not a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 30.0.5 resolves dozens of bugs. This should be treated as a security update.
https://nextcloud.com/

PuTTY 0.83 resolves several bugs. This is not a security update.
https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html

Signal 7.41.0 resolves several bugs. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 7.32.3 improves organization. This is not a security update.
https://signal.org/android/apk/

Technitium DNS Server 13.4.1 should be treated as a security update.
https://technitium.com/dns/

Telegram 5.10.7 resolves several bugs. This is not a security update.
https://telegram.org/

Zoom 6.3.6.56144 adds a “new and improved” sidebar and resolves several bugs. This is not a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

3tene 4.0.13 improves rigging motions. This is not a security update.
https://en.3tene.com/

Grayjay 281 resolves compatibility issues. This is not a security update.
https://grayjay.app/index.html

KaraFun Player 3.4.6 improves stability and performance, ARM compatibility, and resolves several bugs. This is not a security update.
https://www.karafun.com/karaoke-windows/

Kodi 21.2 resolves dozens of bugs. This is a security update.
https://kodi.tv/

Plex Desktop 1.107.2.300 resolves a compatibility bug. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Home Theater 1.70.1.303 updates libraries and now improves privacy on Linux. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Game Updates

These are unlikely to be of interest to most people.

Minecraft Server (Bedrock) 1.21.60.10 doesn’t provide a change log so should be treated as a security update.
https://www.minecraft.net/en-us/download/server/bedrock

PS5 2025.115 improves performance and usability. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

Steam 2025.01.28 resolves several bugs. This is not a security update.
https://store.steampowered.com/news/app/593110

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Commerce 2.4.8-beta2, 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 1.5.1, 1.4.2-p4, 1.3.5-p9, 1.3.4-p11, 1.3.3-p12, 2.4.8-beta2, 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12 are security updates.
https://helpx.adobe.com/security/products/magento/apsb25-08.html

Adobe Illustrator 28.7.4 and 29.2.1 are security updates.
https://helpx.adobe.com/security/products/illustrator/apsb25-11.html

Adobe InCopy 19.5.2 and 20.1 are security updates.
https://helpx.adobe.com/security/products/incopy/apsb25-10.html

Adobe InDesign 19.5.2 and 20.1 are security updates.
https://helpx.adobe.com/security/products/indesign/apsb25-01.html

Adobe Photoshop Elements 2025.1 is a security update.
https://helpx.adobe.com/security/products/photoshop_elements/apsb25-13.html

Adobe Substance 3D Designer 14.1 is a security update.
https://helpx.adobe.com/security/products/substance3d_designer/apsb25-12.html

Adobe Reader DC 24.005.20399 resolves several crash bugs. This is not a security update.
https://get.adobe.com/reader

Adobe Substance 3D Stager 3.1.1 is a security update.
https://helpx.adobe.com/security/products/substance3d_stager/apsb25-09.html

Artweaver 8.0.2 resolves several bugs. This is not a security update.
https://www.artweaver.de/

Calibre 7.25.0 resolves several bugs and improves compatibility. This is not a security update.
https://calibre-ebook.com/

Columns++ 1.1.5 improves compatibility. This is not a security update.
https://github.com/Coises/ColumnsPlusPlus

Krita 5.2.9 massively improves text support. This is not a security update.
https://krita.org/en/download/

LibreOffice Fresh 25.2.0 resolves almost 300 bugs. This is a security update. Please do not use the “Fresh” line – use the stable release instead.
https://www.libreoffice.org/

Manager 25.2.9.2075 improves inventory controls. This is not a security update.
https://www.manager.io/

Notepad++ 8.7.7 resolves several bugs. This is not a security update.
https://notepad-plus-plus.org/

Paint.net 5.1.3 resolves over a dozen bugs. This is not a security update.
https://www.getpaint.net/

PDF-XChange Editor 10.5.1.394 improves cosmetics and resolves over a dozen bugs. This is not a security update.
https://www.pdf-xchange.com/product/pdf-xchange-editor

Operating System Updates

These are for specific Linux flavors and alternative operating systems and, sadly, are unlikely to be of interest to most people.

iOS 18.3.1 is a security update. Use Settings, General, Software Update to get the most current version.

iPadOS 17.7.5 and iPadOS 18.3.1 are security updates. Use Settings, General, Software Update to get the most current version.

macOS 15.3.1 is a security update. Use Settings, General, Software Update to get the most current version.

Tails 6.12 is a security update.
https://tails.net/install/download/index.en.html

tvOS 18.2.1 and tvOS 18.3 are security updates. Use Settings, General, Software Update to get the most current version.

watchOS 11.3.1 is a security update. Use the Watch app from your iPhone to install the current version.

Security Software Updates

One or more of these is likely to be of interest to most people.

.NET Runtime 9.0.1 is a security update.
https://dotnet.microsoft.com/en-us/download/dotnet

Java 8u441 is a security update.
https://www.java.com/en/download/manual.jsp

MalwareBytes Desktop Security 5.2.6.163 resolves a quarantine bug. This should be treated as a security update.
https://www.malwarebytes.org/antimalware/

ProtonVPN 3.5.1 improves stability and performance. This is not a security update.
https://github.com/ProtonVPN/win-app/releases/latest

RogueKiller 16.0.2 resolves several bugs. This is not a security update.
https://www.adlice.com/download/roguekiller/

Stinger 13.0.0.283 adds support for new detections. This is not a security update.
https://www.mcafee.com/us/downloads/free-tools/stinger.aspx

SuperAntiSpyware 10.0.1272 adds a new Browser Protection feature and resolves several bugs. This should be treated as a security update.
https://www.superantispyware.com/download.html

Windows Defender Offline 20250119 doesn’t provide a change log so should be treated as a security update.
https://windows.microsoft.com/en-us/windows/what-is-windows-defender-offline

Wireless Network Watcher 2.42 updates the internal MAC addresses database. This is not a security update.
https://www.nirsoft.net/utils/wireless_network_watcher.html

Capture Updates

These are unlikely to be of interest to most people.

Open Broadcaster Software 31.0.1 resolves several crash and stability bugs. This is not a security update.
https://obsproject.com/

SnagIt 24.3.2 is a security update.
https://www.techsmith.com/screen-capture.html

VideoCacheView 3.11 improves support for newer Chrome (v132+) cache structure. This is not a security update.
https://www.nirsoft.net/utils/video_cache_view.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 13.0.3.5 adds support for MP4/MKV AV1 output, improved hardware acceleration and resolves an audio quality bug. This is not a security update.
https://www.dvdfab.cn/download.htm

FFmpeg 20250204 resolves an SVT-AV1 API compatibility issue. This is not a security update.
https://ffmpeg.org/ffmpeg.html

IsoBuster 5.5.2 resolves compatibility issues with CD-i and macOS generated media, and special characters in file and folder names. This is not a security update.
https://www.isobuster.com/download.php

MakeMKV 1.17.9 changes only the version number. This is not a security update.
https://www.makemkv.com/download/

PDF Creator 5.3.3 resolves several bugs. This is not a security update.
https://www.pdfforge.org/pdfcreator

StreamFab 6.2.2.0 improves compatibility. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

UniFab 3.0.0.5 adds Colorizer support and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Utility Updates

These are unlikely to be of interest to most people.

1Password 8.10.60 resolves several bugs. This is not a security update.
https://1password.com/downloads/

Beyond Compare 5.0.5.30614 updates libraries and resolves several bugs. This is not a security update.
https://www.scootersoftware.com/download

Bitwarden 2025.1.4 now imposes 2FA for new sessions and unknown locations, adds ability to generate SSH keys, and resolves several bugs. This is not a security update.
https://bitwarden.com/

CCleaner 6.32.11432 resolves several bugs. This is not a security update.
https://www.ccleaner.com/

CPU-Z Installer 2.14 adds support for newer hardware and resolves a cosmetic bug. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

Cygwin 3.5.7 resolves several bugs. This is not a security update.
https://cygwin.com/

Dell OS Recovery Tool 2.4.2.2193 doesn’t provide a change log so should be treated as a security update.
https://www.dell.com/support/home/uk/en/ukbsdt1/drivers/osiso/recoverytool

DesktopOK 11.57 improves uninstall and automatic update. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

dnGrep 4.3.3.0 updates libraries, adds several new features (Show Replacements, Minimize & Restore, Replace dialog layout) and updates translations. This is a security update.
https://dngrep.github.io/

GoodSync 12.8.2 adds a new @file filter, improves compatibility and rearranges job options. This is not a security update.
https://www.goodsync.com/

GUIPropView 1.31 adds several new columns to the display. This is not a security update.
https://www.nirsoft.net/utils/gui_prop_view.html

Homedale 2.16 adds a Japanese translation. This is not a security update.
https://www.the-sz.com/products/homedale/

HWMonitor 1.56 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/hwmonitor.html

LessMSI 2.5.0 adds ability to change languages in the GUI. This is not a security update.
https://lessmsi.activescott.com/

ManageWirelessNetworks 1.15 adds dark mode support. This is not a security update.
https://www.nirsoft.net/utils/manage_wireless_networks.html

NTLite 2025.01.10293 modifies more than a dozen Components features and resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

OSForensics 11.1.1001 resolves several bugs. This should be treated as a security update.
https://www.osforensics.com/download.html

osquery 5.15.0 resolves several bugs and improves data collection and display. This is not a security update.
https://osquery.io/downloads

PowerToys 0.88.0 updates libraries and resolves several bugs. This is a security update.
https://github.com/microsoft/PowerToys/releases/latest

PSAppDeploy 4.0.5 resolves dozens of bugs. This is not a security update.
https://psappdeploytoolkit.com/

TeamViewer 15.62.4 is a security update.
https://www.teamviewer.com/en-us/download/windows/

TraceRouteOK 3.46 improves uninstall and automatic update. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/TraceRouteOK

Ventoy 1.1.01 adds native remounting capability to support all Linux distros and resolves a couple bugs. This is not a security update.
https://www.ventoy.net/en/index.html

WakeMeOnLan 1.92 updates the internal MAC addresses database. This is not a security update.
https://www.nirsoft.net/utils/wake_on_lan.html

WinScan2PDF 9.25 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

WizTree 4.24 adds several administrative features and cosmetic improvements. This is not a security update.
https://www.diskanalyzer.com/

Developer Updates

These are unlikely to be of interest to most people.

AutoHotkey 2.0.19 resolves several bugs. This is a security update.
https://www.autohotkey.com/download/

GDevelop 5.5.224 improves cosmetics and resolves several bugs. This is not a security update.
https://gdevelop.io/download

GitHub Desktop 3.4.16 resolves several bugs. This is not a security update.
https://desktop.github.com/

Go 1.23.6 is a security update.
https://go.dev/

MySQL ConnectorNet 9.2.0 resolves several bugs. This should be treated as a security update.
https://dev.mysql.com/downloads/connector/net/

Node.js 18.20.6 is a security update.
https://nodejs.org/en/

Node.js 20.18.3 is a security update.
https://nodejs.org/en/

Node.js 22.14.0 is a security update.
https://nodejs.org/en/

Node.js 23.7.0 is a security update.
https://nodejs.org/en/

Python 3.13.2 is a security update.
https://www.python.org/downloads/windows/

SQLite 3.49.0 resolves several bugs and improves performance. This is not a security update.
https://www.sqlite.org/download.html

Visual Studio Code 1.97.1 is a security update.
https://code.visualstudio.com/

WinMerge 2.16.46 resolves several bugs. This is not a security update.
https://winmerge.org/

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 7.1.6 adds support for Linux kernel 6.13 and resolves dozens of bugs. This is not a security update.
https://www.virtualbox.org/wiki/Downloads

Web Package Updates

These are likely to be of interest only to web developers.

Invision Community 4.7.20 adds Postmark, Bluesky and Backblaze B2 support. This is not a security update.
https://invisioncommunity.com/

Grocy 4.4.1 adds support for Open Food Facts barcode lookup and resolves several bugs. This is not a security update.
https://github.com/grocy/grocy

MailEnable 10.51 is a security update.
https://www.mailenable.com/

ownCloud Client 5.3.2.15463 is a security update.
https://owncloud.com/desktop-app/

phpMyAdmin 5.2.2 is a security update.
https://www.phpmyadmin.net/

WordPress 6.7.2 resolves 35 bugs. This is not a security update.
https://wordpress.org/

Really Simple CAPTCHA 2.4 improves hash strength and compatibility. This is not a security update.
https://wordpress.org/extend/plugins/really-simple-captcha/

Sucuri Security 1.9.8 adds CORS configuration. This is not a security update.
https://wordpress.org/extend/plugins/sucuri-scanner/

WP Cerber Security 9.6.6 resolves several bugs. This is not a security update.
https://wpcerber.com/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/