Updates 2019-07-09

Hi, Folks!

Today is Patch Tuesday for July 2019 and it’s one of the smallest we’ve seen in a while.

The typical computer should see roughly 1.3 GB in updates today. Let’s get started.

Microsoft released updates for Windows, .NET, Edge, Internet Explorer, Flash, and MSRT (~2 GB). This includes security updates. A reboot is required.

Apple released updates for AirPort Base Station Firmware Update 7.8.1 (802.11n). This is a security update. Use Apple Software Update to install the most current versions.

Google Chrome OS 75.0.3770.102 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Adobe Flash Player 32.0.0.223 is a security update.
Win: https://12pd.com/click?flash
Win: https://12pd.com/click?flashie
Mac: https://12pd.com/click?flashmac

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The now-current release of the Windows 10 (1903) will cause your computer to feel unusually slow until it is installed. This is a side-effect of the Windows 10 upgrade cycle, which pushes out 3-6 GB through Windows update to get you to the latest Windows 10 release every 6 months. If you don’t let it finish and you’re on a slow connection, it will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Intel Driver and Support Assistant 19.6.26 resolves several bugs. This is not a security update.
https://www.intel.com/p/en_US/support/detect

nVidia 431.36 adds support for newer hardware, improves compatibility with Windows 10 v1903, and resolves several bugs. This is not a security update.
https://www.nvidia.com/Download/index.aspx?lang=en-us

Browser Updates

One or more of these are likely to be of interest to everyone.

Google Chrome 75.0.3770.100 is a security update. Use Menu, Help, About to install the most current version.

Firefox 68.0 is a security update. This version adds several privacy and security features that improve reliability and performance. Use Menu, Help, About to install the most current version.

Firefox ESR 60.8.0 is a security update. Use Menu, Help, About to install the most current version.

Vivaldi 2.6.1566.44 is a security update. Use Menu, Help, About to install the most current version.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Mailspring 1.6.3 resolves several bugs. This is a security update.
https://getmailspring.com/

NK2Edit 3.40 improves the replace operation to replace values in all fields for a record. This is not a security update.
https://www.nirsoft.net/utils/outlook_nk2_edit.html

OutlookAttachView 3.20 adds option to generate hashes for attachments. This is not a security update.
https://www.nirsoft.net/utils/outlook_attachment.html

Thunderbird 60.8.0 is a security update. Use Menu, Help, About to install the most current version.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

Trillian 6.2.0.10 adds a dark theme for settings, improves display pruning, and resolves several bugs. This is not a security update.
https://www.trillian.im/

BrowsingHistoryView 2.20 adds support for Chromium-based Edge. This is not a security update.
https://www.nirsoft.net/utils/browsing_history_view.html

FileZilla Client 3.43.0 is a security update.
https://filezilla-project.org/

FreeFileSync 10.13 resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

MaxMind GeoIP 201907 is a data refresh.
https://dev.maxmind.com/geoip/

Technitium DNS Server 4.0 updates UI, stats manager, adds DHCP server, and resolves several bugs. This is not a security update.
https://technitium.com/dns/

Media Updates

These are unlikely to be of interest to most people.

FastStone Viewer 7.3 resolves a copy and paste bug. This is not a security update.
https://www.faststone.org/FSViewerDetail.htm

VLC Media Player 3.0.7.1 updates libraries and resolves a couple bugs. This is not a security update.
https://www.videolan.org/vlc/

Game Updates

These are unlikely to be of interest to most people.

RetroPie 4.5 adds support for newer hardware, adds themes, updates libraries, adds drivers and improves compatibility. Be aware that manual downgrade of the kernel may be necessary if you require composite video. This is not a security update.
https://retropie.org.uk/

Office Updates

One or more of these are likely to be of interest to most people.

Atom 1.38.2 resolves minor bugs. This is not a security update.
https://atom.io/

LibreOffice Fresh 6.2.5 resolves over a hundred bugs. This is not a security update.
https://www.libreoffice.org/

Notepad++ 7.7.1 resolves several bugs. This is not a security update.
https://12pd.com/click?npp

Adobe Reader DC 19.012.20035 resolves several bugs. This is not a security update.
https://get.adobe.com/reader

Adobe Dreamweaver 19.0.0.11193 is a security update.
https://helpx.adobe.com/download-install/kb/creative-cloud-apps-download.html

Adobe Experience Manager 6.5 is a security update.
https://helpx.adobe.com/experience-manager/aem-releases-updates.html#65

Adobe Bridge CC 9.1 is a security update.
https://www.adobe.com/products/bridge.html

Security Software Updates

One or more of these is likely to be of interest to most people.

Gpg4win 3.1.9 resolves several bugs. This is not a security update.
https://www.gpg4win.org/download.html

RogueKiller 13.3.1 resolves several bugs. This is not a security update.
https://www.adlice.com/softwares/roguekiller/

Converter Updates

These are unlikely to be of interest to most people.

CDex 2.19 improves Windows 10 v1903 compatibility. This is not a security update.
http://cdex.mu/?q=download

DVDFab 11.0.3.8 adds support for new encodings, GUI improvements, and adds support for new hardware and export formats. This is not a security update.
https://www.dvdfab.cn/download.htm

IsoBuster 4.4 adds support for new hardware and media formats, resolves several bugs, and adds support for many commands. This is not a security update.
https://www.isobuster.com/download.php

MakeMKV 1.14.4 adds support for new encodings, resolves bugs, and improves performance. This is not a security update.
https://12pd.com/click?makemkv

Utility Updates

These are unlikely to be of interest to most people.

NTLite 1.8.0.7046 resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

1Password for Mac 7.3.1 resolves many bugs and improves utility of 1Password mini. This is not a security update.
https://1password.com/downloads/mac/

ControlMyMonitor 1.16 adds support for returning VCP values from the command line. This is not a security update.
https://www.nirsoft.net/utils/control_my_monitor.html

Autoruns 13.96 adds support for user Shell folder redirections. This is a security update.
https://live.sysinternals.com/

Handle 4.22 fixes a race condition in the driver that could lead to a crash. This is a security update.
https://live.sysinternals.com/

Notmyfault 4.20 now includes a flag that makes it wait until an event named Notmyfault is signaled before proceeding to crash or leak. This is not a security update.
https://live.sysinternals.com/

IPInfoOffline 1.55 adds support for IPv6 with GeoLite. This is not a security update.
https://www.nirsoft.net/utils/ip_country_info_offline.html

Process Explorer 16.26 is a security update.
https://live.sysinternals.com/

RAMMap 1.52 doesn’t provide a changelog, so should be treated as a security update.
https://live.sysinternals.com/

Sysmon 10.01 adds DNS query logging, reports OriginalFileName in process create and load image events, adds ImageName to named pipe events, logs pico process creates and terminates, and fixes several bugs. This is a security update.
https://live.sysinternals.com/

VMMap 3.26 fixes a bug in 64-bit CLR heap reporting. This is not a security update.
https://live.sysinternals.com/

CurrPorts 2.60 adds support for GeoLite2 City and Country databases. This is not a security update.
https://www.nirsoft.net/utils/cports.html

DesktopOK 6.37 improves compatibility with Windows 10 v1903. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

Drive Snapshot 1.47 adds support for recent operating systems, public-key encryption, and eject from CLI. This should be treated as a security update.
http://www.drivesnapshot.de/en/

GoodSync 10.10.0 resolves several bugs. This is not a security update.
https://12pd.com/click?goodsync

IsMyHdOK 1.77 resolves code signing bug, improves compatibility with Windows 10 v1903. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/IsMyHdOK

LessMSI 1.6.91 resolves a startup crash. This is not a security update.
http://lessmsi.activescott.com/

LogMeIn 4.1.0.12700/4.1.0.7151 adds av support for server operating systems, resolves several bugs. This is not a security update.
https://secure.logmein.com/

NetworkInterfacesView 1.15 adds /RunAsAdmin option, interface speed column, and open in regedit option. This is not a security update.
https://www.nirsoft.net/utils/network_interfaces.html

NirCmd 2.85 improves reliability of runinteractive and runinteractivecmd, resolves consolewrite bug. This is not a security update.
https://www.nirsoft.net/utils/nircmd.html

PointerStick 3.61 resolves code signing bug, improves compatibility with Windows 10 v1903. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

SimpleWMIView 1.37 adds ability to enumerate full namespace tree under elevation, adds support for displaying 8-bit and 16-bit integer arrays. This is not a security update.
https://www.nirsoft.net/utils/simple_wmi_view.html

TcpLogView 1.32 adds support for GeoLite2 City and Country databases. This is not a security update.
https://www.nirsoft.net/utils/tcp_log_view.html

TestDisk Win 7.1 adds quit confirmation, resolves scripting bug. This is not a security update.
http://www.cgsecurity.org/wiki/TestDisk_Download

WinScan2PDF 4.84 resolves code signing bug, improves compatibility with Windows 10 v1903. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

WSUS Offline 11.7.3 resolves several bugs. This is not a security update.
http://download.wsusoffline.net/

Developer Updates

These are unlikely to be of interest to most people.

Inno Setup 6.0.2 adds {sysnative}, wizard improvements, and cosmetic fixes. This is not a security update.
http://www.jrsoftware.org/isdl.php

Node.js 12.6.0 resolves dozens of bugs. This is not a security update.
https://nodejs.org/en/

Visual Studio Code 1.36 adds several new cosmetic and functional options, and Java package prep. This is not a security update.
https://code.visualstudio.com/

Virtual Machine Updates

These are unlikely to be of interest to most people.

DOSBox 0.74-3 is a security update.
https://www.dosbox.com/

Web Package Updates

These are likely to be of interest only to web developers.

Joomla 3.9.9 is a security update.
https://www.joomla.org/

phpList 3.4.3 resolves several bugs. This is not a security update.
http://www.phplist.com/download

Drupal 8.7.4 resolves dozens of bugs. This is not a security update.
https://drupal.org/download

MailEnable 10.25 resolves several bugs. This is a security update.
https://www.mailenable.com/

TinyMCE 5.0.11 resolves several bugs. This is not a security update.
https://www.tiny.cloud/download/

Nextcloud Server 16.0.3 resolves several bugs. This is a security update.
https://nextcloud.com/

ScreenConnect 19.1.24566.7116 does not provide a changelog so should be treated as a security update.
https://www.screenconnect.com/Download

WordPress 5.2.2 resolves several bugs. This is not a security update.
https://wordpress.org/

myStickymenu 2.1.7 resolves a bug. This is not a security update.

Postie 1.9.37 resolves several bugs. This is not a security update.

Raw HTML 1.6.1 resolves a plugin conflict. This is not a security update.

NextScripts Social Networks Auto-Poster 4.3.8 resolves several bugs and adds %authorname% tag. This is not a security update.

WooCommerce 3.6.5 resolves several bugs. This is a security update.

WP Mail SMTP 1.5.0 adds support for Loco, resolves several bugs, and improves internationalization. This is not a security update.

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

 

Updates 2019-05-14

Hi, Folks!

Today is Patch Tuesday for May 2019.

This month was eventful.

Mozilla resolved the catastrophic end-of-extensions bug in Firefox that disabled all extensions worldwide for all Firefox users. From the rage and fear, you’d have thought the entire Internet was broken. While this event was disastrous for everyone who relies upon browser extensions for their daily lives (such as AdBlock), it was likely the single-most effective cleanup of malware in history.

Antivirus isn’t enough. According to reputable sources, a Russian hacking collective (Fxmsp) claims to have secured access to three leading antivirus companies.

According to the hacking collective, they worked tirelessly for the first quarter of 2019 to breach these companies and finally succeeded and obtained access to the companies’ internal networks.

The collective extracted sensitive source code from antivirus software, AI, and security plugins belonging to the three companies. Fxmsp also commented on the capabilities of the different companies’ software and assessed their efficiency.

Dell SupportAssist is probably the lowest-hanging fruit on your computer. An independent researcher was able to unwrap the Dell SupportAssist service and force install arbitrary software on networked devices using no more than a single DNS hijack and publicly-available “codes” that Dell uses to authenticate actions. Their design is roughly akin to taping the keys to your house on the front door. While you should, of course, remove SupportAssist, you should also treat this as a stark reminder of why you should never use untrusted networks.

Microsoft Office changed the EULA to their software, which triggered several different issues, including previously purchased software no longer working, new data sharing prompts and an unceasing series of popups for some users. Logging out of your Microsoft Account and back in resolves the issue for many, but others required registry hacks. Smooth move, MS.

Now back to our regularly scheduled program.

The typical computer should see roughly 1.3 GB in updates today. Let’s get started.

Microsoft released updates for Windows, .NET, Edge, Internet Explorer, Flash, and MSRT (~850 MB). This includes security updates. A reboot is required.

Apple released updates for macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, Safari 12.1.1, and Apple TV Software 7.3. This includes security updates. Use Apple Software Update to install the most current versions.

iOS 12.3 is a security update. Use Settings, General, Software Update to install the most current update.

watchOS 5.2.1 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 12.3 is a security update. Use System, Software Update to install the most current version.

Adobe AIR 32.0.0.125 is a security update.
Win: https://12pd.com/click?air
Mac: https://12pd.com/click?airmac

Adobe Flash Player 32.0.0.192 is a security update.
Win: https://12pd.com/click?flash
Win: https://12pd.com/click?flashie
Mac: https://12pd.com/click?flashmac

Fedora 30-1.2 is a major update improving compatibility, performance, and more. This build adds the optional Pantheon Desktop which will ease the transition of those coming from a macOS environment. Coupled with Darling it should now be much easier to leave Apple for Linux.
https://getfedora.org/en/workstation/download/

Google Chrome OS 74.0.3729.125 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The now-current release of the Windows 10 (1903) will cause your computer to feel unusually slow until it is installed. This is a side-effect of the Windows 10 upgrade cycle, which pushes out 3-6gb through Windows update to get you to the latest Windows 10 release every 6 months. If you don’t let it finish and you’re on a slow connection, it will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Display Driver Uninstaller 18.0.1.3 improves reliability. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

Intel Driver & Support Assistant 19.4.18 improves detection of updates, adds support for Windows 10 LTSB, and adds notifications. This is a security update.
https://www.intel.com/p/en_US/support/detect

nVidia 430.64 adds support for newer hardware, removes support for Kepler hardware, and resolves several bugs. This is a security update.
https://www.nvidia.com/Download/index.aspx?lang=en-us

Logitech SetPoint 6.69.126 resolves several bugs. This is not a security update.
https://support.logitech.com/en_us/software/setpoint

Browser Updates

One or more of these are likely to be of interest to everyone.

Google Chrome 74.0.3729.157 is a security update (and adds dark mode). Use Menu, Help, About to install the most current version.

Firefox 66.0.5 resolves the catastrophic end-of-extensions bug. Use Menu, Help, About to install the most current version.

Firefox ESR 60.6.3 resolves the catastrophic end-of-extensions bug. Use Menu, Help, About to install the most current version.

Iridium 2019.04.73.0 is a security update. Use Menu, Help, About to install the most current version.

Vivaldi 2.5.1525.41 resolves several bugs, adds new features, improves reliability and performance. This is a security update. Use Menu, Help, About to install the most current version.

Email Updates

One or more of these are likely to be of interest to everyone.

OutlookAttachView 3.16 adds a combobox to select folders to scan or skip. This is not a security update.
https://www.nirsoft.net/utils/outlook_attachment.html

Internet Updates

One or more of these are likely to be of interest to everyone.

Skype 8.44.0.41 adds message forwarding, provides additional view options, adds optional background blur, and adds event notifications. This is not a security update.
https://12pd.com/click?skype

DynDNS Updater 5.5.0 removes backend service reporting. This should be considered a security update.
https://www.dyndns.com/

Evernote 6.18.4.8489 adds several new shortcuts, resolves several bugs. This is not a security update.
https://www.evernote.com/

FileZilla Client 3.42.1 resolves several bugs, updates libraries, improves compatibility with macOS. This is a security update.
https://filezilla-project.org/

MaxMind GeoIP 201905 is a data refresh.
https://dev.maxmind.com/geoip/

Npcap 0.995 resolves several bugs. This is not a security update.
https://nmap.org/npcap/

WinSCP 5.15.1 resolves several bugs. This is not a security update.
https://winscp.net/eng/index.php

Game Updates

These are unlikely to be of interest to most people.

EA Origin 10.5.38.25027 resolves several bugs. This is not a security update.
https://www.origin.com/en-us/download

Steam 2019.05.01 resolves several bugs. This is not a security update.
https://www.steampowered.com/platform/update_history/index.php?skin=0&id=0

SteamOS 2.190 is a security update.
https://store.steampowered.com/steamos/download/?ver=custom

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Acrobat 19.012.20034 is a security update. Use Help, Check for Updates to get the most current version.

LibreOffice Still 6.1.6 is a security update.
https://www.libreoffice.org/

LibreOffice Fresh 6.2.3 resolves dozens of bugs. This is not a security update.
https://www.libreoffice.org/

Adobe DNG Converter 11.3 adds support for newer hardware. This is a security update.
https://helpx.adobe.com/photoshop/digital-negative.html

Atom 1.37.0 improves security and resolves several bugs. This should be treated as a security update.
https://atom.io/

Security Software Updates

One or more of these is likely to be of interest to most people.

Java 8u211 is a security update. If you are not sure you need Java (or don’t know the difference between Java and JavaScript), you’re better off removing Java than installing an update.
https://www.java.com/en/download/manual.jsp

RogueKiller 13.2.0 updates engine, resolves several bugs, adds signature automatic update to free version. This should be treated as a security update.
https://www.adlice.com/softwares/roguekiller/

Stinger 12.1.0.3168 adds support for new detections. This is a security update.
https://12pd.com/click?stinger

TDSSKiller 3.1.0.28 adds support for new detections. This is a security update.
https://support.kaspersky.com/viruses/utility#TDSSKiller

Converter Updates

These are unlikely to be of interest to most people.

CDex 2.17 resolves several bugs. This is not a security update.
http://cdex.mu/?q=download

DVDFab 11.0.2.9 adds support for new encodings and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/download.htm

FFmpeg 4.1.3 resolves several bugs. This is not a security update.
https://ffmpeg.org/ffmpeg.html

Utility Updates

These are unlikely to be of interest to most people.

1Password for Windows 7.3.684 resolves several bugs, adds cleanup, improves performance. This is not a security update.
https://1password.com/downloads/windows/

Bitcoin Core 0.18.0 resolves dozens of bugs, improves performance, reliability, and privacy, updates many features, and reduces dependency on OpenSSL. This should be treated as a security update.
https://bitcoin.org/en/download

BulkFileChanger 1.61 adds new command-line option. This is not a security update.
https://www.nirsoft.net/utils/bulk_file_changer.html

ControlMyMonitor 1.15 adds an option to prevent changing a value if it is current. This is not a security update.
https://www.nirsoft.net/utils/control_my_monitor.html

CurrPorts 2.55 adds ability to capture for an extended duration instead of capturing only a snapshot. This is not a security update.
https://www.nirsoft.net/utils/cports.html

Cygwin 3.0.7 adds support for a new locale and resolves a winsock bug. This is not a security update.
https://cygwin.com/

DesktopOK 6.16 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

FolderChangesView 2.27 adds option to include header in output. This is not a security update.
https://www.nirsoft.net/utils/folder_changes_view.html

GoodSync 10.9.32 resolves several bugs, updates libraries, and adds support for RealDisk. This is not a security update.
https://12pd.com/click?goodsync

ImageUSB 1.4.1003 resolves several bugs. This is not a security update.
https://www.osforensics.com/tools/write-usb-images.html

IsMyHdOK 1.66 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/IsMyHdOK

NetworkTrafficView 2.25 improves reliability and adds support for UDP. This is not a security update.
https://www.nirsoft.net/utils/network_traffic_view.html

NirCmd 2.83 adds runinteractive options. This is not a security update.
https://www.nirsoft.net/utils/nircmd.html

NTLite 1.7.6.6912 adds support for Windows 10 v1903, resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

OSFMount 3.0.1003 improves performance, resolves several bugs. This is not a security update.
https://www.osforensics.com/tools/mount-disk-images.html

PointerStick 3.52 resolves a startup bug. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

RegFileExport 1.11 resolves a large-value bug. This is not a security update.
https://www.nirsoft.net/utils/registry_file_offline_export.html

SimpleWMIView 1.36 adds an option to attempt elevation. This is not a security update.
https://www.nirsoft.net/utils/simple_wmi_view.html

Synergy 1.10.2 resolves several bugs. This should be treated as a security update.
https://symless.com/blog/synergy-1-10-2-finally-released

DebugView 4.90 doesn’t provide a changelog, so should be treated as a security update.
https://live.sysinternals.com/

RAMMap 1.52 doesn’t provide a changelog, so should be treated as a security update.
https://live.sysinternals.com/

TaskSchedulerView 1.50 adds options to control tasks from the command line. This is not a security update.
https://www.nirsoft.net/utils/task_scheduler_view.html

WifiChannelMonitor 1.59 resolves a displaymode bug. This is not a security update.
https://www.nirsoft.net/utils/wifi_channel_monitor.html

WifiInfoView 2.46 adds always on top and scanning options, and updates the MAC database. This is not a security update.
https://www.nirsoft.net/utils/wifi_information_view.html

WinScan2PDF 4.78 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

WSUS Offline 11.7 disables autorecall, updates libraries, improves detection. This is not a security update.
http://download.wsusoffline.net/

Developer Updates

These are unlikely to be of interest to most people.

Godot 3.1.1 is a security update.
https://godotengine.org/

MySQL 8.0.16 updates libraries, grant/revoke behavior, and resolves many bugs. This is a security update.
https://www.mysql.com/downloads/installer/

Node.js 12.2.0 resolves dozens of bugs, updates libraries, and adds and improves features. This is a security update.
https://nodejs.org/en/

SQLite 3.28.0 resolves several bugs, improves compatibility, and offers new language constructs. This is a security update.
https://www.sqlite.org/download.html

StrawberryPerl 5.28.2.1 updates core, modules, and libraries. This is a security update.
http://strawberryperl.com/

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 6.0.6-130049 resolves dozens of bugs. This should be treated as a security update.
https://www.virtualbox.org/wiki/Downloads

Web Package Updates

These are likely to be of interest only to web developers.

Joomla 3.9.6 is a security update.
https://www.joomla.org/

Drupal 8.7.1 is a security update.
https://drupal.org/download

Nextcloud Server 16.0.0 adds ACL support, Talk commands, and machine learning for security and productivity. This is a security update.
https://nextcloud.com/

ScreenConnect 19.0.23665.7058 adds several new features, cosmetics, dark mode, network information, improves auditing and more. This is not a security update.
https://www.screenconnect.com/Download

phpList 3.4.2 resolves several bugs. This is not a security update.
https://www.phplist.com/download

WordPress 5.2 improves self-diagnostics, accessibility, and more. This is not a security update.
https://wordpress.org/

Akismet 4.1.2 resolves bugs and improves compatibility. This is not a security update.

Autoptimize 2.5.0 adds lazyloading, and redesigns image optimization. This is not a security update.

BuddyPress 4.3.0 is a security update.

Custom Facebook Feed 2.9.1 resolves several bugs. This is not a security update.

Email Log 2.3.1 resolves a bug. This is not a security update.

myStickymenu 2.1.4 resolves several bugs. This is not a security update.

Postie 1.9.33 now assigns an author to all media items. This is not a security update.

Raw HTML 1.6 improves handling of raw objects. This is not a security update.

Redirection 4.2.3 resolves a bug. This is not a security update.

Register IPs 1.8.1 is a security update.

NextScripts Social Networks Auto-Poster 4.3.6 resolves several bugs, adds location and twitter handle support. This is not a security update.

Sucuri Security 1.8.21 adds several new diagnostic features and resolves several bugs. This is not a security update.

Theme My Login 7.0.14 improves compatibility. This is not a security update.

W3 Total Cache 0.9.7.4 resolves several bugs. This is a security update.

WooCommerce 3.6.2 resolves many bugs. This is a security update.

WPtouch 4.3.37 adds SMS sharing option. This is not a security update.

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2019-04-09

Hi, Folks!

Today is Patch Tuesday for April 2019. Windows 10 v1903 is just around the corner. Edge users will start getting it over the next few days, with the majority of Home users getting it near the end of the month. You can delay it by installing v1809 if you haven’t done so yet, which will grant you a 3 month reprieve. Today is also the last day of updates released for any Windows 10 version prior to v1803. If you’re running v1507-v1709 (and not running a long-term servicing build) then you should upgrade to v1809 ASAP.

The typical computer should see roughly 1.2 GB in updates today. Let’s get started.

Microsoft released updates for Windows, .NET, Edge, Internet Explorer, Flash, POSReady, and MSRT (~850 MB). This includes security updates. A reboot is required.

Apple released updates for macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4, iCloud for Windows 7.11, Xcode 10.2, and watchOS 5.2. This includes security updates. Use Apple Software Update to install the most current versions.

iOS 12.2 is a security update. Use Settings, General, Software Update to install the most current update.

watchOS 5.2 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 12.2 is a security update. Use System, Software Update to install the most current version.

Adobe AIR 32.0.0.116 is a security update.
Win: https://12pd.com/click?air
Mac: https://12pd.com/click?airmac

Adobe Flash Player 32.0.0.171 is a security update.
Win: https://12pd.com/click?flash
Win: https://12pd.com/click?flashie
Mac: https://12pd.com/click?flashmac

Google Chrome OS 73.0.3683.88 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The now-current release of the Windows 10 (1903) will cause your computer to feel unusually slow until it is installed. This is a side-effect of the Windows 10 upgrade cycle, which pushes out 3-6gb through Windows update to get you to the latest Windows 10 release every 6 months. If you don’t let it finish and you’re on a slow connection, it will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Seagull Scientific Driver 2019.1 adds support for over 115 new printer models, but installs a Seagull Scientific Certificate which might later be used for exploitation. This is not a security update.
https://www.seagullscientific.com/drivers/

Display Driver Uninstaller 18.0.1.1 resolves several bugs. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

Intel Driver & Support Assistant 19.3.12 adds support for newer hardware and resolves several bugs. This is not a security update.
https://www.intel.com/p/en_US/support/detect

Browser Updates

One or more of these are likely to be of interest to everyone.

Google Chrome 73.0.3683.103 resolves several bugs. This is not a security update. Use Menu, Help, About to install the most current version.

Firefox 66.0.2 resolves several stability and compatibility bugs. This version follows closely on the 66.0.1 security update. Use Menu, Help, About to install the most current version.

Firefox ESR 60.6.1 is a security update. Use Menu, Help, About to install the most current version.

Vivaldi 2.4.1488.36 resolves several bugs, adds many new features including GUI customization and stack management. This is a security update. Use Menu, Help, About to install the most current version.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Mailspring 1.6.1 resolves several bugs. This is not a security update.
https://getmailspring.com/

Thunderbird 60.6.1 is a security update. Use Menu, Help, About to install the most current version.

Internet Updates

One or more of these are likely to be of interest to everyone.

Skype 8.42.0.60
https://12pd.com/click?skype

FileZilla Client 3.41.2 is a security update.
https://filezilla-project.org/

MaxMind GeoIP 201904 is a data refresh.
https://dev.maxmind.com/geoip/

Npcap 0.992 resolves several bugs. This is not a security update.
https://nmap.org/npcap/

PuTTY 0.71 is a security update.
https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html

WGet 1.20.3 is a security update. However, this version breaks HTTPS so should be avoided for now.
https://eternallybored.org/misc/wget/

WinSCP 5.15 resolves several bugs and adds a dark mode. This is a security update.
https://winscp.net/eng/index.php

Line 9.4.0 adds chat capture. This is not a security update.
https://line.me/update

ZeroNet 0.6.5 resolves several bugs. This is not a security update.
https://zeronet.io/

Media Updates

These are unlikely to be of interest to most people.

iTunes 12.9.4 for Windows is a security update. Use Apple Software Update to install the most current version.

iCloud for Windows 7.11 is a security update. Use Apple Software Update to install the most current version.

CDBurnerXP 4.5.8.7042 resolves a burn speed bug on multiple copies. This is not a security update.
https://cdburnerxp.se/

FastStone Viewer 7.0 adds support for monitor color profiles, improves compatibility, and dual instance display option differences. This is a security update.
https://www.faststone.org/FSViewerDetail.htm

iTunes 12.9.4 is a security update.
https://www.apple.com/itunes/download/

Game Updates

These are unlikely to be of interest to most people.

EA Origin 10.5.36.23506 resolves several bugs. This is not a security update.
https://www.origin.com/en-us/download

PlayStation PS4 6.51 improves performance. This is not a security update.
https://www.playstation.com/en-us/support/system-updates/ps4/

SteamOS 2019-02-28 is a security update.
https://store.steampowered.com/steamos/download/?ver=custom

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Reader DC 19.010.20099 is a security update. Use Help, Check for Updates to install the most current version.

Atom 1.35.1 resolves a bug. This is not a security update.
https://atom.io/

Paint.net 4.1.6 resolves several bugs and improves performance. This is not a security update.
https://www.getpaint.net/

LibreOffice Fresh 6.2.2 resolves dozens of bugs. Remember that the Fresh branch is the LibreOffice Beta, so the Still (Stable) line should be used by most users.
https://www.libreoffice.org/

Artweaver 6.0.11 resolves several bugs. This is not a security update.
http://www.artweaver.de/

Notepad++ 7.6.6 resolves the file-change-detection nag on frequently updated files and adds GPG release signing.
https://12pd.com/click?npp

FrameMaker 2019.0.3 is a security update.
64-bit: https://supportdownloads.adobe.com/detail.jsp?ftpID=6645
32-bit: https://supportdownloads.adobe.com/detail.jsp?ftpID=6643

Adobe Bridge CC 9.0.3 is a security update.
https://helpx.adobe.com/security/products/bridge/apsb19-25.html

Adobe Experience Manager Forms 6.2.sp1-cfp15, 6.3.3.1, 6.4.2.0 are security updates.
https://helpx.adobe.com/security/products/aem-forms/apsb19-24.html

Adobe InDesign 14.0.2 is a security update.
https://helpx.adobe.com/security/products/indesign/apsb19-23.html

Adobe XD CC 17.0.12 is a security update.
https://helpx.adobe.com/security/products/xd/apsb19-22.html

Adobe Dreamweaver 19.1 is a security update.
https://helpx.adobe.com/security/products/dreamweaver/apsb19-21.html

Adobe Shockwave player 12.3.5.205 is a security update, however, it is officially end-of-life (EOL) as of today so your best option is to remove Shockwave from any and all devices.

Security Software Updates

One or more of these is likely to be of interest to most people.

DNSQuerySniffer 1.76 adds Quick Filter feature. This is not a security update.
https://www.nirsoft.net/utils/dns_query_sniffer.html

Gpg4win 3.1.7 is a security update.
https://www.gpg4win.org/download.html

RogueKiller 13.1.9 updates scanning engine and adds support for several new file types. This should be treated as a security update.
https://www.adlice.com/softwares/roguekiller/

Wireshark 3.0.1 resolves several security issues.
http://www.wireshark.org/

Stinger 12.1.0.3107 adds support for new detections. This is a security update.
https://12pd.com/click?stinger

Capture Updates

These are unlikely to be of interest to most people.

VideoCacheView 3.05 adds manual merge option. This is not a security update.
https://www.nirsoft.net/utils/video_cache_view.html

Converter Updates

These are unlikely to be of interest to most people.

CDex 2.16 resolves several bugs. This is not a security update.
http://cdex.mu/?q=download

DVDFab 11.0.2.3 resolves several bugs and adds support for new encodings. This is not a security update.
https://www.dvdfab.cn/download.htm

Utility Updates

These are unlikely to be of interest to most people.

NTLite 1.7.5.6842 resolves several bugs and adds new options. This is not a security update.
https://www.ntlite.com/download/

CPU-Z Installer 1.88 adds support for new hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

Cygwin 3.0.6 resolves several bugs. This is not a security update.
https://cygwin.com/

GoodSync 10.9.30 resolves several bugs. This is not a security update.
https://12pd.com/click?goodsync

HWMonitor 1.40 adds support for new hardware. This is not a security update.
https://www.cpuid.com/softwares/hwmonitor.html

NirCmd 2.82 improves High-DPI compatibility. This is not a security update.
https://www.nirsoft.net/utils/nircmd.html

OSFMount 3.0.1000 adds several new features. This is not a security update.
https://www.osforensics.com/tools/mount-disk-images.html

RoboForm 8.5.8 resolves several bugs. This is not a security update.
https://12pd.com/click?rf

Rufus 3.5 adds Windows ISO download, adds Windows To Go support, and resolves several bugs. This is not a security update.
https://rufus.ie/en_IE.html

USBDeview 2.80 resolves serial number CLI options. This is not a security update.
https://www.nirsoft.net/utils/usb_devices_view.html

WakeMeOnLan 1.84 updates the MAC database. This is not a security update.
https://www.nirsoft.net/utils/wake_on_lan.html

WinScan2PDF 4.77 improves stability. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

WSUS Offline 11.6.1 resolves several bugs. This is not a security update.
http://download.wsusoffline.net/

Developer Updates

These are unlikely to be of interest to most people.

AutoHotkey 1.1.30.03 resolves several bugs. This is not a security update.
https://www.autohotkey.com/download/

Godot 3.1 adds several new features and improves stability. This is not a security update.
https://godotengine.org/

Node.js 11.13.0 resolves several bugs. This is not a security update.
https://nodejs.org/en/

Redemption 5.20.0.5298 resolves several bugs. This is not a security update.
http://www.dimastr.com/redemption/

DB Browser for SQLite 3.11.2 resolves several bugs. This is not a security update.
https://sqlitebrowser.org/

Visual Studio Code 1.33 adds several new features. This is not a security update.
https://code.visualstudio.com/

WinMerge 2.16.2 resolves several bugs. This is not a security update.
http://winmerge.org/

Virtual Machine Updates

These are unlikely to be of interest to most people.

PPSSPP 1.8.0 doesn’t provide a changelog so should be treated as a security update.
https://ppsspp.org/downloads.html

VMware Player 15.0.4 is a security update.
https://www.vmware.com/products/player/

Web Package Updates

These are likely to be of interest only to web developers.

Joomla 3.9.5 is a security update.
https://www.joomla.org/

Drupal 8.6.14 resolves several bugs. This is not a security update.
https://drupal.org/download

phpList 3.4.0 is a security update.
https://www.phplist.com/download

TinyMCE 5.0.3 resolves several bugs. This is not a security update.
https://www.tiny.cloud/get-tiny/

MailEnable 10.23 resolves several bugs. This is not a security update.
https://www.mailenable.com/

ScreenConnect 19.0.23234.7027 reorganizes the control interface, uses a new default theme, reformats the General tab and more. This is not a security update.
https://www.screenconnect.com/Download

Nextcloud Server 15.0.7 is a security update.
https://nextcloud.com/

WordPress 5.1.1 is a security update.
https://wordpress.org/

Redirection 4.2.1 resolves several bugs. This is not a security update.

NextScripts Social Networks Auto-Poster 4.3.4 removes Google+ and 500px, adds Google My Business and fixes VK. This is not a security update.

W3 Total Cache 0.9.7.3 resolves several bugs and improves compatibility. This is not a security update.

WooCommerce 3.5.7 is a security update.

WP Mail SMTP 1.4.2 removes TGMPA. This is not a security update.

WPtouch 4.3.36 adds kinsta check. This is not a security update.

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2019-01-08

Welcome to 2019, Folks! I’ve never been so happy to have a year behind me. 2019 is looking good even if it starts with a huge number of updates.

Today is Patch Tuesday and it’s a big one. Every major vendor has their regular updates, and it looks like every minor vendor took the holiday break to work on updates for their software, too.

The typical computer should see roughly 3 GB in updates today. Let’s get started.

Microsoft released updates for Windows, Edge, Internet Explorer, .NET, Flash, and MSRT (~2 GB). This includes security updates. A reboot is required.

iOS 12.1.2 is a security update. Use Settings, General, Software Update to install the most current update.

Adobe AIR 32.0.0.89 is a security update.
Win: https://12pd.com/click?air
Mac: https://12pd.com/click?airmac

Adobe Flash Player 32.0.0.114 is a security update.
Win: https://12pd.com/click?flash
Win: https://12pd.com/click?flashie
Mac: https://12pd.com/click?flashmac

Google Chrome OS 71.0.3578.94 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The now-current release of the Windows 10 (1809) will cause your computer to feel unusually slow until it is installed. This is a side-effect of the Windows 10 upgrade cycle, which pushes out 3-6 GB through Windows update to get you to the latest Windows 10 release every 6 months. If you don’t let it finish and you’re on a slow connection, it will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Display Driver Uninstaller 18.0.0.6 resolves several bugs and adds support for newer hardware. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

Logitech Options 7.10.5 is a security update.
https://support.logitech.com/en_us/software/options

Browser Updates

One or more of these are likely to be of interest to everyone.

Google Chrome 71.0.3578.98 is a security update.

Vivaldi 2.2.1388.37 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Mailspring 1.5.5 adds preview for common attachment types and resolves several bugs. This is not a security update.
https://getmailspring.com/

Internet Updates

One or more of these are likely to be of interest to everyone.

Skype 8.36.0.52 resolves several bugs. This is not a security update.
https://12pd.com/click?skype

DNSDataView 1.56 adds command-line configuration syntax. This is not a security update.
https://www.nirsoft.net/utils/dns_records_viewer.html

IPNetInfo 1.80 now defaults to detecting IPv6 addresses and provides command-line configuration syntax. This is not a security update.
https://www.nirsoft.net/utils/ipnetinfo.html

WinSCP 5.13.7 resolves several bugs. This is not a security update.
https://winscp.net/eng/index.php

uTorrent 3.5.5 Build 44954 resolves several bugs. This is not a security update.
https://www.utorrent.com/downloads

FreeFileSync 10.7 resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Npcap 0.99-r8 resolves several bugs. This is not a security update.
https://nmap.org/npcap/

MaxMind GeoIP Data 201901 is a data refresh.
https://dev.maxmind.com/geoip/geolite

Media Updates

These are unlikely to be of interest to most people.

VLC Media Player 3.0.5 resolves several bugs, updates libraries and components, and now imposes runtime hardening on macOS. This is not a security update.
https://www.videolan.org/vlc/

MusicBrainz Picard 2.1 resolves many bugs, adds AAC/ADTS/MIDI/SMF support, $delete, $title, and several other improvements. This is not a security update.
https://picard.musicbrainz.org/

Game Updates

These are unlikely to be of interest to most people.

EA Origin 10.5.32.18460 resolves several bugs and adds data moving. This is not a security update.
https://www.origin.com/en-us/download

PlayStation PS4 6.20 improves performance. This is not a security update. Note that Sony says it is important not to install this update “soon before or soon after” a power outage. If you’re planning to have a power outage, wait for well after it ends before installing the PS4 update. LOL
https://www.playstation.com/en-us/support/system-updates/ps4/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Reader DC 19.010.20069 is a security update. Use Help, Check for Updates to install the most current version.

Adobe Connect 10.1 is a security update.
Win: https://www.adobe.com/go/Connectmsi
Mac: https://www.adobe.com/go/ConnectSetupMac

Adobe Digital Editions 4.5.10 is a security update.
https://www.adobe.com/solutions/ebook/digital-editions/download.html

Notepad++ 7.6.2 resolves several bugs and improves the plugin sanity…but requires that you move any plugins you put in %appdata% for 7.6 under %programdata% now with 7.6.1+, but still allows custom user-level configuration of the installed plugins through %appdata%. It’s the right way to do things and will be better for all of us once we get past this. This is not a security update.
https://12pd.com/click?npp

Krita 4.1.7 resolves several bugs, including a rather annoying wifi bug introduced by a dependency. This is not a security update.
https://krita.org/en/download/krita-desktop/

LibreOffice Fresh 6.1.4 resolves over a hundred bugs. This is not a security update.
https://www.libreoffice.org/

Kindle for PC 1.25.0 Build 52064 doesn’t provide a changelog, so should be treated as a security update.
https://12pd.com/click?kindle4pc

Security Software Updates

One or more of these is likely to be of interest to most people.

TDSSKiller 3.1.0.25 doesn’t provide a changelog so should be treated as a security update.
https://support.kaspersky.com/viruses/utility#TDSSKiller

Wireless Network Watcher 2.19 updates the MAC addresses database. This is not a security update.
https://www.nirsoft.net/utils/wireless_network_watcher.html

RogueKiller 13.0.21 resolves several bugs, adds signatures, improves high-DPI support, and updates core engine. This is not a security update.
https://www.adlice.com/softwares/roguekiller/

SuperAntiSpyware 8.0.1026 resolves several bugs and adds ability to disable notifications.
https://www.superantispyware.com/download.html

Avast! Home Edition 19.1.2360 resolves several bugs, improves GUI, and reduces clutter. It still doesn’t behave well with low-resolution screens.
https://www.avast.com/free-antivirus-download

KeePass 1.37 adds several options including the ability to avoid storing data in the clipboard history. This should be treated as a security update.
https://keepass.info/

Converter Updates

These are unlikely to be of interest to most people.

CDex 2.13 resolves several bugs. This is not a security update.
https://cdex.mu/?q=download

AVStoDVD 2.8.8 resolves several bugs, adds several new features, and updates libraries. This should be treated as a security update.
https://sites.google.com/site/avstodvdmain/

DVDFab 11.0.1.2 adds several new output options, new encodings, and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/download.htm

IsoBuster 4.3 adds support to many new formats, resolves several new bugs, and adds syntax and command-line options, settings, performance improvements, and more. This is not a security update.
https://www.isobuster.com/download.php

Utility Updates

These are unlikely to be of interest to most people.

RoboForm 8.5.5 resolves several bugs. This is not a security update.
https://12pd.com/click?rf

7-Zip 18.06 improves performance and resolves several bugs. This is not a security update.
https://www.7-zip.org/

GoodSync 10.9.21 improves stability, license management, and resolves several bugs. This is not a security update.
https://12pd.com/click?goodsync

NTLite 1.7.2.6650 adds command-line support and resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

1Password for Mac 7.2.4 is a security update.
https://1password.com/downloads/mac/

1Password for Windows 7.2.617 improves stability and compatibility. This should be considered a security update.
https://1password.com/downloads/windows/

DevManView 1.56 adds command-line configuration support and now returns an error code instead of 0 on error. This is not a security update.
https://www.nirsoft.net/utils/device_manager_view.html

DesktopOK 5.82 improves compatibility and resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

Everything 1.4.1.924 resolves several bugs. This is not a security update.
https://www.voidtools.com/

Sysmon 8.04 reverts a filtering change that broke existing configuration files, and resolves a couple bugs. This is not a security update.
https://sysinternals.com/

Bitcoin 0.17.1 resolves several bugs and improves performance. This is not a security update.
http://bitcoin.org/en/download

PointerStick 3.41 is a cosmetic update. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

SearchMyFiles 2.91 adds duplicate file indication. This is not a security update.
https://www.nirsoft.net/utils/search_my_files.html

TaskSchedulerView 1.46 adds policy control for multiple instances and a column for network availability requirement. This is not a security update.
https://www.nirsoft.net/utils/task_scheduler_view.html

WifiChannelMonitor 1.58 adds always on top support and updates internal MAC database. This is not a security update.
https://www.nirsoft.net/utils/wifi_channel_monitor.html

WinScan2PDF 4.67 adds support for new translations and improves customization. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

Developer Updates

These are unlikely to be of interest to most people.

Node.js 11.6.0 adds and improves certificate trust and resolves several bugs. This should be treated as a security update.
https://nodejs.org/en/

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 6.0.0-127566 is a major update with many resolved bugs. This version adds HiDPI support, export to Oracle Cloud Infrastructure, improved setup and maintenance, improved 3D support for guests, surround sound speakers, and Hyper-V as fallback core for compatibility. This is not a security update.
https://www.virtualbox.org/wiki/Downloads

Web Package Updates

These are likely to be of interest only to web developers.

TinyMCE 4.9.2 resolves several bugs. This is not a security update.
https://www.tinymce.com/download/

phpList 3.3.7 resolves a minor bug. This is not a security update.
http://www.phplist.com/download

Coppermine Gallery 1.5.48 is a security update.
https://coppermine-gallery.net/

Drupal 8.6.5 resolves several bugs. This is not a security update.
https://drupal.org/download

YOURLS 1.7.3 resolves several bugs, adds hooks, and updates libraries. This should be treated as a security update.
https://yourls.org/

WordPress 5.0.2 resolves over 70 bugs in the 5.0 branch and follows quickly on the heels of the 5.0.1 security update. This should be treated as a security update to 5.0.
https://wordpress.org/

Contact Form 7 5.1.1 improves handling of empty response. This is not a security update.

Postie 1.9.27 improves support for parent post detection. This is not a security update.

Sucuri Security 1.8.19 resolves a couple bugs. This is not a security update.

Theme My Login 7.0.12 improves compatibility and reliability. This is not a security update.

WooCommerce 3.5.3 resolves a cosmetic bug for WP5 compatibility. This is not a security update.

WP Add Custom CSS 1.1.3 improves compatibility and uninstaller. This is not a security update.

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

 

Updates 2018-11-13

Hi, Folks!

It’s Patch Tuesday and it’s a big one. Every major vendor has released security updates and there’s many smaller vendor updates released today, as well.

But before we get to that I want to briefly talk about something else. You’ve surely heard the phrase “Internet of Things” or “IoT”. This describes the common and growing practice of everything touching the Internet all the time. Besides the computers you have in your office and living room, the phone in your pocket, and the tablets you have littered across random flat surfaces across your home, there are now cars, toasters, refrigerators, light bulbs, irrigation systems, air conditioners, instant pots, and a million other things that are now Internet-enabled for our convenience or simply for the novelty of it. Nearly all of these devices don’t talk to the Internet directly, but through a router or modem which connects each of the devices at a specific location to the Internet through your Internet Service Provider. While it’s possible to hijack your light bulbs, fridge, and coffee maker, the low-hanging fruit of most networks is and always will be the router. This oft-overlooked device is poorly maintained and directly accessible from the Internet making it easy prey for attackers. Currently there’s a botnet called BCMUPnP_Hunter that has hijacked over 100,000 routers and is using them (and your Internet connection) to send spam and phishing messages.

In each case it could have been avoided.

All hardware is supported and maintained by the vendor for a limited time ranging from a mere 6 months to a decade. However, having it be “supported” is one thing – actually installing the firmware and software updates that would have prevented this and similar infections or proactively replacing end-of-life (EOL) hardware is critical. This neglect is like starving to death at a buffet. The updates and EOL information is out there, but you need to know your network (or hire someone to) and maintain or replace each device that touches it.

Know your network!

Now back to our regularly scheduled program.

The typical computer should see roughly 4gb in updates today. Let’s get started.

The first major update to macOS Mojave was released this week, as well as the first major update to iOS 12. Windows 10 v1809 has been released again. This version was pulled for the last two months because of a show-stopper bug that resulted in deleting user files of people with a specific configuration. That issue is now resolved, but it highlights the importance of letting other people be the guinea pig for major updates like this. Updates are important. Don’t get me wrong. Stability is more important, though, and there’s no reason to put a stable, secure, and supported operating system at risk with what amounts to a beta release. Microsoft maintains several versions of Windows 10 and there’s no reason to rush to the latest build. Install their standard security updates, but wait on new releases.

Windows 10 v1809 is about 3gb when downloaded by the Windows Upgrader/Windows Update, so expect it to randomly install for any Windows 10 Home user over the next month, consuming 3gb of bandwidth to get it done. If you have a slow connection, it could end up trying to download 3gb per day per device, so you would be better off downloading the installer yourself and installing it to ensure that the upgrade completes. That said, you should, of course, postpone upgrading to 1809 for the next couple months and let the rest of the world be the beta testers.

In any case, sometimes we all need that reminder: run your backups *now*.

Microsoft released Windows 10 v1809 and updates to Windows, Flash, Edge, Internet Explorer, and MSRT (~3gb). This includes security updates. A reboot is required.

Apple released macOS Mojave 10.14.1, macOS Mojave 10.14.1 Supplemental for MacBook Air, Security Update 2018-002 for High Sierra, Security Update 2018-005 for Sierra, iOS 12.1, tvOS 12.1, watchOS 5.1.1, Safari 12.0.1, iCloud for Windows 7.8, and iTunes 12.9.1. This includes security update. Use Apple Software Update to install these updates. A reboot is required.

Adobe Flash Player 31.0.0.148 is a security update.
Win: https://12pd.com/click?flash
Win: https://12pd.com/click?flashie
Mac: https://12pd.com/click?flashmac

Google Chrome OS 70.0.3538.76 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Fedora 29-1.2 is a new major version offering modularity, GNOME 3.30, Vagrant images, and more. This is not a security update.
https://getfedora.org/

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The now-current release of the Windows 10 (1809) will cause your computer to feel unusually slow until it is installed. This is a side-effect of the Windows 10 upgrade cycle, which pushes out 3-6gb through Windows update to get you to the latest Windows 10 release every 6 months. If you don’t let it finish and you’re on a slow connection, it will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Display Driver Uninstaller 18.0.0.3 improves removal and removes paexec to minimize false positives from AV software. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

Browser Updates

One or more of these are likely to be of interest to everyone.

Google Chrome 70.0.3538.102 is a security update. Use Menu, Help, About to install the most current version.

Firefox 63.0.1 is a security update. Use Menu, Help, About to install the most current version.

Firefox ESR 60.3.0 is a security update. Use Menu, Help, About to install the most current version.

Vivaldi 2.1.1337.47 improves quick commands, resolves several bugs, and updates chromium source to v70. This is a security update. Use Menu, Help, About to install the most current version.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Mailspring 1.5.2 improves compatibility, stability, performance, and updates libraries. This is a security update.
https://getmailspring.com/

Thunderbird 60.3.0 is a security update. Use Menu, Help, About to install the most current version.

Internet Updates

One or more of these are likely to be of interest to everyone.

Skype 8.33.0.50 improves group moderation and adds send with enter key. This is not a security update.
https://12pd.com/click?skype

Evernote 6.16.4.8094 resolves several bugs and improves stability. This is not a security update.
https://www.evernote.com/

FileZilla 3.38.1 resolves several bugs. This is not a security update.
https://filezilla-project.org/

FreeFileSync 10.6 resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

MaxMind GeoIP Data 201811 is a data refresh.
https://dev.maxmind.com/geoip/geolite

Media Updates

These are unlikely to be of interest to most people.

CDBurnerXP 4.5.8.7041 adds the ability to filter drives to only those that are writeable. This is not a security update.
https://cdburnerxp.se/

FastStone Viewer 6.7 improves performance, resolves several bugs, and expands options. This is not a security update.
http://www.faststone.org/FSViewerDetail.htm

Flickr Downloadr 2.7.0.1 doesn’t provide a changelog so should be treated as a security update.
https://flickrdownloadr.com/downloads/

Game Updates

These are unlikely to be of interest to most people.

EA Origin 10.5.30.15625 resolves several bugs. This is not a security update.

Steam 2018.11.08 resolves several bugs and improves stability. This is not a security update.

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Reader DC 19.008.20081 is a security update. Use Help, Check for Updates to get the most current version.

Paint.net 4.1.4 improves performance and resolves several bugs. This is not a security update.
https://www.getpaint.net/

LibreOffice Still 6.0.7 resolves dozens of bugs. This is not a security update.
https://www.libreoffice.org/

LibreOffice Fresh 6.1.3 resolves dozens of bugs. This is not a security update.
https://www.libreoffice.org/

Security Software Updates

One or more of these is likely to be of interest to most people.

Gpg4win 3.1.5 resolves many bugs. This is not a security update.
https://www.gpg4win.org/download.html

SuperAntiSpyware 8.0.1024 is a major update adding DND mode, repair and reset modes, and startup monitoring. This is not a security update.
https://www.superantispyware.com/download.html

RogueKiller 13.0.9 updates detection engine and signatures. This is a security update.
https://www.adlice.com/softwares/roguekiller/

Capture Updates

These are unlikely to be of interest to most people.

SnagIt 2019.0.1 resolves several bugs and improves stability. This is not a security update.
https://download.techsmith.com/snagit/enu/snagit.exe

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 11.0.0.3 adds support for new encodings and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/download.htm

MakeMKV 1.14.1 improves stability, adds support for new encodings, and new options. This is not a security update.
https://12pd.com/click?makemkv

Utility Updates

These are unlikely to be of interest to most people.

Beyond Compare 4.2.8.23479 resolves several bugs. This is not a security update.
https://www.scootersoftware.com/download.php?zz=dl4

Bitcoin 0.17.0.1 resolves several bugs. This is not a security update.
https://bitcoin.org/en/download

Cygwin 2.11.2 is a security update.
https://cygwin.com/

DesktopOK 5.76 resolves a startup bug. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

GoodSync 10.9.16 resolves several bugs, improves user experience, and change default security options. This should be treated as a security update.
https://12pd.com/click?goodsync

ImageUSB 1.4.100 resolves several bugs, adds a new option to fill remaining space with an extended partition. This is not a security update.
https://www.osforensics.com/tools/write-usb-images.html

FileLocator Pro 8.5.2868 resolves several bugs. This is not a security update.
https://www.mythicsoft.com/filelocatorpro/download

BulkFileChanger 1.52 adds an option to fill current time to file time command attributes. This is not a security update.
https://www.nirsoft.net/utils/bulk_file_changer.html

DevManView 1.55 adds delay controls. This is not a security update.
https://www.nirsoft.net/utils/device_manager_view.html

USBDeview 2.77 adds delay controls. This is not a security update.
https://www.nirsoft.net/utils/usb_devices_view.html

OSForensics 6.1.1004 resolves several bugs. This is not a security update.
https://www.osforensics.com/download.html

WinScan2PDF 4.56 resolves a driver bug. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

CPU-Z 1.87 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

Developer Updates

These are unlikely to be of interest to most people.

Node.js 11.1.0 resolves dozens of bugs. This is a security update.
https://nodejs.org/en/

SQLite 3.25.3 resolves several bugs. This is not a security update.
https://www.sqlite.org/download.html

Virtual Machine Updates

These are unlikely to be of interest to most people.

PPSSPP 1.7.1 doesn’t provide a detailed changelog, so should be treated as a security update.
https://ppsspp.org/downloads.html

VirtualBox 5.2.22-126460 resolves several bugs and improves compatibility. This is not a security update.
https://www.virtualbox.org/wiki/Downloads

Web Package Updates

These are likely to be of interest only to web developers.

Joomla 3.9.0 provides over 250 fixes and improves privacy controls.
https://www.joomla.org/

ModSecurity 3.0.3 resolves several bugs, adds new rules and controls. This is not a security update.
https://github.com/SpiderLabs/ModSecurity/releases

phpList 3.3.6 resolves several bugs and adds new features. This is not a security update.
https://www.phplist.com/download

TinyMCE 4.8.5 resolves several bugs. This is not a security update.
https://www.tinymce.com/download/

Drupal 8.6.2 is a security update.
https://drupal.org/download

Akismet 4.1 adds several new features. This is not a security update.

Contact Form 7 5.0.5 resolves several bugs. This is not a security update.

myStickymenu 2.0.6 resolves the 404 configuration bug. This is not a security update.

NextScripts Social Networks Auto-Poster 4.2.8 is a security update.

Redirection 3.6.2 improves compatibility. This is not a security update.

WooCommerce 3.5.1 resolves several bugs. This is not a security update.

WPtouch 4.3.33 resolves several bugs. This is not a security update.

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/