Tag Archives: PlayStation PS5

Updates 2023-10-10

Posted on by

Welcome back, Folks!

Today is Patch Tuesday for October, 2023.

This month brings a new version of macOS, version 14.0/Sonoma, an impending new Windows 11 build, and several very high profile vulnerabilities in shared code that affect thousands of applications. Vendors for some will not even discover that they’re vulnerable until their applications are used in mass hacks. The next few months are going to be ugly as this plays out.

There were 153 major hacks, and over 200 application updates this month. It’s an insane month, with about 6 GB of updates for most users.

This Month in Technology

23andMe, Accusoft ImageGear, Activision, Actors Fund Home, Air Canada, Airbus, Allegheny County, Pennsylvania, Amazon, Amerita, Android, ApexSMS, Apple iOS/iPadOS (several times), Aretis Health LLC, Arkansas Total Care, Inc., Arm chips, Arm Mali GPU drivers, Asian National Power Grid, Atlassian Confluence Data Center and Server, Atrium Health, Auckland Transport, Bermuda, Bienville Orthopaedic Specialists LLC, Bluegrass Care Navigators, BORN Ontario, Bureau van Dijk, Caesars Entertainment, Cascade Family Dental, Catawba Valley Medical Center, Charlotte Radiology, ChildFund New Zealand, Cisco Catalyst SD-WAN Manager, Cisco Emergency Responder, Cisco IOS, Citrix NetScaler, City of Dallas, Texas, Clover Health LLC, CoinEx, Colombian Government, Community First Medical Center, Cyberport, D-Link DAP-X1860 WiFi 6 range extenders, dBforums, Delta Dental of California, District of Columbia Board of Elections, DLP Central Carolina Medical Center, Donald Trump Jr.’s X account, Dr. Patty DiBlasio, PC, Duke University Health System, ECU Health, Erlanger Health, Inc., Exim, FirstHealth, Flagstar Bank, Florida’s First Judicial Circuit Court, Founder Project Rx, Inc., GitLab, glibc ld.so – standard in all modern Linux flavors, GNOME, Google Chrome (again!), all modern GPUs, Health First, Inc., Horse Isle, hotels, booking sites, and travel agencies, hundreds of known apps using Electron due to the webp vulnerability, HWL Ebsworth, indeed.com, India’s National Logistics Portal-Marine, Indiana University Health, International Criminal Court (ICC), JetBrains’ TeamCity, Johnson Controls, Jordan Valley Community Health Center, Juniper SRX firewalls and EX switches, Just Kids Dental, LabCorp, Lakeland Community College,
Lakeview Clinic, libwebp, Linux GNU C library (Looney Tunables), Lone Star Alliance, Inc, Lyca Mobile, MalindoAir, McLaren Health Care, MGM Resorts, Microsoft AI-powered Bing Chat, Microsoft AI, Microsoft Edge, Microsoft Outlook, Microsoft SharePoint Server, Microsoft Skype, Microsoft SQL Servers, Microsoft Teams, Microsoft Xbox, Mission Health System, Mixin Network, MNGI Digestive Health, Mosaic Mental Health, Motel One Group, MOVEit (again), Mt. Graham Regional Medical Center, Nansen, National Student Clearinghouse, Navvis & Company, LLC, New Hanover Regional Medical Center, NorthStar Anesthesia, Northwestern Polytechnical University, Novant Health, NTT Docomo, Nuance Communications, Oak Valley Hospital District, Omnicell Specialty Pharmacy Services (OSPS), Openfire messaging servers, ORBCOMM, OrthoAlaska, LLC, Parkers Chapel School District, PaySystem.tech, Peach State Health Plan, Pharm-Pacc Corporation, Physical Therapy, PLLC, Physicians Insurance Company, Physio Logic Chiropractic, Piilopuoti, Pizza Hut Australia, Prospect Medical Holdings, Inc., Qualcomm GPU and Compute DSP drivers, Retool, Rock County Health Department, Rollbar, Roseman University of Health Sciences, Ryders Health Management LLC, See Tickets, Skype for Desktop, Sony Interactive Entertainment, South Florida Behavioral Health Network, Sutter North Surgery Center, T-Mobile, multiple telecommunication service providers in the Middle East, Western Europe, and South Asia, Temple University Health System, Inc., Texas Medical Insurance Company, Texas Medical Liability Trust, The Hospital for Sick Children (SickKids), TissuPath, TorchServe AI, TransUnion, Trend Micro Apex One, UNC Health, United Healthcare Services, Inc. Single Affiliated Covered Entity, United Kingdom’s Greater Manchester Police, VA Dept. of Medical Assistance Services, Vitalik Buterin’s X account, Wake Radiology Diagnostic Imaging, WakeMed Health & Hospitals, Walmart, Inc. Associates Health and Welfare Plan, WebP, Wellstar Health System, Windows 11 Theme system, 17,000 WordPress sites, and WS_FTP Servers have reportedly been hacked or compromised this month.

Auckland Transport, Bing Chat AI, Caesars, Canadian airports, Discord, Lyca Mobile, MGM, Microsoft Teams, and the Royal Family website have suffered from outages this month.

Google, Amazon, and CloudFlare have been seeing record-breaking numbers of attacks using a weakness in the HTTP/2 protocol.

Last months updates broke BitLocker, Excel, faith in Windows (forcing an incompatible application), Outlook (twice), and USB printing.

The Magecart skimming malware is now abusing online store error pages.

The UK passed the “Online Safety Bill” which, among other things, grants government (and those with an ax to grind – like LOVEINT) mandated access to all private internet conversations.

Microsoft is pushing Edge and Bing in violation of their own policies. If they treated themselves with the same rules they treat others, then microsoft.com would be blocked for distributing the BGAUpsell crapware.

PayPal is finally making news for their complicity in the latest rash of invoice scams. Netcraft is playing it off as PayPal being the victim, but they can hardly be held blameless. They’ve been supporting these scams for years.

Google will be retiring the Basic HTML view in January. Half of the ISPs in Tuolumne County will suffer as a result. Google is also now pushing Passkeys as their default authentication platform, meaning that instead of knowledge of your password, all it will take for new logins to your Google account is possession of one of your devices.

Apple iPhone 12 violates French health laws for exceeding allowable EF radiation. Apple is planning to release an update to reduce the emissions in order to comply.

Even staff in military and defense organizations can’t be trusted to use good passwords.

CISA has been slapped yet again for their government-sponsored censorship. Maybe this time it will take?

Now for the good news:

Google is now (finally!) treating unauthenticated Microsoft 365 email as spam (it is).

Google announced they’ll be supporting all Chromebooks for 10 years — twice as long as was promised before. This should massively reduce e-waste.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is huge this month. The typical computer should see roughly 6 GB in updates today. Let’s get started.

Microsoft released updates to address 105 vulnerabilities in Active Directory Domain Services, Azure, Azure DevOps, Azure Real Time Operating System, Azure SDK, Client Server Run-time Subsystem (CSRSS), HTTP/2, Microsoft Common Data Model SDK, Microsoft Dynamics, Microsoft Edge (Chromium-based), Microsoft Exchange Server, Microsoft Graphics Component, Microsoft Office, Microsoft QUIC, Microsoft WDAC OLE DB provider for SQL, Microsoft Windows Media Foundation, Microsoft Windows Search Component, Microsoft WordPad, Skype for Business, SQL Server, Windows Active Template Library, Windows AllJoyn API, Windows Client/Server Runtime Subsystem, Windows Common Log File System Driver, Windows Container Manager Service, Windows Deployment Services, Windows DHCP Server, Windows Error Reporting, Windows HTML Platform, Windows IIS, Windows IKE Extension, Windows Kernel, Windows Layer 2 Tunneling Protocol, Windows Mark of the Web (MOTW), Windows Message Queuing, Windows Microsoft DirectMusic, Windows Mixed Reality Developer Tools, Windows Named Pipe File System, Windows NT OS Kernel, Windows Power Management Service, Windows RDP, Windows Remote Procedure Call, Windows Resilient File System (ReFS), Windows Runtime C++ Template Library, Windows Setup Files Cleanup, Windows TCP/IP, Windows TPM, Windows Virtual Trusted Platform Module, Windows Win32K, and MSRT (~ 1.5 GB). This includes security updates. A reboot is required.

Apple released updates for macOS Sonoma 14.0, macOS Ventura 13.6, macOS Monterey 12.7, iOS 16.7.1, iOS 17.0.3, iPadOS 16.7.1, iPadOS 17.0.3, Safari 16.6.1, Safari 17.0, tvOS 17.0, watchOS 10.0.2, watchOS 9.6.3, Xcode 15.0, Apple Service Utility, and Pro Video Formats 2.2.7. This includes security updates. Use Apple Software Update to install these updates. A reboot is required.

iOS 16.7.1 and 17.0.3 are security updates. Use Settings, General, Software Update to install the most current update.

iPadOS 16.7.1 and 17.0.3 are security updates. Use Settings, General, Software Update to install the most current update.

watchOS 9.6.3 and 10.0.2 are security updates. Use the Watch app on your iPhone to install the most current version.

tvOS 17.0 is a security update. Use System, Software Update to install the most current version.

Google Chrome OS 117.0.5938.157 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Sonoma (14.x) means that macOS Big Sur (11.x) and older are no longer supported. If you can not install at least macOS Monterey (12) on your Mac then you should immediately remove it from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current — and final — release of the Windows 10 (v22H2) is very large so will take a long time to download on slower connections. All non-LTS versions of Windows 10 other than v22H2 are now out of support, upgrade to v22H2 now. If you aren’t sure whether you are using LTS, you aren’t. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v22H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is now stable and can be upgraded to if your hardware supports it, but I recommend you continue to use Windows 10 until early 2025 before you consider switching to it.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

AMD Adrenalin 23.9.3 improves game support and resolves several bugs. This is not a security update.
https://www.amd.com/en/support

Display Driver Uninstaller 18.0.6.8 resolves several bugs. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

DS4Windows 3.2.17 resolves several bugs. This is not a security update.
https://github.com/Ryochan7/DS4Windows/releases/latest

Garmin Express 7.18.3 doesn’t provide a changelog so should be treated as a security update.
https://www.garmin.com/en-US/software/express/

GnuCash 5.4 resolves dozens of bugs. This is not a security update.
https://www.gnucash.org/

TP-Link Archer AX73 v2.0 230829 is a security update.
https://www.tp-link.com/us/support/download/archer-ax73/v2.0/#Firmware

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.58.137 is a security update.
https://brave.com/

Firefox 118.0.2 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Firefox ESR 115.3.1 is a security update.
https://www.mozilla.org/en-US/firefox/organizations/all/

Google Chrome 109.0.5414.168 is a security update.
https://www.google.com/chrome/

Google Chrome 117.0.5938.149 is a security update.
https://www.google.com/chrome/

Microsoft Edge 117.0.2045.60 is a security update.
https://www.microsoft.com/en-us/edge/business/download

Microsoft Edge WebView2 117.0.2045.60 is a security update.
https://developer.microsoft.com/en-us/microsoft-edge/webview2/

SeaMonkey 2.53.17.1 is a security update.
https://www.seamonkey-project.org/

Vivaldi 6.2.3105.58 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

Spark 3.9.0.57590 adds group invitations and resolves several bugs. This is not a security update.
https://sparkmailapp.com/

Spark (macOS) 3.9.0.57684 adds group invitations and resolves several bugs. This is not a security update.
https://sparkmailapp.com/

Thunderbird 115.3.1 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 8.0.3 resolves several bugs. This is not a security update.
https://anydesk.com/en/downloads

AnyDesk (macOS) 7.2.2 resolves several bugs. This is not a security update.
https://anydesk.com/en/downloads

curl 8.3.0 resolves dozens of bugs. This is a security update.
https://curl.haxx.se/windows/

Dropbox 184.4.6543 is a security update.
https://www.dropbox.com/

Facebook Messenger 196.0.0.4.210 is a security update.
https://www.messenger.com/download

Google Drive 82.0 increases nags and resolves several bugs. This is not a security update.
https://drive.google.com/start

Microsoft Teams 1.6.00.27573 improves app controls. This is not a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 27.1.2 is a security update.
https://nextcloud.com/

Npcap 1.77 resolves several bugs. This is not a security update.
https://nmap.org/npcap/

Omada Software Controller 5.12.7 adds IDS/IPS, support for newer hardware, and resolves dozens of bugs. This is a security update.
https://www.tp-link.com/us/support/download/omada-software-controller/

Signal 6.33.0 adds the ability to edit messages. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 6.35.3 improves performance. This is not a security update.
https://signal.org/android/apk/

Skype 8.104.0.207 improves performance. This is not a security update.
https://www.skype.com/

Syncthing 1.25.0 resolves several bugs. This is not a security update.
https://syncthing.net/

Telegram 4.10.3 improves stability. This is not a security update.
https://telegram.org/

Telegram (Android) 10.1.0 doesn’t provide a changelog so should be treated as a security update.
https://telegram.org/apps

Trillian 6.5.0.33 is a security update.
https://www.trillian.im/

WinSCP 6.1.2 is a security update.
https://winscp.net/eng/index.php

Zoom 5.16.2.22807 is a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

Bitwig Studio 5.0.9 improves DAWproject mapping, export, and import, and resolves a couple bugs. This is not a security update.
https://www.bitwig.com/download/

iTunes 12.12.10.1 is a security update.
https://www.apple.com/itunes/download/

Plex Desktop 1.79.1.3984 is a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Home Theater 1.48.1.3982 resolves a stability bug. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Media Server 1.32.6.7557 resolves a dozen bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-media-server

Game Updates

These are unlikely to be of interest to most people.

GameMaker Studio 2023.8.2.106 resolves several bugs. This is not a security update.
https://www.yoyogames.com/en/gamemaker

GDevelop 5.2.175 adds collaboration for Cloud projects, simplified variable syntax. This is not a security update.
https://gdevelop.io/download

Minecraft Server (Bedrock) 1.20.32.03 doesn’t provide a changelog so should be treated as a security update.
https://www.minecraft.net/en-us/download/server/bedrock

Minecraft Server (Java) 1.20.2 doesn’t provide a changelog so should be treated as a security update.
https://www.minecraft.net/en-us/download/server

PlayStation PS4 11.00 resolves several bugs. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps4/system-software/

PlayStation PS5 2023.101 adds Dolby Atmos support, increased M.2 SSD size support, and resolves several bugs. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

SteamOS SteamDeck Update 2023-10-06 resolves several bugs. This is not a security update.
https://store.steampowered.com/news/app/1675200/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Bridge 13.0.4 and 14.0.0 are security updates.
https://helpx.adobe.com/security/products/bridge/apsb23-49.html

Adobe Commerce and Magento Open Source 2.4.7-beta2, 2.4.6-p3, 2.4.5-p5, 2.4.4-p6, 2.4.3-ext-5, 2.4.2-ext-5, 2.4.1-ext-5, 2.4.0-ext-5, and 2.3.7-p4-ext-5 are security updates.
https://helpx.adobe.com/security/products/magento/apsb23-50.html

Adobe Photoshop 24.7.1 and 25.0 are security updates.
https://helpx.adobe.com/security/products/photoshop/apsb23-51.html

Blender 3.6.4 is a security update.
https://www.blender.org/download/

Calibre 6.28.1 resolves several bugs. This is not a security update.
https://calibre-ebook.com/

Ghostscript 10.02.0 is a security update.
https://www.ghostscript.com/releases/gsdnld.html

IcoFX 3.9 resolves several bugs, adds support for PNG, and adds several export options. This is a security update.
https://icofx.ro/

ImageMagick 7.1.1-20 is a security update.
https://imagemagick.org/

Kdenlive 23.08.1 resolves several bugs. This is not a security update.
https://kdenlive.org/

Kindle for PC 2.0.70350 doesn’t provide a changelog so should be treated as a security update.
https://www.amazon.com/kindleforpc

LibreOffice 7.5.7 is a security update.
https://www.libreoffice.org/

LibreOffice Fresh 7.6.2 is a security update. The Fresh line is beta software so most people should avoid it in favor of the Still line.
https://www.libreoffice.org/

Nextcloud Desktop 3.10.0 resolves dozens of bugs. This is a security update.
https://nextcloud.com/

Paint.net 5.0.10 is a security update.
https://www.getpaint.net/

PDF-XChange Editor 10.1.1.381 is a security update.
https://www.tracker-software.com/product/pdf-xchange-editor

Security Software Updates

One or more of these is likely to be of interest to most people.

Chainsaw 2.8.0 adds support for parsing ESE and SRUM databases, new rules and support for aggregated reports. This is not a security update.
https://github.com/countercept/chainsaw

JShelter 0.16 resolves several bugs. This is not a security update.
https://jshelter.org/install/

LibreJS 7.21.1 is a security update.
https://www.gnu.org/software/librejs/

MalwareBytes Anti-Malware 4.6.4 resolves several bugs. This is not a security update.
https://www.malwarebytes.org/antimalware/

MalwareBytes Anti-Malware Mac 4.21 adds support for macOS Sonoma. This is not a security update.
https://www.malwarebytes.com/mac/

OpenSSL 3.1.3 is a security update.
https://www.openssl.org/source/

ProtonVPN (macOS) 3.3.3 resolves a couple bugs and improves user interface. This is not a security update.
https://protonvpn.com/download

RogueKiller 15.12.1 resolves several bugs. This is not a security update.
https://www.adlice.com/download/roguekiller/

Stinger 12.2.0.659 adds support for new detections. This is not a security update.
https://www.mcafee.com/us/downloads/free-tools/stinger.aspx

uBlock Origin 1.52.2 resolves several bugs. This is not a security update.
https://github.com/gorhill/uBlock/releases/latest

elementary OS 7.1 improves privacy, color blindness, and keyboard controls, personalization, sideloading, and adds new hardware support. This is not a security update.
https://elementary.io/

Tails 5.18 is a security update.
https://tails.boum.org/install/dvd/index.en.html

Capture Updates

These are unlikely to be of interest to most people.

ScreenToGif 2.39 resolves several bugs and improves compatibility. This is not a security update.
https://github.com/NickeManarin/ScreenToGif/releases/latest

SnagIt 24.0.0 is a major update adding ability to combine videos, click animations, capture pinning, and updated stamps. This is not a security update.
https://www.techsmith.com/screen-capture.html

Converter Updates

These are unlikely to be of interest to most people.

MakeMKV 1.17.5 improves reliability and resolves a couple bugs. This is not a security update.
https://www.makemkv.com/download/

StreamFab 6.1.4.4 improves compatibility. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero (macOS) 6.0.27 adds macOS Sonoma compatibility and resolves a couple bugs. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password 8.10.16 resolves dozens of bugs. This is not a security update.
https://1password.com/downloads/

Bitwarden 2023.9.1 is a security update.
https://bitwarden.com/

CCleaner 6.16.10662 changes Health Check interface. This is not a security update.
https://www.ccleaner.com/

CPU-Z Installer 2.08 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

DesktopOK 11.12 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

dnGrep 4.0.115.0 adds support for Filters, including *.ignore files, and resolves several bugs. This is a security update.
https://dngrep.github.io/

Fing 3.4.1 is a security update.
https://www.fing.com/products/fing-desktop-download-windows
https://www.fing.com/products/fing-desktop-download-mac

FullEventLogView 1.80 adds dark background and resolves a bug with export data. This is not a security update.
https://www.nirsoft.net/utils/full_event_log_view.html

Go 1.21.3 is a security update.
https://go.dev/

GoodSync 12.4.1 resolves several bugs. This is not a security update.
https://www.goodsync.com/

GUIPropView 1.26 adds a WindowsCount action and the ability to run as administrator. This is not a security update.
https://www.nirsoft.net/utils/gui_prop_view.html

Homedale 2.08 adds stream count column and per-monitor DPI support. This is not a security update.
https://www.the-sz.com/products/homedale/

IsMyHdOK 3.93 improves performance. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/IsMyHdOK

Mac Migration Assistant 2.4.4.0 adds support for macOS Sonoma. This is not a security update.
https://support.apple.com/en-us/HT204087

MobileFileSearch 1.47 resolves a couple bugs. This is not a security update.
https://www.nirsoft.net/utils/mobile_device_file_search.html

NConvert 7.161 doesn’t provide a changelog so should be treated as a security update.
https://www.xnview.com/en/nconvert/

NTLite 2023.9.9419 adds new controls. This is not a security update.
https://www.ntlite.com/download/

OSFMount 3.1.1002 resolves network access issues. This is not a security update.
https://www.osforensics.com/tools/mount-disk-images.html

OSForensics 10.0.1016 resolves several bugs. This is a security update.
https://www.osforensics.com/download.html

AOMEI Partition Assistant 10.2.0 adds duplicate file finder and resolves several bugs. This is not a security update.
https://www.diskpart.com/

PointerStick 6.33 adds keyboard shortcuts. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

PowerToys 0.74.1 resolves several bugs. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest

ProcDump 2.2 for Linux resolves memory leaks and adds support for Azure Linux. This is not a security update.
https://sysinternals.com/

ProcessMonitor 3.96 is a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

ScreenConnect 23.7.8.8676 is a security update.
https://www.connectwise.com/software/control/download

SDelete 2.05 improves command line reliability and output. This is not a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/sdelete

Sysmon 1.3.1 for Linux resolves a hash bug. This is not a security update.
https://github.com/Sysinternals/SysmonForLinux/releases/

TaskSchedulerView 1.74 adds dark background support and resolves a data export bug. This is not a security update.
https://www.nirsoft.net/utils/task_scheduler_view.html

Unity 2023.1.16 adds several new features and resolves dozens of bugs. Unity also announced that they’re changing their licensing model to charge developers for each installation, even pirated installations, so this is going to end up causing a major upset in the industry, then reversed course after the outcry. This is not a security update.
https://unity3d.com/get-unity/download/archive

USBDeview 3.07 adds toolbar sorting and resolves a data export bug. This is not a security update.
https://www.nirsoft.net/utils/usb_devices_view.html

Ventoy 1.0.96 resolves several bugs. This is not a security update.
https://www.ventoy.net/en/index.html

WinGet 1.6.2771 resolves a couple bugs. This is not a security update.
https://github.com/microsoft/winget-cli/releases/latest

WinRAR 6.24 is a security update.
https://www.rarlab.com/

WinScan2PDF 8.67 resolves a couple bugs. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/WinScan2PDF

Developer Updates

These are unlikely to be of interest to most people.

.NET Runtime 7.0.12 is a security update.
https://dotnet.microsoft.com/en-us/download/dotnet

AutoHotkey 2.0.10 resolves several bugs. This is not a security update.
https://www.autohotkey.com/download/

Android Studio 2022.3.1.2 resolves several bugs. This is not a security update.
https://developer.android.com/studio

GitHub Desktop 3.3.3 is a security update.
https://desktop.github.com/

Godot 4.1.2 resolves over a hundred bugs. This is not a security update.
https://godotengine.org/

Node.js 18.18.1 is a security update.
https://nodejs.org/en/

Node.js 20.8.0 is a security update.
https://nodejs.org/en/

Python 3.12.0 is a security update.
https://www.python.org/downloads/windows/

SQLite 3.43.2 resolves a couple bugs. This is not a security update.
https://www.sqlite.org/download.html

TortoiseGit 2.15.0 updates libraries and resolves several bugs. This is a security update.
https://tortoisegit.org/

Visual Studio Code 1.83 adds several new features. This is not a security update.
https://code.visualstudio.com/

Virtual Machine Updates

These are unlikely to be of interest to most people.

PPSSPP 1.16.5 resolves a crash bug. This is not a security update.
https://www.ppsspp.org/download/

Web Package Updates

These are likely to be of interest only to web developers.

Drupal 9.5.11 is a security update.
https://drupal.org/download

HumHub 1.14.4 resolves a dozen bugs. This is not a security update.
https://www.humhub.com/en

OpenCart 4.0.2.3 updates libraries and resolves dozens of bugs. This is not a security update.
https://www.opencart.com/

ownCloud Server 10.13.2 resolves several bugs. This is not a security update.
https://owncloud.com/download-server/

phpList 3.6.14 is a security update.
https://www.phplist.org/

Akismet 5.3 improves compatibility and resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/akismet/

Antispam Bee 2.11.5 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/antispam-bee/

Contact Form 7 5.8.1 improves validation, email templates, and adds action hooks. This is not a security update.
https://wordpress.org/extend/plugins/contact-form-7/

Duplicator 1.5.6 fixes a couple bugs. This is not a security update.
https://wordpress.org/plugins/duplicator/#developers

W3 Total Cache 2.5.0 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/w3-total-cache/

WooCommerce 8.1.1 resolves a couple bugs. This is not a security update.
https://wordpress.org/extend/plugins/woocommerce/

WPBakery 7.1 resolves several bugs. This is not a security update.
https://wpbakery.com/

WP Cerber Security 9.5.8 resolves a couple bugs and adds support for auditing password resets. This is not a security update.
https://wpcerber.com/

WPtouch 4.3.54 resolves several bugs and improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/wptouch/

That’s all for now folks. Keep it clean out there. 😉

Happy Anniversary, my Love. I will miss you more than you’ll ever know.

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2023-09-12

Posted on by

Welcome back, Folks!

Today is Patch Tuesday for September, 2023.

This month has been insane. There were 223 major hacks, and over 170 application updates this month. Each browser and several other apps released at least weekly security updates. It’s a very big month, with about 5 GB of updates for most users.

This Month in Technology

16shop, A-Family Dental Care Center PC, Absolute Dental Services, Adobe Acrobat & Reader, Alberta Dental Services Corporation, Allison Transmission Inc., AMD CPUs, AmeriBen, American National Group, LLC, Android TV, Anonfiles, Apache’s RocketMQ, Asian national electricity grid, The Associated Press Stylebook, Associates in Pediatric Dentistry, ASUS routers, Atlas VPN, Atmeltomo, a major auction house, Avada WordPress Theme and Plugin, Ayush Jharkhand, AzeroCloud, Baesman Group, Inc., Balancer, Barracuda Email Security Gateway (ESG), Beverly Hills Plastic Surgery, Binance, Bloom Health Centers, Blue Cross Blue Shield of Arizona, Byju’s, CareSource, CentroMed, CERT Poland, Chicago IVF, Church of England Debenham High School, Church of England St. Augustine Academy, Cisco Adaptive Security Appliance (ASA), Cisco BroadWorks, Cisco Firepower Threat Defense (FTD), Cisco VPN, Citrix NetScaler, Citrix ShareFile, Cleveland City Schools, Clorox, CloudNordic, Coastal Orthopedics, Cobra DocGuard, CODESYS V3, Coffee Meets Bagel, Coinbase, Colorado Department of Health Care Policy & Financing, CraftRise, Cummins Behavioral Health Systems, CyberPower PowerPanel, Cypher, Data Media Associates, Dataprobe iBoot, Dell Compellent, Detroit Central City Community Mental Health, Discord, Discord.io, DuoLingo, Dymocks Booksellers, El Salvadoran government, a south African electrical utility, EMS Management and Consultants Inc, Energy One Limited, Enzo Clinical Labs, Inc., Exactly Protocol, Florida Healthy Kids, Ford SYNC3, Forever 21, France’s Pôle emploi, Free Download Manager, Freecycle, Geico, Gemini North Observatory, GitLab, Google Chrome, Google Looker Studio, Harbor Protocol, Harris Center for Mental Health and Intellectual and Developmental Disabilities, Health Care Service Corporation, Health Employers Association of BC, Highgate Wood School, Illinois Department of Public Health, iMenu360, Indiana University Health, Intel CPUs, iPhone iMessage, Israel’s Mayanei Hayeshua hospital, iTrust Wellness Group, Ivacy VPN, Ivanti Avalanche, Ivanti MobileIron, Ivanti Sentry, IXPERTA, Japan’s Cybersecurity Agency (NISC), Jefferson Health, Jobzone, Johnson & Johnson Health Care Systems, Juniper EX switches, Juniper SRX firewalls, Jupiter X Core, Just Kids Dental, Kroll (that’s appropriate), Leaseweb, Libbitcoin, Lifeline Health Systems, Lincoln SYNC3, LinkedIn, LogicMonitor, Lolek Bulletproof Hosting, MacOS, Madera County, Magellan Rx Management, Maiden Erlegh Trust, Manipulated Caiman, Maximus Health Services Inc, McAlester Regional Health Center, Mend.io, MGM Resorts International, Microsoft 365 corporate accounts, Microsoft Azure Active Directory, Microsoft’s PowerShell Gallery, Milan Eye Center, MinIO, Missouri Department of Social Services, Morris Hospital & Healthcare Centers, Mountain View Family Practice, PC, Nice Pak Products Inc., Norfolk and Suffolk police, Nova Scotia government, NPO Mashinostroyeniya, NVIDIA D3D10 Driver, NXP, O’Neil Digital Solutions, LLC, OAS Engine, Openfire, Orrick, Herrington & Sutcliffe, Pampling, Paramount Global, PCC Pediatric EHR Solutions, Performance Health Technology, PHPFusion, Pizza Hut Australia, PlayCyberGames, Poland’s PKP railway, Police Service of Northern Ireland (PSNI) —  twice, Prime Therapeutics, Prince George’s County Public Schools, Prospect Medical Group, Prospect Medical Holdings, PurFoods/Mom’s Meals, QakBot, Radius Global Solutions, Ranhill Utilities Berhad, Rapattoni, Resort Data Processing, Respublikinė Vilniaus Psichiatrijos Ligoninė, Rightbiz, Rite Aid, Roberto Polizzi, RocketSwap, Sabre, Schneck Medical Center, See Tickets, Seiko, Serco, Inc., SevenRooms, Seville, Spain, Singing River Health System, Sourcegraph, South African National Defence Force, SouthCoast Medical Group, LLC, Sovos Compliance LLC, Spring WebFlux, Sri Lankan Government, St. Paul Public Schools, Stake.com, Starmount Life Insurance Co, SUNY at Buffalo School of Dental Medicine, SysInformation Healthcare Services, LLC, Terra, Tesla, Three Crowns Park, Tift Regional Medical Center, TitleMax, Topgolf Callaway, TP-Link Tapo, TRACT Radiology, TTEC Healthcare Solutions, a UK internet backbone infrastructure provider, UK Metropolitan Police, UK Ministry of Defence, Ukrainian Military, United Bankshares, Inc., United Healthcare Services, Inc., UnitedHealthcare, University of Massachusetts Chan Medical School, University of Michigan, University of Sydney, University of Utah, UofL Health, US Department of Defense (DoD), US Drug Enforcement Administration (DEA), US energy company, US Government email servers, Vecino Health Centers, Venus Protocol, Virginia Dept. of Medical Assistance Services, Viva Air, VMware’s Aria Operations for Networks, VNS Health Plans, WebDetetive, WinRAR, Zaun, Zengo, Zimbra Collaboration Suite, Zoom ZTP, and Zunami have reportedly been hacked or compromised this month.

Coffee Meets Bagel, German Federal Financial Supervisory Authority (BaFin), Hotmail, Midwest Hospital Group, Rogers, Square, and Toyota have suffered from outages this month.

Last months updates broke Microsoft Exchange, MSI BIOS compatibility, Windows drive partitions, Windows EFI boot loader, Windows Group Policy, Windows LAPS, Windows Search, Windows Time service, and Windows Update for Business.

The new Microsoft Edge for Business release was such a disaster that enterprise customers are moving to Chrome and Firefox.

Facebook Messenger has become a major target of phishing. Again. So is Microsoft Teams.

The fallout from the LastPass hack last year is still coming to light, including repeated hijacks of large cryptocurrency accounts. At the time we were assured that since the data was “strongly encrypted” that there was no chance of accounts being exposed. It seems that faith was misplaced. 

Microsoft will finally be eliminating WordPad. This isn’t really that surprising since all supported versions of Windows are now born with MS Office already installed.
What is less surprising is that they’re also killing off Visual Studio for Mac and disabling support for older TLS versions in the next few months, which is likely to prevent many network and automation apps from working. 

Another ransomware key decryptor is now available.

The Taliban is working with Huawei to install facial detection cameras. Experian Consumer Services has been caught spamming, to the tune of $650k. The Federal Trade Commission has publicly named 130 healthcare firms sharing user information with third parties through web trackers.

Google has added a new feature in Chrome, “Privacy Sandbox,” to use your browsing history to show ads. Turn it all off.

Now for the good news:

There may finally be a good reason to use Microsoft Paint. It will soon have the ability to remove photo backgrounds. And — this is hard for me to believe — Apple, yes that Apple, is supporting the California State “Right to Repair” bill.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is huge this month. The typical computer should see roughly 5 GB in updates today. Let’s get started.

Microsoft released updates to address 73 vulnerabilities in .NET, .NET Core, .NET Framework, 3D Builder, 3D Viewer, AMD CPU Branch, Azure DevOps, Azure HDInsights, Microsoft Azure Kubernetes Service, Microsoft Dynamics, Microsoft Dynamics Finance & Operations, Microsoft Edge, Microsoft Exchange Server, Microsoft Identity Linux Broker, Microsoft Office, Microsoft Office Excel, Microsoft Office Outlook, Microsoft Office SharePoint, Microsoft Office Word, Microsoft PostScript Printer Driver, Microsoft Streaming Service, Microsoft Windows Codecs Library, Servicing Stack Update, Visual Studio, Visual Studio Code, Windows Cloud Files Mini Filter Driver, Windows Common Log File System Driver, Windows Defender, Windows DHCP Server, Windows GDI, Windows Internet Connection Sharing (ICS), Windows Kernel, Windows Photo Import API, Windows Scripting, Windows TCP/IP, Windows Themes, and MSRT (~1.5 GB). This includes security updates. A reboot is required.

Apple released updates for macOS Ventura 13.5.2, macOS Monterey 12.6.9, macOS Big Sur 11.7.10, iOS 16.6.1 and 15.7.9, iPadOS 16.6.1 and 15.7.9, watchOS 9.6.2, and tvOS 16.6. This includes security updates. Use Apple Software Update to install these updates. A reboot is required.

iOS 16.6.1 and 15.7.9 are security updates. Use Settings, General, Software Update to install the most current update.

iPadOS 16.6.1 and 15.7.9 are security updates. Use Settings, General, Software Update to install the most current update.

watchOS 9.6.2 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 16.6 is a security update. Use System, Software Update to install the most current version.

Google Chrome OS 115.0.5790.182 and 108.0.5359.242 are security updates. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Ventura (13.x) means that macOS Catalina (10.15) and older are no longer supported. If you can not install at least macOS Big Sur (11) on your Mac then you should immediately remove it from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current — and final — release of the Windows 10 (v22H2) is very large so will take a long time to download on slower connections. All non-LTS versions of Windows 10 other than v22H2 are now out of support, upgrade to v22H2 now. If you aren’t sure whether you are using LTS, you aren’t. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v22H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is now stable and can be upgraded to if your hardware supports it, but I recommend you continue to use Windows 10 until early 2025 before you consider switching to it.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

AMD Adrenalin 23.9.1 resolves a stability bug. This is not a security update.
https://www.amd.com/en/support

BullZip PDF Printer 14.4.0.2963 updates translations. This is not a security update.
https://www.bullzip.com/products/pdf/info.php#download

Crucial Storage Executive 9.07 doesn’t provide a changelog so should be treated as a security update.
https://www.crucial.com/support/storage-executive

Display Driver Uninstaller 18.0.6.7 improves cleanup and resolves a couple bugs. This is a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

DS4Windows 3.2.14 adds several new controls and translations. This is not a security update.
https://github.com/Ryochan7/DS4Windows/releases/latest

Garmin Express 7.18.3 doesn’t provide a changelog so should be treated as a security update.
https://www.garmin.com/en-US/software/express/

GSLite 20230809 is a security update.
https://www.bullzip.com/products/pdf/download.php

TP-Link Archer A6 v3 230828 is a security update.
https://www.tp-link.com/us/support/download/archer-a6/v3/#Firmware

TP-Link Archer AX21 v1.20 230829 is a security update.
https://www.tp-link.com/us/support/download/archer-ax21/v1.20/#Firmware

Wacom Driver 6.4.3-1 adds support for newer hardware and resolves a couple bugs. This is not a security update.
https://www.wacom.com/en-us/support/product-support/drivers

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.57.62 is a security update.
https://brave.com/

Firefox 117.0.1 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Firefox ESR 115.2.1 is a security update.
https://www.mozilla.org/en-US/firefox/organizations/all/

Google Chrome 116.0.5845.187 is a security update.
https://www.google.com/chrome/

Iridium 2023.09.116 is a security update.
https://iridiumbrowser.de/

Microsoft Edge 116.0.1938.81 is a security update.
https://www.microsoft.com/en-us/edge/business/download

Vivaldi 6.2.3105.48 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

NK2Edit 3.46 adds the icon to dialogs and resolves an empty field bug. This is not a security update.
https://www.nirsoft.net/utils/outlook_nk2_edit.html

ProtonMail (Android) 3.0.16 doesn’t provide a detailed changelog so should be treated as a security update.
https://proton.me/mail/download

Spark 3.8.3 resolves several bugs. This should be treated as a security update.
https://sparkmailapp.com/

Thunderbird 115.2.1 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 7.1.16 improves localization. This is not a security update.
https://anydesk.com/en/downloads

BrowsingHistoryView 2.56 improves cosmetics. This is not a security update.
https://www.nirsoft.net/utils/browsing_history_view.html

Dropbox 182.4.6427 resolves several bugs. This is not a security update.
https://www.dropbox.com/

Facebook Messenger 195.0.0.4.225 is a security update.
https://www.messenger.com/download

FileZilla Server 1.7.3 is a security update.
https://filezilla-project.org/

FreeFileSync 13.0 resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Google Drive 80.0 improves performance, installation size and resolves several bugs. This is not a security update. Note that Windows 8, Windows Server 2012, and 32-bit Windows of all flavors are no longer supported — you can still access your files through Firefox on these devices.
https://drive.google.com/start

Grocy 4.0.3 improves performance and resolves several bugs. This is not a security update.
https://grocy.info/

Grocy Desktop 2.7.0 improves compatibility. This is not a security update.
https://github.com/grocy/grocy-desktop

IPInfoOffline 1.70 adds support for sapics IP-Location. This is not a security update.
https://www.nirsoft.net/utils/ip_country_info_offline.html

jq 1.7 is the first update in 5 years and doesn’t disappoint. This build adds several new functions, logical structures, stability, output formats, and resolves dozens of bugs. This is not a security update.
https://jqlang.github.io/jq/

Microsoft Teams 1.6.00.22378 doesn’t provide a changelog so should be treated as a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 27.0.2 updates dependencies and resolves dozens of bugs. This is not a security update.
https://nextcloud.com/

PuTTY 0.79 resolves a dozen bugs. This is a security update.
https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html

Rclone 1.64.0 adds new backends, multithreaded transfers, and resolves dozens of bugs. This is not a security update.
https://rclone.org/

Signal 6.30.1 resolves several bugs. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 6.31.2 improves performance. This is not a security update.
https://signal.org/android/apk/

Skype 8.102.0.211 expands AI integration and resolves several bugs. This is not a security update.
https://www.skype.com/

Syncthing 1.24.0 resolves several bugs. This is not a security update.
https://syncthing.net/

Technitium DNS Server 11.4.1 resolves several bugs. This is not a security update.
https://technitium.com/dns/

Telegram 4.9.5 ads several new bot web-app features and resolves several bugs. This is not a security update.
https://telegram.org/

Telegram (Android) 10.0.1 doesn’t provide a changelog so should be treated as a security update.
https://telegram.org/apps

Trillian 6.5.0.31 resolves several bugs. This is not a security update.
https://www.trillian.im/

Wget2 2.1.0 adds support for sitemaps, certificate validation, improves recursion, and resolves a dozen bugs. This is a security update.
https://gitlab.com/gnuwget/wget2/-/releases

Zoom 5.15.12.21574 adds several new features (and the ability to disable!) to their integrated AI Companion offering. This is not a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

3tene 3.0.12 resolves several bugs. This is not a security update.
https://en.3tene.com/

Picard 2.9.2 resolves a dozen bugs and improves update detection behavior. This is not a security update.
https://picard.musicbrainz.org/

Plex Desktop 1.78.2.3975 resolves several bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Home Theater 1.47.1.3971 resolves a couple networking bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Game Updates

These are unlikely to be of interest to most people.

GameMaker Studio 2023.8.0.98 updates libraries and runtimes, improves debugging capabilities, and resolves dozens of bugs. This is not a security update.
https://www.yoyogames.com/en/gamemaker

GDevelop 5.2.172 resolves several bugs. This is not a security update.
https://gdevelop.io/download

Lego Studio 2.23.8.1 resolves several bugs and adds new palette controls, tagging and GUI elements. This is not a security update.
https://www.lego.com/en-us/ldd

Minecraft Server (Bedrock) 1.20.15.01 doesn’t provide a changelog so should be treated as a security update.
https://www.minecraft.net/en-us/download/server/bedrock

Nintendo Switch 16.1.0 improves stability. This is not a security update.
https://en-americas-support.nintendo.com/app/answers/detail/a_id/22525/kw/system%20updates/p/989

PlayStation PS5 23.01-07.61.00 improves performance. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Connect 12.4.1 is a security update.
https://helpx.adobe.com/security/products/connect/apsb23-33.html

Adobe Experience Manager 6.5.18.0 is a security update.
https://helpx.adobe.com/security/products/experience-manager/apsb23-43.html

Adobe Reader DC 23.006.20320 and 20.005.30524 are security updates.
https://get.adobe.com/reader

Blender 3.6.2 resolves several bugs. This is not a security update.
https://www.blender.org/download/

Calibre 6.26.0 adds support for new hardware, new stylization options, and resolves several bugs. This is not a security update.
https://calibre-ebook.com/

Ghostscript 10.01.2 is a security update.
https://www.ghostscript.com/releases/gsdnld.html

Kdenlive 23.08.0 adds support for several new formats, improved hardware support and performance, and resolves several bugs. This is not a security update.
https://kdenlive.org/

Kindle for PC 2.0.70301 doesn’t provide a changelog so should be treated as a security update.
https://www.amazon.com/kindleforpc

LibreOffice 7.5.6 resolves over 50 bugs. This is not a security update.
https://www.libreoffice.org/

LibreOffice Fresh 7.6.1 provides over 400 new features and bug fixes. This is not a security update. Remember that the “Fresh” line is beta software and the “Still” line should be used wherever possible.
https://www.libreoffice.org/

Nextcloud Desktop 3.9.4 resolves several bugs. This is not a security update.
https://nextcloud.com/

Notepad++ 8.5.7 is a security update.
https://notepad-plus-plus.org/

Paint.net 5.0.9 resolves several bugs and improves stability. This is not a security update.
https://www.getpaint.net/

PDF-XChange Editor 10.1.0.380 is a security update.
https://www.tracker-software.com/product/pdf-xchange-editor

Security Software Updates

One or more of these is likely to be of interest to most people.

.NET Runtime 7.0.11 is a security update.
https://dotnet.microsoft.com/en-us/download/dotnet

Chainsaw 2.7.3 updates dependencies, adds new rules, and resolves export data issues. This is not a security update.
https://github.com/countercept/chainsaw

DNSQuerySniffer 1.95 adds support for sapics IP geolocation. This is not a security update.
https://www.nirsoft.net/utils/dns_query_sniffer.html

JShelter 0.14 improves performance, internationalization, and resolves several bugs. This is not a security update.
https://jshelter.org/install/

Kaspersky Removal Tool 20.0.6.0 doesn’t provide a changelog so should be treated as a security update.
https://support.kaspersky.com/viruses/utility

MalwareBytes Anti-Malware 4.6.2 improves detection, internationalization, and resolves several bugs. This is not a security update.
https://www.malwarebytes.org/antimalware/

OpenSSL 1.1.1w is a security update.
https://www.openssl.org/source/

ProtonVPN (macOS) 3.3.2 resolves several bugs and adds B2B WPN support. This is not a security update.
https://protonvpn.com/download

RogueKiller 15.12.0 resolves several bugs. This is not a security update.
https://www.adlice.com/download/roguekiller/

Tails 5.17 is a short follow-on to a critical security update in 5.16.1. This version adds new printer drivers and enables all drivers by default (which I personally think is a horrible idea) and updates libraries. This is a security update.
https://tails.boum.org/install/dvd/index.en.html

uBlock Origin 1.52.0 improves performance and stability, adds new operators, and resolves several bugs. This is a security update.
https://github.com/gorhill/uBlock/releases/latest

Velociraptor 0.7.0 adds several new features and many bug fixes. This is not a security update.
https://github.com/Velocidex/velociraptor/releases/latest

Capture Updates

These are unlikely to be of interest to most people.

SnagIt 23.2.1 updates libraries, improves output options, and resolves several bugs. This is not a security update.
https://www.techsmith.com/screen-capture.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 12.1.1.5 adds support for new encodings. This is not a security update.
https://www.dvdfab.cn/download.htm

PDF Creator 5.1.2 is a security update.
https://www.pdfforge.org/pdfcreator

StreamFab 6.1.4.1 improves compatibility and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

UniFab 1.0.3.0 resolves several bugs. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero 6.0.27 resolves several bugs and adds support for macOS Sonoma. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password for Mac 8.10.13 resolves dozens of bugs and updates libraries. This should be treated as a security update.
https://1password.com/downloads/mac/

1Password for Windows 8.10.13 resolves dozens of bugs and updates libraries. This should be treated as a security update.
https://1password.com/downloads/windows/

Agent Ransack 2022.3406 resolves a compatibility bug. This is not a security update.
https://www.mythicsoft.com/agentransack/download/

Bitwarden 2023.8.3 doesn’t provide a changelog so should be treated as a security update.
https://bitwarden.com/

CCleaner 6.15.10623 adds and updates cleaning rules. This is not a security update.
https://www.ccleaner.com/

CintaNotes 3.14 is *finally* released. This version resolves several stability and reliability bugs. This is not a security update.
https://cintanotes.com/download

CPU-Z Installer 2.07 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

Cygwin 3.4.9 resolves several bugs. This is a security update.
https://cygwin.com/

DesktopOK 11.08 improves compatibility and resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

DevManView 1.80 adds high DPI support, ability to run unelevated, an elevation switch, and a dark background option. This is not a security update.
https://www.nirsoft.net/utils/device_manager_view.html

dnGrep 4.0.69.0 adds pause/resume support, improved print output, and updates libraries. This is a security update.
https://dngrep.github.io/

email-oauth2-proxy 2023-09-06 resolves several bugs and improves compatibility. This is a security update.
https://github.com/simonrob/email-oauth2-proxy

ESEDatabaseView 1.74 resolves a couple bugs. This is not a security update.
https://www.nirsoft.net/utils/ese_database_view.html

Fido 1.51 improves compatibility. This is not a security update.
https://github.com/pbatard/Fido/releases

FileLocator Pro 2022.3406 resolves a compatibility bug. This is not a security update.
https://www.mythicsoft.com/filelocatorpro/download

FileTypesMan 1.98 adds sort menus and buttons. This is not a security update.
https://www.nirsoft.net/utils/file_types_manager.html

Git SCM 2.42.0 resolves dozens of bugs. This is not a security update.
https://git-scm.com/

Go 1.21.1 is a security update.
https://go.dev/

GoodSync 12.3.6 resolves several bugs. This is not a security update.
https://www.goodsync.com/

HWiNFO 7.62 doesn’t provide a changelog so should be treated as a security update.
https://www.hwinfo.com/download/

HWMonitor 1.52 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/hwmonitor.html

IsMyHdOK 3.91 improves compatibility. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/IsMyHdOK

Kingston SSD Manager 1.5.3.3 doesn’t provide a changelog so should be treated as a security update.
https://www.kingston.com/us/support/technical/ssdmanager

NConvert 7.155 improves HEIC and TIFF support. This is not a security update.
https://www.xnview.com/en/nconvert/

NTLite 2023.8.9408 improves compatibility and resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

Open-Shell 4.4.191 resolves over a dozen bugs and improves compatibility. This is not a security update.
https://github.com/Open-Shell/Open-Shell-Menu

PointerStick 6.31 improves compatibility. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

PowerToys 0.73.0 resolves dozens of bugs. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest

QuickSetDNS 1.35 improves high DPI support, adds menu and toolbar controls, and keyboard support. This is not a security update.
https://www.nirsoft.net/utils/quick_set_dns.html

RoboForm 9.5.2 resolves several bugs. This is not a security update.
https://www.roboform.com/

ScreenConnect 23.6.8.8644 resolves dozens of bugs. This is not a security update.
https://www.connectwise.com/software/control/download

TraceRouteOK 3.33 improves compatibility. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/TraceRouteOK

Unity 2023.1.12 resolves dozens of bugs. This is not a security update.
https://unity3d.com/get-unity/download/archive

Ventoy 1.0.95 resolves a couple bugs and adds new distros. This is not a security update.
https://www.ventoy.net/en/index.html

WifiInfoView 2.91 resolves a detection bug. This is not a security update.
https://www.nirsoft.net/utils/wifi_information_view.html

WinGet 1.5.2201 resolves a couple bugs and is now available through the PowerShell Gallery. This is not a security update.
https://github.com/microsoft/winget-cli/releases/latest

WizTree 4.15 improves deletion detection and display, TSV support, and updates translations. This is not a security update.
https://www.diskanalyzer.com/

Developer Updates

These are unlikely to be of interest to most people.

Android Studio 2022.3.1.19 adds several new features. This is not a security update.
https://developer.android.com/studio

AutoHotkey 2.0.8 resolves several parsing and key mapping bugs. This is not a security update.
https://www.autohotkey.com/download/

GitHub Desktop 3.3.1 adds support for commit signing, repository rules, fixes several bugs and improves output, contrast, and accessibility. This is not a security update.
https://desktop.github.com/

Node.js 16.20.2 is a security update.
https://nodejs.org/en/

Node.js 18.17.1 is a security update.
https://nodejs.org/en/

Node.js 20.6.1 is a security update.
https://nodejs.org/en/

Python 3.11.5 is a security update.
https://www.python.org/downloads/windows/

SQLite 3.43.1 resolves several bugs. This is not a security update.
https://www.sqlite.org/download.html

Visual Studio Code 1.82.1 adds several new features and improves accessibility. This is a security update.
https://code.visualstudio.com/

Virtual Machine Updates

These are unlikely to be of interest to most people.

PPSSPP 1.16 adds support for new backends, resolves dozens of bugs, and improves reliability. This is not a security update.
https://www.ppsspp.org/download/

Web Package Updates

These are likely to be of interest only to web developers.

Grocy 4.0.3 is a major update improving compatibility, adds several new features, improved calculations and field support, and dozens of bug fixes. This should be treated as a security update.
https://github.com/grocy/grocy

Invision Community 4.7.13 resolves dozens of bugs. This is not a security update.
https://invisioncommunity.com/

Joomla 3 is now end of life (EOL). *Please* upgrade to Joomla 4 as soon as possible.
https://www.joomla.org/announcements/release-news/5894

Joomla 4.3.4 resolves several bugs. This is not a security update.
https://www.joomla.org/

jQuery 3.7.1 resolves several bugs. This is not a security update.
https://code.jquery.com/

ownCloud Server 10.13.1 resolves dozens of bugs. This is not a security update.
https://owncloud.com/download-server/

WordPress 6.3.1 resolves several bugs. This is not a security update.
https://wordpress.org/

BuddyPress 11.3.1 is a security update.
https://wordpress.org/extend/plugins/buddypress/

Idea Publisher 1.0.9 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/idea-publisher/

Social Post Feed 4.2 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/custom-facebook-feed/

W3 Total Cache 2.4.1 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/w3-total-cache/

WooCommerce 8.0.3 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/woocommerce/

WP Cerber Security 9.5.7 adds and extends 2FA support. This is not a security update.
https://wpcerber.com/

WP Mail SMTP 3.9.0 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/wp-mail-smtp/

WP Plugin Update Checker 5.2 improves compatibility. This is not a security update.
https://github.com/YahnisElsts/plugin-update-checker/releases/latest

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2023-03-14

Posted on by

Welcome back, Folks!

Today is Patch Tuesday for March, 2023.

This month brings a (mere) 104 major hacks and over 169 application updates. It’s the lightest month we’ve seen in a while with about 2 GB of updates for most users.

This Month in Technology

AASP, Acer, Activision, Albanian Government, Algodex, Aloha Nursing Rehab Centre, Andrade Gutierrez, AT&T, Atlassian, Bahrain International Airport, Booking.com, Boost Mobile, Burton Snowboards, California Northstate University, Cardiovascular Associates, CentraState, Cerebral Inc, Chick-fil-A, Codman Square Health Center, Coinbase, Community Health Systems, Convex, Danish Hospital websites, Dental Health Management Solutions, Denver Public Schools, Dish Network, Dole, Edgepark Medical Supplies, eMDs, Inc, Essendant, Euler Finance, Eye4Fraud, Fasecolda, the FBI, Flutterwave, Fonasa, Fortinet FortiOS, GDS Holdings, GoDaddy, GSC Game World, GunAuction.com, Hatch Bank, Hawai’i Department of Health, HDB Financial Services, HDFC Bank, Health Link, Henrico Doctors Hospital, Hope Finance, Hospital Clinic de Barcelona, Housing Authority of the City of Los Angeles, Hutchinson Clinic, Hyundai and Kia, iD Tech, Integrative Dentistry, Jump Crypto, LastPass, Lawrence General Hospital, LBB, Lehigh Valley Health Network, LimeVPN, Long Son Petrochemicals, Los Angeles Unified School District, Minneapolis Public Schools, News Corporation, Northeast Surgical Group, PC, Norwegian National Authority for Investigation and Prosecution of Economic and Environmental Crimes, Oakland, CA, PayPal, PetroVietnam, Pierce Transit, Platypus, POSCO Engineering & Construction, RealDudesInc, Reventics, LLC, Ring, Rosarito, San Juan Regional Medical Center, Scandinavian Airlines, Sentara Healthcare, Sharp Healthcare, Shopper+, Southeastern Louisiana University, SpaceX, ST Telemedia Global Data Centers, Stanford University, Technion, TELUS, Tender.fi, Tennessee State University, The Good Guys, Tusla, U.S. Marshals Service, Uranium Finance, Veeam, VGTRK, over 2,800 VMware hosts, Weee, West Cecil Health Center, WH Smith, White Bird Clinic, Wichita Urology Group, PA, Zoll Medical Corp, ZOLL Medical, and Zurcal have reportedly been hacked or compromised this month.

Twitter (twice), Russian state media, Microsoft Exchange Online, and Gmail IMAP have had major outages this month.

Two of the three largest bank failures in US history happened this week. Silicon Valley Bank was (briefly) shut down by regulators after mishandling billions of dollars.
Only days after Silvergate Capital Corp‘s collapse, and Signature Bank followed days later. Roku, for example, was set to lose over 99.9% of their deposits at SVB, almost 26% of their total cash. AcuityAds Holding, BlockFi, Rocket Lab, Roblox, and others were also at risk of major losses. Unfortunately, the federal government is going to bail them out, allowing bad business decisions to avoid any negative repercussions and giving way to cheap investments by larger banks to effectively stack the dominoes higher.

Last months updates broke IIS for Alliance.

Now for the good news:

 

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is small this month. The typical computer should see roughly 2 GB in updates today. Let’s get started.

Microsoft released updates to address 98 vulnerabilities in Azure, Client Server Run-time Subsystem (CSRSS), Internet Control Message Protocol (ICMP), Microsoft Bluetooth Driver, Microsoft Dynamics, Microsoft Edge (Chromium-based), Microsoft Graphics Component, Microsoft Office Excel, Microsoft Office Outlook, Microsoft Office SharePoint, Microsoft OneDrive, Microsoft PostScript Printer Driver, Microsoft Printer Drivers, Microsoft Windows Codecs Library, Office for Android, Remote Access Service Point-to-Point Tunneling Protocol, Role: DNS Server, Role: Windows Hyper-V, Service Fabric, Visual Studio, Windows Accounts Control, Windows Bluetooth Service, Windows Central Resource Manager, Windows Cryptographic Services, Windows Defender, Windows HTTP Protocol Stack, Windows HTTP.sys, Windows Internet Key Exchange (IKE) Protocol, Windows Kernel, Windows Partition Management Driver, Windows Point-to-Point Protocol over Ethernet (PPPoE), Windows Remote Procedure Call, Windows Remote Procedure Call Runtime, Windows Resilient File System (ReFS), Windows Secure Channel, Windows SmartScreen, Windows TPM, Windows Win32K and MSRT (~ 1 GB). This includes security updates. A reboot is required.

Apple released updates for GarageBand for macOS 10.4.8, tvOS 16.3.3, and macOS Big Sur 11.7.4. This includes security updates. Use Apple Software Update to install these updates. A reboot is required.

tvOS 16.3.3 is a security update. Use System, Software Update to install the most current version.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Ventura (13.x) means that macOS Catalina (10.15) and older are no longer supported. If you can not install at least macOS Big Sur (11) on your Mac then you should immediately remove it from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current release of the Windows 10 (v22H2) is very large so will take a long time to download on slower connections. Windows 10 pushes you to get the latest Windows 10 release every 12 months and only supports any consumer builds for 18 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v22H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is still very young so I encourage you to wait a few more months before you consider switching to it.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

AMD Adrenalin 23.3.1 improves performance and reliability and resolves several bugs. This is not a security update.
https://www.amd.com/en/support

BullZip PDF Printer 14.2.0.2955 resolves the PrintToPrinter bug. This is not a security update.
https://www.bullzip.com/products/pdf/info.php#download

Crucial Storage Executive 9.01 doesn’t provide a changelog so should be treated as a security update.
https://www.crucial.com/support/storage-executive

Display Driver Uninstaller 18.0.6.1 introduces a new installer, improves Intel cleanup and improves user interface. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

DS4Windows 3.2.9 adds DualSense Edge support and resolves over a dozen bugs. This is not a security udpate.
https://github.com/Ryochan7/DS4Windows/releases/latest

Garmin Express 7.16.3 doesn’t provide a changelog so should be treated as a security update.
https://www.garmin.com/en-US/software/express/

Samsung DeX 2.4.1.11 doesn’t provide a changelog so should be treated as a security update.
https://www.samsung.com/us/apps/dex/

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.49.120 is a security update.
https://brave.com/

Firefox 111.0 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Google Chrome 111.0.5563.64 is a security update.
https://www.google.com/chrome/

Google Chrome 109.0.5414.129 is a security update. Chrome v109 is being maintained until October 2023 to support Windows Server 2012 and Windows Server 2012 R2.
https://www.google.com/chrome/

Microsoft Edge 110.0.1587.69 is a security update.
https://www.microsoft.com/en-us/edge/business/download

Vivaldi 5.7.2921.63 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

ProtonMail (Android) 3.0.12 improves stability. This is not a security update.
https://proton.me/mail/download

Spark 3.3.4.44396 resolves several bugs and adds zoom and message dragging. This is not a security update.
https://sparkmailapp.com/

Spark (macOS) 3.3.4.44394 resolves several bugs and adds zoom and message dragging. This is not a security update.
https://sparkmailapp.com/

Thunderbird 102.8.0 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

curl 7.88.1 resolves dozens of bugs. This is not a security update.
https://curl.haxx.se/windows/

Dropbox 169.4.5684 resolves several bugs. This is not a security update.
https://www.dropbox.com/

Facebook Messenger 182.0.0.9.73 is a security update.
https://www.messenger.com/download

FileZilla Client 3.63.2.1 updates libraries and resolves several bugs. This is a security update.
https://filezilla-project.org/

FileZilla Server 1.6.7 updates libraries and resolves several bugs. This is a security update.
https://filezilla-project.org/

FreeFileSync 12.1 resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Microsoft Teams 1.6.00.4472 improves caption and rich call support. This is not a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 25.0.4 updates libraries and resolves dozens of bugs. This is a security update.
https://nextcloud.com/

Omada Software Controller 5.9.9 resolves a couple bugs and adds several new features. This is not a security update.
https://www.tp-link.com/us/support/download/omada-software-controller/

Pocketnet-GUI 0.8.41 adds audio upload and resolves several bugs. This is not a security update.
https://pocketnet.app/

Prosody 0.12.3 resolves several bugs. This is not a security update.
https://prosody.im/download/start

Rclone 1.62.0 adds several new features and fixes dozens of bugs. This is not a security update.
https://rclone.org/

Signal 6.9.0 resolves several bugs. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 6.13.7 doesn’t provide a detailed changelog so should be treated as a security update.
https://signal.org/android/apk/

Skype 8.94.0.428 doesn’t provide a detailed changelog so should be treated as a security update.
https://www.skype.com/

Syncthing 1.23.2 updates libraries and resolves a relay bug. This is not a security update.
https://syncthing.net/

Technitium DNS Server 11.0.3 is a security update. This version is no longer compatible with operating systems older than Windows 10.
https://technitium.com/dns/

Telegram 4.6.5 resolves several bugs. This is not a security update.
https://telegram.org/

Zoom 5.13.11.13434 resolves several bugs. This is not a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

Bitwig Studio 4.4.8 improves stability. This is not a security update.
https://www.bitwig.com/download/

darktable 4.2.1 resolves over a dozen bugs. This is not a security update.
https://www.darktable.org/

Kodi 20.1 resolves dozens of bugs. This is not a security update.
https://kodi.tv/

Plex Desktop 1.65.1.3596 resolves several bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Home Theater 1.35.1.3614 resolves several bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Media Server 1.31.2.6810 resolves several bugs including crash bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-media-server

Game Updates

These are unlikely to be of interest to most people.

GameMaker Studio 2023.2.0.71 resolves dozeens of bugs. This is not a security update.
https://www.yoyogames.com/en/gamemaker

GDevelop 5.1.158 resolves dozens of bugs. This is not a security update.
https://gdevelop.io/download

Lego Studio 2.23.2.1 now displays the color of bricks in the tooltip. This is not a security update.
https://www.lego.com/en-us/ldd

Nintendo Switch 16.0.0 improves stability. This is not a security update.
https://en-americas-support.nintendo.com/app/answers/detail/a_id/22525/kw/system%20updates/p/989

PlayStation PS3 4.90 improves performance. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps3/system-software/

PlayStation PS4 10.50 provides several cosmetic updates. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps4/system-software/

PlayStation PS5 23.01-07.01.00 improves stability and adds several cosmetic and voice features. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Reader DC 23.001.20064 is a security update.
https://get.adobe.com/reader

Adobe Commerce 2.4.6, 2.4.5-p2, and 2.4.4-p3 are security updates.
https://helpx.adobe.com/security/products/magento/apsb23-17.html

Adobe Experience Manager 2023.1 and 6.5.16.0 are security updates.
https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html

Adobe Illustrator 27.3.1 is a security update.
https://helpx.adobe.com/security/products/illustrator/apsb23-19.html

Adobe Dimension 3.4.8 is a security update.
https://helpx.adobe.com/security/products/dimension/apsb23-20.html

Adobe Creative Cloud 5.10 is a security update.
https://helpx.adobe.com/security/products/creative-cloud/apsb23-21.html

Adobe Substance 3D Stager 2.0.1 is a security update.
https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html

Adobe Photoshop 23.5.4 and 24.2.1 are security updates.
https://helpx.adobe.com/security/products/photoshop/apsb23-23.html

Adobe ColdFusion 2018.16 and 2021.6 are security updates.
https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html

Audacity 3.2.5 resolves a reliability bug with third-party auth. This is not a security update.
https://www.audacityteam.org/download/

Calibre 6.14.0 improves metadata controls and resolves several bugs. This is not a security update.
https://calibre-ebook.com/

GIMP 2.10.34 resolves several bugs. This is not a security update.
https://www.gimp.org/

ImageMagick 7.1.1-3 adds support for HEIC and resolves several bugs. This is not a security update.
https://imagemagick.org/

Kindle for PC 1.40.65535 doesn’t provide a changelog so should be treated as a security update.
https://www.amazon.com/kindleforpc

LibreOffice 7.4.6 resolves over 70 bugs. This is a security update.
https://www.libreoffice.org/

LibreOffice Fresh 7.5.1 resolves 90 bugs. This is a security update.
https://www.libreoffice.org/

Nextcloud Desktop 3.7.4 resolves several bugs. This is not a security update.
https://nextcloud.com/

Notepad++ 8.5 updates libraries and resolves dozens of bugs. This is not a security update.
https://notepad-plus-plus.org/

OpenOffice 4.1.14 resolves several bugs. This is not a security update.
https://www.openoffice.org/download/

Paint.net 5.0.2 adds ability to invert Alpha channel, performance improvements, and resolves several bugs. This is not a security update.
https://www.getpaint.net/

PDF-XChange Editor 9.5.367.0 is a security update.
https://www.tracker-software.com/product/pdf-xchange-editor

Security Software Updates

One or more of these is likely to be of interest to most people.

Chainsaw 2.5.0 resolves several bugs. This is not a security update.
https://github.com/countercept/chainsaw

MalwareBytes Anti-Malware 4.5.23 is a security update.
https://www.malwarebytes.org/antimalware/

OpenSSL 3.1.0 is a security update.
https://slproweb.com/products/Win32OpenSSL.html

ProtonVPN 3.0.14 improves user interface. This is not a security update.
https://protonvpn.com/download

RogueKiller 15.8.1 resolves several bugs. This is not a security update.
https://www.adlice.com/download/roguekiller/

SanDisk PrivateAccess 6.3.12 doesn’t provide a changelog so should be treated as a security update.
https://support-en.wd.com/app/answers/detailweb/a_id/48025

Tails 5.10 is a security update.
https://tails.boum.org/install/dvd/index.en.html

TinyWall 3.3.1 resolves a couple bugs and releases it open source. This is not a security update.
https://tinywall.pados.hu/

uBlock Origin 1.47.4 resolves several bugs. This is not a security update.
https://github.com/gorhill/uBlock/releases/latest

VT-CLI 0.13.0 adds a couple new features. This is not a security update.
https://github.com/VirusTotal/vt-cli/releases/latest

Capture Updates

These are unlikely to be of interest to most people.

Camtasia 22.5.1 resolves a dozen bugs. This is not a security update.
https://www.techsmith.com/video-editor.html

SnagIt 23.1.0 resolves dozens of bugs. This is a security update.
https://www.techsmith.com/screen-capture.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 12.1.0.1 adds support for new encodings. This is not a security update.
https://www.dvdfab.cn/download.htm

StreamFab 6.1.1.2 improves compatibility and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

UniFab 1.0.1.5 adds conversion sampling and resolves several bugs. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero 6.0.23 resolves several bugs and improves compatibility. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password for Mac 8.10.1 resolves several bugs. This is not a security update.
https://1password.com/downloads/mac/

1Password for Windows 8.10.1 resolves several bugs. This is not a security update.
https://1password.com/downloads/windows/

Agent Ransack 2022.3367 resolves several bugs. This is not a security update.
https://www.mythicsoft.com/agentransack/download/

AOMEI Partition Assistant 9.15.0 adds ability to reset Windows password and recover data. This is not a security update.
https://www.diskpart.com/

Beyond Compare 4.4.6.27483 improves compatibility. This is not a security update.
https://www.scootersoftware.com/download.php?zz=dl4

Bitwarden 2023.2.0 adds several new security and feature controls, adds new encryption options and adds desktop validation for new devices. This is not a security update.
https://bitwarden.com/

CPU-Z Installer 2.05 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

CurrPorts 2.70 adds dark mode and several new sort options. This is not a security update.
https://www.nirsoft.net/utils/cports.html

DesktopOK 10.71 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

dnGrep 3.2.279.0 resolves several bugs. This is not a security update.
https://dngrep.github.io/

Etcher 1.18.5 updates libraries. This is not a security update.
https://www.balena.io/etcher/

Everything Toolbar 1.0.3 resolves several bugs. This is not a security update.
https://github.com/stnkl/EverythingToolbar/

Fido 1.44 now prevents operation on non-Windows platforms. This is not a security update.
https://github.com/pbatard/Fido/releases

FileLocator Pro 2022.3367 resolves several bugs. This is not a security update.
https://www.mythicsoft.com/filelocatorpro/download

Git SCM 2.40.0 is a security update.
https://git-scm.com/

Go 1.20.2 is a security update.
https://go.dev/

GoodSync 12.1.9 resolves several bugs. This is a security update.
https://www.goodsync.com/

HWMonitor 1.50 adds support for new hardware. This is not a security update.
https://www.cpuid.com/softwares/hwmonitor.html

NetworkInterfacesView 1.27 adds a new column for Metric. This is not a security update.
https://www.nirsoft.net/utils/network_interfaces.html

NTLite 2023.3.9160 adds support for new features and resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

OSForensics 10.0.1009 resolves several bugs. This is a security update.
https://www.osforensics.com/download.html

osquery 5.8.1 is a security update.
https://osquery.io/downloads

PowerToys 0.68.1 adds Paste as Plain Text, Mouse Jump, new GPO policies, and resolves several bugs. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest

ProcessMonitor 3.93 resolves several user interface and log file bugs. This is not a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

RoboForm 9.4.4 is a security update.
https://www.roboform.com/

Seagate DiscWizard 25.0.1.39868 doesn’t provide a changelog so should be treated as a security update.
https://www.seagate.com/support/downloads/item/discwizard-master-dl/

SimpleWMIView 1.53 adds Sort By option to the toolbar. This is not a security update.
https://www.nirsoft.net/utils/simple_wmi_view.html

TcpLogView 1.37 adds several sorting options and resolves a bug. This is not a security update.
https://www.nirsoft.net/utils/tcp_log_view.html

TeamViewer 15.39.6 resolves several bugs. This is not a security update.
https://www.teamviewer.com/en-us/download/windows/

Unity 2022.2.10 resolves dozens of bugs. This is not a security update.
https://unity3d.com/get-unity/download/archive

Ventoy 1.0.89 resolves several bugs. This is not a security update.
https://www.ventoy.net/en/index.html

WifiInfoView 2.78 adds new sorting options and updates the internal MAC address database. This is not a security update.
https://www.nirsoft.net/utils/wifi_information_view.html

WinRAR 6.21 resolves several bugs. This is not a security update.
https://www.rarlab.com/

WizFile 3.09 adds support for RegExp search, DrivePool, Storage Spaces, virtual drives, and resolves several bugs. This is not a security update.
https://antibody-software.com/wizfile/

ZoomText 2023 2023.2302.8.400 improves stability and resolves several bugs. This is not a security update.
https://support.freedomscientific.com/Downloads/ZoomText

Developer Updates

These are unlikely to be of interest to most people.

ADB 34.0.1 resolves a couple bugs. This is not a security update.
https://developer.android.com/studio/releases/platform-tools

Android Studio 2022.1.1.21 resolves several bugs. This is not a security update.
https://developer.android.com/studio

GitHub Desktop 3.2.0 resolves several bugs. This is not a security update.
https://desktop.github.com/

Inno Setup 6.2.2 is a security update.
https://www.jrsoftware.org/isdl.php

Node.js 19.7.0 updates dependencies and resolves dozens of bugs. This is not a security update.
https://nodejs.org/en/

Node.js 14.21.3 is a security update.
https://nodejs.org/en/

Node.js 16.19.1 is a security update.
https://nodejs.org/en/

Node.js 18.15.0 is a security update.
https://nodejs.org/en/

SQLite 3.41.1 resolves several bugs. This is not a security update.
https://www.sqlite.org/download.html

Visual Studio Code 1.76.1 resolves several bugs. This is not a security update.
https://code.visualstudio.com/

Web Package Updates

These are likely to be of interest only to web developers.

Coppermine Gallery 1.6.22 resolves several bugs. This is not a security update.
https://coppermine-gallery.net/

Drupal 9.5.4 resolves several bugs. This is not a security update.
https://drupal.org/download

Joomla 4.2.9 is a security update.
https://www.joomla.org/

jQuery 3.6.4 adds selector forgiveness. This is not a security update.
https://code.jquery.com/

MailEnable Enterprise 10.45 is a security update.
https://www.mailenable.com/

MailEnable Enterprise 9.87 is a security update.
https://www.mailenable.com/

OpenPetra 2023.02 resolves several bugs. This is not a security update.
https://www.openpetra.org/

ownCloud Client 3.2.1.10355 resolves several bugs. This is not a security update.
https://owncloud.com/desktop-app/

Piwigo 13.6.0 is a security update.
https://piwigo.org/

YOURLS 1.9.2 improves compatibility and resolves several bugs. This is not a security update.
https://yourls.org/

BuddyPress 11.1.0 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/buddypress/

Contact Form 7 5.7.4 improves compatibility and resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/contact-form-7/

Social Post Feed 4.1.8 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/custom-facebook-feed/

Sucuri Security 1.8.37 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/sucuri-scanner/

WooCommerce 7.5.0 is a security update.
https://wordpress.org/extend/plugins/woocommerce/

WP Cerber Security 9.5 resolves several bugs. This is not a security update.
https://wpcerber.com/

WPtouch 4.3.51 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/wptouch/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2023-02-14

Posted on by

Happy Valentine’s Day, Folks!

Today is Patch Tuesday for February, 2023.

There are a whopping 150+ major hacks and 200+ application updates this month. It’s a big one, with about 6 GB of updates for most users. Microsoft is also pushing out Windows 22H2 (Win10 and Win11) for all supported devices. If you’re not already on the latest builds, expect to be “upgraded” automatically in the coming days.

This Month in Technology

1020 South Main Street Operations LLC, 1st Franklin Financial Corporation Master Welfare Benefit Plan, 225 Evergreen Road Operations LLC, 90 Degree Benefits, Inc., A10 Networks, Aflac, Alkomprar Technology, AmerisourceBergen, an unnamed medical research company, Arizona Health Advantage, Inc., Arnold Clark, Aspire Surgical, Atlassian’s Jira Service Management Server and Data Center, Audifarma, Autotrader, Bahrain’s international airport, Benefit Administrative Systems, LLC, BonqDAO, Brazilian Government, British PM Stewart McDonald, Cacti, Cardiovascular Associates, Casa Ley, Cedar Oaks Surgery Center, Centro Médico Virgen De La Caridad, CircleCi, Cisco IOx, City Council of Durango, City of London, City of Oakland, Community Health Systems, CommuteAir – exposing the TSA no-fly list, Control Web Panel, Costa Rica’s Ministry of Public Works and Transport, Court of Justice of the State of Pará, Datadog, Diligent Corp, DNV (impacting over 1000 ships worldwide), DotHouse Health Incorporated, DPP II, LLC, Dr. Keith Rundle & Dr. Herman Rundle, Edmonds School District, Eurostar, Exclu, FortiOS SSL-VPN, General Treasury of the Republic of Chile, Git, GitHub Atom, GitHub Desktop, GoAnywhere MFT, 130 organizations using GoAnywhere, Google Fi, GoTo, Grand Theft Auto (GTA) Online, Harmony Horizon, Health Plan of San Mateo, Heritage Provider Network, Hive, Home Care Providers of Texas, Howard Memorial Hospital, Indigo Books & Music, Instituto Federal Do Pará, Intelligent Business Solutions, ION Group, iOS, IT Servicios, Italy, Jackson & Joyce Family Dentistry, JD Sports, Jefferson County Health Center, KeePass, KomplettFritid, Kroger, LastPass, League of Legends, LearnPress, Lexmark firmware, LimeVPN, Liquor Control Board of Ontario, Los Angeles Unified School District, Luaces Asesores, Lutheran Social Services of Illinois, macOS, MailChimp, Maternal and Family Health Services, Microsoft-Verified OAuth Apps, a Midwest specialty medical care clinic, Mindpath Health, Minuteman Senior Services, MKS Instruments, Morgan Hill Unified School District, multiple federal civilian executive branch (FCEB) agencies,  Namecheap, Nantucket, Massachusetts, Nissan North America, Norton LifeLock (including their password manager), ODIN Intelligence, One Brooklyn Health System, Packman anti-cheat software, PayPal, Pennsburg Manor, PeopleConnect (TruthFinder and Instant Checkmate), Pepsi, Pharma Gestao, Pitt Meadows School District 42, Planet Ice, Politriz, Puma, QNAP NAS, Qualys, Quintana Roo Attorney General’s Office, Qulliq Energy Corporation, Reddit, Regal Medical Group, Rise Interactive Media & Analytics, LLC, Rostelecom, Royal Mail, Rundle Eye Care, Samsung Galaxy App Store, San Francisco Transit Police, Seguros Equinoccial S.A, Sharp HealthCare, Shell, Sistema Integral De Control Alimentario, Skyview Networks, Solaris, Southeast Colorado Hospital District, St. Rose Hospital, Stanford Medicine, Stroke Scan Inc, T-Mobile, Tallahassee Memorial HealthCare, Technion – Israel Institute of Technology, Teijin Automotive Technologies Welfare Plan, The Guardian, Ticketmaster, Toyota’s GSPIMS, Tucson, Arizona, Ukrainian Computer Emergency Response Team, Ukrinform, University of California, University of Colorado Hospital Authority, University of Colorado, University of Duisburg-Essen, University of Maryland Baltimore, University of Miami, UScellular, VMware OpenSLP, VMware vRealize Log Insight, Weee!, Yum! Brands, Zacks Investment Research, and Zurich have reportedly been hacked or compromised this month.

Most federal agencies ignore the GAO cybersecurity recommendations.

Bankdata, Bermuda, The FAA’s NOTAM, Instagram, Microsoft 365, Microsoft Outlook, Tor, Twitter, Verizon, YouTube, and Zelle suffered from significant outages.

Cloudflare managed to prevent an insane 71 million requests per second attack.

Last months updates broke the Windows Start menu, Windows 10 (if a 365 trial was active), and almost 300 MSI motherboard models.

A whopping 12% (minimum) of online stores expose private data or backups. A new strain of point-of-sale malware prevents contactless payments in order to ensure that the skimmer operates unhindered.

Now for the good news:

Impossible Foods are being hit with patent problems across the globe. Hopefully this will lead to a financial incentive to grow real foods again.

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is huge this month. The typical computer should see roughly
6 GB in updates today. Let’s get started.

Like it or not, Windows 10 and Windows 11 versions 22H2 are now being pushed out onto all supported devices, so expect it to be installed in the coming days.

Microsoft released updates to address 72 vulnerabilities in .NET and Visual Studio, .NET Framework, 3D Builder, Azure App Service, Azure Data Box Gateway, Azure DevOps, Azure Machine Learning, HoloLens, Internet Storage Name Service, Microsoft Defender for Endpoint, Microsoft Defender for IoT, Microsoft Dynamics, Microsoft Edge (Chromium-based), Microsoft Exchange Server, Microsoft Graphics Component, Microsoft Office, Microsoft Office OneNote, Microsoft Office Publisher, Microsoft Office SharePoint, Microsoft Office Word, Microsoft PostScript Printer Driver, Microsoft WDAC OLE DB provider for SQL, Microsoft Windows Codecs Library, Power BI, SQL Server, Visual Studio, Windows Active Directory, Windows ALPC, Windows Common Log File System Driver, Windows Cryptographic Services, Windows Distributed File System (DFS), Windows Fax and Scan Service, Windows HTTP.sys, Windows Installer, Windows iSCSI, Windows Kerberos, Windows MSHTML Platform, Windows ODBC Driver, Windows Protected EAP (PEAP), Windows SChannel, Windows Win32K, and MSRT (~2 GB). This includes security updates. A reboot is required.

Apple released updates for macOS Big Sur 11.7.3, macOS Monterey 12.6.3, macOS Ventura 13.2.1, iOS 12.5.7, iOS 15.7.3, iOS 16.3.1, iPadOS 15.7.3, iPadOS 16.3.1, Safari 16.3.1, tvOS 16.3.2 and watchOS 9.3.1. This includes security updates. Use Apple Software Update to install these updates. A reboot is required.

iOS 12.5.7, 15.7.3, and 16.3.1 are security updates. Use Settings, General, Software Update to install the most current update.

iPadOS 15.7.3 and 16.3.1 are security updates. Use Settings, General, Software Update to install the most current update.

watchOS 9.3.1 is a security update. Use the Watch app on your iPhone to install the most current version.

tvOS 16.3.2 is a security update. Use System, Software Update to install the most current version.

Google Chrome OS 109.0.5414.125 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

elementary OS 7.0 is a new major version of elementary OS improving app management, controls, defaults, and many other bug fixes. This is not a security update.
https://elementary.io/

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Ventura (13.x) means that macOS Catalina (10.15) and older are no longer supported. If you can not install at least macOS Big Sur (11) on your Mac then you should immediately remove it from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current release of the Windows 10 (v22H2) is very large so will take a long time to download on slower connections. Windows 10 pushes you to get the latest Windows 10 release every 12 months and only supports any consumer builds for 18 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v22H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is still very young so I encourage you to wait a few more months before you consider switching to it.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

Display Driver Uninstaller 18.0.6.0 updates installer, adds option to update driver source to default, and improves cleanup. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

DS4Windows 3.2.8 resolves over a dozen bugs. This is not a security update.
https://github.com/Ryochan7/DS4Windows/releases/latest

Garmin Express 7.16.1 doesn’t provide a detailed changelog so should be treated as a security update.
https://www.garmin.com/en-US/software/express/

JACK2 1.9.22 improves compatibility, removes example tools, updates dependencies, and resolves a couple bugs. This is a security update.
https://jackaudio.org/downloads/

NVcleanstall 1.15.1 resolves several bugs. This is not a security update.
https://www.techpowerup.com/download/techpowerup-nvcleanstall/

Drivers by Seagull 2023.1 adds support for over 200 new printer models from 20 vendors, RFID unique serial numbers (TID), and updates the license.
https://www.seagullscientific.com/support/downloads/drivers/

Wacom Driver 6.4.1-3 resolves several bugs. This is not a security update.
https://www.wacom.com/en-us/support/product-support/drivers

Xerox Smart Start 1.8.10.0 doesn’t provide a changelog so should be treated as a security update.
https://www.support.xerox.com/en-us/content/143617

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.48.158 is a security update.
https://brave.com/

Google Chrome 110.0.5481.100 is a security update.
https://www.google.com/chrome/

Microsoft Edge 110.0.1587.41 is a security update.
https://www.microsoft.com/en-us/edge/business/download

Firefox 110.0 is a security update.
https://www.mozilla.org/en-US/firefox/new/

SeaMonkey 2.53.15 is a security update.
https://www.seamonkey-project.org/

Vivaldi 5.6.2867.62 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

ProtonMail (Android) 3.0.11 improves stability. This is not a security update.
https://proton.me/mail/download

Spark 3.3.3.42970 improves stability. This is not a security update.
https://sparkmailapp.com/

Spark (macOS) 3.3.3.42968 improves stability. This is not a security update.
https://sparkmailapp.com/

Thunderbird 102.7.2 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

AnyDesk 7.1.8 resolves several bugs. This is not a security update.
https://anydesk.com/en/downloads

AnyDesk (macOS) 7.0.1 resolves several bugs. This is a security update.
https://anydesk.com/en/downloads

BrowsingHistoryView 2.54 adds whitespace around the QR codes. This is not a security update.
https://www.nirsoft.net/utils/browsing_history_view.html

Dropbox 167.4.4719 resolves several bugs and improves performance. This is not a security update.
https://www.dropbox.com/

Facebook Messenger 176.0.0.12.101 is a security update.
https://www.messenger.com/download

FileZilla Client 3.63.1 resolves several bugs. This is not a security update.
https://filezilla-project.org/

FileZilla Server 1.6.6 resolves several bugs. This is not a security update.
https://filezilla-project.org/

FreeFileSync 12.0 is a major update and adds several new security profiles, improves timeouts, and resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Google Drive 71.0 resolves several bugs. This is not a security update.
https://drive.google.com/start

IPInfoOffline 1.61 resolves a crash bug. This is not a security update.
https://www.nirsoft.net/utils/ip_country_info_offline.html

Java 8u361 is a security update.
https://www.java.com/en/download/manual.jsp

Microsoft Teams 1.6.00.376 adds several new features. This is not a security update.
https://teams.microsoft.com/downloads

Nextcloud Server 25.0.3 is a security update.
https://nextcloud.com/

Omada Software Controller 5.8.4 adds global view, mapping, and adds several other features. This is not a security update.
https://www.tp-link.com/us/support/download/omada-software-controller/

Pocketnet-GUI 0.8.39 adds P2P audio and video calls, improved GUI confirmations, and resolves over a dozen bugs. This is not a security update.
https://pocketnet.app/

Signal 6.5.1 resolves a crash bug. This is not a security update.
https://signal.org/download/windows/

Signal (Android) 6.10.9 improves display of activity. This is not a security update.
https://signal.org/android/apk/

Skype 8.93.0.404 improves translator, color schemes, and resolves several bugs. This is not a security update.
https://www.skype.com/

Syncthing 1.23.1 resolves an upgrade bug. This is not a security update.
https://syncthing.net/

Telegram 4.6.2 resolves several bugs. This is not a security update.
https://telegram.org/

Telegram (Android) 9.4.0 doesn’t provide a changelog so should be treated as a security update.
https://telegram.org/apps

WinSCP 5.21.7 updates Batch Rename extension and resolves a settings change bug. This is not a security update.
https://winscp.net/eng/index.php

Zoom 5.13.7.12602 resolves several bugs. This is not a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

BasicSR 1.4.2 adds torch and resolves several bugs. This is not a security update.
https://github.com/XPixelGroup/BasicSR/releases/latest

Kodi 20.0 implements over 500 changes. This is a security update.
https://kodi.tv/

Plex Desktop 1.63.3.3523 resolves audio passthrough. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Home Theater 1.33.2.3525 resolves audio passthrough. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Media Server 1.31.0.6654 improves season and episode detection, end credit marker detection, scanner, and resolves over a dozen bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-media-server

Real-ESRGAN-ncnn-vulkan 0.2.0 is a security update.
https://github.com/xinntao/Real-ESRGAN-ncnn-vulkan/releases/latest

TuneIn 1.26.0 doesn’t provide a changelog so should be treated as a security update.
https://tunein.com/radio/home/

Game Updates

These are unlikely to be of interest to most people.

GameMaker Studio 2023.1.0.58 improves installation experience, performance and image editing. This is not a security update.
https://www.yoyogames.com/en/gamemaker

GDevelop 5.1.157 adds new objects, improves GDevelop banner behavior, asynchronous objects, updates libraries and extensions. This is not a security update.
https://gdevelop.io/download

Lego Studio 2.23.1.1 resolves several bugs. This is not a security update.
https://www.lego.com/en-us/ldd

Playstation PS5 22.02-06.50.00 adds support for the DualSense Edge wireless controller and improves performance. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

Steam 2023.02.10 resolves dozens of bugs. This should be treated as a security update.
https://www.steampowered.com/platform/update_history/index.php?skin=0&id=0

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Reader DC 22.003.20314 resolves several bugs. This is not a security update.
https://get.adobe.com/reader

Adobe After Effects 23.2 and 22.6.4 are security updates.
https://helpx.adobe.com/security/products/after_effects/apsb23-02.html

Adobe Connect 11.4.6 and 12.2 are security updates.
https://helpx.adobe.com/security/products/connect/apsb23-05.html

Adobe FrameMaker 2020.5 and 2022.1 are security updates.
https://helpx.adobe.com/security/products/framemaker/apsb23-06.html

Adobe Bridge 12.0.4 and 13.0.2 are security updates.
https://helpx.adobe.com/security/products/bridge/apsb23-09.html

Adobe Photoshop 23.5.4 and 24.1.1 are security updates.
https://helpx.adobe.com/security/products/photoshop/apsb23-11.html

Adobe InDesign 18.2 and 17.4.1 are security updates.
https://helpx.adobe.com/security/products/indesign/apsb23-12.html

Adobe Premiere Rush 2.7 is a security update.
https://helpx.adobe.com/security/products/premiere_rush/apsb23-14.html

Adobe Animate 22.0.9 and 23.0.1 are security updates.
https://helpx.adobe.com/security/products/animate/apsb23-15.html

Adobe Substance 3D Stager 2.0.0 is a security update.
https://helpx.adobe.com/security/products/substance3d_stager/apsb23-16.html

Audacity 3.2.4 resolves a functional bug. This is not a security update.
https://www.audacityteam.org/download/

LibreOffice 7.4.5 resolves a stability bug. This is not a security update.
https://www.libreoffice.org/

LibreOffice Fresh 7.5.0 resolves over 250 bugs. This is a security update. Be aware that the Fresh line is beta software and should be avoided in favor of the Still line above.
https://www.libreoffice.org/

Nextcloud Desktop 3.7.3 resolves dozens of bugs. This is a security update.
https://nextcloud.com/

Notepad++ 8.4.9 resolves over a dozen bugs. This is not a security update.
https://notepad-plus-plus.org/

Paint.net 5.0.1 is a major update to Paint.net, adds several features, and resolves several bugs. This is not a security update.
https://www.getpaint.net/

Calibre 6.12.0 adds read-aloud, updates libraries, and resolves several bugs. This is not a security update.
https://calibre-ebook.com/

Kindle for PC 1.40.65415 doesn’t provide a changelog so should be treated as a security update.
https://www.amazon.com/kindleforpc

Security Software Updates

One or more of these is likely to be of interest to most people.

Chainsaw 2.3.1 resolves a panic bug. This is not a security update.
https://github.com/countercept/chainsaw

DNSQuerySniffer 1.91 resolves stability bug. This is not a security update.
https://www.nirsoft.net/utils/dns_query_sniffer.html

HTTP Toolkit 1.12.3 doesn’t provide a changelog so should be treated as a security update.
https://httptoolkit.tech/

KeePass 2.53.1 resolves several bugs. This is not a security update.
https://keepass.info/

MalwareBytes Anti-Malware 4.5.22 resolves several bugs. This is not a security update.
https://www.malwarebytes.org/antimalware/

MalwareBytes Anti-Malware Mac 4.18.11 resolves a couple bugs and removes the built-in browser. This is a security update.
https://www.malwarebytes.com/mac/

OpenSSL 1.1.1t is a security update.
https://www.openssl.org/source/

OpenSSL 3.0.8 is a security update.
https://slproweb.com/products/Win32OpenSSL.html

ProtonVPN (macOS) 3.0.13 resolves several bugs. This is not a security update.
https://protonvpn.com/download

RogueKiller 15.8.0 resolves several bugs. This is not a security update.
https://www.adlice.com/download/roguekiller/

Tails 5.9 is a security update.
https://tails.boum.org/install/dvd/index.en.html

uBlock Origin 1.47.0 resolves several bugs and improves performance. This is not a security update.
https://github.com/gorhill/uBlock/releases/latest

Capture Updates

These are unlikely to be of interest to most people.

Camtasia 22.5.0 adds several new transitions, improved recorder, and several other tools. This is not a security update.
https://www.techsmith.com/video-editor.html

Open Broadcaster Software 29.0.2 resolves several bugs. This is not a security update.
https://obsproject.com/

ScreenToGif 2.37.2 adds translations. This is not a security update.
https://github.com/NickeManarin/ScreenToGif/releases/latest

SnagIt 23.0.3 resolves a couple bugs. This is not a security update.
https://www.techsmith.com/screen-capture.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 12.0.9.9 adds support for new encodings, improves compatibility and resolves a couple bugs. This is not a security update.
https://www.dvdfab.cn/download.htm

HandBrake 1.6.1 resolves several bugs. This is not a security update.
https://handbrake.fr/

iMazing HEIC Converter 2.0.5 doesn’t provide a changelog so should be treated as a security update.
https://imazing.com/heic

MakeMKV 1.17.3 adds support for new encodings and improves reliability. This is not a security update.
https://www.makemkv.com/download/

StreamFab 6.1.0.7 resolves several bugs. This is not a security update.
https://www.dvdfab.cn/downloader-new.htm

UniFab 1.0.1.2 resolves a couple bugs and adds support to merge. This is not a security update.
https://www.dvdfab.cn/unifab.htm

Education updates

One or more of these are likely to be of interest to most people.

Zotero 6.0.20 improves performance and resolves several bugs. This is a security update.
https://www.zotero.org/

Zotero (macOS) 6.0.21 resolves several bugs. This is a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password for Mac 8.9.15 improves compatibility. This is not a security update.
https://1password.com/downloads/mac/

1Password for Windows 8.9.14 adds support to import directly from LastPass. This is not a security update.
https://1password.com/downloads/windows/

8GadgetPack 36.0 updates outdated gadgets. This is not a security update.
https://8gadgetpack.net/

Agent Ransack 2022.3366 resolves several bugs. This is not a security update.
https://www.mythicsoft.com/agentransack/download/

Beyond Compare 4.4.5.27371 improves performance and resolves several bugs. This is not a security update.
https://www.scootersoftware.com/download.php?zz=dl4

Bitwarden 2023.1.1 resolves several bugs. This is not a security update.
https://bitwarden.com/

CCleaner 6.09.10300 resolves several bugs. This is not a security update.
https://www.ccleaner.com/

CPU-Z Installer 2.04 adds support for new hardware. This is not a security update.
https://www.cpuid.com/softwares/cpu-z.html

CurrPorts 2.66 improves stability. This is not a security update.
https://www.nirsoft.net/utils/cports.html

Cygwin 3.4.6 improves compatibility and stability. This should be treated as a security update.
https://cygwin.com/

Dell Command Update 4.8.0 improves BIOS update, self-update, and toast behaviors. This is a security update.
https://www.dell.com/support/article/us/en/04/sln311129/dell-command-update?lang=en

DesktopOK 10.66 improves auto save icons feature. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

Etcher 1.14.3 improves compatibility and resolves several bugs. This is not a security update.
https://www.balena.io/etcher/

Everything Toolbar 1.0.2 improves performance, reliability and cosmetics. This is a security update.
https://github.com/stnkl/EverythingToolbar/

Fido 1.43 adds BITS transfer support. This is not a security update.
https://github.com/pbatard/Fido/releases

FileLocator Pro 2022.3366 resolves several bugs. This is not a security update.
https://www.mythicsoft.com/filelocatorpro/download

Git SCM 2.39.1 is a security update.
https://git-scm.com/

Go 1.20.1 updates the toolchain and improves performance. This is a security update.
https://go.dev/

GoodSync 12.1.7 resolves several bugs and improves compatibility. This is not a security update.
https://www.goodsync.com/

grepWin 2.0.13 adds ability to copy column content, and resolves a couple bugs. This is not a security update.
https://github.com/stefankueng/grepWin/releases/latest

HWMonitor 1.49 adds support for newer hardware. This is not a security update.
https://www.cpuid.com/softwares/hwmonitor.html

Memtest86+ 6.10 adds support for Secure Boot signing, headless EFI, various command line options, new hardware and resolves several bugs. This should be treated as a security update.
https://www.memtest.org/

NetworkTrafficView 2.43 improves stability. This is not a security update.
https://www.nirsoft.net/utils/network_traffic_view.html

NTLite 2.3.9.9039 updates components and resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

OSForensics 10.0.1007 improves case management, VM reporting, and resolves dozens of bugs. This is not a security update.
https://www.osforensics.com/download.html

AOMEI Partition Assistant 9.14.0 improves safety of move/resize, resolves several bugs, and improves reliability. This is not a security update.
https://www.diskpart.com/

PointerStick 6.22 resolves several bugs. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

PowerToys 0.67.1 improves stability. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest

PSAppDeploy 3.9.2 resolves several bugs. This is a security update.
https://psappdeploytoolkit.com/

ScreenConnect 23.1.1.8423 improves compatibility, adds several cosmetic changes, and resolves several bugs. This is not a security update.
https://www.connectwise.com/software/control/download

SearchMyFiles 3.23 resolves a couple bugs. This is not a security update.
https://www.nirsoft.net/utils/search_my_files.html

Sysmon 14.14 resolves a timeout detected deleted files. This is not a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon

TeamViewer 15.38.3 resolves a file resume bug. This is not a security update.
https://www.teamviewer.com/en-us/download/windows/

Unified Remote Server 3.13.0.2501 doesn’t provide a changelog so should be treated as a security update.
https://www.unifiedremote.com/

Unity 2022.2.6 resolves several bugs. This is not a security update.
https://unity3d.com/get-unity/download/archive

Ventoy 1.0.88 resolves several bugs and improves compatibility. This is not a security update.
https://www.ventoy.net/en/index.html

WhyNotWin11 2.5.0.4 updates hardware compatibility lists. This is not a security update.
https://github.com/rcmaehl/WhyNotWin11

WinGet 1.4.10173 resolves over a hundred bugs and improves stability. This is a security update.
https://github.com/microsoft/winget-cli/releases/latest

WinRAR 6.20 resolves over 20 bugs. This is not a security update.
https://www.rarlab.com/

ZoomIt 6.12 resolves a cosmetic artifact bug when zooming. This is not a security update.
https://docs.microsoft.com/en-us/sysinternals/downloads/zoomit

Developer Updates

These are unlikely to be of interest to most people.

ADB 34.0.0 resolves several bugs. This is not a security update.
https://developer.android.com/studio/releases/platform-tools

Android Studio 2022.1.1.1 resolves several bugs. This is not a security update.
https://developer.android.com/studio

GitHub Desktop 3.1.6 updates libraries, resolves several bugs, and improves compatibility. This is a security update.
https://desktop.github.com/

GitHub includefragment 6.1.1 adds refetch API. This is not a security update.
https://github.github.io/include-fragment-element/

MySQL Server 8.0.32 resolves several bugs. This is not a security update.
https://dev.mysql.com/downloads/installer/

MySQL ConnectorNet 8.0.32 resolves several bugs. This is not a security update.
https://dev.mysql.com/downloads/connector/net/

Node.js 19.6.0 updates libraries and resolves several bugs. This is not a security update.
https://nodejs.org/en/

Node.js 18.14.0 updates libraries and resolves several bugs. This is not a security update.
https://nodejs.org/en/

Redemption 6.3.0.6164 resolves several bugs. This is not a security update.
https://www.dimastr.com/redemption/

Rustup 1.25.2 adds SHA-1 support again. This is not a security update.
https://www.rust-lang.org/

TortoiseGit 2.14.0 updates libraries and resolves several bugs. This is a security update.
https://tortoisegit.org/

Visual Studio Code 1.75.1 resolves several bugs. This is not a security update.
https://code.visualstudio.com/

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 7.0.6 resolves several bugs. This is not a security update.
https://www.virtualbox.org/wiki/Downloads

Web Package Updates

These are likely to be of interest only to web developers.

Drupal 9.4.11 is a security update.
https://drupal.org/download

Joomla 4.2.7 is a security update.
https://www.joomla.org/

ownCloud Client 3.1.0.9872 resolves several bugs. This is not a security update.
https://owncloud.com/desktop-app/

phpList 3.6.12 updates dependencies and resolves several bugs. This is not a security update.
https://www.phplist.org/

phpMyAdmin 5.2.1 is a security update.
https://www.phpmyadmin.net/

Piwigo 13.5.0 is a security update.
https://piwigo.org/

Antispam Bee 2.11.2 resolves several bugs and improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/antispam-bee/

Autoptimize 3.1.5 improves compatibility and resolves a couple bugs. This is not a security update.
https://wordpress.org/extend/plugins/autoptimize/

Contact Form 7 5.7.3 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/contact-form-7/

Duplicator 1.5.2.1 improves compatibility and resolves several bugs. This is not a security update.
https://wordpress.org/plugins/duplicator/#developers

myStickymenu 2.6.2 improves flow. This is not a security update.
https://wordpress.org/extend/plugins/mystickymenu/

Postie 1.9.65 removes uname support. This is not a security update.
https://wordpress.org/extend/plugins/postie/

Redirection 5.3.9 is a security update.
https://wordpress.org/extend/plugins/redirection/

W3 Total Cache 2.3.0 improves compatibility and resolves over a dozen bugs. This is not a security update.
https://wordpress.org/extend/plugins/w3-total-cache/

WooCommerce 7.3.0 resolves almost 100 bugs. This is a security update.
https://wordpress.org/extend/plugins/woocommerce/

WPtouch 4.3.48 is a security update.
https://wordpress.org/extend/plugins/wptouch/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2022-07-12

Posted on by

Welcome back, Folks!

Today is Patch Tuesday for July, 2022. You know how you say something like “biggest update series in well over a year” and the next month just blows that out of the water? We’re there now.

This Month in Technology

Advocates, Inc., Aerojet Rocketdyne, Alabama Eye & Cataract, P.C., Alameda Health System, Aloha Laser Vision, Amagasaki, Japan, Amazon Photos, AMD, Anker Eufy, Aon, Aruba Networks Switches, ATC Healthcare, Bangladeshi government, Bank of the West, Baptist Medical Center and Resolute Health Hospital, Bayhealth Medical Center, Inc., BeanVPN, Benefit Plan Administrators, Inc., Bookchor, Bourse des Vols, Capital Economics, Carnival Corporation, Carolina Behavioral Health Alliance, Carolina Eyecare Physicians, LLC, Catholic Health System, Center for Sight, Inc., Central Florida Inpatient Medicine, Charlotte Radiology, Cherry Creek Eye Physicians and Surgeons, P.C., CHRISTUS Spohn Health System Corporation, Cisco Secure Email, Cisco VPN routers, Citrix Application Delivery Management, CoDeSys Automation Software, Community of Hope D.C., Crema Finance, Customer.io, Disneyland’s Facebook and Instagram accounts, DivX SubTitles, Django, DTEK Group, ExpressLRS, Fast Shop, Flagstar Bank, Florida Birth-Related Neurological Injury Compensation Association, Foxhall Ob Gyn Associates, Geographic Solutions, Gol Tours LTD, Grab, Harmony, Hillrom Medical, Honda cars, Hudson Regional Hospital, IBM, Ignitis Group, Indian Flood Monitors, Indian government, thousands of industrial devices, Israeli Defense, Kaiser Foundation Health Plan of Washington, Kaiser Permanente, Kernersville Eye Surgeons, P.C., Khouzestan Steel Company, almost a million Kubernetes clusters, La Poste Mobile, Latvian government, Lithuanian government, Long Vision Center, Macmillan Publishing, Mangatoon, Marriott International, Massachusetts Child and Family Services, Inc., Mattax Neu Prater Eye Center, Inc., MCG Health and Eye Care Leaders, Medical University of Innsbruck, MEGA, Michigan Avenue Immediate Care, Microsoft Azure FabricScape, Microsoft Exchange, Microsoft Windows Domain Servers, Mitel VoIP, New Jersey Health Information Management, Nichirin-Flex U.S.A., North American Spine Society, Norway govt sites, OpenSea, OrthoNebraska, Phelps Care Regional Medical Center, Preferred Hospital Leasing Coleman Inc., Professional Finance Company, Renton School District, Resolute Health Hospital, Rodeo Pharmacy Inc, Shanghai National Police, Sharper Vision P.A., SHI International, Shoprite, Sight Partners Physicians, P.C., Sophos Firewall, Southwest Health Center, St Joseph Heritage Health, Stanford University, Stokes Regional Eye Centers, TB Kawashima, The People Concern, The Vicksburg Clinic, LLC, Tosoh America, Inc., UK Army’s Twitter & YouTube, UNC Lenoir Health Care, University of Pisa, University Pediatric Dentistry, US Bank, Walmart, WellDyneRx, LLC, Wiltshire Farm Foods, Yodel, Yuma Regional Medical Center, and Zimbra reportedly been hacked or compromised this month.

Some vendors, like CafePress, simply don’t care about security – and do their best to conceal when they’re hacked. I contacted them to report when they were hacked back in 2014 and they ignored me. Sigh.

Microsoft 365, Cloudflare, Microsoft Teams, Rogers (it was a big one), and Microsoft Office / OneDrive had widespread outages.

Facebook is collecting the patient data of millions, and is also blocking the link to the Facebook settlement class action website. You think they would have learned.

Attackers are using Google Chrome Extension fingerprinting to uniquely identify you. This method works in any Chromium browser.

Spam is still the #1 method of exploiting users. Whether it is a fake renewal notice, fake copyright complaints, or fake invoice, most spams will include a fake login form or a fake support number. In both cases they depend on the user to actually enter the login details or call the scammer to fall prey to their attacks. Online development environments are even being used for these attacks.

Counterfeit hardware can be far more dangerous than the real thing. Even though some vendors only support their hardware a few years before you have to replace it,  counterfeits are never supported and often have malicious implants.

Microsoft has rolled back (temporarily) their decision to block macros by default.

MITRE staff didn’t understand that publishing vulnerable sites, not just vulnerability information was bad, while a HackerOne employee was selling exploits before they were published, and an Amazon employee installed cryptominers on Capital One servers. Adobe is using malware traits to block antivirus software from scanning PDF files. How quickly these organizations can shatter their trust.

Here’s a great example of how a single vulnerability will be used to get far deeper into your network and hardware.

Storing your password directly in the browser is dangerous. Use a password manager.

Now for the good news:

 

Let’s Get Busy

Now back to our regularly scheduled program.

Patch Tuesday is huge this month. The typical computer should see roughly 3 GB in updates today. Let’s get started.

Microsoft released updates to address 74 vulnerabilities in Azure Site Recovery, Azure Storage Library, DNS Server, Microsoft Defender for Endpoint, Microsoft Edge, Microsoft Graphics Component, Microsoft Lync, Microsoft Office, Open Source Software, Skype for Business, Windows Active Directory, Windows Advanced Local Procedure Call, Windows BitLocker, Windows Boot Manager, Windows Client/Server Runtime Subsystem, Windows Connected Devices Platform Service, Windows Credential Guard, Windows Fast FAT Driver, Windows Fax and Scan Service, Windows Fax Service, Windows Group Policy, Windows Hyper-V, Windows IIS, Windows Kernel, Windows Media, Windows Network File System, Windows Performance Counters, Windows Point-to-Point Tunneling Protocol, Windows Portable Device Enumerator Service, Windows Print Spooler Components, Windows Remote Procedure Call Runtime, Windows Security Account Manager, Windows Server Service, Windows Shell, Windows Storage, XBox, and MSRT (~3 GB). This includes security updates. A reboot is required.

Google Chrome OS 103.0.5060.114 is a security update. Use Menu, Help, About to install the most current version. A reboot is required.

Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

The release of macOS Monterey (12.x) means that macOS Mojave (10.14) and older are no longer supported. If you can not install at least macOS Catalina (10.15) on your Mac then you should immediately remove it from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.

The now-current release of the Windows 10 (v21H2) is very large so will take a long time to download on slower connections. Windows 10 pushes you to get the latest Windows 10 release every 12 months and only supports any consumer builds for 18 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

The now-current release of the Windows 11 (v21H2) is very large so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.

Windows 11 is still very young so I encourage you to wait a few more months before you consider switching to it.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, and games you do not actually play.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

AMD Adrenalin 22.6.1 adds support for newer hardware. This is not a security update.
https://www.amd.com/en/support

Crucial Storage Executive 7.12 doesn’t provide a changelog so should be treated as a security update.
https://www.crucial.com/support/storage-executive

Display Driver Uninstaller 18.0.5.2 improves cleanup. This is not a security update.
https://www.wagnardsoft.com/display-driver-uninstaller-ddu

Intel Driver and Support Assistant 22.4.26 improves user interface. This is not a security update.
https://www.intel.com/p/en_US/support/detect

Samsung DeX 2.4.0.29 doesn’t provide a changelog so should be treated as a security update.
https://www.samsung.com/us/apps/dex/

Browser Updates

One or more of these are likely to be of interest to everyone.

Brave 1.41.96 is a security update.
https://brave.com/

SeaMonkey 2.53.13 is a security update.
https://www.seamonkey-project.org/

Google Chrome 103.0.5060.114 is a security update.
https://www.google.com/chrome/

Microsoft Edge 103.0.1264.51 is a security update.
https://www.microsoft.com/en-us/edge/business/download

Firefox 102.0.1 is a security update.
https://www.mozilla.org/en-US/firefox/new/

Firefox ESR 91.11.0 is a security update.
https://www.mozilla.org/en-US/firefox/organizations/all/

Vivaldi 5.3.2679.68 is a security update.
https://vivaldi.com/

Email Updates

One or more of these are likely to be of interest to everyone.

OutlookAttachView 3.45 adds a command-line option to control columns in exports. This is not a security update.
https://www.nirsoft.net/utils/outlook_attachment.html

Thunderbird 102.0.2 is a security update.
https://www.thunderbird.net/en-US/

Internet Updates

One or more of these are likely to be of interest to everyone.

curl 7.84.0 resolves over a hundred bugs. This is a security update.
https://curl.haxx.se/windows/

Dropbox 152.4.4880 resolves several bugs. This is not a security update.
https://www.dropbox.com/

Facebook Messenger 153.0.0.19.110 is a security update.
https://www.messenger.com/download

FreeFileSync 11.22 resolves several bugs. This is not a security update.
https://www.freefilesync.org/download.php

Google Drive 60.0 resolves several bugs. This is not a security update.
https://drive.google.com/start

Nextcloud Server 24.0.2 updates libraries, and resolves over 50 bugs. This is a security update.
https://nextcloud.com/

Npcap 1.70 resolves several bugs. This is not a security update.
https://nmap.org/npcap/

Rclone 1.59.0 adds support for new backends, metadata framework, resolves several bugs, and updates libraries. This is not a security update.
https://rclone.org/

Signal 5.49.0 doesn’t provide a detailed changelog so should be treated as a security update.
https://signal.org/download/windows/

Skype 8.85.0.409 improves their propaganda tools and resolves several bugs. This is not a security update.
https://www.skype.com/

Syncthing 1.20.3 resolves several bugs. This is not a security update.
https://syncthing.net/

Technitium DNS Server 8.1.4 resolves several bugs. This is not a security update.
https://technitium.com/dns/

Telegram 4.0.2 resolves several bugs. This is not a security update.
https://telegram.org/

WinSCP 5.21.2 is a security update.
https://winscp.net/eng/index.php

Zoom 5.11.1.6602 resolves several bugs. This is not a security update.
https://zoom.us/

Media Updates

These are unlikely to be of interest to most people.

3tene 3.0.2 updates libraries and resolves several bugs. This is not a security update.
https://en.3tene.com/

darktable 4.0.0 is a major update. This version improves color space, exposure, contrast controls and hundreds of other features, as well as resolving over 100 issues. This should be treated as a security update.
https://www.darktable.org/

Picard 2.8.2 resolves several bugs. This is not a security update.
https://picard.musicbrainz.org/

Plex Desktop 1.48.2.3124 adds option to disable some Discover features, resolves several bugs with Search and Watchlist. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Home Theater 1.20.2.3110 resolves a stability bug. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-app

Plex Media Server 1.27.2.5929 improves logging, adds support for Musicbrainz tags, and resolves several bugs. This is not a security update.
https://www.plex.tv/media-server-downloads/#plex-media-server

Game Updates

These are unlikely to be of interest to most people.

Epic Games 14.1.2 resolves several bugs. This is not a security update.
https://www.epicgames.com/

GameMaker Studio 2022.6.0.23 adds Feather support, room editor filters, additional extension features, and resolves dozens of bugs. This is not a security update.
https://www.yoyogames.com/en/gamemaker

Lego Studio 2.22.6.1 resolves several bugs. This is not a security update.
https://www.lego.com/en-us/ldd

PlayStation PS5 22.01-05.50.00 resolves several bugs and improves performance. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps5/system-software/

PlayStation PS4 9.60 improves performance. This is not a security update.
https://www.playstation.com/en-us/support/hardware/ps4/system-software/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe RoboHelp RH2020.0.8 is a security update.
https://www.adobe.com/support/robohelp/downloads.html

Adobe Acrobat and Reader 22.001.20169, 20.005.30362, and 17.012.30249 are security updates.
https://helpx.adobe.com/security/products/acrobat/apsb22-32.html

Adobe Character Animator 22.5 is a security update.
https://www.adobe.com/creativecloud/catalog/desktop.html

Adobe Photoshop 22.5.8 and 23.4.1 are security updates.
https://helpx.adobe.com/security/products/photoshop/apsb22-35.html

Artweaver 7.0.13 resolves several bugs. This is not a security update.
https://www.artweaver.de/

Calibre 6.0 is a major update. This version adds full text search, new hardware support and performance improvements, a new URL scheme, and read-aloud support. It also removed 32-bit support. This is not a security update.
https://calibre-ebook.com/

Gimp 2.10.32 adds HiDPI, high bit-depth and multi-threading support, dark theme, improved color control, masking, and warp. This is not a security update.
https://www.gimp.org/

Kindle for PC 1.37.65274 doesn’t provide a changelog so should be treated as a security update.
https://www.amazon.com/kindleforpc

Nextcloud Desktop 3.5.2 resolves over a dozen bugs. This is not a security update.
https://nextcloud.com/

Notepad++ 8.4.3 adds option to limit search results to one line per file, adds EOL customization, adds new document shortcuts, and resolves several bugs. This is not a security update.
https://notepad-plus-plus.org/

Security Software Updates

One or more of these is likely to be of interest to most people.

Intel CSMEVDT 7.0.2.0 resolves a documentation error. This is not a security update.
https://www.intel.com/content/www/us/en/download/19392/28632/intel-converged-security-and-management-engine-version-detection-tool-intel-csmevdt.html

FSS 2022.6.14 doesn’t provide a changelog so should be treated as a security update.
https://www.bleepingcomputer.com/download/farbar-service-scanner/dl/62/

Gpg4win 4.0.3 is a security update.
https://www.gpg4win.org/download.html

HTTP Toolkit 1.9.0 improves issue tracking and feedback. This is not a security update.
https://httptoolkit.tech/

MalwareBytes Anti-Malware 4.5.10.200 is a security update.
https://www.malwarebytes.org/antimalware/

OpenSSL (SLP) 3.0.5 is a security update.
https://slproweb.com/products/Win32OpenSSL.html

OpenSSL 1.1.1q is a security update.
https://www.openssl.org/source/

ProtonVPN 2.0.3 resolves several bugs. This is not a security update.
https://protonvpn.com/download

ProtonVPN (macOS) 3.0.1 resolves several bugs. This is not a security update.
https://protonvpn.com/download

SanDisk PrivateAccess 6.3.10 does not provide a changelog so should be considered a security update.
https://kb.sandisk.com/app/answersweb/detailweb/a_id/21996

Tails 5.2 is a security update.
https://tails.boum.org/install/dvd/index.en.html

YARA 4.2.2 is a security update.
https://github.com/VirusTotal/yara/

Capture Updates

These are unlikely to be of interest to most people.

SnagIt 22.1.0 adds several new features, improves performance, and resolves several bugs. This is not a security update.
https://download.techsmith.com/snagit/releases/snagit.msi

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 12.0.7.8 adds support for new encodings and resolves several stability bugs. This is not a security update.
https://www.dvdfab.cn/download.htm

iMazing HEIC Converter 2.0.0 doesn’t provide a changelog so should be considered a security update.
https://imazing.com/heic

IsoBuster 5.0 is a major update that adds a 64-bit version, high-DPI scaling, themes, improved media support and resolves several bugs. This is not a security update.
https://www.isobuster.com/download.php

MakeMKV 1.17.0 improves reliability, adds support for new encodings, and resolves several bugs. This is not a security update.
https://www.makemkv.com/download/

Education updates

One or more of these are likely to be of interest to most people.

Zotero 6.0.9 adds PDF rotation and resolves several bugs. This is not a security update.
https://www.zotero.org/

Utility Updates

These are unlikely to be of interest to most people.

1Password for Windows 8.7.3 is a major update adding several new cosmetic and integration improvements, and search and filter options. This is a security update.
https://1password.com/downloads/windows/

1Password for Mac 8.7.3 is a major update adding several new cosmetic and integration improvements, and search and filter options. This is a security update.
https://1password.com/downloads/mac/

7-Zip 22.00 adds support for APFS, pax, adds zone.id, and resolves several bugs. This is not a security update.
https://www.7-zip.org/

8GadgetPack 35.0 improves compatibility, adds keyboard shortcuts, and resolves several bugs. This is not a security update.
https://8gadgetpack.net/

Agent Ransack 2022.3335 adds new columns, improves view state restoration, and resolves several bugs. This is not a security update.
https://www.mythicsoft.com/agentransack/download/

CCleaner 6.01.9825 adds support for new apps and resolves several bugs. This is not a security update.
https://www.ccleaner.com/

Dell OS Recovery Tool 2.3.7012.0 doesn’t provide a changelog so should be treated as a security update.
https://www.dell.com/support/home/uk/en/ukbsdt1/drivers/osiso/recoverytool

DesktopOK 9.97 expands toolset. This is not a security update.
https://www.softwareok.com/?seite=Freeware/DesktopOK

dnGrep 3.0.84.0 adds personalization, search statistics, Excel row numbers, and resolves several bugs. This is not a security update.
https://dngrep.github.io/

dupeGuru 4.3.1 resolves a false duplication detection bug. This should be treated as a security update if you use dupeGuru to remove duplicate files.
https://dupeguru.voltaicideas.net/

FileLocator Pro 2022.3335 adds new columns, improves view state restoration, and resolves several bugs. This is not a security update.
https://www.mythicsoft.com/filelocatorpro/download

Git SCM 2.37.0 resolves several bugs and improves CLI support. This is a security update.
https://git-scm.com/

GoodSync 11.11.5 resolves dozens of bugs. This is a security update.
https://www.goodsync.com/

Intel CPU Diagnostic 4.1.7.39 adds tests for newer hardware, resolves several bugs, and updates components. This is not a security update.
https://www.intel.com/content/www/us/en/download/15951/intel-processor-diagnostic-tool.html

IsMyHdOK 3.66 improves compatibility and SSD/SSHD detection. This is not a security update.
https://www.softwareok.com/?seite=Microsoft/IsMyHdOK

NTLite 2.3.6.8804 resolves several bugs. This is not a security update.
https://www.ntlite.com/download/

PointerStick 5.88 improves support for virtual desktops and multiple screens. This is not a security update.
https://www.softwareok.com/?seite=Freeware/PointerStick

PowerToys 0.60.0 resolves several bugs and improves compatibility. This is not a security update.
https://github.com/microsoft/PowerToys/releases/latest

RoboForm 9.3.3 adds (and resolves bugs within) OTP feature, improves search, and resolves several bugs. This is not a security update.
https://www.roboform.com/

Rufus 3.19 adds an option for setup customization, updates drivers, and resolves several bugs. This is not a security update.
https://rufus.ie/en_US/

SearchMyFiles 3.20 adds filename length filter. This is not a security update.
https://www.nirsoft.net/utils/search_my_files.html

Synergy 1.14.5 resolves several bugs. This is not a security update.
https://symless.com/synergy/

TeamViewer 15.31.5 improves video experience and adds remote terminal to the Computers & Contacts list. This is not a security update.
https://www.teamviewer.com/en-us/download/windows/

Unity 2022.1.8 updates libraries and resolves dozens of bugs. This is not a security update.
https://unity3d.com/get-unity/download/archive

WhyNotWin11 2.5.0.1 resovles several bugs. This is not a security update.
https://github.com/rcmaehl/WhyNotWin11

WifiInfoView 2.77 improves high-DPI support. This is not a security update.
https://www.nirsoft.net/utils/wifi_information_view.html

ZoomText 2022.2206.7.400 adds languages and resolves several bugs. This is not a security update.
https://support.freedomscientific.com/Downloads/ZoomText

Developer Updates

These are unlikely to be of interest to most people.

GitHub Desktop 3.0.3 resolves several bugs. This is not a security update.
https://desktop.github.com/

Node.js 18.5.0 is a security update.
https://nodejs.org/en/

Node.js 16.16.0 is a security update.
https://nodejs.org/en/

Node.js 14.20.0 is a security update.
https://nodejs.org/en/

Rustup 1.25.0 adds support for arm64, improved integration and resolves several bugs. This is not a security update.
https://www.rust-lang.org/

Redemption 6.2.0.6122 resolves several bugs. This is not a security update.
https://www.dimastr.com/redemption/

SQLite 3.39.0 adds support for right and full outer join, distinct from, and resolves several bugs. This is not a security update.
https://www.sqlite.org/download.html

Visual Studio Code 1.69.1 adds 3-way merge, improved command center UI for search, DND mode, and resolves several bugs. This is a security update.
https://code.visualstudio.com/

Web Package Updates

These are likely to be of interest only to web developers.

Drupal 9.3.18 is a security update.
https://drupal.org/download

Drupal 9.4.0 is a security update.
https://drupal.org/download

HumHub 1.11.4 is a security update.
https://www.humhub.com/en/download

Joomla 4.1.5 resolves several bugs. This is the last of the 4.1 series. This is not a security update.
https://www.joomla.org/

jQuery 3.6.0
https://code.jquery.com/

MailEnable 10.40 updates libraries and resolves over a dozen bugs. This is a security update.
https://www.mailenable.com/

Piwigo 12.3.0 resolves several bugs. This is not a security update.
https://piwigo.org/

WordPress 6.0.1 resolves over two dozen bugs. This is not a security update.
https://wordpress.org/

Akismet 4.2.5 resolves a bug. This is not a security update.
https://wordpress.org/extend/plugins/akismet/

Antispam Bee 2.11.1 cleans up code. This is not a security update.
https://wordpress.org/extend/plugins/antispam-bee/

Contact Form 7 5.6 resolves several bugs. This is not a security update.
https://wordpress.org/extend/plugins/contact-form-7/

Duplicator 1.4.7 improves compatibility. This is not a security update.
https://wordpress.org/plugins/duplicator/#developers

Interactive World Map 3.2.0 improves compatibility. This is not a security update.
https://wordpress.org/extend/plugins/interactive-world-map/

Postie 1.9.61 resolves a MIME warning. This is not a security update.
https://wordpress.org/extend/plugins/postie/

NextScripts Social Networks Auto-Poster 4.3.26 is a security update.
https://wordpress.org/extend/plugins/social-networks-auto-poster-facebook-twitter-g/

Slider Revolution 6.5.25 resolves a dozen bugs. This is not a security update.
https://revolution.themepunch.com/

Sucuri Security 1.8.32 is a critical security update.
https://wordpress.org/extend/plugins/sucuri-scanner/

W3 Total Cache 2.2.3 is a security update.
https://wordpress.org/extend/plugins/w3-total-cache/

WooCommerce 6.6.1 resolves dozens of bugs. This is a security update.
https://wordpress.org/extend/plugins/woocommerce/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/