PC Security and Other Useful Information

MS identified a printing problem:

Windows 10 1903 KB4522016 Cumulative Update Breaks Printing

Looks like MS has re-released an out-of-band update to fix a couple of problems.

October 3, 2019—KB4524150 (OS Build 16299.1421)

“IMPORTANT This is a required security update that expands the out-of-band update dated September 23, 2019. This security update includes the Internet Explorer scripting engine security vulnerability (CVE-2019-1367) mitigation and corrects a recent printing issue some users have experienced. Customers using Windows Update or Windows Server Update Services (WSUS) will be offered this update automatically. To help secure your devices, we recommend that you install this update as soon as a possible and restart your PC to fully apply the mitigations. Like all cumulative updates, this update supersedes any preceding update.

Note This update does not replace the upcoming October 2019 monthly update, which is scheduled to release on October 8, 2019.“

Security Mailer Volume 19 Number 35

• Apple
  • Emergency update for iOS
  • Other security updates;
  • Browser updatesPale Moon
  • Chrome
• Cisco Security Advisories
• Linux updates
• General Security section review of last week

Apple Releases iOS 12.4.1 to Patch Security Flaw Behind Jailbreak

“Apple released iOS 12.4.1 today to fix a security flaw reintroduced with the release of iOS 12.4, and used by security researcher Pwn20wnd to develop and release a jailbreak tool for up-to-date iOS devices.

The vulnerability patched today by Apple is a use after free tracked as CVE-2019-8605 targeted by the Sock Puppet exploit that was used to create jailbreak tools for iOS devices.”

ESET TDE (aka Deslock aka Endpoint Encryption), doesn’t like 1903

Apparently, the ESET Total Disk Encryption can cause “”Inaccessible Boot Device” to occur. This post from their support folks describes what to do to avoid or fix the problem.

• If you have not upgraded to Windows 1903 and you would like to prevent Windows from updating,
• If you have recently upgraded to Windows 1903 and your machine is currently booting correctly but you want to avoid this problem
• If you have recently upgraded to Windows 1903 and your machine no longer boots correctly

Security vulnerabilities fixed in Firefox 67.0.3 and Firefox ESR 60.7.1

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw.

Security Mailer Volume 2019 Number 24

• Adobe updates
  • Flash Player
  • Cold Fusion
• Adobe Campaign
• Mozilla releases
• Bugfix update for Firefox
• Cisco Security Advisories
• Linux updates
• Microsoft
  • Tuesday release updates
  • Security Updates revised
  • Security Advisories,
  • Exim update information
• General Security reviews last weeks vulnerabilities

Security Bulletin for Adobe Flash Player

VLC 3.0.7 is Biggest Security Release Due to EU Bounty Program

“VLC Media Player 3.0.7 was released on Friday and contained the most security updates ever in one release of the program. The president of the VideoLan non-profit organization states that this was due to their inclusion in the EU-FOSSA bug bounty program.”

Security Mailer Volume 2019 Number 23

• Browsers updated
  • Firefox
  • Pale Moon
  • Cisco Security Advisories
  • Linux updates
  • Microsoft
    • Reminder to patch Blue Keep
    • Release of Security Baseline for Windows 10 1809 and Server 2019
  • General Security reviews last weeks vulnerabilities, covers Exim flaw affecting more than half of all webmail servers

Security Mailer Number 22

• Apple releases more security updates
• Cisco Security Advisories
• Linux update
• General Security reviews last week