PC Security and Other Useful Information

Security Mailer Volume 2019 Number 41

• Adobe security update prenotification
• Apple Security updates
• Browser updates
  • Chrome
  • Firefox
• Cisco security advisories
• Linux updates
• Microsoft
  • Tuesday updates
  • update revisions
  • advisory
• General Security
  • reviews last week
  • Notepad++ update

October 2019 Security Updates

The October security release consists of security updates for the following software:

Microsoft Windows
Internet Explorer
Microsoft Edge (EdgeHTML-based)
ChakraCore
Microsoft Office and Microsoft Office Services and Web Apps
SQL Server Management Studio
Open Source Software
Microsoft Dynamics 365
Windows Update Assistant

MS identified a printing problem:

Windows 10 1903 KB4522016 Cumulative Update Breaks Printing

Looks like MS has re-released an out-of-band update to fix a couple of problems.

October 3, 2019—KB4524150 (OS Build 16299.1421)

“IMPORTANT This is a required security update that expands the out-of-band update dated September 23, 2019. This security update includes the Internet Explorer scripting engine security vulnerability (CVE-2019-1367) mitigation and corrects a recent printing issue some users have experienced. Customers using Windows Update or Windows Server Update Services (WSUS) will be offered this update automatically. To help secure your devices, we recommend that you install this update as soon as a possible and restart your PC to fully apply the mitigations. Like all cumulative updates, this update supersedes any preceding update.

Note This update does not replace the upcoming October 2019 monthly update, which is scheduled to release on October 8, 2019.“

Windows 10 1903 KB4522016 Cumulative Update Breaks Printing

Shortly after the release of the “optional” cumulative release for Windows 10 1903, reports came in that there was a big problem with HP printers being unable to print. It turns out that the problem is a bit more extensive. Of course, Microsoft’s “work around is to:

• try again
• reboot the printer
• install newer (r older) driver

They promise a more permanent fix “as part of an upcoming release”.

Security Mailer Volume 19 Number 39Balsam#2019MVP

• Browsers- urgent Chrome update
• Cisco Security Advisories
• Linux updates
• Microsoft
  • Security updates released
  • Emergency update for Internet Explorer 0-day
  • Cumulative update for Windows 10 1903
  • File extension types banned in OWA
  • New fileless malware
• General Security covers last week vulnerabilities

September 26, 2019—KB4517211 (OS Build 18362.387)

Security Mailer Volume 19 Number 38

• Browser Firefox to have monthly updates next year
• Cisco Security Advisories
• Linux updates
• Microsoft
  • More Windows 10 update problems
  • Windows Defender issues
  • Malware abusing BITS service
• General Security reviews last week
• Wireshark update

Update on removing Flash from Microsoft Edge and Internet Explorer

“In 2017, we published a roadmap to remove Adobe Flash from Microsoft Edge and Internet Explorer by 2020. Since that post, we announced our intent to build Microsoft Edge on the Chromium open source project. In this post, we will provide an update on what to expect for the Flash retirement in Microsoft browsers.

Here’s what you can expect for each Microsoft browser:

In the next version of Microsoft Edge (built on Chromium), we will continue to retire Flash in the same timeframe as other Chromium based browsers. You can learn more of that timeline in this blog post. Flash will initially be disabled, and the user will need to re-enable Flash on a site-by-site basis; Flash will be completely removed from the browser towards the end of 2020. Group policies are available for enterprise admins and IT pros to change the Flash behavior prior to that date.

For both the in-market version of Microsoft Edge (built on EdgeHTML) and Internet Explorer 11, the current experience will continue as-is through 2019. Specifically, we no longer intend to update either Microsoft Edge (built on EdgeHTML) or Internet Explorer 11 to disable Flash by default. We still plan to fully remove Flash from these browsers by December 2020, as originally communicated.”

Security Mailer Volume 19 Number 35

• Apple
  • Emergency update for iOS
  • Other security updates;
  • Browser updatesPale Moon
  • Chrome
• Cisco Security Advisories
• Linux updates
• General Security section review of last week

Apple Releases iOS 12.4.1 to Patch Security Flaw Behind Jailbreak

“Apple released iOS 12.4.1 today to fix a security flaw reintroduced with the release of iOS 12.4, and used by security researcher Pwn20wnd to develop and release a jailbreak tool for up-to-date iOS devices.

The vulnerability patched today by Apple is a use after free tracked as CVE-2019-8605 targeted by the Sock Puppet exploit that was used to create jailbreak tools for iOS devices.”