Microsoft & Adobe Tuesday

Adobe Reader/Acrobat 22.001.20117 (Windows)

22.001.20117 (Win), 22.001.20112 (Mac) Planned update, Apr 12, 2022 — Acrobat & Acrobat Reader DC Release Notes (adobe.com)

This release is a planned update for Adobe Acrobat/Reader, providing new features and security updates.

=====================

Should also become available via the internal updater:  Help / Check for updates

Windows Malicious Software Removal Tool (MRT/MSRT) for April 2022, version 5.100

Download Windows Malicious Software Removal Tool 32-bit from Official Microsoft Download Center

Download Windows Malicious Software Removal Tool 64-bit from Official Microsoft Download Center

Firefox 99.0.1

https://www.mozilla.org/en-US/firefox/99.0.1/releasenotes/

PaleMoon v29.4.6 (2022-04-12)

Pale Moon - Release Notes

This is a security and bugfix release.

Changes/fixes:

• Fixed a potential crash issue on bing.com.
• Updated NSS to 3.52.4 to address security issues.
• Fixed some thread locking issues. DiD
• Worked around a Mesa driver bug that could cause crashes.
• Fixed a potential resource access issue in devtools. DiD
• Security issues with CVEs addressed: CVE-2022-1097, CVE-2022-28285 (DiD) and CVE-2022-28283 (DiD).
• UXP Mozilla security patch summary: 1 fixed, 5 DiD, 2 rejected, 23 not applicable.

===========================================================

For those with version 29.4.5.1 or earlier, it should be available via the internal updater::   Help / Check for Updates

(For those with version 30.x --- which has been "recalled" --- I'm assuming the internal updater won't find this version.)

Full downloads:   Pale Moon for Windows downloads

Mozilla Thunderbird 91.8.0 update

Important info about the latest Thunderbird update...

If you use Thunderbird as a client to access Gmail accounts, rather than viewing/sending email via the Gmail website, be sure to read this Mozilla KB article (at ghacks.net), about Thunderbird 91.8.0. 

Specifically this part:

Thunderbird users who have disabled cookies in the email client will notice that the new authentication method does not work without them. It is required to enable cookies as the OAuth token requires it. Cookies may be disabled after the successful authentication, but since cookies will expire eventually, it would be necessary to re-enable them whenever a new cookie needs to be set.

I wasn't able to log in to send emails after this update today because I had cookies disabled in TB. It just kept showing a Gmail log-in screen which wouldn't accept my email address (never got as far as asking for password.) That's when I searched the net and found the KB article at ghacks.

Don't know why TB didn't automatically enable the cookie setting with this update, and/or pop up a notice with a link to the Mozilla KB article. Would have saved me a big bunch of time this afternoon.

FWIW, I set cookies to be deleted whenever TB is exited, but they'll remain active until then. And I  disabled 3rd party cookies.

Also note: Google will end support for insecure apps (e.g., older versions of Thunderbird) on May 30 of this year. So if you don't update to the latest TB, you won't have any access at all.

The APRIL MSRT, version 5.100 , added detection/removal of the following: