Files Shared

New Adobe CRITICAL Security Updates Acrobat Pro and Reader 11 0 03

-
[Updated 2013-05-21 @8:38 AM: I removed the paragraphs and image regarding a low resolution icon for Adobe Reader. What I had witnessed was, I have discovered, yet another bug in Apples Finder application. Ive witnessed the exact same phenomenon with other newly installed apps. Refreshing or relaunching the Finder removes the problem. Not good Apple! Apologies to Adobe.]

On schedule, Adobe has posted critical security updates of both Acrobat Pro and Reader. The download links are below.

Thankfully, Adobe has (belatedly) provided an updated Security Bulletin as well, which is also linked below. The updates patch 27 security vulnerabilities.

Security Bulletin:
http://www.adobe.com/support/security/bulletins/apsb13-15.html

Adobe Reader XI (11.0.03):
http://get2.adobe.com/reader/

Adobe Acrobat Pro XI (11.0.03):
http://www.macupdate.com/download/1833/AcrobatUpd11003.dmg

Here are the security CVE vulnerabilities patched by these updates:

These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341).          

These updates resolve an integer underflow vulnerability that could lead to code execution (CVE-2013-2549).

These updates resolve a use-after-free vulnerability that could lead to a bypass of Adobe Readers sandbox protection (CVE-2013-2550). 

These updates resolve an information leakage issue involving a Javascript API (CVE-2013-2737).

These updates resolve a stack overflow vulnerability that could lead to code execution (CVE-2013-2724).

These updates resolve buffer overflow vulnerabilities that could lead to code execution (CVE-2013-2730, CVE-2013-2733). 

These updates resolve integer overflow vulnerabilities that could lead to code execution (CVE-2013-2727, CVE-2013-2729).

These updates resolve a flaw in the way Reader handles domains that have been blacklisted in the operating system (CVE-2013-3342).

--

Go to link Download

Oracle Java Quarterly Security Updates July 2015

Oracle released the scheduled critical security updates for its Java SE Runtime Environment software. 

Unwanted "Extras"

Although most people do not need Java on their computer, there are some programs and games that require Java.  In the event you need to continue using Java, How-to Geek discovered a little-known and  unpublicized option in the Java Control Panel to suppress the offers for the pre-checked unwanted extras that Oracle has long included with the updates.  Although the Ask Toolbar has been removed, tha does not preclude the pre-checked option for some other unnecessary add-on.

Do the following to suppress the sponsor offers:

1. Launch the Windows Start menu
2. Click on Programs
3. Find the Java program listing
4. Click Configure Java to launch the Java Control Panel
5. Click the Advanced tab and go to the "Miscellaneous" section at the bottom.
6. Check the box by the “Suppress sponsor offers when installing or updating Java” option and click OK.

Windows XP

For information on Java support for Windows XP, organizations and individuals who must continue using Windows XP and have Java installed are referred to the Oracle blog post, The future of Java on Windows XP (Henrik on Java).

Update

If Java is still installed on your computer, it is recommended that this update be applied as soon as possible due to the threat posed by a successful attack.

Download Information

Download link:  Java SE 8u51

Verify your version:  http://www.java.com/en/download/testjava.jsp

Notes:

• UNcheck any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.
• Starting with Java SE 7 Update 21 in April 2013, all Java Applets and Web Start Applications should be signed with a trusted certificate.  It is not recommended to run untrusted/unsigned Certificates.  See How to protect your computer against dangerous Java Applets

Critical Patch Updates

For Oracle Java SE Critical Patch Updates, the next scheduled dates are as follows:

• 20 October 2015
• 19 January 2016 
• 19 April 2016

Java Security Recommendations

For those people who have desktop applications that require Java and cannot uninstall it, Java can now be disabled in Internet Explorer.  See Microsoft Fix it to Disable Java in Internet Explorer.

1)  In the Java Control Panel, at minimum, set the security to high.
2)  Keep Java disabled until needed.  Uncheck the box "Enable Java content in the browser" in the Java Control Panel.


3)  If you use Firefox or Pale Moon, install NoScript and only allow Java on those sites where it is required.

Instructions on removing older (and less secure) versions of Java can be found at http://java.com/en/download/faq/remove_olderversions.xml

References

• Java SE 8 Update Release Notes
• Java, The Never-Ending Saga  
• Oracle Quality Assurance Blog 
• Critical Patch Updates and Security Alerts

Go to link Download

Nokia introduces two new updates for Symbian Anna

Nokia expands the online version of Nokia Maps

Now that the most current Nokia devices with Symbian ^ 3 should have had the benefit of the Anna updates, Nokia will begin now with the provision of two new updates. Firstly, this is a so-called Service Pack and the Second is an update to the version of Symbian Anna v25.

The Service Pack is mainly according to Nokia, as well as improvements in performance when scrolling through text messages. If the user wants to provide his photos with geotags, the GPS information to the service pack is also available significantly faster. The Service Pack can be carried out via the Nokia Suite, Nokia Software Updater or directly through the menu-point update on the smartphone. The installation file is about 700 KB in size and could be installed easily on our Nokia N8. After installation, the device will be rebooted, but still has all the settings, appointments and contacts.

The update, which is just under 1 MB in size, for Symbian Anna on the other hand, version 25 brings fixes primarily for internal functions of the operating system. For more information about changes to had not yet been put in experience, especially since the update for our Nokia N8 to date not yet available. When the various devices, the software version v25 will receive is always dependent on how you update the firmware on factors such as network operators, product code and branding, especially since the various providers, the firmware first test and possibly adapt to their smartphones. Unfortunately, the press department of Nokia could give no further information on this yet. Both updates, both the service pack and the firmware update will be available for the current device with Symbian ^ 3/Anna. As always with firmware updates, nor the obligatory reference to ensure all personal data before installation.

Nokia Maps for Android, iOS and Co.

For some time, is one of Nokia Maps web app available to assist with web browsers that support HTML5, can be used. Until now, the functionality, as we reported in a message, still quite strong and restricted to devices with Android or iOS no real competitor to Google Maps. Meanwhile, Nokia has the web app of maps but also further developed and equipped with new functions, which is approaching the functionality of the navigation software from Google. It is now possible in addition to the route guidance, including information on public transportation and off-line use of the map. Here, the off-line feature as with Google Maps for Android will be realized in that the user need, map it on his smartphone via WLAN invites.

In July of this year we also reported in a message on the revised web version of Nokia Maps and its new features. How Nokia is now reporting on his blog Conversations by Nokia, the functionality has been further extended. So it is now possible, at least for users of Google Chrome, the 3D view without additional browser plug-in to use, with other browsers currently require a plug-in. According to Nokia the alternative Internet browser, however, are in the testing phase. Furthermore, were the so-called heat maps to 56 cities, worldwide. With these cards, the user receives an overview of problems regarding attractions, nightlife or shopping in a foreign city. The possibility to obtain information on public transport and to be thereby creating routes from A to B has been expanded. Thus, the route planning for a total of 420 cities is available in 30 cities are also detailed timetable information available.

Go to link Download

On Vacation but Java updates from Oracle and Apple Be sure to have the UNmessed up Apple Java update!!! and Adobe Flash Update

Im on a break while I work on other things. But here is some quickie news. I expect, if youre a regular reader, you know how to dig up the URLs and CVE reports by now.

I) MASSIVE CRITICAL Java update from both Oracle and Apple, including 40 (FORTY) security patches. Apples update is for Java version 1.6 only, the part of Java included in OS X. The update is for OS X 10.6 - 10.8.

II) Apple MESSED-UP their original Java update release, which was labeled "JavaForOSX2013-003". This mess KILLED Java and must be updated with what replaced it: "JavaForOSX2013-004". From my experience, Software Update did NOT provide me with the updated version. I had to grab oo4 myself and apply it myself. You may have to do so as well.

Here is an article to help you sort out whether you got STUNG by Apples mess or not, and how to clean it up. Thank you to 9to5Mac.com:

Go to link Download