Adobe Flash Player Updated

Adobe have released updated versions of their Flash Player. This time the new versions don't contain security vulnerability fixes but fix feature and performance bugs.

Affected versions:
- Users of Adobe Flash Player 31.0.0.108 and earlier versions for Windows should update to Adobe Flash Player 31.0.0.122

- Users of Adobe Flash Player 31.0.0.108 and earlier versions for Macintosh should update to Adobe Flash Player 31.0.0.122

- Users of Adobe Flash Player 31.0.0.108 and earlier versions for Linux should update to Adobe Flash Player 31.0.0.122

- Flash Player integrated with Google Chrome will be updated by Google via Chrome update

- Flash Player integrated with Internet Explorer 11 (on Windows 8.1 and Windows 10) and Microsoft Edge (Windows 10) will be updated via Windows Update


More information can be read from Adobe's security bulletin.

Latest PHP Versions Available

PHP development team has released 7.2.11 and 7.1.23 versions of the PHP scripting language. All PHP users are recommended to upgrade their versions to the latest release of the correspondent branch.

Changelogs:
Version 7.2.11
Version 7.1.23

Denial-of-service Vulnerability In VMware Products

There has been found a denial-of-service (DoS) vulnerability in 3D-acceleration feature in Vmware ESXi, Workstation and Fusion. That can be caused by a 3D-rendering shader when an infinite loop occurs in it.

The workaround is to turn the 3D-acceleration off in the affected programs. More details in related security advisory.

Microsoft Security Updates For October 2018

Microsoft have released security updates for October 2018.

Summary of the updates (filter by inserting 9/12/2018 to the From field and 10/09/2018 to the To field) here.

Mozilla Thunderbird Update Available

Mozilla have released an updated version of their Thunderbird email client containing fixes to security vulnerabilities. Some of the fixed vulnerabilities are categorized as critical.

Affected versions:
Mozilla Thunderbird versions earlier than 60.2.1

Fresh version can be obtained via inbuilt updater or by downloading from the product site.

Mozilla Firefox Updated

Mozilla have released updated versions of Firefox browser to address security vulnerabilities.

Affected products are:
- Mozilla Firefox earlier than 62.0.3 (advisory)
- Mozilla Firefox earlier than ESR 60.2.2 (advisory)

Fresh version can be obtained via inbuilt updater or by downloading from the product site (the latest version):
Firefox

Adobe Reader And Acrobat Security Updates

Adobe have released security updates to fix some vulnerabilities in their PDF products, Adobe Reader and Adobe Acrobat. The vulnerabilities could allow an attacker to execute arbitrary code in the context of the current user in the affected system.

Affected versions:
*Acrobat DC and Acrobat Reader DC, continuous track
version 2018.011.20063 and earlier

*Acrobat 2017 and Acrobat Reader 2017
version 2017.011.30102 and earlier

*Acrobat DC and Acrobat Reader DC, classic track
version 2015.006.30452 and earlier


Users of vulnerable versions are instructed to update their versions either by using automatic update functionality or by downloading fresh version manually. The default installation configuration runs automatic updates on a regular schedule and can be manually activated by choosing Help > Check for Updates.

Those who want to upgrade manually, can download the latest versions of the links below:
Adobe Reader
Adobe Acrobat

More information about fixed vulnerabilities can be read from Adobe's security bulletin.