Flurry of Security Patches

yggy writes "It's been a hectic day on the security patching front. Microsoft's bulletins for July include patches for three critical vulnerabilities on the same day that Mozilla releases new security updates for Firefox and Thunderbird. Not to be left behind, Apple fixed two Tiger flaws while Oracle issued a critical database server update." (See these separate stories on today's release of Firefox 1.0.5 and the 10.4.2 update from Apple, too.)

Comments

Tomorrow

[mfloy]

So today we have a bunch of new patches, which means tomorrow we will have all the exploits being developed and released. The major problem with patches is they often are not installed by end users, and that is the bread and butter of zombie botnets.

Re:Tomorrow

[Parham]

Luckily Windows has tried to stop this from happening as much as possible by downloading the patches in the background, and then asking you to install, and bugging you to install until you do. What I'm actually waiting for is, seeing what NEW security problems these new security fixes make. This recent article in the games section comes to mind amongst other things.

Re:But wait...

[Caledai]

Nah - its not that Microsoft sucks because the release patches.

Neither does OS suck because they release patches.

Its because microsoft takes so long to release patches for certain vulnerabilities that have been documents - even up to half a year before..

And that the continue to promote products that have been proven to be seriously flawed, and release new versions without those flaws fixed.

There is a difference between releasing a product, and then patching it - and releasing a product knowing it needs patches before its released.

I gotta admit - look how much testing the do on the patches they do release. Service Pack 2 anyone?