Slashdot Mirror

← Back to Stories (view on slashdot.org)

Patch Tuesday — IE7 Clean

Posted by kdawson on from the patchwork-quilt dept.

jginspace writes "As per the advance notification, Microsoft's monthly security bulletin, released yesterday, addressed five general Windows issues and one in Visual Studio. It also included a fix for a problem in Outlook Express for a total of seven updates. As patch Tuesdays go it was fairly unremarkable. The only general Windows update labeled 'critical' is for a flaw in Media Player. As usual, there's a cumulative update for Internet Explorer, but significantly, the only versions of IE affected are 5 and 6. Version 7 is clean — which is welcome news in this first update since the upgrade was pushed to the world last month. Microsoft was silent on the two zero-day Word holes, one reported here and a new one. Sans is calling this 'Black Tuesday' and recommends patches be applied urgently for the Visual Studio and Media Player vulnerabilities. Sans is recommending the Heise Offline Update utility covered in a previous story."

6 of 75 comments (clear)

  1. IE7 really clean? by jginspace · · Score: 4, Insightful

    Would I be trolling here if I wondered out loud: Did Microsoft really not find and fix anything with IE7 during the last month that they considered worthy of pushing out with this latest bulletin? Consider that this is the first set of updates since IE7 was pushed out to the whole world and how the inclusion of a patch for IE7 would be met with a jaundiced 'business as usual'. I suppose Microsoft just can't win on this can they?

  2. Damn. by sporkme · · Score: 2, Insightful

    What a headline... I thought for a second there that they had recalled IE7.

    I assume that only security vulnerabilities will be patched in XP's IE7 until Vista is on the same update schedule as XP. These patches will be fashionably late and will only address the most severe issues with the browser, and that simple compatibility glitches will go unanswered. Once Vista is really rolling along there will be more consistency.

    --
    FairTax baby!
  3. Re:clean != free of "critical" updates by Osty · · Score: 5, Insightful

    I fully assume that IE7's phishing filter, like Outlook 2003's Junk Mail Filter, will receive monthly updates from Microsoft to keep it up to date with the latest phising "heuristics".

    Actually, IE7's anti-phishing technology is server-based. The judgement of a URL as "phish" or "non-phish" is done completely outside of your browser, outside of your own PC even, so there's no need for heuristic, signature, or filter updates to be pushed to users.

  4. Alright everyone, show's over by strider44 · · Score: 4, Insightful

    It's official, IE7 is clean. This shows that Microsoft have gotten all of the bugs and there will be no more patches, ever. Uninstall your virus and spyware scanners - they're not needed anymore.

    Seriously, has the situation come to a place for Microsoft where a month with no patches for IE is actually news?

  5. Re:IE7 was a rewrite by Anonymous Coward · · Score: 0, Insightful

    Do you believe that? I can tell you there are many bugs in IE6 that got carried over into IE7, e.g. in CSS handling.

  6. Re:clean != free of "critical" updates by rbochan · · Score: 3, Insightful

    So... every single web site you browse is monitored by a Microsoft server? Yipe. I bet DHS _loves_ that "feature". Can you turn it off?

    Even sounds a bit like spyware...

    [adds another layer to tinfoil hat]

    --
    ...Rob
    The American Dream isn't an SUV and a house in the suburbs; it's Don't Tread On Me.