Slashdot Mirror
Patch Tuesday — IE7 Clean
jginspace writes "As per the advance notification, Microsoft's monthly security bulletin, released yesterday, addressed five general Windows issues and one in Visual Studio. It also included a fix for a problem in Outlook Express for a total of seven updates. As patch Tuesdays go it was fairly unremarkable. The only general Windows update labeled 'critical' is for a flaw in Media Player. As usual, there's a cumulative update for Internet Explorer, but significantly, the only versions of IE affected are 5 and 6. Version 7 is clean — which is welcome news in this first update since the upgrade was pushed to the world last month. Microsoft was silent on the two zero-day Word holes, one reported here and a new one. Sans is calling this 'Black Tuesday' and recommends patches be applied urgently for the Visual Studio and Media Player vulnerabilities. Sans is recommending the Heise Offline Update utility covered in a previous story."
I uninstalled Outlook Express around 2 years ago using "Add/Remove Windows Components".
However, Windows/Microsoft Update keeps applying patches for "Outlook Express".
I'm sure that if I searched my drive for Outlook Express (or the correct search pattern), I would find that Windows never really uninstalled Outlooked Express. Lies lies lies!
IE7 is not clean: Secunia shows there are 3 unpatched holes:_ 2006
http://secunia.com/product/12366/?task=advisories
Secunia released a new tool last week. You can use this to verify that you have the latest secure versions of software installed, including MS updates. http://secunia.com/software_inspector/
Seriously, has the situation come to a place for Microsoft where a month with no patches for IE is actually news?
/. (justifiably) trashes Microsoft vulnerabilities, it's good to see the editors post a story that goes against the grain. Even if it should be read with a curiously raised eyebrow rather than cheers of jubilation.
Yes. This thing had systems administrators running because of the forced upgrade and general wariness. Now that it's being proven that it won't wreak havoc on corporate systems, I figure some BOFHs will start to ponder a roll-out after blocking it. If it proves in the short-run to be more secure than IE6 (which isn't saying much, of course), they might jump on it.
As much as