Language Selection

English French German Italian Portuguese Spanish

Eight new patches from Microsoft

Filed under
Microsoft
Security

Microsoft will release eight Patches For Windows, Office, Exchange, and MSN Messenger, at least half of which will be marked "critical."

The Patches will hit on the same day that Microsoft turns off its automatic blocking of Windows XP Service Pack 2 (SP2), which many companies applied last year when the OS revision released.

According to information posted on Microsoft's Security Bulletin Advance Notification website, five of the eight fixes will be For Windows, and one each For Office, Exchange, and MSN Messenger.

Microsoft doesn't hand out details of its upcoming Patches when it makes monthly pre-announcements, so the exact nature of the fixes are unknown. The Common Vulnerabilities and Exposures (CVE) database, however, lists a pair of unresolved Office vulnerabilities -- one with InfoPath, the other relating to bypassing policies that limit access to hidden drives by browsing from Office applications -- and one unpatched Exchange issue.

Third-party security firms give other hints of the upcoming patches, although most play it close to the chest. eEye Digital Security, For instance, is a frequent discoverer of Microsoft Windows vulnerabilities, but doesn't disclose details until Patches are made public. It does, however, tally the number of vulnerabilities it's found that have not yet been fixed, and marks the number of days since it provided that information to the vendor.

eEye currently lists two vulnerabilities in Windows that it's tagged as "high severity." One was given to Microsoft on 16 March, the second on 29 March.

Microsoft also said that it would continue the practice of updating its Windows Malicious Software Removal Tool by releasing a new version. Two other high-priority updates For Windows will also be posted to the Windows Update site, said Microsoft, although these are not security related.

Source.

More in Tux Machines

Linux Releases

  • The Changes So Far For The Linux 4.11 Kernel
    We are now through week one of two for the Linux 4.11 kernel merge window. I've already written a number of news posts this past week covering features I find interesting for Linux 4.11. If you are short on time and behind in your Phoronix reading, here's a quick overview of the material so far for this next major kernel bump.
  • Container-friendly Alpine Linux may get Java port
    A proposal floated this week on an OpenJDK mailing list calls for porting the JDK (Java Development Kit), including the Java Runtime Environment, Java compiler and APIs, to both the distribution and the musl C standard library, which is supported by Alpine Linux. The key focus here is musl; Java has previously been ported to the standard glibc library, which you can install in Alpine, but the standard Alpine release switched two years ago to musl because it’s much faster and more compact.
  • Linux From Scratch 8.0 Released, Brings New Changes And Features

today's howtos

Jolla inks exclusive license to kick-start its Android alternative in China

Mobile OS maker Jolla, whose Sailfish platform remains one of the few smartphone alternatives in play these days, has signed an exclusive license to a Chinese consortium to develop a Sailfish-based OS for the country. Jolla says the Chinese consortium will be aiming to invest $250M in developing a Sailfish ecosystem for the country, though it’s not specifying exactly is backing the consortia at this point, nor over what timeframe the investment will happen — beyond saying one of its early investors, a local private equity investor Shan Li, will take a “leading role” in building it up. “There are very big players behind it,” Jolla chairman Antti Saarnio tells TechCrunch, speaking ahead of a press conference held to announce the news here at the Mobile World Congress tradeshow in Barcelona. Read more

Khronos and Vulkan