Language Selection

English French German Italian Portuguese Spanish

Eight new patches from Microsoft

Filed under
Microsoft
Security

Microsoft will release eight Patches For Windows, Office, Exchange, and MSN Messenger, at least half of which will be marked "critical."

The Patches will hit on the same day that Microsoft turns off its automatic blocking of Windows XP Service Pack 2 (SP2), which many companies applied last year when the OS revision released.

According to information posted on Microsoft's Security Bulletin Advance Notification website, five of the eight fixes will be For Windows, and one each For Office, Exchange, and MSN Messenger.

Microsoft doesn't hand out details of its upcoming Patches when it makes monthly pre-announcements, so the exact nature of the fixes are unknown. The Common Vulnerabilities and Exposures (CVE) database, however, lists a pair of unresolved Office vulnerabilities -- one with InfoPath, the other relating to bypassing policies that limit access to hidden drives by browsing from Office applications -- and one unpatched Exchange issue.

Third-party security firms give other hints of the upcoming patches, although most play it close to the chest. eEye Digital Security, For instance, is a frequent discoverer of Microsoft Windows vulnerabilities, but doesn't disclose details until Patches are made public. It does, however, tally the number of vulnerabilities it's found that have not yet been fixed, and marks the number of days since it provided that information to the vendor.

eEye currently lists two vulnerabilities in Windows that it's tagged as "high severity." One was given to Microsoft on 16 March, the second on 29 March.

Microsoft also said that it would continue the practice of updating its Windows Malicious Software Removal Tool by releasing a new version. Two other high-priority updates For Windows will also be posted to the Windows Update site, said Microsoft, although these are not security related.

Source.

More in Tux Machines

Ubuntu Devs Willing to Work on GNOME Software to Replace Ubuntu Software Center

The Ubuntu Software Center managed to be the center of news stories after the Ubuntu MATE project decided to ditch it as default (still available in the repos), and discussions about a possible replacement in the regular Ubuntu desktop have started once more. Read more

FreeBSD 10.2 Release Candidate 2 Adds Better Hyper-V Support on Windows Server 2012

While not a GNU/Linux operating system, FreeBSD is an imperative open-source project, the most acclaimed BSD distribution on the market. Today, we announce the availability for download and testing of the second RC (Release Candidate) version of FreeBSD 10.2. Read more

Debian-Based Clonezilla Live 2.4.2-29 Is Out with Partclone 0.2.81 and Lots of Bugfixes

On the first day of August 2015, Steven Shiau has released a new testing version of his popular Clonezilla Live CD, which can be used for disk cloning and imaging operations, version 2.4.2-29. Read more

Arch Linux-Based BlackArch Penetration Testing Distro Now Using Linux Kernel 4.1 LTS

The development team behind the BlackArch project, a GNU/Linux distribution derived from Arch Linux and designed to be used for penetration testing and security analysis operations, released an updated installation media, BlackArch 2015.07.31. Read more