Language Selection

English French German Italian Portuguese Spanish

Eight new patches from Microsoft

Filed under
Microsoft
Security

Microsoft will release eight Patches For Windows, Office, Exchange, and MSN Messenger, at least half of which will be marked "critical."

The Patches will hit on the same day that Microsoft turns off its automatic blocking of Windows XP Service Pack 2 (SP2), which many companies applied last year when the OS revision released.

According to information posted on Microsoft's Security Bulletin Advance Notification website, five of the eight fixes will be For Windows, and one each For Office, Exchange, and MSN Messenger.

Microsoft doesn't hand out details of its upcoming Patches when it makes monthly pre-announcements, so the exact nature of the fixes are unknown. The Common Vulnerabilities and Exposures (CVE) database, however, lists a pair of unresolved Office vulnerabilities -- one with InfoPath, the other relating to bypassing policies that limit access to hidden drives by browsing from Office applications -- and one unpatched Exchange issue.

Third-party security firms give other hints of the upcoming patches, although most play it close to the chest. eEye Digital Security, For instance, is a frequent discoverer of Microsoft Windows vulnerabilities, but doesn't disclose details until Patches are made public. It does, however, tally the number of vulnerabilities it's found that have not yet been fixed, and marks the number of days since it provided that information to the vendor.

eEye currently lists two vulnerabilities in Windows that it's tagged as "high severity." One was given to Microsoft on 16 March, the second on 29 March.

Microsoft also said that it would continue the practice of updating its Windows Malicious Software Removal Tool by releasing a new version. Two other high-priority updates For Windows will also be posted to the Windows Update site, said Microsoft, although these are not security related.

Source.

More in Tux Machines

today's howtos

Raspberry Pi: A closer look at Raspbian PIXEL

Over the past three posts, I have looked at a number of different Linux distributions for various models of the Raspberry Pi - including SUSE/openSUSE, Fedora, Manjaro and Ubuntu MATE, and PiCore Linux. What I haven't done yet is look at the latest version of the Raspberry Pi Foundation's own Linux distribution, Raspbian with their PIXEL desktop. So I will look at that first, and then I will wrap this series up. I know that I just recently wrote about Raspbian PIXEL, but that was a sort of "what's new" overview, and in this post I want to go much deeper, and in a lot more detail, to provide some comparison to the other Linux distributions that I have been testing. So please bear with me... Read more

Linux Kernel News

  • Linux: Why do people hate systemd?
    systemd has caused an almost unending amount of controversy in the Linux community. Some Linux users have been unyielding in their opposition to systemd, while others have been much more accepting. The topic of systemd came up in a recent thread in the Linux subreddit and the folks there did not pull any punches when sharing their thoughts about it.
  • PulseAudio 10.0 Linux Sound System Released, Offers OpenSSL 1.1.0 Compatibility
    Today, January 19, 2017, sees the official release of the PulseAudio 10.0 open-source sound server for Linux-based operating systems, a major version that introduces many exciting new features. PulseAudio 10.0 has been in development for the past seven months, since the June 22, 2016, release of PulseAudio 9.0, which is currently used by default in numerous GNU/Linux distributions.
  • Linux is part of the IoT security problem, dev tells Linux conference
    The Mirai botnet? Just the “tip of the iceberg” is how security bods at this week's linux.conf.au see the Internet of Things. Presenting to the Security and Privacy miniconf at linux.conf.au, embedded systems developer and consultant Christopher Biggs pointed out that Mirai's focus on building a big DDoS cannon drew attention away from the other risks posed by insecure cameras and digital video recorders.
  • The Linux Foundation Brings 3 New Open Source Events to China
    LinuxCon, ContainerCon, and CloudOpen will be held in China this year for the first time, The Linux Foundation announced this week. After the success of other Linux Foundation events in the country, including MesosCon Asia and Cloud Foundry Summit Asia, The Linux Foundation decided to offer its flagship LinuxCon, ContainerCon and CloudOpen events in China as well, said Linux Foundation Executive Director Jim Zemlin. “Chinese developers and businesses have strongly embraced open source and are contributing significant amounts of code to a wide variety of projects,” Zemlin said. “We have heard the call to bring more open source events to China.”

Dell Has Sold ‘Tens of Millions’ Dollars’ Worth of Linux Laptops

So popular Linux personality Bryan Lunduke, who recently took an hour out to talk to Dell’s Senior Architect in the office of CTO — try saying that with a mouthful of doughnut — Barton George. What did he learn? Well, for one, Dell says it has ‘no plans’ to start shipping its Linux-powered developer laptops with anything other than Ubuntu. Read more