Updates for Windows for the month of June are out today and it looks like some list! 12 updates covering 20 or more vulnerabilities. MANY of these are tagged as critical. (Critical vulnerabilities are considered remotely exploited or with little (or no) user interaction.) Sans has a good listing of the advisories. This month it is a bit much to track in one big whallop… but I’ll try to give a summary here.
Tag: updates
-
Microsoft June Patch Cycle heads up
It’s about that time again folks…. Monthly Microsoft patch cycle – June patches will be released on the 13th (next Tuesday) and it looks like a big batch. There should be 12 patches this time and at least one of the Windows updates is Critical and at least one of the Office updates is critical. It’s widely expected that an update will be released for the Word vulnerability that’s been talked about previously here. Also, there will be a change in the ActiveX behavior in Internet Explorer. That change had been scheduled to come out a few months back, but was postponed.
-
The “secure software” dilemma
It’s quite a dilemma when a software product is billed as more secure than another…. several days back when Mozilla Firefox released v. 1.5.0.4 which fixed a number of security issues, I saw someone comment “I thought firefox was supposed to be secure.” I think there’s a misunderstanding when it comes to software. I think the misunderstanding is that one piece of software can be secure and another not. Out of the box. Let’s take a stab at clarifying…. Security is not a product, it’s not a feature, it’s a way of doing things. Along those lines….
-
Microsoft Genuine Advantage phones home daily
Microsoft says they need to do a better job about disclosing this, but the Genuine Advantage tool contacts Microsoft daily. It doesn’t do this to track your browsing or downloading habits, but to check and see if it’s ok that it’s still running. According to this article, they have some concern that it might not work properly and wanted to be able to tell it to shut down if there were widescale problems with the proof of legitimate windows copy. I did glean a few more details from the article that correct an assumption that I made a week ago.
-
Big trouble – you don’t have any viruses….
You know, I’ve seen soooo many antivirus vendors that are somewhat ethically challanged claim that cookie files are a big threat, or in worse cases files that the “free” antivirus test downloaded are dangerous “you should be glad we got here in time – where’s our $30 to fix things…” kind of message, but from a mainline, well known antivirus vendor you expect better…. Over at Spyware Confidential, after an online scan at a leading AV vendor, they’ve received a couple of emails explaining the great danger their computer is in after the scan turned up 0 viruses and 0 infected files.
-
Firefox 1.5.0.4 RPMS for Mandriva 2006
Just an update to let you know I’ve recompiled the src rpm’s from Cooker for Mozilla 1.5.0.4 (For Mandriva 2006) and am uploading them to a subdirectory in http://www.averyjparker.com/wp-content/downloads/firefox/. (Look for the Mozilla-Firefox-1.5.0.4 subdirectory… thought it would be fairly obvious.) Anyway, I’ve put the src rpm in a subdirectory mysteriously named src… and the devel rpms in their own directory. As always the rpms are without guarantee/warranty expressed or implied. They’ve worked for me (I’m typing this now from 1.5.0.4 under Mandriva…) If you find them useful – great. Updating this and this post to reflect updates.
-
Windows Automatic Updates now checking Genuine Advantage…
According to ibnlive.com started today (June 1st) Microsoft will be utilizing their Genuine Advantage check through the Automatic Update feature. Up until now, you have only been prompted for the Genuine Advantage check when visiting the Windows update site directly. (I can only assume the Genuine Advantage check is the method the article speaks of to verify if you have a licensed copy of windows.) Essentially, they say they will not be taking details like name/address, but they will nag you that you have a pirated copy of Windows and updates will not be available.
-
Ubuntu 6.06 LTS release
Probably the biggest news so far today, at least in linux circles is the official release of the Dapper Drake…. Ubuntu 6.06 LTS (Long Term Support) (and kubuntu and edubuntu all…). I’ve been playing with an install based on the Release Candidate (and now upgraded to even include KDE 3.5.3….. I’m really impressed that there were kde 3.5.3 packages available for Dapper Drake 1) before the official release which only officially includes 3.5.2 and 2) almost simultaneous to the KDE announcement. Anyway…. (Almost all links are to the US mirrors…) Kubuntu download images are avialable as is the shipit free cds for kubuntu and shipit free cds for ubuntu and the various ubuntu cd image downloads………….
-
Mandriva Kiosk
Some time back I had seen a quick reference to Mandriva Kiosk as some new Mandriva version of the “Click and Run” repository of Linspire. I finally got a chance to give it a try with the upgrade of KDE to 3.5.2 (Mandriva 2006 had shipped with the 3.4.x series of KDE.) Anyway, I found the process to make it work fairly straightforward. I installed the 4 required packages (new versions could only be found on the kiosk webpage – none of the urpmi sources, even updates new about the newest version of mdkonline, or urpmi/gurpmi…) Once those were done and konqueror restarted, I gave a click at installing kde 3.5.2 and off it went.
-
Mozilla Firefox 1.0x series end of life….
The Mozilla Firefox 1.0.x series will no longer be supported with security updates. IF you use Firefox as your web browser, make sure you’re using the current version in the 1.5 series (currently 1.5.0.3). You can find what your current version is by going to Help, “About Mozilla Firefox”. The 1.5 series automatically downloads and installs updates and periodically checks for updates for the installed extensions.