Barney's Blog

Blog archive

Patch Twos-Day

IT pros have an easy week this week, at least when it comes to Microsoft patches: Only two fixes were delivered yesterday.

As usual, remote code execution is the biggest problem, and one patch fixes an RCE flaw that exists in all flavors of Windows. Sounds like this puppy should be installed pronto.

The other patch really isn't a patch in the sense that it doesn't close any vulnerabilities or fix any bugs. Instead, this patch -- which you should install only if you get a notice from Microsoft -- removes bits of XML technology from Microsoft Word. That XML technology violates a patent held by i4i, a Canadian content management company, a U.S. court found. Microsoft argues that removing the offending technology isn't a big deal and won't affect the performance or functionality of Word.

But if you think Microsoft has the software with the most holes, think again. Oracle this week issues two dozen patches. Larry's been busy!

Which vendors do a good job with patches and which don't? Answers welcome at [email protected].

Posted by Doug Barney on January 13, 2010


Featured

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • Report: Security Initiatives Can't Keep Pace with Cloud, AI Boom

    The increasingly fast adoption of hybrid, multicloud, and AI systems is easily outgrowing existing security measures, according to a recent global survey by the Cloud Security Alliance (CSA) and exposure management firm Tenable.

  • World Map Image

    Microsoft Taps Nebius in $17B AI Infrastructure Deal To Alleviate Cloud Strain

    Microsoft has signed a five-year, $17.4 billion agreement with Amsterdam-based Nebius Group to expand its AI computing capabilities through third-party GPU infrastructure.

  • Microsoft Brings Copilot AI Into Viva Engage

    Microsoft 365 Copilot in Viva Engage is now generally available, extending Copilot's AI-powered assistant capabilities deeper into the Viva platform.

Most   Popular