Barney's Blog

Blog archive

Patch Twos-Day

IT pros have an easy week this week, at least when it comes to Microsoft patches: Only two fixes were delivered yesterday.

As usual, remote code execution is the biggest problem, and one patch fixes an RCE flaw that exists in all flavors of Windows. Sounds like this puppy should be installed pronto.

The other patch really isn't a patch in the sense that it doesn't close any vulnerabilities or fix any bugs. Instead, this patch -- which you should install only if you get a notice from Microsoft -- removes bits of XML technology from Microsoft Word. That XML technology violates a patent held by i4i, a Canadian content management company, a U.S. court found. Microsoft argues that removing the offending technology isn't a big deal and won't affect the performance or functionality of Word.

But if you think Microsoft has the software with the most holes, think again. Oracle this week issues two dozen patches. Larry's been busy!

Which vendors do a good job with patches and which don't? Answers welcome at [email protected].

Posted by Doug Barney on January 13, 2010


Featured

  • World Map Image

    Microsoft Taps Nebius in $17B AI Infrastructure Deal To Alleviate Cloud Strain

    Microsoft has signed a five-year, $17.4 billion agreement with Amsterdam-based Nebius Group to expand its AI computing capabilities through third-party GPU infrastructure.

  • Microsoft Brings Copilot AI Into Viva Engage

    Microsoft 365 Copilot in Viva Engage is now generally available, extending Copilot's AI-powered assistant capabilities deeper into the Viva platform.

  • MIT Finds Only 1 in 20 AI Investments Translate into ROI

    Despite pouring billions into generative AI technologies, 95 percent of businesses have yet to see any measurable return on investment.

  • Report: Cost, Sustainability Drive DaaS Adoption Beyond Remote Work

    Gartner's 2025 Magic Quadrant for Desktop as a Service reveals that while secure remote access remains a key driver of DaaS adoption, a growing number of deployments now focus on broader efficiency goals.