Microsoft has released two patches for its Vista operating system, saying that it too is affected by flaws that were disclosed during the company's Aug. 8 security updates.
The patches, which were released earlier this week, fix critical flaws described in Microsoft Security Bulletin MS06-042 and MS06-051. They fix bugs in Internet Explorer and the Windows kernel, and were described Tuesday in a blog posting by Vista Product Manager Alex Heaton. That posting can be found at http://blogs.msdn.com/windowsvistasecurity/archive/2006/08/15/701306.aspx.
Vista is not affected by the most scrutinized vulnerability in this month's patches, a Windows Server service flaw that is already being exploited by some hackers. This bug prompted a rare warning from the U.S. Department of Homeland Security last week.
The latest patches raised some eyebrows because Microsoft had not previously acknowledged that these bugs also affect Vista.
Microsoft has issued this type of patch for beta software in the past -- it released a January security update for Windows Vista Beta 1 -- but the company does not provide information about beta products in its regularly scheduled monthly updates, said Stephen Toulouse, security program manager with Microsoft's security response center. "Beta products are not listed in the security bulletins as they are still under development and not intended to be used in production environments," he said in an e-mail interview.
Vista, however, will be "the first major Microsoft product release that will be serviced with security updates throughout the beta process," Heaton wrote.
One Microsoft observer was cool on the idea.
Microsoft is setting a bad precedent by agreeing to these security updates, because it muddies the difference between supported products and those in beta test, said Russ Cooper, a senior information security analyst at Cybertrust.
He believes that Microsoft is "dead wrong to commit to providing patches of any kind for Vista beta testers, in any forum other than official beta tester channels," he said.
The updates do provide Microsoft with one benefit, however, Cooper said. They pre-empt reports on security flaws in Microsoft's beta software like those issued by Symantec over the past weeks. "They're avoiding more of that stupid Symantec publicity that says that Vista has security holes," he said.
Downloads of the Vista patches can be found on this page.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Best Practice in Building an Integrated Information Management Strategy
Solve Exchange Mailbox Storage Issues Once and for All
Data grids and service-oriented architecture
The state of Middleware
IT Service Management Needs and Adoption Trends: An Analysis of a Global Survey of IT Executives
Strategies for Eliminating .PST Files
Achieving the impossible: Unlimited application scalability
Email Archiving Implementation: Five Costly Mistakes to Avoid
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
FrontRange Solutions launches HEAT Plus Mobile to reduce help desk costs and improve service management productivity 2008-12-02 15:15:00+11
AARNet Helps to Advance Indigenous Health 2008-12-02 12:44:00+11
Orbis selects Telstra International as its data centre partner for the UK, Europe and Middle East Region 2008-12-02 11:23:00+11
ComOps Deploys Corporate Performance Reporting Solution For Healthcare Test Manufacturer 2008-12-02 10:09:00+11
Mornington Peninsula Shire implements Objective to manage knowledge and deliver service excellence 2008-12-02 09:56:00+11
The state of Middleware
Middleware delivers unprecedented visibility and control over your business by making timely information available to decision makers. Organisations are using Middleware to leverage their existing IT investments, while optimizing their IT and business operations, securing their infrastructure and driving compliance. Read on to discover how Middleware can help you increase your businesses profitability.












