main

Windows Gets Largest Security Update in Over a Year

Shane Pitman   on 13 June 2006 - 18:14 · 28 comments & 21680 views

Advertisement (Why?)
Thanks to Radish™ for the heads up

12. That's the number of updates to be released with the June security patches. Of the twelve, nine are specific to the Windows operating system itself and one of those is listed as "critical" designating it as a severe security concern. Two are related to the Microsoft Office productivity suite and one is for Microsoft Exchange e-mail server.

Of the 12 updates, one of the Office patches fixes a back door in Microsoft Word that was discovered in May and was exploited by the Backdoor.Ginwui virus. Another of the 12 updates is the result of a $521 million dollar lawsuit against Microsoft by Eolas Technologies Inc. As part of the settlement Microsoft had to disable ActiveX from automatically starting when users visit some web sites. Prior to this update users were able to apply this change to their browsers at will, but the patch makes it mandatory.

Microsoft also stated that they will not fix a back door in Windows 98 and Windows ME that was discovered in April of this year. They claim that to do so would require a major re-write of the Windows Explorer version in those products. Support for those versions of Windows officially ends on July 11th of this year.

Microsoft releases security patches on the second Tuesday of each month, which happens to be today. They are urging users to download this months updates as soon as they are made available and are going a step further by suggesting that those running older versions of Windows should upgrade to newer versions such as Windows XP SP2 as soon as possible.

View: Neowin Forum Discussion

News source: BBC News




Post a comment · Send to friend Comments · There are 28 additional comments
#1 ipodman715 on 13 Jun 2006 - 18:17
Thanks for the heads up. Almost forgot today was patch day.
#2 sachleen on 13 Jun 2006 - 18:28
ehh.. ill maybe install em when I reinstall windows but thanks for heads up!
#3 ReAnimation on 13 Jun 2006 - 18:36
Just ran windows update and the patches are now showing up for download.
#4 dyl0n on 13 Jun 2006 - 18:39
I expect Junes autopatcher will be around by the end of the week then.
(2 replies) #5 Elite_graphix on 13 Jun 2006 - 18:51
i read this, this morning on BBC too.

i want these updates installed.but only way to get them it seems is via windows updates- which always insists it wants to install validation tools and other crap.

may wait for autopatcher.
#5.1 M118LR on 13 Jun 2006 - 19:47
What do you have to hide ?
#5.2 advancedboy on 13 Jun 2006 - 20:59
Quote - M118LR said @ #5.1
What do you have to hide ?


Some genuine windows do not validate.
(2 replies) #6 justrezzo on 13 Jun 2006 - 18:54
I want a Mac! =(
#6.1 L3thal on 13 Jun 2006 - 20:02
What's holding you back?
#6.2 PCyr on 13 Jun 2006 - 20:11
OS X has had its share of security updates too: http://secunia.com/product/96/

Not nearly as much as Windows, but still a notable amount.
#7 DJ Prem on 13 Jun 2006 - 19:09
Thanks downloading as I post
#8 Lefhark on 13 Jun 2006 - 19:10
After i applied the updates for my Win XP x64 copy and rebooted, all my virtual CD/DVD drives were gone. Might have been the Kernel update or whatever. Both, Daemon Tools 4.03 and Alcohol's SCSI controllers were gone as well. No traces of them at my Device Manager. The weird thing was though, that the uninstall entries at "Add or Remove Programs" were gone for those two as well.
Whatever. Manually removing the rest that was still present wasn't that bad and I already found a working alternative for Alcohol/Daemon Tools.
I wonder if this behaviour was intended by Microsoft to slow down piracy - disabling and removing virtual drives. Not that I ever pirated anything ever, of course.

-Lef
(4 replies) #9 rm20010 on 13 Jun 2006 - 20:33
Those boneheads at Eolas can lick my backside for all I care. They're doing nothing but messing up web browsers with that ActiveX dispute - which will eventually apply to browser plugins.
#9.1 toadeater on 13 Jun 2006 - 21:12
I thought MS was phasing out ActiveX?
#9.2 shizat63 on 13 Jun 2006 - 21:37
Quote - toadeater said @ #9.1
I thought MS was phasing out ActiveX?
Even though this would be the best idea ever to figh the spyware wars, it's not bloody likely.
#9.3 rm20010 on 14 Jun 2006 - 03:54
Even if MS phases out ActiveX, it won't do anything if Eolas decides to push their crap onto the plugins used by the other non-ActiveX browsers.

Case in point: latest Opera 9 build. It now has that 'click to activate this control' "protection". For now it currently affects only Flash plugins - Java, QT, and WMP still work fine in Opera 9. But this may be a sign of some annoying crap that will probably target browsers like Firefox as well.
#9.4 mrbester on 14 Jun 2006 - 09:33
Quote - rm20010 said @ #9.3
But this may be a sign of some annoying crap that will probably target browsers like Firefox as well

I fervently hope Firefox NEVER does this. It's an international open source project and the devs just don't give a flying fsck about Eolas and a US-centric patent ruling.
#10 shizat63 on 13 Jun 2006 - 21:00
Which KB is the ActiveX 'update' ?

Does this still apply? http://www.microsoft.com/downloads/details...&displaylang=en
(1 reply) #11 shizat63 on 13 Jun 2006 - 21:06
Nevermind, the ActiveX bullsh!t update is part of the IE rollup http://www.microsoft.com/technet/security/...n/MS06-021.mspx

"This security update also replaces the compatibility patch released on April 11, 2006. That compatibility patch temporarily returned Internet Explorer to the previous functionality for handling ActiveX controls, to help enterprise customers who needed more time to prepare for the ActiveX update changes discussed in Microsoft Knowledge Base Article 912945. This security update replaces that compatibility patch, and makes the changes in Microsoft Knowledge Base Article 912945 permanent. For more information about these changes, see Microsoft Knowledge Base Article 912945 and the product documentation."

Gotta figure out some workaround fot this bullsh!t. Firefox fanboys save your enegy, I need IE for certain apps.
#11.1 jwjw1 on 13 Jun 2006 - 22:07
if you talking about that 'annoying' click here to active a applet...I hate that too..and fixed my install by replacing the 'mshtml.dll' that worked before the update....and then reshacked the version info to the info thats with the KB916281.
#12 jameseuk on 13 Jun 2006 - 21:09
I posted the story,
#13 toadeater on 13 Jun 2006 - 21:14
Quote -
are going a step further by suggesting that those running older versions of Windows should upgrade to newer versions such as Windows XP SP2 as soon as possible.


Might as well wait for Vista is you still haven't updated to XP.
(1 reply) #14 DirtyScab on 13 Jun 2006 - 22:31
"Failed to install catalog files" on these 4 updates

Security Update for Windows XP (KB918439)
Download size: 0 KB , 0 minutes (Downloaded; ready to install)
A security issue has been identified in the way ART images are handled that could allow an attacker to compromise a computer running Microsoft Windows and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...
Don't show this update again

Security Update for Windows XP (KB911280)
Download size: 0 KB , 0 minutes (Downloaded; ready to install)
A remote code execution security issue has been identified in the Routing and Remote Access service that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...
Don't show this update again

Cumulative Security Update for Internet Explorer for Windows XP (KB916281)
Download size: 0 KB , 0 minutes (Downloaded; ready to install)
Security issues have been identified that could allow an attacker to compromise a computer running Microsoft Internet Explorer and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...
Don't show this update again

Security Update for Windows XP (KB917953)
Download size: 0 KB , 0 minutes (Downloaded; ready to install)
A security issue has been identified that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...
Don't show this update again
#14.1 mrbester on 14 Jun 2006 - 09:37
Quote -
A security issue has been identified in the way ART images are handled

That old chestnut again? Who really uses that image format (I've never seen one)?
(2 replies) #15 Andy-Roo on 13 Jun 2006 - 22:32
With all the patches released since SP2, I hope we see some sort of rollup in the near future.

Installing Windows XP fresh on any computer (even an installation with SP2 slipstreamed) is quite the ordeal now, with the dozens and dozens of patches that need to be installed. Oh yeah, when's SP3 due?
#15.1 djurbino on 13 Jun 2006 - 23:15

Try Autopatcher.
#15.2 ganbare on 13 Jun 2006 - 23:36
ryanvm has a great post-sp2 slipstreaming tool
#16 C_Guy on 14 Jun 2006 - 14:14
So, am I understanding this correctly? Microsoft has promised to continue support for Windows 98/ME up to and including July 11th, yet they will not fix a "critical" security flaw that they know about?

I understand it may take a lot of work but if you are making promises to customers who, for whatever reason, need to (or choose) to continue running these versions of Windows, Microsoft should honour that promise.


...C_Guy

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)