General software updates

[Rik]

Thanks, Noreen - always a useful addition.

[Gary]

Quicktime 7.3.1 has been released to plug that nasty hole 

[Rik]

Thanks, Gary.

[Inactive]

New version of Opera available.

[Rik]

Thanks, In.

[Noreen]

SIW now updated to v 1.73, you can upgrade from within the program. Can't find any list of what's actually changed.

[Gary]

Microsoft plans to issue two security patches Tuesday, one of which is rated critical, in this year's first edition of its regular Patch Tuesday update cycle.

The critical update covers a flaw that allows the remote execution of malicious software on vulnerable clients, including Windows Vista systems. The patch is also a critical update for Windows XP. The second update, rated as "important", covers an unspecified privilege elevation flaw.

Both patches will require a reboot, as explained in Microsoft's advance bulletin here.

More details will follow once Microsoft publishes its patches on 8 January. Microsoft also plans to issue five high priority, non-security updates on Microsoft Update and two high priority, non-security updates on Windows Update as well as an update to its malicious software removal tool on Tuesday.

[Inactive]

Thanks Gary.

[Rik]

Today Microsoft released the following Security Bulletin(s).

Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.

Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Bulletin Summary:

http://www.microsoft.com/technet/security/bulletin/ms08-jan.mspx

Critical (1)
Microsoft Security Bulletin MS08-001
Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

http://go.microsoft.com/fwlink/?LinkId=104919

Important (1)

Microsoft Security Bulletin MS08-002
Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)
http://go.microsoft.com/fwlink/?LinkID=104921

Non-Security, High-Priority Updates on MU, WU, and WSUS
For this month:

• Microsoft has released five non-security, high-priority updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

• Microsoft has released two non-security, high-priority updates for Windows on Windows Update (WU) and WSUS.


Note that this information pertains only to non-security, high-priority updates on Microsoft Update, Windows Update, and Windows Server Update Services released on the same day as the security bulletin summary. Information is not provided about non-security updates released on other days.

This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.

[Gary]

Java Runtime Environment (JRE) 6 Update 4 has been released, full offline installation package is available here

[Gary]

Quicktime 7.4 and iTunes 7.6 have been released to patch vulnerability's

[Rik]

Yipee!

Thanks, Gary.

[Gary]

Yipee!

Thanks, Gary.

How long till the next QT hole Rik? Place your bets now

[Rik]

Tomorrow, Friday at the latest.

[Gary]

Tomorrow, Friday at the latest.

[Gary]

The new Quicktime update does NOT patch the latest rtsp vulnerability it seems, so expect another QT patch soon the present vulnerability is rated critical by Secunia

[Rik]

And the iTunes add-in plays havoc with Outlook shutting down.

[Gary]

Shockwave player 10.3.0.24 has been released new version can be downloaded here  (still says .23 but it is not )

[Rik]

Security update, Gary, or new features?

[Gary]

I believe its a security update Rik Adobe generally put out updates that have new features and bug fixes at the same time for flash, but as this is a very small point update I think it is a minor fix, could be wrong but if you type test shockwave in the Adobe search box and go to the test page it lets you know its there 

[Rik]

Thanks, Gary.

[Gary]

Perfect disk 2008 is released, came out a few days ago, if you use it and have kept current with the update package its a free update

[Rik]

Thanks, Gary, I do, I have.

[Gary]

Same here

[Gary]

Adobe reader 8.1.2 released to day to fix unspecified bugs and vulnerability's