Linked by Thom Holwerda on Wed 12th Apr 2006 18:30 UTC
Microsoft's dominant Internet Explorer browser has undergone a major security makeover to plug 10 vulnerabilities that puts millions at risk of PC takeover, address bar spoofing and information disclosure attacks. The monster IE update includes a fix for the 'createTextRange()' code execution flaw that caused zero-day drive-by downloads and a significant modification to the way the browser renders certain ActiveX controls. In all, Microsoft shipped five bulletins with patches for 14 different vulnerabilities in a range of Windows products. At the same time Microsoft has begun requesting that users upgrade their ME/98 machines because support ends July 11th, 2006.
Thread beginning with comment 114406
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
Recent Original Stories
Recent Comments
Headlines
Random Comments
Random Stories
Random OS Link
Member since:
2005-11-14
Why? some of those fixes recently in Fedora could be considered 'serious'
And most could not, but that's not the point.
Now I'm not trying to say that one is better than the other, because quite frankly, the quality of software overall is pretty shocking, but at the same time, lets not play the 'my software isn't buggy' trumpet because one can easy do a response
I see one is better thant the other, sorry. One can run for years with updates without rebooting, the other can't.
But the worst is that one has LOTS of ARCHITECTURE bugs, which are the worst kind of bugs.
Why do I say that ? Because most Windows bugs stay for years or months, because MS can't fix them without breaking other things.
That means fixing these bugs require architecture change in the program. While most security bugs in the FOSS world are non-validated data, or buffer overflow kind of bugs.
The kind of bugs that won't break anything once fixed (unless you fix sloppily, this happened once or twice), and that can be fixed in minutes, a bit more in multi-threaded apps.
If you think life is going to be easy for Linux in the future, its not
I say it will.
you're going to end up getting proprietary software vendors demanding compatibility, customers demanding compatibility with old applications - and so this 'beak compatibility for the sake of technological improvement' will no longer fly as the user base gets larger
BS. Proprietary software have the source, and can adapt without ANY problem (see NVidia).
Old applications basically only need old compatible libraries, which is easy to do and already done in lots of consumer grade distros (the famous compat-libs packages).
when Linux gets larger, it'll face the same dilemma
Linux already faced this (like with Oracle) and already manage this, sorry to disapoint you.