Updates

Microsoft discontinued support for Windows XP Service Pack 2 on July 13th, and that means there is no SP2 update for the recent LNK shortcut vulnerability (KB2286198). If you review the comments from this SANS Diary post, you’ll see that there was some initial confusion regarding SP2 support, due to a typo in Microsoft’s Security Bulletin (MS10-046). The bulletin is now corrected. However, even today, the download for Windows XP still includes SP2 in the file properties. ...

Hey Admins…. It’s that time again. The second Tuesday is upon us and May so far hasn’t been demanding as far as patching goes. So far …. this month Microsoft has only issued two security announcements. MS10-030 and MS10-031. Microsoft has rated both as critical – and both could result in remote code being executed. MS10-030 resolves an integer overflow in POP3 & IMAP mail responses to Outlook Express and Windows Mail…. MS10-031 addresses a stack memory corruption related to the way that “Visual Basic for Applications” searches for ActiveX components, when host applications provide specially crafted files to the Visual Basic runtime. ...

If you’re a fan of cloud storage service Dropbox and own an iPad, it’s your lucky day. The iPhone version was already quite good, but Dropbox have now updated the app for better iPad support. The new version of the app, available for free here [warning: iTunes link], makes great use of the extra screen real estate afforded by the iPad and takes advantage of both portrait and landscape modes. A few other visual niceties separate the iPad from the iPhone version, making an overall slicker appearance and implementation on the larger device. ...

A universe filled with kaleidoscopic colors blazes across your desktop in this theme for Windows 7, revealed by the infrared imaging of NASA’s Spitzer Space Telescope. Discover more about Spitzer’s unique view of stars, nebulae, and galaxies on the Spitzer Space Telescope website. Download: NASA Hidden Universe Theme Download ...

Although there’s a heated Adobe vs. Apple discussion going on, creative professionals are probably much more excited about the latest version of Adobe’s Creative Suite, which is now officially available. Besides the new versions of Photoshop, Illustrator, InDesign, Premiere Pro and Dreamweaver, Adobe Creative Suite 5 also brings Flash Player 10.1 and Adobe AIR® 2, which are “optimized for high performance on mobile screens and designed to take advantage of native device capabilities for a richer, more immersive user experience.” ...

Many patches are announced for tomorrow: The Redmond company expects to release 11 security bulletins. Of those 5 are rated critical, 5 important and 1 moderate. The patches belonging to the bulletins will close 25 security vulnerabilities in Windows, Exchange and in Office. Adobe plans to deliver security updates for critical vulnerabilities in Adobe Reader and Acrobat for all supported platforms tomorrow. Additionally, the automatic updater will be activated with the patches so in future updates get installed silent. ...

Adobe has announced that it will release an updater along with Adobe Reader and Acrobat versions 9.3.2 and 8.2.2 on patch Tuesday next week. On the Adobe blog, Steve Gottwals wrote: “…we have been testing a new updater technology with select beta customers since our October 13, 2009 quarterly update. The purpose of the new updater is to keep end-users up-to-date in a much more streamlined and automated way. “During our quarterly update on January 12, 2010, and then again for an out-of-cycle update on February 16, 2010, we exercised the new updater with our beta testers. This allowed us to test a variety of network configurations encountered on the Internet in order to ensure a robust update experience. That beta process has been a successful one, and we’ve incorporated several positive changes to the end-user experience and system operation. Now, we’re ready for the next phase of deployment.” ...

Microsoft has put the PC-using world on notice that next Tuesday there will be 11 bulletins released addressing 25 vulnerabilities in Windows, Exchange and Office. Jerry Bryant, Group Manager of Microsoft’s Response Communications, said: “I also want to point out to customers that we will be closing the following open Security Advisories with next week’s updates: — Microsoft Security Advisory 981169 – Vulnerability in VBScript could allow remote code execution. ...

A couple of weeks ago, Digg (finally) launched its official iPhone application to much fanfare. Like all first versions, however, it suffered from a couple of glitches, some of which have been addressed in this latest update, which brings the version number to 1.1.0. The list of improvements and fixes is as follows: – Closing the app on a Digg story page doesn’t result in a crash when reopening the app – A range of stability improvements allows the app to be used for longer periods without crashing – An “open in Safari” option for viewing websites from the story pages – The app opens on the last page viewed when it was last closed ...

In March, the Windows team announced the upcoming release of Service Pack 1 for Windows 7, and Windows Server 2008 R2, but did not set a date of availability. At the time, Microsoft’s Brandon LeBlanc said, “For Windows 7, SP1 includes only minor updates, among which are previous updates that are already delivered through Windows Update. SP1 for Windows 7 will, however, deliver an updated Remote Desktop client that takes advantage of RemoteFX introduced in the server-side with SP1 for Windows Server 2008 R2.” ...