aka infosec
Patch Tuesday comes early this month, since January started on a Tuesday. There are seven bulletins, addressing twelve issues in Windows, admin software and developer tools.
January 2013 bulletins
Adobe is planning to release security updates for its PDF reader and authoring software on January 8, 2013. Security advisory APSB13-02 has all the details.
2013’s first Patch Tuesday arrives at 10am on January 8. This month will see seven bulletins, addressing a total of twelve vulnerabilities in Windows, Office, Microsoft developer tools and server software. Two of the bulletins are rated Critical. You can find all the details in the advance notification bulletin.
The Flash vulnerability reported on December 11 has finally been fixed in Internet Explorer 10.
Microsoft chose not to use the regular Flash plugin in Internet Explorer 10, deciding instead to integrate the player into the IE10 code. As a result, any time the Flash player is updated, Microsoft must make corresponding changes to IE10. Hence the delay in producing the patch for IE10. Google now does the same thing with their Chrome browser, but they tend to make the required changes much more quickly.
A new version of Opera was made available today. Version 12.12 fixes a few security issues and other minor bugs.
This month’s Ouch! newsletter (PDF) from SANS lists the steps necessary for users to secure their computers. If you’re doing everything on this list, pat yourself on the back. If not, it’s time to take action.
This month there are seven bulletins, addressing twelve issues in Windows, Internet Explorer (including IE 10) and Office. The Microsoft Security Response Center has a useful summary. For the gory details, see the official security bulletin for the December updates over at Technet.
Here are the bulletins:
Adobe has released new versions of Flash for all platforms. Windows users are encouraged to update Flash to the new version: 11.5.502.135.
Internet Explorer 10 and Google Chrome users will get the equivalent patch in the form of updates from Microsoft and Google, respectively.
The new versions fix a serious security issue in Flash.
The latest version of Google’s web browser has a few minor fixes, including one for a bug that caused the browser to crash in certain situations. Several security issues are also addressed in this version.
The latest version of Google’s Chrome web browser includes two security fixes and a few minor non-security fixes.
boot13