Microsoft drops SharePoint fix
102362
(InfoWorld) - September's batch of Microsoft security patches was trimmed Friday as Microsoft announced that a planned update to its SharePoint collaboration software would not be released this month. The update was to fix an elevation of privilege flaw, which had been rated "important" by Microsoft. This type of flaw can be used to give attackers access to Windows resources that would otherwise be blocked off. Microsoft, which declined to comment further on the matter, did not say when -- or if -- it would patch the bug. The flaw affects Windows SharePoint Services 3.0 on Windows Server 2003 and Office SharePoint Server 2007. The company also wouldn't say why it had suddenly decided to pull the patch, but it is not unheard of for Microsoft to pull an update at the last minute because of quality concerns. Microsoft's security updates go through a rigorous testing process to ensure that they don't harm other Windows programs. According to security vendor McAfee, the delay may give attackers another month to exploit a known SharePoint vulnerability . "There is a yet-to-be patched SharePoint vulnerability that was made public in May this year," the company said in a statement. "The assumption was that Microsoft was going to patch it next week. Now that they have pulled this bulletin, the next possible release date as part of the regular patch cycle is October's Patch Tuesday." McAfee has not seen any attacks that exploit the flaw in question, however. Microsoft is still on track to deliver the remaining four security updates next Tuesday. Those patches include a critical update for Windows 2000, as well as important patches for Visual Studio, Windows Services for Unix, and the Windows Live and MSN Messenger software. Microsoft's subsequent round of security updates are expected on Tuesday Oct. 9.
524136
Microsoft quest to have Open XML approved by the ISO as a global technology standard seems to have recovered from a setback it suffered last week.
307250
Microsoft's decision to reposition its .Net Passport identification system comes as Monster is dropping support for the authentication service.
15812
Microsoft has quietly released an update to Windows XP to fix a potentially serious configuration problem in the firewall that ships as part of Windows XP Service Pack 2. Users who installed SP2 on their Windows
104744
Sharepoint is getting an open-source webpart.  This is good for Microsoft and for its customers.  It could be better, though....
324027
A bug in Microsoft's Windows Live OneCare security suite has been causing users' e-mail to vanish from Outlook and Outlook Express, Microsoft confirmed. A fix is due out next week.
201359
Blog: Microsoft has dropped its "Get the Facts" website, but the replacement isn't much better.
50456
Although Microsoft had planned to release a patch today for a OneCare flaw that eats Outlook and Outlook Express e-mail files, user complaints prompted it to actually put out the fix on Sunday.
302686
Microsoft has decided to cancel its scheduled 2007 Professional Developer's Conference, previously slated to take place in Los Angeles the first week of October. The company says its new developer tools are already available to customers.
499001
SEPTEMBER 14, 2004 (REUTERS) - Microsoft Corp. today released a patch for its latest &quot;critical&quot; security flaw affecting how Windows, Office and developer tools software process images in the JPEG image format.
176052
Microsoft has issued a patch to fix the security flaw, and urges its customers to use a new utility to locate the computer applications that are vulnerable.
388719
(InfoWorld) - Microsoft Corp. plans to patch its Windows and Visual Studio products next week, but it does not have a fix in the works for aÂ widely publicized flaw in Word, which hackers are reportedly exploiting in targeted attacks. The company's security team is readying five sets of patches for Windows, and will also issue a single critical security update for Visual Studio, Microsoft said in an alert published Thursday. Microsoft rates the most serious of its Windows updates as "critical," meaning an attacker could exploit the underlying flaw to run malware on a victim's PC with no user action, the company said. These security patches are usually released on the second Tuesday of each month, and the company strives to publish a small number of updates in December, because IT operations are often short-staffed during the holiday season. On Tuesday, Microsoft warned of a vulnerability in its Word software that had been reportedly used in online attacks. Security researchers rated this flaw critical, because an attacker could exploit it to run malicious software on a victim's PC. For such an attack to work, however, the victim would first have to be tricked into opening a maliciously encoded Word file. The Word flaw is not scheduled to be patched next Tuesday, said a spokesman for Microsoft's public relations firm. There is, however, one critical Visual Studio flaw that may be addressed in the updates. That bug is in Visual Studio 2005's WMI Object Broker ActiveX object. It was first reported in late October.
713300
A stitch in time... Microsoft this week pushed out a patch to resolve a flaw in its patching system.â¦
768081
Microsoft Corp. on Tuesday released several security fixes for its Windows operating system and Office software, and rereleased two previous patches.
742072
Microsoft has given up on trying to hawk its controversial Passport sign-on service to other companies. Microsoft&#39;s decision to shut down its Passport partner program comes after one of its largest allies
272166
The software giant will stop offering security upgrades of its troubled Internet Explorer Web browser to users of older Windows operating systems.
213407
November 16, 2004 -- (WEB HOST INDUSTRY REVIEW) -- Software giant Microsoft  announced on Tuesday that it has released version 3.0 of Microsoft Solutions for Windows-based Hosting, a management platform that includes tools for handling