First Step News and Notes ...

Apple iTunes Update and Microsoft Patches

From the Washington Post Security Fix Blog: Apple iTunes Update and Patch Tuesday Preview

Apple has released a new version of its iTunes software that includes an important security update for both Windows and Mac OS X systems. Meanwhile, Microsoft provided a preview of the security updates it will release next week to fix vulnerabilities in its Windows operating system and other software.

Windows users can grab the new iTunes update, version 7.4, from Apple's site or via the Apple Software Update that comes bundled with iTunes and QuickTime. Mac users can fetch update using Software Updates.

———————————————————————————————

From the Washington Post Security Fix Blog: Security Updates for Windows 2000, Instant Messager

Microsoft Corp. released a mercifully light batch of software updates today (9.11.2007) as part of its regularly scheduled "Patch Tuesday" release cycle. Most Windows users will likely have to install just a single security update this time around. The fixes are available from the Microsoft Update Web site or via automatic updates.

Of the five security bundles Microsoft issued, only one is likely to affect most Windows users. Microsoft said MSN Messenger, an instant messaging program installed by default on all Windows XP computers, contains a security hole that could be exploited when a user accepts a specially crafted chat invitation from an attacker. The same vulnerability also is present in Windows Live Messenger, the newer version of Microsoft's chat software.

Microsoft Fixed 14 Issues

From the Washington Post Security Fix Blog

Microsoft today released software updates to plug at least 14 security holes in computers powered by different versions of its Windows operating system and other software. The updates are available from the Microsoft Update Web site or via Automatic Updates.

Windows XP users can expect to install at least six updates from today's patch batch, and more if they have any version of Microsoft Office installed. Office 2000 users will need to make a separate trip over to the Office Update site to scan for and download additional fixes not offered via Microsoft Updates.