This is a particularly nasty patch, as it can affect web servers with hardly anything running other than IIS and Front Page Extensions. The update fails to show up in Microsoft Update - it still hadn't appeared on my web server, so I hunted down the patch myself (hint: start at http://www.microsoft.com/security - that's the home page for IE on my web servers!) and installed it. Delayed patch ends Microsoft's patch-free month early. "A glitch in Microsoft's Windows Update automated patching service caused a security fix that was released last month to be delivered to computer users on Tuesday, the same day Microsoft proclaimed December would be a patch-free month." [InfoWorld: Top News]
2:35:51 PM comment []