Security Advisory

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.4526)

XML Version 2.0.0.4526   Last Modified 6/13/2013

Product

– Added Support for Microsoft Office Live Meeting 2007

Non-Security

– Added GACU-010(Q2845533): Windows 8 and Windows Server 2012 update rollup: June 2013

– Added LM2007-001(Q2770455): Live Meeting 2007 8.0.6362.215

– Added MSWU-765(Q2836941): Update for Microsoft .NET Framework: June 2013

– Added MSWU-766(Q2836502): Certain JPEG images cannot be displayed after you install update 2670838 on a Windows 7 SP1 or Windows Server 2008 R2 SP1-based computer

– Added MSWU-767(Q2836187): An update that adds support for many camera-specific file formats in the new Windows UI is available for Windows 8 or Windows RT: June 2013

– Added MSWU-768(Q2821895): A servicing stack update is available for Windows RT, Windows 8, and Windows Server 2012: June 2013

– Added MSWU-770(Q2755391):  Cumulative update package for Office Communicator 2007 R2

Security Tool

– Added MS13-A04(Q2813430): Microsoft Security Advisory (2854544) Update to Improve Cryptography and Digital Certificate Handling in Windows

Revision

– Modified MS11-089(Q2596785): Fixed an issue where patch did not show as missing on some systems.

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.4476)

XML Version 2.0.0.4476 Last Modified 6/11/2013

Product

– Added support for SQL Server 2012 Analysis & Reporting Services

Security

– Added MS13-047: Cumulative Security Update for Internet Explorer (2838727)

– Added MS13-048: Vulnerability in Windows Kernel Could Allow Information Disclosure (2839229)

– Added MS13-049: Vulnerability in Kernel-Mode Driver Could Allow Denial of Service (2845690)

– Added MS13-050: Vulnerability in Windows Print Spooler Components Could Allow Elevation of Privilege (2839894)

– Added MS13-051: Vulnerability in Microsoft Office Could Allow Remote Code Execution (2839571)

– Added AI13-003(QAI1104): Apple iTunes 11.0.4.4

– Added APSB13-16(QAF117700224): Security updates available for Adobe Flash Player

– Added MSAF-012(Q2847928): Microsoft Security Advisory: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10: June 11, 2013

– Added TOMCAT-014(QTOMC7041): Apache Tomcat 7.0.41

– Added VLC-207(QVLC207): VLC Player 2.0.7

Non-Security

– Added MSWU-764(Q2803727): Description of Update Rollup 1 for Exchange Server 2010 Service Pack 3

Software Distribution

– Added AR11-002(QAR1103N): Adobe Reader 11.0.3

Revision

– Modified MSWU-659(Q2553272): Fixed an issue where patch does not show as missing on some systems.

– Modified MS12-057(Q2687501): Fixed an issue where patch incorrectly shows as missing on some systems.

– Modified MS12-060(Q983813): Fixed an issue where patch deployment fails on some systems.

– Modified MS12-070(Q2716441): Fixed an issue where patch does not show as missing on some systems.

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.4252)

XML Version 2.0.0.4252 Last Modified 5/9/2013

Security

– Added LIBRE-019(QLIBO403): LibreOffice 4.0.3

Non-Security

– Added MOZYH-015(QMOZYH2202276): MozyHome 2.20.2.276

– Added MOZYP-015(QMOZYP2202276): MozyPro 2.20.2.276

– Added WZ17-002(QWZ17510480): WinZip 17.5.10480

Security Tool

– Added MS13-A02(Q2847140): Microsoft Security Advisory: Vulnerability in Internet Explorer could allow remote code execution: May 8, 2013

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.4006)

XML Version 2.0.0.4006 Last modified 4/11/2013

Security

– Added APSB13-12(QSW1202122): Security update available for Adobe Shockwave Player

– Added MSAF-010(Q2833510): Microsoft Security Advisory: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10: April 9, 2013

Revision

– Modified MS13-029(Q2813345): Fixed an issue where patch shows a missing after deployment on some systems.

– Modified APSB13-11(QAIR3701530): Fixed an issue where patch shows a missing after deployment on some systems.

Posted on by shavlikdatateam General, Patch and Bulletin Information, Shavlik Product Announcement

New Patch Data Available(2.0.0.3404)

XML Data Version 2.0.0.3404 Last Modified 1/8/2013

Product

– Added support for Visual C++ 2012 Update 1

Security

– Added MS13-001: Vulnerability in Windows Print Spooler Components Could Allow Remote Code Execution (2769369)

– Added MS13-002: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (2756145)

– Added MS13-004: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2769324)

– Added MS13-005: Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778930)

– Added MS13-006: Vulnerability in Microsoft Windows Could Allow Security Feature Bypass (2785220)

– Added MS13-007: Vulnerability in Open Data Protocol Could Allow Denial of Service (2769327)

– Added APSB13-01(QAF115502146): Security updates available for Adobe Flash Player 11.5.502.146, Adobe Flash Player 10.3.183.50, and Adobe Air 3.5.0.1060

– Added APSB13-02(QAR1101): Security updates available for Adobe Reader and Acrobat

– Added MSAF-005(Q2796096): Microsoft Security Advisory: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10

– Added FF13-001(QFF1800): Firefox 18.0

– Added FFE13-10012(QFFE10012): Firefox 10.0.12 ESR

– Added FFE13-1702(QFFE17020): Firefox 17.0.2 ESR

– Added PICASA-008(QPICASA136120): Picasa 3.9.136.120

– Added TB13-1702(QTB1702): Thunderbird 17.0.2

– Added TBE13-10012(QTBE10012): Thunderbird 10.0.12 ESR

Security Tool

– Added MS12-A10(Q2794220): Microsoft Security Advisory (2794220): Vulnerability in Internet Explorer Could Allow Remote Code Execution

– Added MS13-A01(Q2798897): Microsoft Security Advisory: Fraudulent digital certificates could allow spoofing (KB2798897)

Non-Security

– Added UVNC-003(QUVNC11800): UltraVNC 1.1.8.0

2 Comments Posted on by shavlikdatateam Uncategorized

New Patch Data Available (2.0.0.2744)

XML Build Version 2.0.0.2744 Last Modified 10/9/12

Security

– Added MS12-064: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2742319)

– Added MS12-066: Vulnerability in HTML Sanitization Component Could Allow Elevation of Privilege (2741517

– Added MS12-067: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2742321)

– Added MS12-068: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (2724197)

– Added MS12-069: Vulnerability in Kerberos Could Allow Denial of Service (2743555)

– Added MS12-070: Vulnerability in SQL Server Could Allow Elevation of Privilege (2754849)

– Added CHROME-57(Q220122992): Google Chrome 22.0.1229.92

– Added APSB12-22(QAF11440287): Adobe Flash 11.4.402.287, Adobe Flash 10.3.183.29, Adobe Air 3.4.0.2710

– Added MSAF-002(Q2758994): Microsoft Security Advisory (2755801) Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10

– Added LIBRE-011(QLIBO362): LibreOffice 3.6.2

Revision

– Modified MS12-053(Q2723135): Microsoft revised this bulletin to rerelease the KB2723135 update for Windows XP to address an issue involving specific digital certificates that were generated by Microsoft without proper timestamp attributes.* **

– Modified MS12-054(Q2705219): Microsoft revised this bulletin to rerelease the KB2705219 update for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 to address an issue involving specific digital certificates that were generated by Microsoft without proper timestamp attributes.* ** ***

– Modified MS12-055(Q2731847): Microsoft revised this bulletin to rerelease the KB2731847 update for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 to address an issue involving specific digital certificates that were generated by Microsoft without proper timestamp attributes.* ** ***

* Note: Only URLs have been updated. Since rereleased patches did not contain binary changes we are investigating ways to reoffer patches if previous versions are already installed.

** Note: Customers using Windows XP and Windows Server 2003 do not need to apply the rereleased update packages to avoid an issue with digital certificates described in Microsoft Security Advisory 2749655.

*** Note: Customers using Windows Vista, Windows 7, and Windows Server 2008 need to apply the rereleased update packages to avoid an issue with digital certificates described in Microsoft Security Advisory 2749655.

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.2630)

XML data version = 2.0.0.2630  Last modified on 9/21/2012

Product

– Added support for Microsoft Office Visual Web Developer 2007

Security

– Added MS12-063(Q2744842): Cumulative Security Update for Internet Explorer

– Added MSAF-001(Q2755801): Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10

– Added AFP10-31285(QAF10318325): Adobe Flash Player 10.3.183.25

– Added AFP11-44278(QAF114402278): Adobe Flash Player 11.4.402.278

– Added SW11-67637(QSW1167637): Adobe Shockwave 11.6.7.637

Non-Security

– Added MSWU-644(Q2744129): You cannot run a Windows 8-based or Windows Server 2012-based virtual machine in Windows Server 2008 R2

– Added TORT-003(QTORT179): TortoiseSVN 1.7.9

– Added MSWU-647(Q2741355): You cannot start Windows Movie Maker 2012 when a graphics card that only supports DirectX 9 is installed on a Windows 7 or Windows Server 2008 R2-based computer.

– Added ATTGNC-004(QATTGNC901): AT&T Global Connect 9.0.1

Revision

– MS12-043(Q2596856): Added Microsoft Office Visual Web Developer 2007 as an affected product

– MS12-057(Q2596615): Added Microsoft Office Visual Web Developer 2007 as an affected product

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.2556)

XML data version = 2.0.0.2556 Last modified on 9/13/2012

Security

– Added NPPP-011(QNPP617): Notepad ++ 6.1.7

– Added PICASA-007(QPICASA136090): Picasa 3.9.136.09

– Added SM12-2121(QSM122121) SeaMonkey 2.12.1

– Added TB12-1501(QTB1501): Thunderbird 15.0.1

Non-Security

– Added MSWU-643(Q2735855): Network connection is slow when you run a WFP-based application on a computer that is running Windows 7 or Windows Server 2008 R2

– Added ZIMBRA-04(QZMD72111637): Zimbra 7.2.1.11637

Security Tool

– Added MS12-A08(Q2736233): Microsoft Security Advisory: Update Rollup for ActiveX Kill Bits: September 11, 2012

Revision

– Modified MS12-032(Q2688338): Fixed an issue where patch shows as missing after installation of KB2735855.

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.2422)

XML data version = 2.0.0.2422 Last modified on 8/23/2012

Security

– Added APSB12-19(QAF114402265): Security updates available for Adobe Flash Player 11.4.402.265

– Added CHROME-54(Q210118083): Google Chrome 21.0.1180.83

Security Tool

– Added MS12-A07(Q2661254): Microsoft Security Advisory: Update for minimum certificate key length

Non-Security

– Added NPPP-010(QNPP616): Notepad ++ 6.1.6

– Added MSWU-638(Q2732500): “E_UNEXPECTED 0x8000ffff” error when you try to restore a system by using System Recovery Options in Windows 7

– Added MSWU-640(Q2687403): Outlook 2003 Junk Email Filter update: August 14, 2012

– Added MSWU-641(Q2687400): Outlook 2007 Junk Email Filter update: August 14, 2012

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.2236)

XML data version = 2.0.0.2236 Last modified on 7/24/2012

Security

– Added VLC-203(QVLC203): VLC Media Player 2.0.3

– Added PICASA-006(QPICASA13607): Picasa 3.9.136.7

– Added SKYPE-32(QSKY510116): Skype 5.10.116

Security Tool

– Added MS12-A06(Q2719662): Microsoft Security Advisory: Vulnerabilities in Gadgets could allow remote code execution

Non-Security

– Added MSWU-634(Q2596598): Outlook 2007 update

– Added MSWU-635(Q2549864): Update fixes several Report Viewer issues after you install Visual Studio 2010 Service Pack 1

Revision

– Modified TOMCAT-003(QTOMC7029): Changed Patch Type to Security.

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.2178)

XML data version = 2.0.0.2178 Last modified on 7/12/2012

Security

– Added AFP11-33265(QAF113300265): Adobe Flash Player 11.3.300.265

– Added AAIR-330(QAIR3303670): Adobe AIR 3.3.0.3670

– Added CHROME-49(Q200113257): Google Chrome 20.0.1132.57

– Added NPPP-009(QNPP615): Notepad ++ 6.1.5

– Added PIDGIN-007(QPID216): Pidgin 2.10.6

– Added SKYPE-31(QSKY510115): Skype 5.10.115

– Added VLC-202(QVLC202): VLC 2.0.2

Security Tool

– Added MS12-A05(Q2728973): Microsoft Security Advisory: Unauthorized digital certificates could allow spoofing

Non Security

– Added MSWU-633(Q2687310): Update for Microsoft Office Outlook 2007 Junk Email Filter

Revision

– Modified MS12-043(Q2721691): Fixed an issue where patch failed to deploy properly on some systems with MSXML 4 SP3.

– Modified MS12-006(Q2585542): Fixed an issue where patch shows as missing after installation of MS12-049.

– Modified MS09-059(Q975467): Fixed an issue where patch shows as missing after installation of MS12-049.

– Modified MSWU-531(Q2541763): Fixed an issue where patch shows as missing after installation of MS12-049.

– Modified MSWU-319(Q968389): Fixed an issue where patch shows as missing after installation of MS12-049.

– Modified MSFT-RV1(QRV2010): Fixed an issue where patch shows as missing on some systems with later version of Report Viewer 2010 installed.

4 Comments Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.2022)

XML data version = 2.0.0.2022 Last modified on 6/12/2012

Security

– Added MS12-036: Vulnerability in Remote Desktop Could Allow Remote Code Execution (2685939)

– Added MS12-037: Cumulative Security Update for Internet Explorer (2699988)

– Added MS12-038: Vulnerability in .NET Framework Could Allow Remote Code Execution (2706726)

– Added MS12-039: Vulnerabilities in Lync Could Allow Remote Code Execution (2707956)

– Added MS12-041: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2709162)

– Added MS12-042: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2711167)

– Added APSB12-14: Security updates available for Adobe Flash Player

– Added CHROME-46 (Q190108456): Google Chrome 19.0.1084.56

Security Tool

– Added MS12-A04: Microsoft Security Advisory (2719615) Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution

Non Security

– Added MSWU-624(Q2687267): Outlook 2007 Junk Email Filter update: June 12, 2012

Revision

– Modified MS12-020(Q2667402): Bulletin rereleased to reoffer security update KB2667402 on all supported editions of Windows 7 and Windows Server 2008 R2.

– Modified MS12-025: Bulletin rereleased to reoffer the update for all affected software.

– Modified VLC-201(QVLC201): Updated download URL

– Modified MS11-074(Q2566456): Fixed an issue where patch showed as missing after deployment on some systems.

– Modified MSWU-431(Q982726): Updated Outlook 2010 Junk Email Filter: June 12, 2012

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.1976)

XML data version = 2.0.0.1976 Last modified on 6/5/2012

Product

– Added support for Microsoft Lync 2010 Attendant

– Added support for Microsoft Lync 2010 Attendee Admin

Security

– Added AOL7-005(QAOL75148): AOL Instant Messenger 7.5.14.8

– Added YAHOO-005(QYMSGR0192): Yahoo Messenger 11.5.0.0228

Security Tool

– Added MS12-A03(Q2718704): Microsoft Security Advisory (2718704): Unauthorized Digital Certificates Could Allow Spoofing

Non Security

– Added MSWU-621(Q2698707): Morocco DST Update

– Added MSWU-622(Q2496326): Cumulative update for Microsoft Lync 2010 Attendant: April 2011

– Added MSWU-623(Q2636573): Update for Windows Server 2008 R2 x64 Edition (KB2636573)

– Added LIBRE-007(QLIBO354): LibreOffice 3.5.4

– Added CPS45R07-W2K3040(Q132640): Hotfix PSE450R07W2K3040 – For Citrix Presentation Server 4.5 and XenApp 5.0 for Windows Server 2003 x86

– Added CPS45R07-W2K3X64041(Q133140): Hotfix PSE450R07W2K3X64041 – For Citrix Presentation Server 4.5 and XenApp 5.0 for Windows Server 2003 x64

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.1134)

XML data version = 2.0.0.1134 Last modified on 11/15/2011

Product

– Added support for WinZip 16.0

Security

– Added APSB11-28(QAF11110255): Adobe Flash Player 11.1.0.102.55

– Added CHROME-29(Q150874120): Google Chrome 15.0.874.120

Non Security

– Added FILEZ-002(QFILEZ352): FileZilla Client 3.5.2

– Added MSWU-572(Q2263829): The network connection of a running Hyper-V virtual machine may be lost under heavy outgoing network traffic on a computer that is running Windows Server 2008 R2 SP1

Software Distribution

– Added WZ16-001(QWZ1609661): WinZip 16.0.9661

Security Tool

– Added MS11-A08(Q2641690): Microsoft Security Advisory: Fraudulent digital certificates could allow spoofing

Revision

– Modified WZ15-004(QWZ1559579): Fixed an issue where WinZip 15.5.9579 would not deploy on Windows XP SP3 OS

Posted on by shavlikdatateam General, Patch and Bulletin Information, Uncategorized

New Patch Data Available (2.0.0.822)

XML data version = 2.0.0.822 Last modified on 9/15/2011

Security

– Added SKYPE-23(QSKY554): Skype 5.5.0.117

Security Tool

– Added MS11-A07(Q2616676): Microsoft Security Advisory: Fraudulent digital certificates could allow spoofing

Non Security

– Added MSWU-545(Q2553111): Outlook 2003 Junk Email Filter update: September 13, 2011

– Added MSWU-546(Q2553110): Outlook 2007 Junk Email Filter update: September 13, 2011

Revision

– Modified MSWU-431(Q982726): Updated Outlook 2010 Junk Email Filter update: September 13, 2011.

– Modified MS11-074(Q2566960): Added support for KB2566960.