-----BEGIN PGP SIGNED MESSAGE-----
Microsoft Says No TCP/IP Patches For XP
,----[ Quote ]
| Microsoft says it won't patch Windows XP for a pair of bugs it quashed
| Sept. 8 in Vista, Windows Server 2003 and Windows Server 2008. The news
| adds Windows XP Service Pack 2 (SP2) and SP3 to the no-patch list that
| previously included only Windows 2000 Server SP4. 'We're talking about code
| that is 12 to 15 years old in its origin, so backporting that level of code
| is essentially not feasible,' said security program manager Adrian Stone
| during Microsoft's monthly post-patch Webcast, referring to Windows 2000
| and XP.
Microsoft: No TCP/IP patches for you, XP
,----[ Quote ]
| Microsoft late last week said it won't patch Windows XP for a pair of bugs
| it quashed Sept. 8 in Vista, Windows Server 2003 and Windows Server 2008.
| The news adds Windows XP Service Pack 2 (SP2) and SP3 to the no-patch list |
| that previously included only Windows 2000 Server SP4.
| The bugs in question are in Windows' implementation of TCP/IP, the Web's
| default suite of connection protocols. All three of the vulnerabilities
| highlighted in the MS09-048 update were patched in Vista and Server 2008.
| Only two of the trio affect Windows Server 2000 and Windows XP, Microsoft
| said in the accompanying advisory, which was refreshed on Thursday.
| During the Q&A, however, Windows users repeatedly asked Microsoft's
| security team to explain why it wasn't patching XP, or if, in certain
| scenarios, their machines might be at risk. "We still use Windows XP and we
| do not use Windows Firewall," read one of the user questions. "We use a
| third-party vendor firewall product. Even assuming that we use the Windows
| Firewall, if there are services listening, such as remote desktop, wouldn't
| then Windows XP be vulnerable to this?"
So long, XP.
Great news for GNU/Linux!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
-----END PGP SIGNATURE-----