Security updates for Vista betas

According to a blog entry by the Vista security team, Microsoft intends to issue fixes for security vulnerabilities for the publicly available beta versions of Windows Vista during the beta phase. However, the developers only intend to remedy those flaws which are categorised as critical. Priority will continue to be given to products already on the market. When Vista RC1 is released, support for beta 2 will cease. When the final version becomes available, support for the release candidate will also cease.

Of the vulnerabilities patched on the August patch day, Windows Vista is only affected by the flaws in Internet explorer (MS06-042) and in the Windows kernel (MS06-051. According to the developers, updates for these vulnerabilities are now available via Windows Update or from the Microsoft download centre. Microsoft lists the available patches for Windows Vista beta 2 in a knowledge base article with links to the downloads.

That Microsoft is fixing vulnerabilities in the Vista versions of Internet Explorer and the Windows kernel which affect older version of Windows is thought-provoking. According to Microsoft, Internet Explorer 7 is supposed to have been completely reprogrammed from scratch. Similarly, the developers are supposed to have revamped the Windows kernel and enhanced the security features.

See also:

• Security Update Policy for Windows Vista, blog entry by the Vista security team
• Available updates for Microsoft Windows Vista Beta 2, knowledge base article from Microsoft

(ehe)