Microsoft to Issue Out-of-Band Security Bulletin

Microsoft has issued an advance notification for a Security Bulletin to be issued tomorrow, March 30, outside its normal monthly patch release cycle.  The primary purpose of this patch release is to provide a fix for a flaw in Internet Explorer versions 6 and 7, which I have written about earlier this month.  (I posted a note here about a temporary fix.)   The fix, as is common for IE patches, will be cumulative, incorporating previous updates.  Users of Internet Explorer version 8 should note that, although the patch is primarily aimed at the flaw in IE 6 and 7, it will also include fixes for IE 8 on all supported versions of Windows.  The IE 8 fixes are rated Critical for Windows XP, Vista, and 7.

As usual, I will post an update here once the patches are actually released.