Microsoft releases certificate spoof fix for Windows XP, Server 2003

[Matsuda]

On Monday of this week Microsoft annouced measures take to respond to the creation of an improper intermediate certificate authority (CA) by the CA for the government of France, and the use of that intermediate CA to sign fake certificates for domains in the google.com and other domains for which they had no authority.

Initially, Microsoft released countermeasures to protect users against any potential effects of these certificates —although none have been reported and the problem seems to have been contained — but they only released that protection for devices running supported editions of Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Phone 8 — not for Windows XP or Windows Server 2003.

Tonight, Microsoft released separate certificate protection for Windows XP and Windows Server 2003 users. The protection may be installed from Microsoft Update or downloaded from the Microsoft Download Center.

In their advisory on the issue Microsoft thanks Google's Adam Langley and the Google Chrome Security Team for bringing the incident to their attention and working with them on the response.

Source

[SPECTRUM]

good news, more security for XP is always appreciated ;)

[humble3d]

good news, more security for XP is always appreciated ;)

Yes it is... Thank you so very much... :)

[smallhagrid]

As usual mikr0$0ft keeps the ante up for OSes it says are dead already:

Security Update for Windows XP and Windows Server 2003 (KB2917500)
Validation Required

Meh.

[SPECTRUM]

As usual mikr0$0ft keeps the ante up for OSes it says are dead already:

Security Update for Windows XP and Windows Server 2003 (KB2917500)

Validation Required

Meh.

you don't know this ? http://board.deioncube.in/showthread.php?tid=73

[smallhagrid]

Thanks Spectrum.

I took care of WGA & WPA long ago.

A non-m$ source of this patch is what I would search for rather than letting their site examine my OS...

Thanks.