Microsoft Windows Security Bulletin Summary for July, 2004

Thanks, Arie.
I run Win98FE and find that two of the Critical Updates are offered to me at the Windows Update site.
They are for MS04-018 and MS04-023.
However, if you read the Security Bulletin for MS04-018, you are told the patch will not be offered to Win98 users since it is not Critical. (Do not look a confused gift horse in the mouth?)

 

Just received an MS Security Update by email. The first part of the email says
"SECURITY ALERT
Microsoft has released a configuration change for Windows XP,
Windows 2000, Windows Server 2003, Windows Millennium Edition,
Windows 98, and Windows 98 Second Edition to address the
Download.Ject issue. (Bolding is mine--Jim)
Microsoft strongly encourages users to apply this configuration
change immediately to help protect their computers.
Get more information:
http://www.microsoft.com/downloadject/ "
When I access that site, I learn there is a new tool to uninstall any payload from Download.ject. However, I also learn the tool is not suitable for Win98, ME or NT4.
When I access Windows Update there is no new patch or download for Win98 (in addition to the two mentioned in my post above), at least not yet.
So what is the Security Update telling users of Win98, ME and NT4?

 

PeteC--

The word "configuration" for all versions of Windows seems to me to be clearly referring to the Download.ject "configuration change" on the new site.
Otherwise there would be no need for the July 13 Security update. Increasing IE/OE security manually had been suggested several weeks ago.
However, you could be right and MS has ditched Win98, etc., but does not want to say so.

 

There already is a patch for one of the new Security Updates (839645).
http://support.microsoft.com/default.aspx?kbid=871242