Request new fixlet for Microsoft security advisory 2719662

Usage and Config Patch
1

(imported topic written by dbhambri)

IBM, Can you please create fixlet for another security advisory also released on 10th July 2012 “Vulnerabilities in Gadgets Could Allow Remote Code Execution Security Advisory 2719662” ?

2

(imported comment written by dbhambri)

Can someone please let us know if IBM is aware and working on the same.

3

(imported comment written by TerryWeiChao)

We are currently working on this. Will keep you updated.

Thanks!

4

(imported comment written by dbhambri)

Thanks much Terry for your response!

5

(imported comment written by dbhambri)

Hi Terry,

Can you tell us how soon can it be released ?

6

(imported comment written by dbhambri)

Hi Terry,

Apologies if I am bothering you for this however now we are in real need of this patch to be deployed…

Can you please just share an ETA if possible…

Thanks in advance!!

7

(imported comment written by amitkumsingh91)

Hi Terry,

We were also waiting for the same update.

Regards,

Amit

8

(imported comment written by TerryWeiChao)

The content was published in site, version 1636.

Thanks!

9

(imported comment written by dbhambri)

Thanks much Terry.

10

(imported comment written by delichty91)

It appears that the relevance for this fixlet might be wrong. After manually fixing a test system I see the fixlet still showing relevant. If I am not mistaken, there needs to be a “NOT” added to the “then” clause of this relevance:

(if (exists key “Windows” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies” of native registry) then ( NOT exists value “TurnOffSidebar” whose (it as string = “1”) of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar” of native registry) else (false))

Please let me know if I am mistaken. Otherwise, please update the fixlet and let us know once fixed (include the site version # please).

Thank you!

Darren

11

(imported comment written by sylviabeing)

Hi,

The relevance you have posted is for “Enable Windows Sidebar and Gadgets” which is for removing the Microsoft Hotfix 2719662 from your system.

To apply the hotfix,

Vulnerabilities in Gadgets Could Allow Remote Code Execution -Disable Windows Sidebar and Gadgets

fixlet should be used.

Regards!

12

(imported comment written by delichty91)

So it does! Evidently I did not pay close enough attention to the fixlet name!

Thanks sylviabeing!

13

(imported comment written by sylviabeing)

You are welcome!

Regards!