They say that your unpatched Microsoft Windows machine will live for only 12 minutes on the net before getting 0wned. Now, a lot of people are saying a lot of different things about Windows security, but I tend to agree to this particular one. I’ve seen it plenty of times at work. In fact, we now have a requirement for all colocated clients to fully patch their servers before connecting to our backbone.
Slashdot has a story. And a dup.
I have finally upgraded to this blog to WordPress 1.5.1.3. A couple of security issues with XML RPC are fixed by this release. I was a bit slow, since the fixes were released for over a week now, but not to worry – my PHP installation already had all the fixes for XML RPC installed.
Slashdot is running a story on the issue. One of the comments shows an easy way of upgrading PEAR that not everyone might be familiar with:
pear clear-cache pear upgrade XML_RPC