Dajbych.net


Update IE 11.0.15 to Windows Update

, 2 minutes to read

windows update logo

The December update for Internet Explorer 6, 7, 8, 9, 10 and 11 is available on Windows Update. It fixes 14 potentially dangerous bugs that were reported early before they were publicly discovered. The F12 developer tools have a redesigned user interface. The new policy allows network administrators to disable SSL 3.0 fallback. An update of Adobe Flash has also been released. If you're set to install updates automatically, you don't need to take any action. However, you must turn off SSL 3.0 manually.

F12 Developer Tools

Individual tool tabs move from the left edge to the top edge. This returns to the original layout that we know from the separate component for IE 6. However, there are unnecessarily long names in the Czech localization that could be shortened. You can try out the changes and let your ideas for improvements be known via UserVoice.

SSL 3.0 fallback

Two days ago, a new variant of the POODLE attack technique came to light, which breaks the connection establishment by TLS 1.0 and higher and achieves that the browser then establishes a connection using the older SSL 3.0 protocol. This then allows you to attack this protocol with the classic POODLE attack.

The only secure SSL configuration is disabled SSL. Since it cannot be relied on by servers to disable it immediately, it is necessary to disable it directly in the browser settings.

If you can't ask users to set up browser security themselves, a new group policy is set up for businesses for this purpose. There is also a one-time program for computers outside Active Directory.

SSL will be disabled for everyone via Windows Update on February 10, 2015.

For more information, see MS14-080 and APSB14-27.