Forum Discussion

Joachim_T's avatar
Joachim_T
Iron Contributor
Mar 21, 2022

No documented security fixes in extended stable channel

Hello again,

 

once again urgent security fixes are released with V99.0.1150.46. The same day V98.0.1108.84 - from how i call it extended unsecurity channel - was published. Once again with just no documentation about the included fixes.

 

Our https://www.dict.cc/?s=Federal https://www.dict.cc/?s=Office https://www.dict.cc/?s=for https://www.dict.cc/?s=Information https://www.dict.cc/?s=Security warned about the issues in Edge before V99.0.1150.46. But how can in be sure about to be secure with extended stable when microsoft hides all information about it?

 

No information here: https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security

And just empty phrases here: https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel

 

Will Microsoft ever provide proper information about extended stable so responsible admins can do their work?

 

Joachim

2 Replies

  • Joachim_T's avatar
    Joachim_T
    Iron Contributor
    Mar 28, 2022
    Amazing.
    A new line empty phrases for V98.0.1108.92 we now can find under
    https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel
    "Fixed various bugs and performance issues for Extended Stable release" is a non documentation. Just God knows if CVE-2022-1096 is included.
  • Joachim_T's avatar
    Joachim_T
    Iron Contributor
    Mar 27, 2022

    Great.

    V99.0.1150.55 is out with CVE-2022-1096 in the wild fix.
    And also a extended stable with V98.0.1108.92.

    Guess what. No documentation about V98.0.1108.92 in https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel

    Even no empty phrases. So we will never know if CVE-2022-1096 is included

     

    How do you call this? Fog of war?

    Joachim