An "interesting" exchange appeared within the past few days.

An independent spyware research outfit called eEye reported a MAJOR bug affecting all McAfee products. The company, eEye, reports that McAfee has developed a patch, but has made no apparent effort to inform users or to act in any serious way to distribute the patch.

McAfee released a bulletin on their website stating that they had "simultaneously" (with eEye) discovered the bug, and have a patch available; but it's unclear whether the patch is being distributed as part of automatic updates.

A third bulletin, from McAfee, says in effect "we didn't know about the bug, but we fixed it accidentally back in January."

I'm not sure I can figure out how a McAfee user would know if their programs have been fixed, but those who are "users" might want to start with the eWeek Report. (Links to the other stuff from there.)

John