Sounds about right, ranicx (I'm ignoring the three posts above me
)... Microsoft are not gonna be seen not sending patches out if they're important. They want to be seen as good, so although they've allowed this/these security hole(s) in in the first place, they're offering free easy patches to it/them. Typically Microsoft.