Yahoo Messenger patch ready, but it's not mandatory
I'm still working on that follow-up story on how Yahoo completely screwed up the flaw disclosure process (waiting to give Yahoo a chance to comment) and caused exploit code to be publicly released but, in the meantime, Yahoo Messenger users should know that a patch is now available and ready for download.Over the next several weeks, users worldwide will be prompted to update to a new version of Yahoo!