Microsoft rolls out monthly security updates for December. Seven security patches address 11 bugs, including two in the Windows Media Player software. No fixes were provided for two Microsoft Word flaws that have been used in a small number of attacks over the past week. Microsoft defines “critical” flaws as bugs that allow the propagation of an Internet worm without any action on the victim. The remaining updates include a fix for Visual Studio 2005, and “important” updates for Windows and Outlook Express. Microsofts next set of security updates is due Jan. 9.”]