got the alert from Secunia PSI, telling me after a scan that a dll was unsecure and suggesting to download a new c++2005 setup file to update it. But:
one, their new setup file has the same version number that the one I already got
two, yeah the size is different
three, MS still offers the same old package as the one I already got
four, Windows Update doesn’t say anything and I got all patches already.
There’s a thread here: http://secunia.com/community/forum/thread/show/7820/microsoft_visual_c_2005_redistributable_package_x86
… from what I read (very quickly) it’s a developers’ issue more than anything, and there’s no vulnerability at all. Conclusion: I won’t use Secunia’s suggested update ;D
ps: my advice, click on the “ignore this program” icon.