|
|
Microsoft releasing 13 patches on the 8th
Feb 04 2005-Microsoft is planning on releasing 13 patches on Feb 8 2005. The news release is part of a new program to give Windows users advanced notice before releasing their patches.
On February 8, 2005, the Microsoft Security Response Center is planning to release:
- 9 Microsoft Security Bulletins affecting Microsoft Windows. The greatest aggregate, maximum severity rating for these security updates is Critical. Some of these updates will require a restart.
- 1 Microsoft Security Bulletin affecting Microsoft SharePoint Services and Office. The greatest aggregate, maximum severity rating for this security bulletin is Moderate. These updates may or may not require a restart.
- 1 Microsoft Security Bulletin affecting Microsoft .NET Framework. The greatest aggregate, maximum severity rating for this security bulletin is Important. This update will require a restart.
- 1 Microsoft Security Bulletin affecting Microsoft Office and Visual Studio. The greatest aggregate, maximum severity rating for this security bulletin is Critical. These updates will require a restart.
- 1 Microsoft Security Bulletin affecting Microsoft Windows, Windows Media Player, and MSN Messenger. The greatest aggregate, maximum severity rating for these security updates is Critical. These updates will require a restart.
No additional details about bulletin severities or vulnerabilities will be made available until February 8, 2005.
Related articles from other news sites:
Microsoft is Offering Two Security Bulletin Webcasts in February
Information about Microsoft's February Security Bulletins (Level 100) Wednesday, February 09, 2005 11:00 AM-1:00 PM (GMT-08:00) Pacific Time (US & Canada). We are extending this webcast by one hour this month to allow additional time to answer customer questions about the details and deployment of the updates.
Supplemental Technical Information about Detection and Deployment of Microsoft's February Security Updates (Level 200) Thursday, February 17, 2005 11:00 AM – 12:00PM (GMT-08:00) Pacific Time (US & Canada)
Windows glitches to get fixes A bumper crop of Microsoft patches will be released next week, including nine fixes for Windows flaws.
At least one of the updates for the Windows operating system is rated "critical," its highest rating, Microsoft said Thursday in a posting to its TechNet site. The forewarning is part of the company's program to give regular computer users notice of monthly security bulletins before the patches themselves are released.
There will be 13 updates in total, Microsoft said. That includes a critical flaw affecting Office and Visual Studio, and another critical flaw involving Windows, Windows Media Player and MSN Messenger. Also on the way are a patch for an "important" vulnerability in .Net Framework and a fix for "moderate" problems with SharePoint Services and Office.
Microsoft: SP2 shimmy's not a flaw Microsoft downplayed the significance of a reported flaw in its latest update to Windows XP.
Responding to a Russian security company's claim that it found a way to beat a protective element of Microsoft's Windows XP Service Pack 2, the software giant on Tuesday said it does not believe the issue represents a vulnerability. In fact, the company said the technology highlighted by Moscow-based Positive Technologies was never meant to be "foolproof" and added that the reported flaw does not, by itself, put consumers at risk.
"An attacker cannot use this method by itself to attempt to run malicious code on a user's system," Microsoft said in a statement. "There is no attack that utilizes this, and customers are not at risk from the situation."
Expert: Flaw still dogs Windows patch Antivirus specialist GeCad Net is warning that it has found a problem with Microsoft's most recent software patch for Windows.
The Bucharest, Romania-based security service provider said that a critical patch issued by Microsoft in its MS05-001 bulletin earlier this month fails to resolve all of the security issues surrounding the HTML Help ActiveX control in Windows. Microsoft distributed the fix, along with additional security updates, to address the threat of attackers placing and executing malicious programs such as spyware on affected computers.
Trojan piggybacks on Microsoft patching update Microsoft's patch process has spawned an attempt to fool Windows users into downloading and installing a Trojan horse.
A fake e-mail message, sent to CNET News.com, purports to be a Microsoft security notification about problems with the Windows operating system. The message, which carries the subject line "MS Windows/Critical Error," attempts to fool PC users into downloading and installing an attached program. However, numerous spelling and grammar errors in the message could tip people off to the danger.
"In the libraries of OS Windows(r) critical errors have been found," reads the e-mail message that contains the Trojan horse attachment. "This errors lead to destruction of the system files from your computer without an opportunity on restoration."
Patching up problems The race to plug network holes before attackers use them is running system managers ragged--so they're throwing up more barriers to stop intruders.
In recent years, the common wisdom has been that keeping up-to-date on software patches is key to safeguarding a company's networks against viruses, worms and other pests. But with dozens of flaws being discovered each week, that approach has turned out to be a Herculean task.
|
