Microsoft preps six patches for next week
For the fourth month running, Vista gets a fix
Computerworld - Microsoft Corp. announced today it will release six security updates next week, the same number as in June, to patch problems in Windows, Office and the .Net Framework.
Three of the six bulletins scheduled for July 10 will be tagged "critical" -- Microsoft's highest rating -- while two will be labeled "important" and the sixth ranked "moderate." Vulnerabilities fixed by five of the six updates, however, are remote code executable, an indicator that usually means the bugs are in the most dangerous classification.
Because Microsoft limits the information it posts in the advanced notification -- even with the switch to a more detailed format that debuted last month -- it's impossible to tell why two of the bulletins harboring remote code executable flaws are rated as only "important."
Of the three updates judged "critical," one will fix Microsoft Excel, another will repair Windows 2000 Server and Windows Server 2003, and the third will patch .Net Framework 1.0, 1.1 and 2.0 in all currently supported versions of Windows -- Vista included.
The pair of "important" bulletins addresses issues in Publisher 2007 and Windows XP Professional SP2; the "moderate" update, meanwhile, is limited to Windows Vista. July marks the fourth month in a row that Microsoft has posted patches for its newest operating system, which was released to the public in January.
Four nonsecurity updates dubbed "high priority" will also post Tuesday via Windows Update, Microsoft Update and Windows Server Update Services.
Some clues about the vulnerabilities likely to be patched next week can be gleaned from third-party sources. The bulletin focused on Publisher 2007 may be a fix for a bug reported to Microsoft in late February by eEye Digital Security, for example. Secunia, meanwhile, has three disclosed but unpatched flaws in .Net Framework 1.0 in its database, but none are ranked higher than "moderately critical" by the Danish vulnerability tracker.
Assuming Microsoft releases all six updates, users will have faced 41 bulletins in the first half of 2007, two more than the 39 in the first seven months last year.
Tuesday's updates will be available for manual download from the Microsoft Web site about 1 p.m. EDT, assuming the company issues them on its usual timetable.
Read more about Security in Computerworld's Security Topic Center.
- Who does NSS Labs "Recommend" for NGFW? In 2012, NSS Labs found that most available NGFW solutions "fell short in performance and security effectiveness." In 2013 NSS Labs noted "marked...
- CIOs Deliver Productivity Breakthroughs with Intelligent Digital Signage Retailers have long recognized the influence that digital signage provides over a shopper's point-of-purchase decision making process.
- 9 Essentials for a Complete Cloud-to-Cloud Backup Solution In 9 Essentials for a Complete Cloud-to-Cloud Backup Solution, we'll walk you through potential sources of data loss in the cloud and provide...
- Workload Change: The 70 Percent of Your Business DevOps Forgot Adding WLA early in the development process ensures that the benefits of DevOps accrue for all applications, including your batch services. This paper...
- Top 4 Digital Signage Fails Join RMG Networks for a look at four of the most common reasons digital signage fails in corporate businesses. Learn about strategies to...
- Protecting Critical SaaS Data Before It's Too Late In this webinar, you'll hear how to avoid SaaS data loss through best practices from a panel of experts. All Operating Systems White Papers | Webcasts