Microsoft slates record-setting monster Patch Tuesday next week
14 updates, 8 critical, will quash 34 bugs in Windows, Office, IE, Silverlight
Computerworld - Microsoft today said it will deliver a record 14 security updates next week to patch a record-tying 34 vulnerabilities in Windows, Internet Explorer (IE), Office and Silverlight.
But people still running Windows XP Service Pack 2 (SP2) will receive only a few of those fixes.
"Call it Massive Patch Tuesday," said Wolfgang Kandek, CTO of security risk and compliance provider Qualys. "It's a huge update, and more importantly, everybody's involved. I'm actually a little surprised at how large it is."
Eight of the 14 updates were tagged with Microsoft's "critical" label, the highest threat ranking in its four-step scoring system. The remaining six were marked "important," the second-highest rating.
Next week's Patch Tuesday will be a record on several fronts.
The 14 updates -- Microsoft dubs them "bulletins" -- are a record, beating the count from both February 2010 and October 2009 by one. The 34 individual patches equals the single-month record, which was first set last October and repeated in June 2010. And the eight critical updates next week will also tie the record set in October 2009.
Microsoft has been shipping alternating large and small batches of fixes, with the larger-sized updates landing in even-numbered months, so the month's big numbers shouldn't have come as a complete shock. In July, for example, the company issued just four bulletins that patched five vulnerabilities. June's collection, however, amounted to 10 bulletins that fixed 34 flaws.
IE is also patched on an every-other-month schedule. Microsoft last fixed IE flaws in June.
"This is big, not only because of the numbers, but also because they'll affect everybody," said Kandek, referring to next week's lineup.
According to Microsoft's monthly advance notification, the company will deliver 10 updates for Windows, half of them critical, the other five rated important. Two updates will patch one or more critical bugs in IE and Silverlight, while another pair affect Office.
All currently-supported versions of Windows are impacted by multiple updates, Microsoft said, with Windows XP Service Pack 3 (SP3), the oldest edition that receives patches, affected by all five Windows-only critical updates, as well as by the critical IE and Silverlight fixes.
Nor will Windows 7 escape next week: Two of the five critical Windows updates apply to the newest operating system, as do the critical IE and Silverlight patches. Windows 7 will receive at least 10 of the 14 planned updates.
The Office updates are aimed at flaws in Word and Excel, and affect all versions of the word processor and spreadsheet with the exception of those in Office 2010. Both updates also apply to the Mac editions of Word and Excel, said Microsoft.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Cybersecurity Imperatives Reinvent Your Network Security With Palo Alto Networks The Rise of CyberSecurity
- 10 Things Your Next Firewall Must do Next-Generation Firewalls Defined
- Firewall Buyers Guide Operate as the core of your network security infrastructure
- Getting Started With a Zero Trust Approach to Network Security The Traditional Approach to Network Security is Failing. View Now>>
- Live Webcast On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy...
- Live Webcast Endpoint Backup & Restore: Protect Everyone, Everywhere Arek Sokol from the bleeding-edge IT team at Genentech/Roche explains how he leverages cross-platform enterprise endpoint backup in the public cloud as part...
- Streamline Software Asset Management, Compose a software Management Symphony Keeping track of your organization's software is easy with effective software management solutions from CDW. View the videos in our software solutions channel
- Druva inSync: Endpoint Data Protection & Governance CLICK HERE to watch this video about protecting corporate data on laptops and mobile devices, sponsored by Druva. All Security White Papers | Webcasts