RSS12 Patches Coming for Patch Tuesday
By Ed Oswald | Published August 4, 2006, 11:55 AM
Microsoft said Thursday that it would release twelve patches as part of its August Patch Tuesday, with ten of them intended for Windows and two fixing issues in Microsoft Office. Both groups of patches are expected to have at least one "critical" issue.
Patches for Microsoft's flagship productivity suite have become a regular occurrence as a bevy of zero-day attacks have surfaced in recent months. The most recent was a PowerPoint exploit that appeared shortly after the July patch release.
The malware, dubbed Trojan.PPDropper.B, uses a malformed string to execute code and modify Explorer.exe. A fix for that issue will ship Tuesday, Microsoft said in mid-July.
On the Windows side, one of the patches could include an update to a previous fix. Last month, Microsoft patched an issue in the "mailslot" application in Windows, however code surfaced later in the month that appeared to take advantage of a new issue.
The Redmond company indicated that it was possible that an updated patch could be issued.
As is typical with Microsoft's advance notifications, details on other problems to be fixed were not disclosed. The company does this to prevent attackers from exploiting issues before they can be patched. While this has not prevented hackers from creating exploits after the patches are released, it does mitigate potential damage.
Other than the security patches, Microsoft also plans to release an update to the Microsoft Windows Malicious Software Removal Tool. Additionally, two high-priority non-security updates would be released through Microsoft Update.
Geez. 12 patches for Free? I'm surprised they haven't started charging us for them. They started charging for Office 2007 beta downloads after all. What other company has the ballz to pull that off?
As for XP-SP3, why not? They're in beta with SP2 for Windows Server 2003 already and it's far-newer than XP. The number of patches released since XP/SP2 dwarfs that released since 2K3/SP1 by orders of magnitude. What logic is used to determine when it's time for a new SP anyway? Chicken bones and voodoo chants it appears.
Score: 0
|Hmmm...
What other Major commercial Office or OS company lets the public play with their beta software?
Score: 0
|The entire open source community. I do quite a bit of beta testing for about ten different (non open source) software vendors and they all allow me to download the betas for free. I have yet to be charged for entering or participating in a beta... until now.
Score: 0
|He burned you up right...
Score: 0
|roflmao
Reading comprehension *not* your strong suit??
Reread my post. Focus clearly on the words, 'Major commercial'. Do so until you understand their meaning.
Now reply again, hopefully this time with something actually *relevant* to my post and argument.
k, thanks. Bye!
Score: 0
|[The Redmond company indicated that it was possible that an updated patch could be issued.]
I've heard of a patch for smokers... it is supposed to help them quit smoking.
My personal interviews with smokers is that they don't work...
Is there perhaps some definition of the word 'patch' that I am missing?
Score: 0
|Try interviewing non-smokers. ;)
Ya know, the one's that *used* to smoke, but no longer do?
Might get more meaningful results. ;)
Score: 0
|Worked for me. I used it for a few days, then quit that too. It's been 7 years.
Score: 0
|I still think a "Patch Tuesday" is silly. These are security patches and they make it sound like a luncheon special at the local buffet. They should be released as soon as they are ready and not held back for a special day.
Score: 0
|That is how it used to be however a lot of people with a lot of power complained to Microsoft and so Patch Tuesday was born. You can't please everyone, and when you run a business you only need to please your biggest customers.
Score: 0
|If not SP3, then a rollup for XP, or is a rollup not viable at this point, until or soon after Vista's "decent" release?
Score: 0
|http://fileforum.betanew...tcher_2003/1129650723/1
Autopatcher.
Score: 0
|Is it not time for a SP3? I'm not being sarcastic. Just wondering because there has been a huge number of patches since SP2, so it just seems the time is ripe for a new SP.
Score: 0
|It's coming (soon) after Vista, I do believe.
Score: 0
|Thanks. It ought to do wonders to speed up the patching of a fresh install. :)
**EDIT**
Thank you all. I appreciate the tips :) I actually do use Autopatcher, but after I first install SP2 (it's a slipstreamed disk with XP Pro I made a while ago), then I install and run Autopatcher, deselect everything I don't want, then complete the patching. An SP3 would expedite the process, since there would be far fewer patches to worry about using Autopatcher as the final step. At any rate it's not really a big deal and maybe I'm over-complicating things, as I'm apt to do once in a while.
I'm also keen on trying out nLite one of these days; I've heard it works well as long as one knows what they are doing.
Score: 0
|Google around for information on "slipstreaming" patches into a Windows install CD. Basically you copy the image to your HD, find the KB numbers of the patches you want, download them in EXE form, run them with special parameters to slip them into your image, and then burn a new CD.
My Windows install CD is "SP0" and I did this in order to make an SP2 installer that BartPE was able to use. I eventually plan on burning it to CD too for a better installer.
Score: 0
|Or google 'AutoPatcher'
...or look for it on the fileforum, even.
Score: 0
|nLite will also do the trick.
Score: 0
|Slipstreamed installs are *not* supported by MS.
They will not even try.
That said, for personal use, there's none better. ;)
Score: 0
|I have learnt that Debian and OSX patches are positive occurences. XP patches are negative occurences.
Let the trolling continue.
Score: 0
|So, why Debian and Max OSX patches are positive occurrences and Windows XP patches are negative? It sounds like more crappy anti-Microsoft whining...
Unless you have FACTS to support your claims, it's better not to fill space with nonsense.
Score: 0
|@Fidelio
Look up the word 'sarcasm'.
Score: 0
|"So, why Debian and Max OSX patches are positive occurrences and Windows XP patches are negative? It sounds like more crappy anti-Microsoft whining...
Unless you have FACTS to support your claims, it's better not to fill space with nonsense."
----------------->
Maybe if you read the article close you would notice "On the Windows side, one of the patches could include an update to a previous fix."
A patch to fix the last patch? That should be evidence enough to demonstrate how just shoty Microsoft updates are.
After coming from a 20 year IT background on the Windows side, I switched over to a mac about 2 years ago -- so I could actually fire my system up and get some real work done without having to d*** around with all the problems in Windows.
I still get my fill when I'm out consulting with clients and dealing with their Windows issues. One good thing about Windows -- It keeps food on the table from all the consulting work I do.
Score: 0
|@mcosx
Yeah, Apple is the best computer makers in the world. It's amazing how their patches are so smooth and everything works. Just perfect!
What were you doing for 20yrs in IT? Washing windows?
Score: 0
|"One good thing about Windows -- It keeps food on the table from all the consulting work I do."
Amen to that. Windows users ALWAYS need fixing.
Score: 0
|That should be evidence enough to demonstrate how just shoty Microsoft updates are.
Isn't an OS updtae a patch? (Albeit, a rather large one)
So..since the linux kernel is past 2.1...yadda, yadda, yadda, wouldn't that make *it* patches for patches as well?
You're a complete idiot if you think the Linux/BSD camp is above having top fix it's fixes. Complex software practically requires it.
Score: 0
|Missed the sarcasm, eh?
Score: 0
|Each new set of security patches makes my OS feel that much more secure - and that makes me tinkle with joy.
Score: 0
|...and that makes me tinkle with joy.
Ew.
Score: 0
|I suppose it would be worse if he tinkled ON joy.
Score: 0
|ROFBMALFO!!
Score: 0
|XP was said to be the most secure thing when it first came out, and if you look back, it really wasnt. Vista is going to be the new secure thing, but give it time and it wont be.
You want secure? it will never be 100% secure
Score: 0
|Nothing will ever be 100% secure. Windows never claimed to be 100% secure. Anybody who believes that it, or any other operating system, is secure is only kidding themselves.
Score: 0
|Apple claims Mac is 100% secure? Want proof? Just want their Mac vs PC commercial
Score: 0
|and how many have WGA attached to them?
and how many different WGA's are there this time ??
Score: 0
|http://members.tripod.com/acls2001
Score: 0
|Post your spam somewhere else.
P.S. I hope your mailbox has 9,000,000,000,000,000 messages in it tomorrow.
Score: 0
|Hey PC Rat, what happened to your post??? I think someone accidentally deleted it. :-) ROTFLMAO
Score: 0
|...
BetaNews ought to offer a "patch"
on it's shoddy, biased, inconsistent,
and unfair editing policy of scoring-
down posts not synching with prejudiced
positions.
...
The Computer Rodent
...
Score: -1
|You had to know that was going to be modded down.
Nice one.
Score: 0
|Out of curiosity, what did you originally post?
Score: 0
|Vista may be secure, but it will only breed a new type of attack that has yet to be invented. Then all OS makers will have to release pacthes for this new type of attack.
Score: 0
|Hater.
Score: 0
|I agree. But I guess that's a characteristic of life. For instance, you can explore the ocean with an aqualung, but you won't have the comfort neither the agility of a bathing suite. It will though protect you!
Does that sound weird, or naive... or both?!
Score: 0
|Thank god vista is coming, the most secure OS ever, and these flaws will be a thing of the past.
Score: 0
|ha-ha
Score: 0
|"Thank god vista is coming, the most secure OS ever, and these flaws will be a thing of the past. "
That is the best joke EVER!
ROTFLMAO!
Score: 0
|Right. So they should just stop patching altogether and you'd think it was the most secure OS on the planet, right?
Score: 0
|I wonder if people become hateful or envious, when they invest in products that don't get regularly updated.
I'm glad MS will forever release patches and updates for their current offerings, it means new people are buying the product, new companies are making products...and sad people are trying to hack into the many millions upon millions of Windows systems that nobody wants (that last part didn't make sense but thrown in for good measure)
Or we could all buy things that nobody uses, nobody makes anything for, and is very very secure so long as we don't do do anything with them, don't go on the net with them...don't share files...BUT I use a PC for completely opposite reasons, hehe
Score: 0
|The majority of spam is due to insecure setups from bot networks. It does us no good to ignore the machines that are older/insecure.
White hats should release a mass worm that exploits those machines, and shuts them off forever.
Score: 0
|GCoder, your sarcasm actually has me cracking-up... No sarcasm here. Just funny... :)
Score: 0
|mjm01010101 you're the coolest! Will you be my friend?
Score: 0
|It would be better to patch them than to shut them off forever. Keep in mind, though, that someone did try to make a worm once that would fix a certain security issue and the worm itself became a threat. Among other things, it bogged down networks checking for vulnerable computers.
Score: 0
|Shut them down forever hmmmmm a worm that serverly overclocks the machine should do the trick targeting patches that have been out a month to give people lots of time to update just to bad that would be illegal and since it would be a good deed the person who does it would be caught.
But after getting fried a few times people would learn to take care of their stuff;)
Score: 0
|You're enthusiasm, while understandable knowing your position on Microsoft, is somewhat ...over-rated.
Settle down there, sparky.
Score: 0
|Actually a fresh Vista Beta 2 install will find like 10-12 patches on Windows Update already. :)
Score: 0
|Overclock them huh? Because we want these machines to do more faster of the things we don't want them to do.. ;x
Score: 0
|I know.
No, I won't.
Score: 0
|Thats why i said severly overclock them like say 500% for the cpu i doubt that someone that would allow their machine to become part of a bot network would care enough to put in a good cooling system.
Even 200% and three case fans can get pretty dam warm and thats with an AMD chip;)
Score: 0
|