Very mild Patch Tuesday ahead from Microsoft

By Scott M. Fulton, III | Published November 6, 2008, 5:47 PM

After a series of critical out-of-band security patches were issued by Microsoft two weeks ago, most of the thunder has been squelched for next Tuesday's regular set: down to one critical and one important patch.

In keeping with Microsoft's current policy, the company no longer releases too detailed information in advance of patches' distribution. For example, if the company were to say too much about interim workarounds, it might give away clues that could make many more machines vulnerable prior to Tuesday.

But this much we do know: The critical patch affects XML Core Services, which is Windows' key library for enabling the interpretation of XML-based files and incorporating XML into applications. Essentially all versions of Windows that use these services, dating back to Windows 2000 SP4, are affected.

The out-of-band patch issued two weeks ago, by comparison, appears to address a far more potentially widespread fault, affecting all modern versions of Windows -- specifically, their applications' ability to place remote procedure calls. BetaNews found evidence of researchers with somewhat less-than-white hats who were openly working on a new set of exploits that fooled what is called the Server service in Windows, though we did not find any "eureka" evidence that anyone's efforts had suddenly succeeded.

Comments

View comments by with a score of at least

Exactly what is the point of these continuing alerts if they come one or two days after they have already been pushed out to clients?

Now, if the articles dealt more with a continuing threat or the internals of such a threat, then it would be worthwhile...

Score: 0

|

Its talking about a patch that was released 2 weeks ago as out of the normal cycle, therefore Tuesday Nov 11th will be mild...

Score: 0

|

Get your patch or watch your computer get taken over by a virus. You guys know the drill.

Score: 0

|

Yes sir. Just be careful, don't download anything stupid. But hey, if your system does get compromised, at least be thankful that it is still far more usable than Mac OSX.

You all know the drill. Test, patch, get stuff done, and thank your lucky stars you aren't locked into an Operating System that limits you instead of unleashes you.

Who would want to be chained to such a limited set of hardware and software anyway?

Score: 0

|

Guys let me just tell you what I meant. Windows has so much market share that's why Apple is so jealous because they can never and will never take so much market share like Windows. Anyway what else can Apple do? I am really a dumb a** to use Mac OS XXX, and I have to continuously update Safari and OS XXX to prevent my computer from viruses.
Besides that I switch to Windows to play games, run application and do my work because games suck on OS XXX and many won't even run because they are designed for Windows and many applications are just not available for OS XXX anyway it really sucks.

But despite that am cool cause I use useless expensive Macs (you know why? cause I have so much money) invented by rotten Apple and guess what they can run Windows :)

Your's truly
Steve Jobs's gay partner

Score: 0

|

"After a series of critical out-of-band security patches"

How much more misleading can you get with that title? Not much, thats for sure. One single out-of-band security patch was released and that was MS08-067/KB958644. There were multiple downloads depending on what version of Windows you were running, but it is a single patch.

Score: 0

|

Google Chrome 4: Yes, it's fast, but is it usable?

As Betanews readers have responded to our stories about Chrome's JavaScript superiority...Does that mean we'd actually use this browser? Well...

Video: Netflix on PlayStation 3

Netflix has come to the PlayStation 3 via Blu-ray and BD-Live.

Verizon Wireless launches new Android, Chocolate, and ruggedized phones

The lower-priced Eris joins the Droid, while the Chocolate gets a touchscreen and more music playback.

Early sales figures for Windows 7 nicely high, but do we know why?

Fans of triple-digit surges in figures quoted by Betanews will love this one, as it appears Microsoft rediscovered how to pull off a software launch.

Myka announces its latest Linux-based 'net top box'

Myka's ION brings Boxee, XMBC, and much more to HDTVs.

What hath Mac wrought? A remembrance after a quarter-century

The reason there's a Macintosh today is not because of some brilliant flash of engineering genius, but because Apple had the audacity to learn from its mistakes.

Early build of Moblin 2.1 improves connectivity, but not device support

The Linux Foundation's Atom-centric OS yesterday received a major overhaul with the project release of Moblin 2.1 for netbooks and nettops.

The iPhone's China syndrome: Sales of 5,000 and climbing

There's actually a country where Apple's device is not a godsend, where sales can be measured in the dozens.

New European counterpart to FCC will ensure 'a more neutral net'

Late Thursday night, the ruling telecom administrators of the EU's member nations signed away their final authority to a new entity overseen by the EC.

Sophos study suggests Windows 7 UAC's default setting is self-defeating

Without any anti-virus installed, a Sophos test showed, User Account Control was only capable of thwarting just one malware package out of ten samples chosen.

Indiscreet tweet trips awareness of Web SSL vulnerability

A group of high-level security engineers had been making progress on thwarting a low-level threat to the Web, until somebody blurted it all out on Twitter.