Vista Beta to Get Security Updates, Too

By Ed Oswald, BetaNews

August 18, 2006, 12:40 PM

Although Microsoft is fond of saying that Windows Vista is the most secure operating system ever, a member of the operating system's security team disclosed this week that the OS will be the first beta product to be serviced by security updates. At least two of the patches from this month's Patch Tuesday are also intended for Vista.

Fix MS06-042, the cumulative patch for Internet Explorer, and the fix for MS06-051, concerning a vulnerability in the Windows kernel, have been updated to include a version of the patch for Vista Beta 2 systems. Both flaws are rated "critical."

Microsoft security team member Alex Heaton said that the company had received multiple inquiries on whether some of the most serious vulnerabilities affect customers' systems. Heaton stressed that Vista is immune to the most serious flaw, MS06-040, which was highly publicized as a possible worm threat last week.

"We are committed to release Windows Vista updates for all MSRC critical class issues that may arise during the beta testing period," Heaton said. "We strive to release any Windows Vista updates as soon as possible, but our priority will be to release the updates for Windows products that have been released to manufacturing."

The decision to release patches for the next-generation operating system may be due to its widespread use. Windows Vista is one of the most broadly deployed beta programs in the company's history, and the OS is likely installed on tens -- if not hundreds -- of thousands of computers.

Heaton warned that in issuing patches for Vista, it only would be for the current beta release of the operating system. Thus, patches for Release Candidate 1 will not be applicable to Beta 2, and so forth. Additionally, once the final release of Vista out, the company will no longer service the betas with security releases.

Those concerned with security updates for Vista can review Microsoft's Knowledge Base article on the subject, which the company will update throughout the beta process.