RSSFive Patches On Tap for Tuesday
By Ed Oswald | Published September 6, 2007, 4:57 PM
By recent standards, September's Patch Tuesday will be mild, with only five patches and one being rated "critical."
In the past several months, Microsoft has dealt with more critical errors in its products with four in June, three in July, and six in August. However, this month, the only critical patch will be issued for a remote code execution issue within Windows.
All of the remaining four flaws have been rated "important," and deal with various problems through a range of products. The first is a remote code execution in Visual Studio, while another is an elevation of privilege risk for Windows Services for UNIX, and both could require restarts.
Another elevation of privilege risk exists in the company's SharePoint Server product, and finally a remote code execution flaw has been disclosed in MSN and Windows Live Messenger. The former would require a restart while the latter would not.
Microsoft will also update the Microsoft Windows Malicious Software Removal Tool, and release one high-priority non-security update through Microsoft Update it said.
"As a reminder, we provide this early information to help with planning, but it can change between now and next Tuesday," Microsoft Security Response Center team member Chris Budd said.
You need to check out BIT9 and get ahold of me.
Score: 0
|For the love of God, it's time for SP3 with all included patches.
edit - people seemed to have look past my question, so ignore it. Different companies require different software management strategies. You can all go back to reading your Science 10 textbooks.
Score: 0
|SP3 is scheduled for the first half of 2008.
Score: 0
|Suggestion: Create the time.
Score: 0
|Some IT manager you are. How hard is it to run Windows update? You want Microsoft to do everything for you so you can sit around playing Solitare when you should be updating your systems?
Score: 0
|Work Smarter, not harder. Slip in the updates. I've done it once every 2 months or so, just helps reduce time. Also, build a WUS server and you save bandwidth. See, not that hard.
Score: 0
|Take xp cd, copy it to a pc with a burner on it. use RVM Integrator from http://www.ryanvm.net/msfn slipstream the os with the updates from the site. Us Nlite to make an unattended install. I do it all the time.
Score: 0
|hehe read as "End of June, '08"...or, will it have the same fate as Win2k SP5?
Score: 0
|Most large corporate networks don't leave things like Windows Update enabled on workstations - update patches need testing and validation before rolling them out across a few hundred computers to ensure they don't break any mission critical software on the machines.
I agree that the number of critical hotfixes is getting a little out of hand now though, SP3 really will be welcome - if only to reduce the installation time of a new workstation!
Score: 0
|it's called WSUS...and if it's a larger company they probably have another patch management app.
Our desktop guys never do windows updates...pop in the slip streamed image and let WSUS take care of the rest, very difficult and time consuming!!
Score: 0
|Wait...you're an IT manager and you're doing all these updates yourself? Too busy to delegate? :)
Score: 0
|Wow who pissed in your cornflakes. Not all companies use their computers to play with spreadsheets. You don't know what industry I'm in...wait why am I bothering with you kid.
Score: 0
|Of course I delegate - it's the principal.
Score: 0
|Not every company can just install the updates and be merrily on their way. Some circumstances require extraneous testing to ensure key enterprise components don't break.
I'm fully aware of the options you listed below.
Score: 0
|It is if you have to test each patch in isolated environments. Again folks, I don't work for some ma and pa shop that needs to simply install updates. If only it were that easy.
Score: 0
|You appear to be the only one that "gets it". Props to you :).
Score: 0
|Dude they're American can't you tell? They all have an opinion and they all think they're right without knowing the full story. Useless.
Score: 0
|If that's the problem , your company needs to check out BIT9.
And get ahold of me ASAP.
Score: 0
|To the best of my knowledge there will be no 2K SP5.
Score: 0
|Exactly.
Score: 0
|