Five Patches On Tap for Tuesday

By Ed Oswald, BetaNews

September 6, 2007, 4:57 PM

By recent standards, September's Patch Tuesday will be mild, with only five patches and one being rated "critical."

In the past several months, Microsoft has dealt with more critical errors in its products with four in June, three in July, and six in August. However, this month, the only critical patch will be issued for a remote code execution issue within Windows.

All of the remaining four flaws have been rated "important," and deal with various problems through a range of products. The first is a remote code execution in Visual Studio, while another is an elevation of privilege risk for Windows Services for UNIX, and both could require restarts.

Another elevation of privilege risk exists in the company's SharePoint Server product, and finally a remote code execution flaw has been disclosed in MSN and Windows Live Messenger. The former would require a restart while the latter would not.

Microsoft will also update the Microsoft Windows Malicious Software Removal Tool, and release one high-priority non-security update through Microsoft Update it said.

"As a reminder, we provide this early information to help with planning, but it can change between now and next Tuesday," Microsoft Security Response Center team member Chris Budd said.

Add a Comment (20 Comments)

BetaNews reserves the right to remove any comment at any time for any reason. Please keep your responses appropriate and on topic. Foul language and personal attacks will not be tolerated.

Name (required):

E-mail (required):

Enter Your Comment:

By XZAVER

posted Sep 8, 2007 - 7:00 PM

You need to check out BIT9 and get ahold of me.

Score: 0

By Jordanr05

edited Sep 7, 2007 - 12:26 PM

For the love of God, it's time for SP3 with all included patches.

edit - people seemed to have look past my question, so ignore it. Different companies require different software management strategies. You can all go back to reading your Science 10 textbooks.

Score: 0

By Niro

posted Sep 7, 2007 - 12:08 PM

Wait...you're an IT manager and you're doing all these updates yourself? Too busy to delegate? :)

Score: 0

By Jordanr05

posted Sep 7, 2007 - 12:19 PM

Of course I delegate - it's the principal.

Score: 0

By 9h0s7

posted Sep 7, 2007 - 9:07 AM

Take xp cd, copy it to a pc with a burner on it. use RVM Integrator from http://www.ryanvm.net/msfn slipstream the os with the updates from the site. Us Nlite to make an unattended install. I do it all the time.

Score: 0

By XMLaroux

posted Sep 7, 2007 - 8:02 AM

Work Smarter, not harder. Slip in the updates. I've done it once every 2 months or so, just helps reduce time. Also, build a WUS server and you save bandwidth. See, not that hard.

Score: 0

By Jordanr05

posted Sep 7, 2007 - 12:21 PM

Not every company can just install the updates and be merrily on their way. Some circumstances require extraneous testing to ensure key enterprise components don't break.

I'm fully aware of the options you listed below.

Score: 0

By Oh come on

edited Sep 6, 2007 - 9:41 PM

Some IT manager you are. How hard is it to run Windows update? You want Microsoft to do everything for you so you can sit around playing Solitare when you should be updating your systems?

Score: 0

By Jordanr05

posted Sep 7, 2007 - 12:19 PM

Wow who pissed in your cornflakes. Not all companies use their computers to play with spreadsheets. You don't know what industry I'm in...wait why am I bothering with you kid.

Score: 0

By Nilknarf

edited Sep 7, 2007 - 7:38 AM

Most large corporate networks don't leave things like Windows Update enabled on workstations - update patches need testing and validation before rolling them out across a few hundred computers to ensure they don't break any mission critical software on the machines.

I agree that the number of critical hotfixes is getting a little out of hand now though, SP3 really will be welcome - if only to reduce the installation time of a new workstation!

Score: 0

By Jordanr05

posted Sep 7, 2007 - 12:28 PM

You appear to be the only one that "gets it". Props to you :).

Score: 0

By XZAVER

posted Sep 8, 2007 - 6:54 PM

If that's the problem , your company needs to check out BIT9.

And get ahold of me ASAP.

Score: 0

By imwatchingyou

posted Sep 7, 2007 - 12:34 PM

Dude they're American can't you tell? They all have an opinion and they all think they're right without knowing the full story. Useless.

Score: 0

By Niro

posted Sep 7, 2007 - 12:08 PM

it's called WSUS...and if it's a larger company they probably have another patch management app.

Our desktop guys never do windows updates...pop in the slip streamed image and let WSUS take care of the rest, very difficult and time consuming!!

Score: 0

By Jordanr05

posted Sep 7, 2007 - 12:25 PM

It is if you have to test each patch in isolated environments. Again folks, I don't work for some ma and pa shop that needs to simply install updates. If only it were that easy.

Score: 0

By TomA102210

posted Sep 6, 2007 - 9:19 PM

Suggestion: Create the time.

Score: 0

By sn1p34

posted Sep 6, 2007 - 8:11 PM

SP3 is scheduled for the first half of 2008.

Score: 0

By flake

edited Sep 7, 2007 - 9:46 AM

hehe read as "End of June, '08"...or, will it have the same fate as Win2k SP5?

Score: 0

By XZAVER

posted Sep 8, 2007 - 7:07 PM

To the best of my knowledge there will be no 2K SP5.

Score: 0

By AlanRivaldo

posted Sep 9, 2007 - 1:18 PM

Exactly.

Score: 0