No Microsoft security updates coming next week
11271
(InfoWorld) - Microsoft is not planning to release any security updates on Tuesday, one of only a handful of times the company won't have security patches available since its monthly security updates began in 2003, Microsoft said Thursday. Microsoft is currently working on patches for known vulnerabilities in Internet Explorer 7, Office 2007's Publisher 2007, and the Windows Vista OS, but they are not ready for release at the moment, said a spokesman from Microsoft's public relations firm Thursday. The last time Microsoft had no security updates on "Patch Tuesday" was September 2005, he said. Patch Tuesday is the name researchers use for Microsoft's monthly updates, which come on the second Tuesday of the month. Though there will be no security updates, Microsoft will release two nonsecurity high-priority updates for Windows Update and Software Update Services and four nonsecurity, high-priority updates on Microsoft Update and Windows Server Update Services. Microsoft also will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center. The tool will not be distributed using Software Update Services. More information can be found on the Web site for Microsoft security updates. Because there are no security updates for March, the company will not hold its usual news conference next Wednesday.
190490
Microsoft issues patches for holes that could allow remote attackers to gain control of your PC. Microsoft this week released 10 software security patches for its products, including seven it deemed critical
272654
Symantec is just weeks away from shipping a test version of the next major update to its Norton 360 desktop security-and-backup software.
39329
Microsoft will issue six security patches next Tuesday, of which at least two will have a rating of critical. Missing from this list is a patch for a recently discovered zero-day flaw in Word: no updates are scheduled for the Office suite.
302281
InfoWorld - September&#39;s batch of Microsoft security patches was trimmed Friday as Microsoft announced that a planned update to its SharePoint collaboration software would not be released this month.
250599
REDMOND, Washington Microsoft has delayed the automated distribution of a major security upgrade to its Windows XP Professional computer operating system, citing a desire to give companies more time to test it.
721197
Plus two less serious updates for Windows, making it a quiet Patch Tuesday for Microsoft next week.
271955
Microsoft Corp.  on  Thursday failed to quash fears that a new version of its  Windows software system would be further delayed, stirring  concerns that a new technology cycle tied to the upgrade could  be put on hold.
303561
September&#39;s batch of Microsoft security patches was trimmed Friday, as Microsoft announced that a planned update to its SharePoint collaboration software would not be released this month.
371153
(InfoWorld) - Microsoft plans to release 13 sets of security patches next Tuesday fixing critical vulnerabilities in a number of its products, including the company's new security software. The bulk of the patches will fix flaws in the Windows operating system and Office, Microsoft said in a statement published Thursday on its Web site. Five of the updates will be for Windows, and two of them will be for Office. Microsoft also plans to release one less-critical update that addresses flaws in both Windows and Office. The patches will be released as part of Microsoft's monthly cycle of security updates. There will also be patches for Microsoft's Step-by-Step Interactive Training andÂ Microsoft Data Access Components and an update that covers both Windows and Visual Studio. Finally, Microsoft will also publish an update that patches critical flaws in its Windows Live OneCare, Antigen, Windows Defender, and ForeFront security software. The Office patches have been anticipated as online criminals have been exploiting unpatched vulnerabilities in Word and Excel for several months now. These attacks, which are occurring on a limited scale according to Microsoft, try to trick the victim into opening a maliciously coded Office attachment in order to compromise the PC.
287587
Microsoft Corp. has delayed automated distribution of a major security upgrade to its Windows XP Professional operating system, citing a desire to give companies more time to test it.
388719
(InfoWorld) - Microsoft Corp. plans to patch its Windows and Visual Studio products next week, but it does not have a fix in the works for aÂ widely publicized flaw in Word, which hackers are reportedly exploiting in targeted attacks. The company's security team is readying five sets of patches for Windows, and will also issue a single critical security update for Visual Studio, Microsoft said in an alert published Thursday. Microsoft rates the most serious of its Windows updates as "critical," meaning an attacker could exploit the underlying flaw to run malware on a victim's PC with no user action, the company said. These security patches are usually released on the second Tuesday of each month, and the company strives to publish a small number of updates in December, because IT operations are often short-staffed during the holiday season. On Tuesday, Microsoft warned of a vulnerability in its Word software that had been reportedly used in online attacks. Security researchers rated this flaw critical, because an attacker could exploit it to run malicious software on a victim's PC. For such an attack to work, however, the victim would first have to be tricked into opening a maliciously encoded Word file. The Word flaw is not scheduled to be patched next Tuesday, said a spokesman for Microsoft's public relations firm. There is, however, one critical Visual Studio flaw that may be addressed in the updates. That bug is in Visual Studio 2005's WMI Object Broker ActiveX object. It was first reported in late October.
78946
Microsoft released 11 security updates Tuesday to&#160;fix critical flaws in its products, including a publicly known ActiveX bug that affects users of the Visual FoxPro database.In total, 17 individual software flaws were patched in the updates. Microsoft rates six updates as critical, meaning they should be installed as soon as possible, while the remaining five updates are considered &quot;important.&quot; Last month was an easier month on IT administrators, when Microsoft released just two updates.Microsoft surprised some by releasing one&#160;fewer update than expected. Last Thursday, the software vendor had said that it was&#160;readying a fix&#160;for critical VBScript and JScript flaws in Windows 2000, XP, and Windows Server 2003. That update wasn&#39;t included in this week&#39;s patches, but on Tuesday, Microsoft wouldn&#39;t confirm that it had actually dropped the update because &quot;this could put customers at risk,&quot; according a spokeswoman for the company&#39;s public relations agency.Security experts said Tuesday that the MS08-010 update, which fixes four bugs in Internet Explorer, should take top priority this week. &quot;There are four vulnerabilities within that particular patch and all of them are remote-code executable,&quot; said Jonathan Bitle, director of technical account management with Qualys.&quot;The way we&#39;re looking at it, our prioritization would put MS08-010 at the top, followed by MS08-007,&quot; said Don Leatham, director of solutions and strategy with Lumension Security.MS08-010 fixes a publicly disclosed ActiveX bug that affects Visual FoxPro users. Although hackers have already posted code showing how to exploit this vulnerability, the buggy ActiveX control is not included in Internet Explorer 7&#39;s default list of controls, so the flaw should not affect most users.The MS08-007 update fixes a critical flaw in the Windows XP and Vista WebDAV redirector software. WebDAV is a Web-based document sharing protocol. The flaw is rated important for Windows Server 2003 users.Microsoft&#39;s Office products are also a major source of patches this month. Tuesday&#39;s updates include critical fixes for Microsoft Word, Office Publisher, and Office itself. There is also a critical update for Windows&#39; Object Linking and Embedding (OLE) Automation software. The remaining updates, rated important, are for Active Directory, the Vista TCP/IP stack, the Microsoft Works file converter, and two bugs in the Internet Information Services (IIS) Web server.The Patch Tuesday updates show that client-side bugs continue to be a much higher risk than server-side vulnerabilities, said Andrew Storms, director of security operations with nCircle. &quot;One would have assumed that the IIS and Active Directory vulnerabilities would have been the most serious because they stand at the core of an enterprise and provide more critical services,&quot; he said via instant message. &quot;But with this month&#39;s patches, the hacker&#39;s best bet is to take advantage of the client-side attacks.&quot;
430010
Microsoft releases patches for three security holes, but does not have a fix for a Word 2000 flaw being used in attacks.
738931
In sharp contrast to last month&#39;s barrage of critical patches, Microsoft today offered up just one &quot;important&quot; fix for users to implement in its scheduled round of security updates for November.
530951
Out-of-band Microsoft is considering plans to release an unscheduled security patch to address a serious security vulnerability in its ubiquitous Internet Explorer web browser.â¦
737568
Microsoft is investigating complaints from users that a security update issued last week for the Internet Explorer browser is preventing some people from getting onto the Web.