Betanews is reporting that the monthly slew of patches issued by Microsoft has been cancelled, due to quality issues.
"Late in the testing process, Microsoft encountered a quality issue that necessitated the update to go through additional testing and development before it is released," a Microsoft spokesperson told BetaNews.
News source: BetaNews
"Late in the testing process, Microsoft encountered a quality issue that necessitated the update to go through additional testing and development before it is released," a Microsoft spokesperson told BetaNews.
News source: BetaNews
Microsoft Windows Malicious Software Removal Tool
- Microsoft will release an updated version of the Microsoft
Windows Malicious Software Removal Tool on Windows Update, Microsoft
Update, Windows Server Update Services and the Download Center.
Note that this tool will NOT be distributed using Software Update
Services (SUS).
Non-security High Priority updates on MU, WU, WSUS and SUS
- Microsoft will release one NON-SECURITY High-Priority Updates for
Windows on Microsoft Update (MU), Windows Update (WU), Windows
Server Update Services (WSUS) and Software Update Services (SUS).
Microsoft will still host a webcast next week to address customer
questions. For more information on this webcast please see below:
- TechNet Webcast: Information about Microsoft's September Security
Bulletins (Level 100)
- Wednesday, 14 September 11:00 AM (GMT-08:00) Pacific Time (US &
Canada)
If an organization wanted an update policy less frequently, and on a scheduled basis, they can handle this internally (just gather up the patches, and release them internally on whatever schedule suits).
Things have moved in a different direction in the past year, the patches are helping 'security researches' to identify the source of the problem (as they allow you to identify very specifically which bit of code has been modified).
This means that if they reverted to 'on completion' patch releasing, corporations are not in the same comfortable position to just delay release for say 3 weeks. Exploit code *will* be made publically avlialbe (grrr FrSRT) within 2 days normally.
Patch Tuesday is a *great* idea for corporations.
typically, entperises spend time testing patches anyway, so installations and reboots are still staggered.
Also, it takes time to test patches, and distribute to many computers inside an organisation. If they are all released at once, they can be tested at once and deployed at once, instead of being staggered out.
And the big one, it gives administrators a pathetic excuse to explain the poor security of their network. Instead of admitting that they are at fault, they blame Microsoft for their (IT Admins) lazy approach to their job.
I had to do three registry fixes on 20 servers last month after updating...i need to plan that tish out.
********************************************************************
Title: REVISED: September 2005 Microsoft Security Response Center
Bulletin Notification
Issued: September 9, 2005
********************************************************************
Summary
=======
Microsoft will not issue any new security updates on 13 September
2005 as part of the September monthly bulletin release cycle. Based on customer feedback, Microsoft instituted a monthly security update release process on the second Tuesday of each month to provide customers with security guidance and updates on a predictable and manageable schedule. This update release process involves a significant testing focus to help ensure customers will receive updates that are of a high quality and Microsoft will not release an update until it meets those standards. Occasionally, the testing process and our strict focus on quality can result in a month where no security updates are released, as is the case for 13 September 2005.
In addition, to help customers prioritize monthly security updates with any non-security updates released on Microsoft Update, Windows Update, Windows Server Update Services and Software Update Services on the same day as the monthly security bulletins, we also provide:
- Information about the release of updated versions of the Microsoft Windows Malicious Software Removal Tool.
- Information about the release of NON-SECURITY, High Priority updates on Microsoft Update (MU), Windows Update (WU), Windows Server Update Services (WSUS) and Software Update Services (SUS).
Note that this information will pertain ONLY to updates on Windows Update and only about High Priority, non-security updates being released on the same day as security updates. Information will NOT be provided about Non-security updates released on other days.
On 13 September 2005 Microsoft is planning to release:
Security Updates
- No new security updates on 13 September as part of the September monthly bulletin release cycle. This represents a change in the information found in the Advance Notification on Thursday, September 8, 2005. Late in the testing process, Microsoft encountered a quality issue that necessitated the update to go through additional testing and development before it is released. Microsoft is committed to only releasing high quality updates that fix the
issue(s) in question, and therefore we feel it is in the best interest of our customers to not release this update until it undergoes further testing.
Microsoft Windows Malicious Software Removal Tool
- Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.
Note that this tool will NOT be distributed using Software Update Services (SUS).
Non-security High Priority updates on MU, WU, WSUS and SUS
- Microsoft will release one NON-SECURITY High-Priority Updates for Windows on Microsoft Update (MU), Windows Update (WU), Windows Server Update Services (WSUS) and Software Update Services (SUS).
There will still be patches on patch Tuesday. Just no security-related ones, as the only security-related one was scrapped.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.