The second Tuesday of the month, typically Microsoft's scheduled patch release day, will not have any security bulletins. Microsoft will, however, go ahead with a release of its monthly update of Windows Malicious Software Removal Tool along with several non-security updates. Microsoft occasionally has months when it has not released security updates; the last one being in September 2005, according to the software giant. "Microsoft continues to investigate potential and existing vulnerabilities in an effort to help protect our customers. Creating security updates that effectively and comprehensively fix vulnerabilities is an extensive process involving a series of sequential steps," said a company representative.

The patch break could be a welcome respite for IT managers still busy testing the dozen fixes Microsoft released last month and making the switch to daylight saving time, which Congress ordered to happen three weeks earlier this year. Still, the lack of security updates also means that cybercrooks have more time to exploit known security vulnerabilities. There are five known zero-day holes in Microsoft products, according to eEye Digital Security.

News source: News.com



There are 26 additional comments
Advertisement
(1 reply) Quote this comment Reply to this comment #1 Posted by Jugalator on 08 Mar 2007 - 22:15
But next month, it'll be twice as bad! lol
Quote this comment #1.1 Posted by lbmouse on 09 Mar 2007 - 14:16
Quote - (Jugalator said @ #1)
But next month, it'll be twice as bad! lol

Well, the good news is that at least they won't screw anything up new THIS month.
(1 reply) Quote this comment Reply to this comment #2 Posted by +Nienor on 08 Mar 2007 - 22:31
Good news or bad news?
Quote this comment #2.1 Posted by macstorm on 09 Mar 2007 - 07:41
We are in the eye of tornado
Quote this comment Reply to this comment #3 Posted by RyanVM on 08 Mar 2007 - 23:22
w00t
(3 replies) Quote this comment Reply to this comment #4 Posted by Croquant on 08 Mar 2007 - 23:26
They're always slow to patch anything. No surprise they haven't patched much of anything this month. That's par for the course.
You want frequent updates? That's what Linux is for.
Quote this comment #4.1 Posted by +Nienor on 08 Mar 2007 - 23:34
Troll Alert Level 5
Quote this comment #4.2 Posted by MioTheGreat on 09 Mar 2007 - 01:25
Exactl----

Oh crap, my kernel is 4 hours out of date---excuse me, I've got to reboot.
Quote this comment #4.3 Posted by ichi on 09 Mar 2007 - 12:51
Quote - (MioTheGreat said @ #4.2)
I've got to reboot.


Actually no, just kexec.
(1 reply) Quote this comment Reply to this comment #5 Posted by Cryton on 09 Mar 2007 - 00:09
Has this ever happened before? And if so, can anyone remember what month it was in?
Quote this comment #5.1 Posted by Hawkeye on 09 Mar 2007 - 00:20
Third sentence of the article that Slimy posted:
Quote -
Microsoft occasionally has months when it has not released security updates; the last one being in September 2005, according to the software giant.

(2 replies) Quote this comment Reply to this comment #6 Posted by nismohasan on 09 Mar 2007 - 01:18
i dislike the patch tuesday approach, i'd prefer if they made fixes, tested them and released them when they were ready to go regardless of what day and time of the month it is.
Quote this comment #6.1 Posted by zachdms on 09 Mar 2007 - 01:42
There's a significant cost to deploying fixes. "Released them when they were ready" is OK for the KB/QFE stuff (those pop up on support.microsoft.com when they're ready or so), but for updates that are going to be deployed across the org, there's huge value in standardization and syncronized releases. *shrug* It's been covered before why they do this.
Quote this comment #6.2 Posted by GP007 on 09 Mar 2007 - 10:51
This is what businesses wanted, a more managed and expected release schedule for updattes. Insted of having lots of updates throughout the month and raising IT costs and lost $$ with multiple downtimes to update, it's cheaper for them to do it all in one go for the month.
(2 replies) Quote this comment Reply to this comment #7 Posted by werejag on 09 Mar 2007 - 01:25
so now they are telling us windows is errors free ¿¿¿????

they need to get in there and patch more. taking breaks and harming us in the process will not be tolerated
Quote this comment #7.1 Posted by Smigit on 09 Mar 2007 - 03:00
Quote -
so now they are telling us windows is errors free ¿¿¿????

Where did it say that?
Quote this comment #7.2 Posted by Swordnyx on 09 Mar 2007 - 05:22
Quote - (werejag said @ #7)
so now they are telling us windows is errors free ¿¿¿????

they need to get in there and patch more. taking breaks and harming us in the process will not be tolerated


You're right man. Why don't you go help them if you think you're up for it? I thought not. Don't post stupid comments.
(1 reply) Quote this comment Reply to this comment #8 Posted by ThaCrip on 09 Mar 2007 - 04:22
me personally i dont mind them delaying the updates as long as it makes for overall better quality more throughly tested patches
Quote this comment #8.1 Posted by GP007 on 09 Mar 2007 - 10:52
I agree, if they need to test more, then i'm all for it. It's better to have a patch that fixes the problem insted of making a new one.
(1 reply) Quote this comment Reply to this comment #9 Posted by M118LR on 09 Mar 2007 - 04:35
Here is a more complete "Patch Tuesday" List

On March 13, 2007 Microsoft is planning to release:

Security Updates

• No new Microsoft Security Bulletins will be released on March 13, 2007.


Microsoft Windows Malicious Software Removal Tool

• Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.


Note that this tool will not be distributed using Software Update Services (SUS).

Non-security High Priority updates on MU, WU, WSUS and SUS

• Microsoft will release two non-security high-priority updates for Windows on Windows Update (WU) and Software Update Services (SUS).

• Microsoft will release four non-security high-priority updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

Quote this comment #9.1 Posted by GP007 on 09 Mar 2007 - 10:54
Ok, so we do have patches, but none of them are critical security ones.
Quote this comment Reply to this comment #10 Posted by Aero Ultimate on 09 Mar 2007 - 13:07
Quote -
Still, the lack of security updates also means that cybercrooks have more time to exploit known security vulnerabilities. There are five known zero-day holes in Microsoft products, according to eEye Digital Security.

Of course, those don't need fixing at all! If you suffer any damage from them, it's your own fault for using Windows
(3 replies) Quote this comment Reply to this comment #11 Posted by Primetime2006 on 09 Mar 2007 - 13:48
Zero-day holes...all of which require the user to be a complete idiot and have an unsecured computer (ie. no firewall or a/v).

That fail to mention that however. Another anti-MS post.

BTW, to the troll regarding Linux. Your OS is nowhere near worth using. This is why you don't see retail stores selling it.



Quote this comment #11.1 Posted by ichi on 09 Mar 2007 - 14:17
Fight trolling with trolling.... way to go
Quote this comment #11.2 Posted by lbmouse on 09 Mar 2007 - 14:21
@Primetime2006
You seriously can't be THAT dense:
http://www.cdw.com/shop/search/results.asp...amp;x=0&y=0

I see commercial versions of Linux on store shelves all the time. But the best thing is that *I* don't have to purchase the commercial versions. I get mine for free .
Quote this comment #11.3 Posted by +Kushan on 11 Mar 2007 - 00:26
I get my windows for free >_>
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....