On Tuesday 8 May 2007 Microsoft is planning to release:
Security Updates
Non-security High Priority updates on MU, WU, WSUS and SUS
View: Microsoft Security Bulletin Advance Notification
Security Updates
- Two Microsoft Security Bulletins affecting Microsoft Windows. The highest Maximum Severity rating for these is Critical. These updates will require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer.
- Three Microsoft Security Bulletins affecting Microsoft Office. The highest Maximum Severity rating for these is Critical. These updates may require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer.
- One Microsoft Security Bulletin affecting Microsoft Exchange. The highest Maximum Severity rating for these is Critical. These updates will not require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer.
- One Microsoft Security Bulletin affecting CAPICOM and BizTalk. The highest Maximum Severity rating for these is Critical. These updates will not require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer and the Enterprise Scan Tool.
- Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.
Non-security High Priority updates on MU, WU, WSUS and SUS
- Microsoft will release 1 NON-SECURITY High-Priority Update for Windows on Windows Update (WU) and Software Update Services (SUS).
- Microsoft will release 6 NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).
View: Microsoft Security Bulletin Advance Notification
It depends on whats being patched. Some services can be stopped, patched, and restarted, others cannot without loosing important capability. Vista is much better in this regard, but xp requires a lot of restarts
If it's a kernel update then ANY OS will need a restart. As said above, Vista is a bit beter at patching then XP when it comes to restarts, but any low level updates will need a restart, that's kernel mode stuff. Now that MS has started to move more parts out of kernel mode and into user mode space restarts will be fewer and fewer.
JockStrap: "I like how many of these could have easily been prevented with a little extra testing. Thanks for caring
about your customers so much that you'll cripple their systems with untested patches for a product they paid far." ad naseum.
The key thing to look at here is what's being activilly attacked before a patch is issued and what is attacked after a patch is out. Just like the Blaster worm a few years ago, a patch was out before that happend, but many systems weren't updated.
p.s.
I'm guessing Jock and rich have still patched
As part of its advance notice mechanism, Microsoft said a total of 7 bulletins will be released on May 8, 2007. Here are the barebones details.
Two Microsoft Security Bulletins affecting Microsoft Windows. The highest Maximum Severity rating for these is Critical. These updates will require a restart.
Three Microsoft Security Bulletins affecting Microsoft Office. The highest Maximum Severity rating for these is Critical. These updates may require a restart.
One Microsoft Security Bulletin affecting Microsoft Exchange. The highest Maximum Severity rating for these is Critical. These updates will not require a restart.
One Microsoft Security Bulletin affecting CAPICOM and BizTalk. The highest Maximum Severity rating for these is Critical. These updates will not require a restart.
One of the "critical" bulletins will most certainly contain fixes for the Windows DNS RPC vulnerability that was being used in attacks by botnet herders last month.
According to FrSIRT, there are several known Microsoft Office vulnerabilities that are unpatched. The list includes two code-execution vulnerabilities, one each in Microsoft Word and Microsoft Powerpoint. The PowerPoint bug was reported to Microsoft nine months ago (July, 2006).
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.