microsoft
Report a problem

Microsoft Patch Tuesday, it's a big one

Andrew Lyle   on 04 June 2009 - 22:57 · 24 comments & 14081 views

Advertisement (Why?)
One of the biggest releases of patches since October 2008 is due on Tuesday June 9.

Microsoft has confirmed it will deliver 10 security updates to patch some serious bugs in Windows, Internet Explorer, Word and Excel. Six of the ten were marked as "critical", Microsoft's highest threat ranking. Three of the updates are marked as "Moderate" and one marked as "Important".

This update will include the first ever production patch for IE8 since the release. Mac users will not receive any PowerPoint patches for this month, after heavily patching PowerPoint for Windows last month, stating it does not want to delay these patches any longer, so Mac users will have to do without.

Mac users will need to wait till July at the earliest for PowerPoint patches, as none of the analyzed exploits found on the Windows PowerPoint will reliably exploit the Mac.

The following versions of Microsoft Windows are affected and will receive updates:
  • Windows 2000 Service Pack 4
  • Windows XP Service Pack 2
  • Windows XP Service Pack 3
  • Windows XP Professional Service Pack 2 x64
  • Windows Server 2003 Service Pack 2 (x64)*
  • Windows Server 2003 Service Pack 2 Itanium-based systems
  • Windows Vista Service Pack 1 (x64)*
  • Windows Vista Service Pack 2 (x64)*
  • Windows Server 2008 (Service Pack 2) (x64)*
  • Windows Server 2008 (Service Pack 2) Itanium-based systems (x64)*

* Both 32bit and 64bit systems

Post a comment · Send to friend Comments · There are 24 additional comments
(1 reply) #1 Randomiser on 04 Jun 2009 - 23:33
Maybe just maybe they contain blacklisted technet keys...
#1.1 ahhell on 04 Jun 2009 - 23:51
Uh, no.
(8 replies) #2 Randomiser on 05 Jun 2009 - 00:01
Why not?
#2.1 random_n on 05 Jun 2009 - 00:13
Because security updates don't do piracy checks. Service packs and WGA updates can, and of course the keys can be blacklisted at the activation server at any time. Security updates, however, are available to everybody because insecure systems can affect everybody.
#2.2 TRC on 05 Jun 2009 - 00:32
Besides that they haven't even had time to sort through the accounts and see what is what yet. If they do blacklist the keys it will take quite some time for them to gather them all up.
#2.3 +Somnus on 05 Jun 2009 - 00:54
TRC said,
Besides that they haven't even had time to sort through the accounts and see what is what yet. If they do blacklist the keys it will take quite some time for them to gather them all up.


Was there a security breach or something that would lead MS to suddenly start blacklisting licenses? Did I miss some big announcement?

Or are we talking about MSDN/Technet licenses that have been released into the wild?
#2.4 roadwarrior on 05 Jun 2009 - 03:04
Somnus said,
Was there a security breach or something that would lead MS to suddenly start blacklisting licenses? Did I miss some big announcement?

Or are we talking about MSDN/Technet licenses that have been released into the wild?


Uhhh, where have you been the last couple of days? http://www.neowin.net/news/main/09/06/04/u...et-subscription
#2.5 roblife on 05 Jun 2009 - 09:49
Somnus said,
Was there a security breach or something that would lead MS to suddenly start blacklisting licenses? Did I miss some big announcement?

Or are we talking about MSDN/Technet licenses that have been released into the wild?


Hear is a thought someone uses a key generator and gets a key that your system has. Than ms sees 2 systems and thinks you are sharing and blacklists your key you log on to your computer. Your computer shuts down telling you your key is invalid. Your hole system locks you out. The pirate just gets another key through the key generator. And you being the honest person you are spend $400 on payed ms support its like $69 an hour or something. Where you could have just got to a torrent site on your buddies computer and downloaded a key gen and got a fake key. Or bout a new copy of windows and not spend hours of your valuable time on the phone with tech support from india. How is this help the consumer. Nice job ms.

#2.6 roblife on 05 Jun 2009 - 09:52
Somnus said,
Was there a security breach or something that would lead MS to suddenly start blacklisting licenses? Did I miss some big announcement?

Or are we talking about MSDN/Technet licenses that have been released into the wild?


I guess at ms there is all ways a security breach since there are so many 8 year olds that are interviewing. This is how they do it. Hack a system or write a virus and instead of getting jail you get a job with bill. And write the next patch. So we get to patch our computer on a weekly bases. What a wonderful life!

#2.7 Dave_ek on 05 Jun 2009 - 11:20
random_n said,
Because security updates don't do piracy checks. Service packs and WGA updates can, and of course the keys can be blacklisted at the activation server at any time. Security updates, however, are available to everybody because insecure systems can affect everybody.


A very correct and valid point.
#2.8 _dandy_ on 05 Jun 2009 - 15:27
Randomiser said,
Why not?


Because the blacklisted key check is done server-side. If it was done client-side, it'd be stupidly-easy to disable.
(1 reply) #3 axebox on 05 Jun 2009 - 00:11
Still no IE8 required update?
#3.1 sava700 on 05 Jun 2009 - 03:00
Yeah IE8 was already pushed out the other month for Critical required.
(3 replies) #4 CyberDragon777 on 05 Jun 2009 - 01:31
Mac users will not receive any PowerPoint patches for this month, after heavily patching PowerPoint for Windows last month, stating it does not want to delay these patches any longer, so Mac users will have to do without.


Umm... what?
#4.1 lylesback2 on 05 Jun 2009 - 02:12
microsoft doesn't want to delay these patches (Tuesday windows patches) so the unfinished mac updates will not be released. I'll rephrase that sentense so it makes sense
#4.2 richardsim7 on 06 Jun 2009 - 13:37
Well it says that the exploit only really works on windows, and not macs :p

-Rich-
#4.3 lylesback2 on 06 Jun 2009 - 14:09
richardsim7 said,
Well it says that the exploit only really works on windows, and not macs :p

-Rich-

Ya there hasn't been any real data on the Mac exploit, the whole reason behind Microsoft not postponing these updates to wait for the Mac ones.
(1 reply) #5 qdave on 05 Jun 2009 - 04:52
it seems that windows 7 rc is not affected
#5.1 Dave_ek on 05 Jun 2009 - 11:22
qdave said,
it seems that windows 7 rc is not affected


lol, was the first thing I thought when I read that.

Windows 7 is immense... I love the integrated multi monitor support options....
#6 FrozenEclipse on 05 Jun 2009 - 05:30
I doubt any of the Vista/Server 2008 updates will be labeled as "Critical", more than likely "Important".
#7 bbfc_uk on 05 Jun 2009 - 15:00
First update for IE8, very impressive giving the time its been out.
#8 cork1958 on 05 Jun 2009 - 15:49
Yeah, baby!!
(1 reply) #9 jamesVault on 05 Jun 2009 - 17:49
7 patches for XP and only 4 patches for Vista
=> yet another reason to use Vista!

Last edited by jamesVault on 05 Jun 2009 - 17:54
#9.1 protocol7 on 06 Jun 2009 - 02:00
jamesVault said,
7 patches for XP and only 4 patches for Vista
=> yet another reason to use Vista!

And 0 patches for 7

In fact apart from the test updates they pushed I haven't seen anything come down the line for the RC build. I thought people said it would get updates that unofficial leaked builds would not.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)