Microsoft takes a 'Patch Tuesday' break

The second Tuesday of the month, typically Microsoft's scheduled patch release day, will not have any security bulletins. Microsoft will, however, go ahead with a release of its monthly update of Windows Malicious Software Removal Tool along with several non-security updates. Microsoft occasionally has months when it has not released security updates; the last one being in September 2005, according to the software giant. "Microsoft continues to investigate potential and existing vulnerabilities in an effort to help protect our customers. Creating security updates that effectively and comprehensively fix vulnerabilities is an extensive process involving a series of sequential steps," said a company representative.

The patch break could be a welcome respite for IT managers still busy testing the dozen fixes Microsoft released last month and making the switch to daylight saving time, which Congress ordered to happen three weeks earlier this year. Still, the lack of security updates also means that cybercrooks have more time to exploit known security vulnerabilities. There are five known zero-day holes in Microsoft products, according to eEye Digital Security.

News source: News.com

Report a problem with article
Previous Story

Israeli Firm Unveils Portable Hunter/Killer Robot

Next Story

Microsoft HD Photo Plug-in for Adobe Photoshop

25 Comments

Commenting is disabled on this article.

Zero-day holes...all of which require the user to be a complete idiot and have an unsecured computer (ie. no firewall or a/v).

That fail to mention that however. Another anti-MS post.

BTW, to the troll regarding Linux. Your OS is nowhere near worth using. This is why you don't see retail stores selling it.

Still, the lack of security updates also means that cybercrooks have more time to exploit known security vulnerabilities. There are five known zero-day holes in Microsoft products, according to eEye Digital Security.

Of course, those don't need fixing at all! If you suffer any damage from them, it's your own fault for using Windows :P

Here is a more complete "Patch Tuesday" List

On March 13, 2007 Microsoft is planning to release:

Security Updates

· No new Microsoft Security Bulletins will be released on March 13, 2007.

Microsoft Windows Malicious Software Removal Tool

· Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.

Note that this tool will not be distributed using Software Update Services (SUS).

Non-security High Priority updates on MU, WU, WSUS and SUS

· Microsoft will release two non-security high-priority updates for Windows on Windows Update (WU) and Software Update Services (SUS).

· Microsoft will release four non-security high-priority updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

me personally i dont mind them delaying the updates as long as it makes for overall better quality more throughly tested patches

I agree, if they need to test more, then i'm all for it. It's better to have a patch that fixes the problem insted of making a new one.

so now they are telling us windows is errors free ¿¿¿????

they need to get in there and patch more. taking breaks and harming us in the process will not be tolerated

werejag said,
so now they are telling us windows is errors free ¿¿¿????

they need to get in there and patch more. taking breaks and harming us in the process will not be tolerated

You're right man. Why don't you go help them if you think you're up for it? I thought not. Don't post stupid comments.

i dislike the patch tuesday approach, i'd prefer if they made fixes, tested them and released them when they were ready to go regardless of what day and time of the month it is.

There's a significant cost to deploying fixes. "Released them when they were ready" is OK for the KB/QFE stuff (those pop up on support.microsoft.com when they're ready or so), but for updates that are going to be deployed across the org, there's huge value in standardization and syncronized releases. *shrug* It's been covered before why they do this.

This is what businesses wanted, a more managed and expected release schedule for updattes. Insted of having lots of updates throughout the month and raising IT costs and lost $$ with multiple downtimes to update, it's cheaper for them to do it all in one go for the month.

Third sentence of the article that Slimy posted:

Microsoft occasionally has months when it has not released security updates; the last one being in September 2005, according to the software giant.

Jugalator said,
But next month, it'll be twice as bad! lol ;)

Well, the good news is that at least they won't screw anything up new THIS month.