Slew of Windows patches coming

As part of its monthly patching cycle, Microsoft on Tuesday plans to release eight security alerts for flaws in the Windows operating system.

At least one of the alerts is deemed "critical," Microsoft's highest risk rating, the company said in a notice posted on its Web site on Thursday. Last month, Microsoft planned one critical alert for Windows, but pulled it at the 11th hour because of quality issues.

Microsoft rates as critical any security threat that could allow a malicious Internet worm to spread without any action required on the part of the user.

Additionally, Microsoft on Tuesday plans to release a security bulletin covering a problem related to Windows and its Exchange e-mail server, the company said. This issue is rated "important," one notch below "critical" on Microsoft's rating scale.

Microsoft's notice Thursday did not specify whether any of the patches will be for Internet Explorer, the Web browser component of Windows. Several security researchers have come forward with flaws in IE over the past weeks. Some of these vulnerabilities could let an attacker commandeer a user's PC.

There are several vulnerabilities in IE 6 waiting to be fixed, according to Secunia. The security monitoring company has issued 86 alerts on the Web browser since 2003; 20 of those security bugs remain unpatched.

As part of its monthly patch day, Microsoft also plans to release an updated version of the Windows Malicious Software Removal Tool. The software detects and removes common malicious code placed on computers.

Microsoft gave no further information on Thursday's bulletins, other than stating that some of the Windows fixes may require restarting the computer. The Exchange-related patch will require a restart, Microsoft said.

The Redmond, Wash., software maker offers advance notification about patches so people can get ready to install the updates. Microsoft did not release any fixes in September, but in August the company released six security bulletins, including three deemed critical for Windows. One of the flaws was exploited days later by the Zotob worm, which wreaked havoc on Windows 2000 systems worldwide.

Microsoft said it will host a Webcast about the new fixes on Wednesday at 11 a.m. PDT.

Eagerly waiting....

..to get these patches. I want my Mac to be as secure as possible
-- oh wait. I have a Mac? Never mind.

[wrwjpn]

RE: Bias

Let me answer you then.

"Four is believable. I last installed a Win2K system a few weeks ago and I think it would been about that. My objection is that you mentioned three and then said "etc", implying that there are at least two more to come. Hence my exaggerating line. I apologise for mis-interpreting your usage of "etc"."

Apology accepted.

"Comparing Win2K to OSX is silly and you know it. When Win2K was released the Mac world run on OS9. The fact that there are still proud Win2K users demonstrates that it is not that bad an OS. There should be many updates for Win2K as it is an old OS.

Well there are still many proud users out there using OS9. Using your reasoning then it is possible to compare. Why is it silly? How can you make a statement as fact when you haven't used OS 9?

"It does not always make sense to dowload all updates, and thus a full roll-up is not always a good idea. For example, for servers I do not care about Outlook Express."

Yes but why would Outlook Express show up as an update for a server? Why do MS servers have a web browser installed in them in the first place? Yeah, I am going to be surfing the 'net with my server. Yes there are things that I would never install if I had the choice, but I don't have a　choice if I am stuck using W2K server do I?

"As for problems in service packs, that is not a Microsoft only problem either. Apple did the same just recently."

Yes and that is why we don't rush on installing updates right away like they recommend. I had never stated that Apple doesn't screw up. But whose record shows more mishaps?

"Yes, the last time I used the Mac was with System 7. I have not seen one reason to go back. Feel free to say that I lack the knowledge to say otherwise. I have to get over it. I cannot use everything in the world just to say "I now know". (If I felt that way I would be out looking for cocaine right now!)"

How do you know that cocaine is bad? Did you read that in a book published by cocaine users? Most like likely not. How do you make your assumptions about other OSes? By reading publications form the developers or only the pubs by MS developers. I will make an educated guess on this one.

Then by the same reasoning Morphine is bad. Tell take to cancer patients. I should not ever have an X-ray as well then. Everything has it purposes and you should take that into consideration and gain the knowledge before making statements.