Feeds

Three critical fixes in store for MS November Patch Tuesday

Has another crack at some October uberpatch flaws

The essential guide to IT transformation

Microsoft plans to deliver six updates - three critical - as part of its November Patch Tuesday cycle.

All three of the critical updates due on 10 November involve patches for Windows. Tuesday is also due to bring two "important" (ie. slightly lower risk) updates for Office and another "important" Windows-related security fix, according to MS's pre-alert advisory.

As is the local custom, Redmond is holding back details of the flaws to be fixed until the patches are delivered. However from details of the affected software packages it looks like Win 7 machines are in the clear and will not need patching, at least against operating system flaws. One of the critical Windows updates affects Vista while a separate (critical) flaw is bad news for systems running XP or Server 2003.

November's patch batch follows a bumper crop of 13 bulletins that collectively tackled 34 security flaws across a wide range of Microsoft products last month.

Predictably enough the large patch batch failed to run altogether smoothly. On Monday (2 November) Microsoft re-patched Internet Explorer, marking the third time it was obliged to repair one of the updates from its October 2009 uberbatch. The tweaked update addressed problems experienced in displaying web pages by some customers who had applied the MS09-054 patch, as explained here.

Andrew Clarke, senior VP at patching specialist Lumension, reckons three of the updates due out of Tuesday may also be aimed at tackling glitches with the October patch batch.

"Microsoft is delivering three critical patches and three important patches, none of which impact Windows 7," Clarke said. "Three of the November patches, however, appear to be updates to or re-releases of patches that were issued last month including Live Communications Server 2005 and Office Communications Server 2007, as well as scenarios involving the usage of Windows Server Update Services or running Microsoft Office Access Runtime 2003." ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
The Return of BSOD: Does ANYONE trust Microsoft patches?
Sysadmins, you're either fighting fires or seen as incompetents now
Munich considers dumping Linux for ... GULP ... Windows!
Give a penguinista a hug, the Outlook's not good for open source's poster child
Intel's Raspberry Pi rival Galileo can now run Windows
Behold the Internet of Things. Wintel Things
Linux Foundation says many Linux admins and engineers are certifiable
Floats exam program to help IT employers lock up talent
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
Eat up Martha! Microsoft slings handwriting recog into OneNote on Android
Freehand input on non-Windows kit for the first time
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.