Feeds

Office, IE and Windows in line for critical fixes from Redmond

Seven bulletins planned in June edition of Patch Tuesday

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Microsoft is planning to deliver seven bulletins next week in its scheduled monthly update.

The company has posted its advance notification for the upcoming Patch Tuesday security release, which it said will consist of two critical bulletins and five others rated as important.

According to Microsoft, the critical bulletins will address a pair of remote code execution flaws and will be considered a top deployment priority for Windows, Internet Explorer, Office, and Lync.

The first bulletin addresses critical issues in Internet Explorer, while the second addresses one or more flaws in Microsoft Office and Lync (excluding Lync Server). Microsoft does not post specific details on the vulnerabilities until after the patches have been released.

All currently supported versions of both client-side Windows and Windows Server will receive at least one bulletin rated as critical, although the Internet Explorer bulletin is considered a lower priority on Server systems where the browser is less likely to be accessible to an attacker.

Users and administrators running Windows Vista, 7, 8, 8.1, and Windows RT should consider both bulletins critical fixes and top priorities for testing and deployment. Both patches will require a restart after installation.

The five remaining bulletins will include fixes for one or more remote code execution vulnerabilities in Office, an information disclosure flaw in Windows, information disclosure issues in Lync Server, a denial of service fix for Windows, and what Microsoft described as a "tampering" vulnerability in Windows.

Microsoft said that it will post the June security updates on Tuesday, June 10 at approximately 10:00 PDT (1800 UK). Users who have automatic updates enabled will receive the release directly.

Not listed in the update is Windows XP. Microsoft has ended security update support for that version of the OS, despite it still running on more than a quarter of all PCs.

While users in Germany have come with a registry hack to keep XP systems receiving updates, most users would probably be better served updating their systems and getting the additional security protections of Windows 7. ®

Remote control for virtualized desktops

More from The Register

next story
UK smart meters arrive in 2020. Hackers have ALREADY found a flaw
Energy summit bods warned of free energy bonanza
DRUPAL-OPCALYPSE! Devs say best assume your CMS is owned
SQLi hole was hit hard, fast, and before most admins knew it needed patching
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Mozilla releases geolocating WiFi sniffer for Android
As if the civilians who never change access point passwords will ever opt out of this one
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
Internet Security Threat Report 2014
An overview and analysis of the year in global threat activity: identify, analyze, and provide commentary on emerging trends in the dynamic threat landscape.