With 12 security patches being flagged as critical, plus this week’s Daylight
Saving Time fixes, your patch session this month will be extensive.
Because there are so many this month, I’m putting all the similar patches
together within sections below. First up are the critical Office patches.
This week, Microsoft declared a sale on Daylight Saving
Time patches for Windows 2000, for those of you who are still running that platform.
In other news, I’m going to spend a lot of this week’s column on
patches that are rated "nonsecurity" but could have a great impact on you and
your business none the less.
Patching should protect our systems first and foremost, but lately I’ve been
tracking issues that affect the patching process.
First, some folks were turning off auto-update to ensure they wouldn’t get
Windows Genuine Advantage (WGA) or Internet Explorer 7. Now, Microsoft’s very
patch mechanism itself needs some help.
The second Tuesday of the month is when topics usually move from Chris
Mosby’s Over the Horizon column
to mine, because Patch Tuesday is when problems morph from unpatched to patched.
This week, that didn’t happen at all, and the big news is more about the patches that
weren’t released than the patches that were released.
The last batch of official patches for 2006 leaves us with a few unpatched
vulnerabilities, as Chris Mosexplains, above. But we’re rid of a few "zero day"
Microsoft’s December patch batch also includes a number of confusing, nonsecurity patches,
but I hope to make everything clear for you.
Steve Ballmer was at NASDAQ on Nov. 30 to announce that businesses
are now able to purchase Vista.
For the rest of us, it’ll be after the New Year before we start to
see the patching changes that will impact us the most —
but that doesn’t mean they’ll be small.
Windows Vista was released to manufacturing last week and is expected on
the MSDN download site this weekend. But it’s not yet on our Patch Watch radar
— our steadfast Windows 2000 and XP SP2 machines are.
We said goodbye last month to Microsoft support for XP SP1. Unless you have a patch support contract, you’ll no longer get any patches for that version.
While everyone was in a tizzy over IE7 hitting the streets, the rest of us
mortals were still tracking issues with the patches we got earlier this month.
There are times IT folks overreact to technology changes, such as IE 7 —
but I guess that’s what makes us human.
This month, we say a fond farewell to MS support for Windows XP SP1, pay tribute
to Ray Noorda, and get ready for IE 7.
We also find that the servers at Microsoft Update have taken a page out of Woody
Leonhard’s "you should wait to patch" handbook and decided
to make you do just that.
I’m flattered when folks say they don’t patch their systems until they read
my column, but this
month I’d rather you read Chris Mosby’s column first.
With all the unpatched issues that arise with IE,
it’s not enough to be “fully patched” with Microsoft’s latest fix (MS06-055), you also need
to install workarounds when you hear of them. Fixing recent Microsoft patches —
for example, the two-week-old MS06-049 — is also essential, as I describe below.