At least two critical Windows updates have been released recently Microsoft — but they’re not being picked up by
most patch-management software because the updates aren’t marked Microsoft as “security” updates.
With Microsoft announcing 12 new updates this week — 8 of them rated
critical — it was a busy Patch Tuesday for many of us. But even with all these
updates, few people have so far reported serious problems after installing them. Is
Microsoft starting to get the hang of this patching stuff?
Fasten your seatbelts, it’s Patch Tuesday. Microsoft released
bulletins on Feb. 8 that covered the gamut, from operating
systems to Office suites to Messenger applications.
Microsoft may call it Patch Tuesday, but I call it the day that I start
watching for the "dead bodies." You know what I mean, don’t you? The
anxiety you feel when you press the button to reboot your computer after the
security patches are applied? Will the system arise from the reboot to
compute again? Will your data survive another trip through the patch
Microsoft released three security bulletins this week, two of them rated
critical, one rated merely important.
Microsoft released five security bulletins on Dec. 14, all of them ranked
“important,” the second highest level of severity.
Possibly more crucial to your safety than the five well-publicized patches,
however, are three fixes that’ve been released more quietly. The issues that
these upgrades fix include:
MS04-040 (889669): In an effort to close an Internet Explorer
security hole that had become the target of a few initial exploits across the
Internet, Microsoft released a new cumulative patch for IE on Dec. 1, rather
than waiting for the Redmond company’s regular release date, the 2nd Tuesday
of the month.
The November edition of Microsoft’s monthly security patch day yielded only a
single, non-critical patch for a security issue last week (see related story
below). Don’t let your guard down, however. There are at
least three other, far more dangerous security exploits that are currently
making the rounds on the Internet and demanding your attention.
An updated version of the malicious Bagle e-mail worm, officially dubbed
W32/Bagle.bb@MM, now attempts to quietly shut down the Windows Firewall that
Microsoft introduced in Windows XP Service Pack 2 (SP2). The virus also
attempts to disable various antivirus software.
With Microsoft, no news is good news — but Microsoft didn’t
give us “no news” on Oct. 12.
Instead, on its regular 2nd-Tuesday patch-release schedule, Microsoft
issued warnings for a record number of newly discovered security
flaws. The company said it was fixing 22 different software flaws in
various products. The patches for all these problems required 10
separate security bulletins. Seven of the 10 bulletins are rated by
Microsoft as “critical,” the most severe rating, which indicates a
security hole that can give hackers access to your system from across