Newsletter Archives
-
MS-DEFCON 2: March Patch Tuesday bulletins out
As usual, I strongly recommend that you wait before installing the current crop.
We get three bulletins, only one of which is rated Critical by Microsoft. MS09-006 and -007 both cover Windows XP and Vista.
The one interesting feature about this month’s bulletins? Microsoft’s Security Response Center has gone YouTube, with a video overview of the bulletins. Kinda cool, in my opinion. I wonder if we’ll ever see a “Channel 9” style interview of the security spokespeople about the continuously re-botched AutoRun patch.
You may also be interested to know that Microsoft has re-released the MS08-052 “update packages for Windows XP Service Pack 3 and Windows Server 2003 Service Pack 2 to fix an installation issue. Customers who have already successfully installed the original updates for Windows XP Service Pack 3 or Windows Server 2003 Service Pack 2 do not need to reinstall the new updates.”
WinXP Service Pack 3 strikes again.
-
MS-DEFCON 2: Lock ’em down
Microsoft plans to release three Security Bulletins on Tuesday. Microsoft only rates one of them as “Critical.” They’re all for Windows.
That means we won’t see a fix for the Excel 0day that’s currently making the rounds.
Check all of your computers and make sure they’re set to “Notify but don’t download” (or at least “don’t install”).