Sunnet Beskerming Security Commentary

Microsoft Security Patch Release October 2011 Advance Notification

info@beskerming.com (Sunnet Beskerming) — Fri, 7 Oct 2011 23:13:00 +1000

As part of this month's Security Bulletin Release, Microsoft are scheduled to release eight bulletins, primarily affecting the Windows family of products.

Of the eight bulletins scheduled for release next week, two are Critical and are for Remote Code Execution vulnerabilities in the .NET Framework, Silverlight, Windows, and Internet Explorer. Four of the six Important bulletins are for Remote Code Execution vulnerabilities in Windows and Forefront Unified Access Gateway. The remaining two Important vulnerabilities deal with an Elevation of Privilege vulnerability affecting Windows, and a Denial of Service vulnerability affecting Host Integration Server.

As with earlier bulletin releases, just because a bulletin is being released for a product family, not all versions within that family will be affected to the same extent, if at all.

Microsoft Security Patch Release September 2011 Advance Notification

info@beskerming.com (Sunnet Beskerming) — Sun, 11 Sep 2011 21:37:00 +1000

As part of September's Security Bulletin Release, Microsoft are scheduling five Important bulletins, targeting Windows, Office, and Server Software. While only releasing five bulletins, fifteen individual vulnerabilities are being addressed. Two of the bulletins are for Elevation of Privilege type vulnerabilities, while the remaining three address Remote Code Execution vulnerabilities.

As with other releases, not all versions of identified software require updating for each bulletin, but all versions of Windows will have at least one security bulletin to apply.

Of note, starting this month, Microsoft have slightly modified the web address and layout for the Advance notification and for bulletin release notification. From now, all security bulletins can be found via http://technet.microsoft.com/security/bulletin/bulletin_name.