On TV.com: ANGELINA JOLIE looks stunning as usual
BNET Business Network:
BNET
TechRepublic
ZDNet

By Joris Evers, News.com
Posted on ZDNet News: Jan 5, 2007 11:20:00 PM

Microsoft has pulled four bulletins from its announced list of Patch Tuesday fixes, but did not specify why it was backpedaling on the security releases.

It now plans to issue four security bulletins on Tuesday, rather than the eight originally announced, the software giant said Friday in an updated notice on its Web site.

Three bulletins will contain fixes for Office, at least one of which will be rated "critical," Microsoft said. Critical vulnerabilities typically can allow a worm to spread or allow a Windows system to be fully compromised with minor or no interaction from the person using it. The fourth bulletin, for Windows, is also tagged critical.

On Thursday, Microsoft listed eight bulletins it intended to issue next week in its monthly patch cycle. It appears to have pulled two bulletins for Windows, one for Windows and Visual Studio and one for Windows and Office. These patches will now likely be released on a future Patch Tuesday.

The Redmond, Wash.-based software giant did not provide any explanation for pulling the bulletins only a few days before their scheduled release. "There are many factors that impact the release of a security update, and every vulnerability presents its own unique challenges," a Microsoft representative said in an e-mailed statement.

The company does not specify ahead of time which security vulnerabilities are addressed by its patches. As a result, it's unknown what security holes will now be left without a fix. eEye Digital Security, on its Zero-Day Tracker Web site, lists eight zero-day vulnerabilities that Microsoft still has to address, with four each in Office and Windows.

Zero-day vulnerabilities are security holes that have been publicly disclosed without a fix being available. In some cases, exploit code may be available for such a flaw, and there may be cyberattacks that take advantage of it. However, Microsoft's patches often address vulnerabilities that have not been publicly disclosed.

The company sometimes deviates from the Patch Tuesday advance notification. Last month, for example, it issued one more security bulletin than it had said it would. It has also dropped bulletins, citing quality issues. However, it has never before pulled four bulletins.

  • Talkback
  • Most Recent of 27 Talkback(s)
OR
They actually decided to pull them before they broke more than they fixed. (Read the rest)
Posted by: Shelendrea Posted on: 01/09/07 You are currently: Logged In | Log out
Microsoft pulls four planned patches Loverock Davidson   | 01/05/07
Somebody will spin it to a negative Boot_Agnostic   | 01/05/07
You are friendly attackers? Grayson Peddie   | 01/05/07
Yep Boot_Agnostic   | 01/05/07
You don't have to correct me because Grayson Peddie   | 01/06/07
You've become a bit hostile Boot_Agnostic   | 01/07/07
Okay, fine, I won't be negative. CobraA1   | 01/05/07
Have a wonderful day Boot_Agnostic   | 01/05/07
ahh, I see xuniL_z   | 01/06/07
Windows XP Professional, actually (nt) CobraA1   | 01/06/07
No need to spin MSFT security Chad_z   | 01/07/07
I KNOW Microsoft reads these things.... nomorems   | 01/05/07
Come up with something original John Zern   | 01/05/07
John...aren't you happy??? nomorems   | 01/05/07
I'm looking for originality, nomoremoron John Zern   | 01/05/07
I know you try to read osreinstall   | 01/05/07
Yes they read them, but bashers No_Ax_to_Grind   | 01/06/07
No_Ax is a PR flak Chad_z   | 01/07/07
What was your first clue? critic-at-arms   | 01/08/07
I wonder how he gets paid? ChazzMatt   | 01/09/07
While it's remotely possible xuniL_z   | 01/06/07
Only after laughing their No_Ax_to_Grind   | 01/06/07
More on MS Security, not likely to be reported on ZDNet Richard Flude   | 01/07/07
It is a feature dangit! Seenidog   | 01/08/07
oops! Seenidog   | 01/08/07
One possible explanation critic-at-arms   | 01/08/07
OR Shelendrea   | 01/09/07

What do you think?

advertisement
advertisement

The Green Enterprise

advertisement
Click Here