Do You Know What Day Is It?

You know damn well what day it is, it’s Microsoft Patch Tuesday!

Microsoft Plugs 22 Security Vulnerabilities on Patch Tuesday

Microsoft plugged 22 security holes today in the second Patch Tuesday of the year.

The fixes are included in 12 security bulletins spanning Windows, Internet Explorer, Microsoft Office and IIS. Three of the bulletins are rated “critical” while the other nine are considered “important.”

Within the critical bulletins are fixes for a bug in the Windows Graphics Rendering Engine Microsoft warned users about in January, as well as a vulnerability in IE (Internet Explorer) resulting from the creation of uninitialized memory during a CSS (cascading style sheet) function within IE. The company issued the advisory for the IE flaw in December, and has seen limited, targeted attacks focused on the vulnerability.

See also:
Microsoft Security Bulletin Summary for February 2011
Microsoft patches Windows, IE
Microsoft Fixes 22 Security Holes – 6 Critical
Microsoft’s Patch Tuesday: 6 Critical Fixes
Microsoft Patch Tuesday Swats 22 Bugs, Misses MHTML Flaw
How to Prioritize Microsoft Patch Tuesday
Bug bounty program reveals 22 unpatched flaws, 5 in Office
Microsoft delivers ‘big month’ of patches, quashes 22 bugs
February Microsoft Patch Targets 20-Plus Security Flaws
Microsoft patches critical flaws in IE, Windows Shell Graphics
Microsoft addresses 22 vulnerabilities in monthly patch release
Microsoft finally says adios to Autorun
Microsoft Update Trims USB AutoRun For Security
Windows Update

Who Nellie, that’s a whole lot of patch! And, as usual, it doesn’t even correct all the problems with the software.

/so, until next time, happy patching!

Microsoft Sets A New Record

It’s the biggest Patch Tuesday ever!

Microsoft Again Sets Record With Massive Patch

For the third time this year, Microsoft has issued a record-setting security patch.

The company’s December Bulletin Release includes 17 security bulletins addressing 40 vulnerabilities in Microsoft Office, Windows, Internet Explorer, SharePoint Server and Exchange.

Jeff Prince, CTO of ConSentry sees NAS as evolving technology that won’t just be about initial host assessment. It was only in October that Microsoft set the record it just broke, with 16 security bulletins. There were however fewer individual vulnerabilities this month than in October (49). And it was two months earlier, in August, that the company had set its previous record, with 14 bulletins to address 34 vulnerabilities.

The huge October patch was supposed to front-load the task of patching so that IT administrators had a lighter schedule over the holidays. So much for that idea.

At least the December crop of bulletins brings only two “critical” ones. Fourteen are rated “important” and one is rated “moderate.”

The two critical bulletins, MS10-090 and MS10-091, addressing vulnerabilities in Internet Explorer and Windows respectively, should be deployed first, according to Microsoft.

See also:
It’s Microsoft Patch Tuesday: December 2010
Microsoft Security Bulletin Summary for December 2010
Microsoft Closes a Record-Patch Year with 17 for December
Windows Security Updates: Microsoft Critical Security Patches
Microsoft Fixes 40 Vulnerabilities in Final Patch Tuesday for 2010
Microsoft’s holiday bonus: Fixes for 40 flaws
Microsoft Fixes Dozens of Vulnerabilities in Big Update
Record Patch Tuesday: What You Need to Know
Microsoft Fixes 40 Flaws With Record Patch Tuesday Release
Microsoft Patch Tuesday: The bottom line
Microsoft fixes bugs in Windows, Internet Explorer
Windows Update

You better watch out! Better not cry! Better not pout! I’m telling you why, Patch Tuesday is comin’ to town.

/Merry Christmas, don’t forget to unwrap your shiny new present from Microsoft!