PDA

View Full Version : Microsoft's patches for August


davidh
August 9th, 2006, 01:27 AM
Microsoft Black Tuesday Patches (NEW)
http://isc.sans.org/diary.php?storyid=1556&rss

Microsoft updates - overview (NEW) (i.e. PATCHING PRIORITIES)
http://isc.sans.org/diary.php?storyid=1573

BTW Windows 98 & ME probably have critical vulnerabilities among these holes, but all MS critical update support for those OS's has ended. That is, Windows Update does nothing for Win 98 & ME.

DH

Jeff
August 9th, 2006, 12:41 PM
Microsoft Black Tuesday Patches (NEW)
http://isc.sans.org/diary.php?storyid=1556&rss

Microsoft updates - overview (NEW) (i.e. PATCHING PRIORITIES)
http://isc.sans.org/diary.php?storyid=1573

BTW Windows 98 & ME probably have critical vulnerabilities among these holes, but all MS critical update support for those OS's has ended. That is, Windows Update does nothing for Win 98 & ME.

DH

Any problems reported with any of them? That major scripting screwup makes me patch shy.

- Jeff

davidh
August 9th, 2006, 12:55 PM
Any problems reported with any of them? That major scripting screwup makes me patch shy.

- Jeff
I follow a couple RSS feeds from the Internet Storm Center. I haven't seen any problems reported there yet, but that does not mean much.

There are new vulnerabilities reported on ISC every day. Many of them seem to be for commercial and server side applications. But some are always for home Windows users too. I don't understand a lot of what they talk about, esp. on the commercial and server side.

It's too early to tell. The patches just came out. If there are problems they may show up within a week on ISC. However, they would likely show up under the Microsoft announcement number and NOT as "August patch". There were a lot of patches in this current August roll up, so it could be hard to figure out.

There were some patches for vulnerabilities that have already been exploited in the wild for a LONG TIME :(

Using a computer nowadays is like going to Las Vegas or worse maybe Sao Paulo, Brazil or New Orleans, LA. At least not Baghdad, yet.

DH

davidh
August 9th, 2006, 01:11 PM
Microsoft Internet Explorer HTML Layout and Positioning Remote Code Execution Vulnerability

http://www.securityfocus.com/bid/19312/info

Apparently part of the August roll-up.

Affects IE 6 on just about ALL Windows versions. But of course there is no patch for Win 98 and ME.

DH

davidh
August 9th, 2006, 01:15 PM
Other Microsoft Updates Released (NEW)

http://isc.sans.org/diary.php?storyid=1565&rss

Patches NOT included in the August roll up.

DH