[Merged] Microsoft Security Updates

[Tricky]

On 12 October 2004 the Microsoft Security Response Center is planning to
release:

- One Microsoft Security Bulletin affecting Microsoft Office. The greatest maximum severity rating for this security update is Critical. This security update does not require a restart.

- Seven Microsoft Security Bulletins affecting Microsoft Windows. The greatest maximum severity rating for these security updates is Critical. Some of these security updates will require a restart. Some of these security updates may require a restart.

- Two Microsoft Security Bulletins affecting Microsoft Windows and Microsoft Exchange. The greatest maximum severity rating for these security updates is Critical. These security updates may require a restart.

At this time no additional information on these bulletins such as details regarding severity or details regarding the vulnerability will be made available until 12 October 2004.

Another quiet month then!

[pooroldjoe]

Iâ₠¬ÃƒÆ’¢â€žÂ¢ve got a bit of a funny peculiar going on. Since about 10.30 his morning I have had the Microsoft icon in the systray. Mouse over it brings up the balloon †œdownloading updates 48%ââ‚Âà ‚¬Ãƒâ€šÃ‚ÂÂ� (that was the last check a few minutes ago).
48% in something over 4 hours would indicate a very slow connection, or a massive update.
Is Microsoft forcefeeding SP2 on the unwary, or is there an innocent explanation.
My download updates preference is set to †œnotify do not installââ‚à ‚¬Ã‚ÂÂ�
Is anybody else getting this? Can anybody offer a rational explanation.
Thanks Joe.

[Aragorn]

Yup, it's downloading SP2 for you! Nice waste of bandwidth, assuming you plan to say no when it asks to install!

There is a registry hack to disable the SP2 download on the MS web site, otherwise it will try to download it for you!!! Really trying to push SP2.

[pooroldjoe]

Originally Posted by Aragorn

Yup, it's downloading SP2 for you! Nice waste of bandwidth, assuming you plan to say no when it asks to install!

There is a registry hack to disable the SP2 download on the MS web site, otherwise it will try to download it for you!!! Really trying to push SP2.

Thanks. Thats what I thought. I will install SP2 when I am ready (if at all), not when Uncle Bill tells me to!

[Aragorn]

This months bulletin has been released :

http://www.microsoft.com/technet/sec.../MS04-oct.mspx

Seven critical (including a patch to the new improved IE6 on XPSP2 ) and three important.

Get patching guys !!!

There is also an update to last months JPEG vuln :

* MS04-028

- http://go.microsoft.com/?linkid=1190073
- Reason for re-release: Bulletin updated to advise on the
availability of revised security updates for Office XP,
Visio 2002, and Project 2002 customers that are using Windows XP
Service Pack 2. Microsoft Knowledge Based Article 833987
documents the currently known issues that customers may
experience when installing these security updates. The article
also documents recommended solutions for these issues. Microsoft
has also released the MS04-028 Enterprise Update Scanning Tool
to help customers detect and deploy the required updates. For
more information about the MS04-028 Enterprise Update Scanning
Tool, see Microsoft Knowledge Base Article 886988. Microsoft has
also released an update for Windows 2000 based systems that have
installed the Windows Journal Viewer. The bulletin has also been
updated with a new FAQ that addresses questions regarding the
Visio 2002 Viewer, Visio 2003 Viewer, and PowerPoint 2003
Viewer programs.

HTH

Ooh it's crafty.Automatic update wanted to install summat.So I thought I'd check before installing.Guess what?It wants to install SP2.It just won't give up.I can see it sneaking an install of SP2 when I'm not looking.

Guess I will HAVE to disable auomatic updating.

[Aragorn]

Originally Posted by Incognitas

Guess I will HAVE to disable auomatic updating.

Shouldn't be a major problem if you check a manual windows update every second Weds of the month.

My Windows Update wanted to install SP2 and after I said no it offered me the relevant five of the new updates.

[Tricky]

Users of M$ IE may be interested in this one:

Microsoft is investigating reports of a security issue with Internet Explorer affecting all supported versions of Windows that may allow an attacker to place malicious code on a user's computer if the user visits a malicious Web site.

Today Microsoft is establishing a Microsoft Knowledge Base article, 888534, that will help them better understand the reported vulnerability and what is needed for mitigation.

The Knowledge Base article is available here: http://support.microsoft.com/kb/888534