Slashdot Mirror


Microsoft Plans Largest-Ever Patch Tuesday

CWmike writes "Microsoft said it will deliver its largest-ever number of security updates on Tuesday to fix 13 flaws in every version of Windows, as well as Internet Explorer (IE), Office, SQL Server, important developer tools and Forefront Security client software. Among the updates will be the first for the final, or release to manufacturing, code of Windows 7, Microsoft's newest operating system. The 13 updates slated for next week, eight of them pegged 'critical,' beat the previous record of 12 updates shipped in February 2007 and again in October 2008." Update Reader Kurt Seifried writes to correct the math a bit, pointing to Microsoft's Advance Notification page for the release, which says that rather than 13 flaws, this Patch Tuesday involves "13 bulletins (eight critical and five important), addressing 34 vulnerabilities ... Most of these updates require a restart so please factor that into your deployment planning."

13 of 341 comments (clear)

  1. ...Patch Tuesday by steelscalp · · Score: 4, Insightful

    Last week's "critical updates" were two copies of Windows Genuine Annoyance.

    1. Re:...Patch Tuesday by Entropius · · Score: 3, Insightful

      It's a very good security strategy to piss off all your customers with WGA and Windows Media bullshit until they all turn off automatic updates.

    2. Re:...Patch Tuesday by Elwood+P+Dowd · · Score: 4, Insightful

      MS requires customers to install the new WGA on a regular basis. That is also nagging.

      --

      There are no trails. There are no trees out here.
  2. Long Weekend by camperdave · · Score: 3, Insightful

    Isn't Tuesday the first day back from a long weekend? Is that really the best time to do this? We'll be up to our eyeballs in password resets already. (How do people forget a password in three days?)

    --
    When our name is on the back of your car, we're behind you all the way!
    1. Re:Long Weekend by Fluffeh · · Score: 5, Insightful

      How do people forget a password in three days?

      Because people are stupid. A person is smart, but people are stupid.

      One of the most strangely insightful comments in Men in Black from memory.

      --
      Moved to http://soylentnews.org/. You are invited to join us too!
    2. Re:Long Weekend by PrimaryConsult · · Score: 3, Insightful

      How do people forget a password in three days?

      Duh, the janitor who comes in on holidays keeps throwing out the post-its taped to the monitors!

  3. Re:The more crap you add... by CannonballHead · · Score: 3, Insightful

    I'd like to see a comparison between the number of patches to Linux vs. Windows. :)

    Which do I think is a better OS in terms of security and stability? Linux. But I tend to get tired of the "Microsoft releases so many patches, their OS is obviously bad" argument when the it seems the whole development model of open source software (e.g., Linux distros) is that anyone can develop both features and patches, thus improving the software.

  4. Re:The more crap you add... by Penguinisto · · Score: 5, Insightful

    I'd like to see a comparison between the number of patches to Linux vs. Windows. :)

    For just the kernel, or for a whole average distro? Which distro's kernel and which variant (e.g. SMP vs. uniprocessor) and which arch? (x86 vs. say, PPC or ARM)? Do we count all the optional modules, and what about the stuff that is out there which could be compiled-in, but usually isn't (e.g. Win4Lin extensions)? Are patches counted as individual diffs checked in to a CVS/SVN/BK repo source tree, or counted only if distributed .rpm/.apt packages by a vendor?

    Otherwise, yeah, I can see your POV. :)

    --
    Quo usque tandem abutere, Nimbus, patientia nostra?
  5. Re:The more crap you add... by CannonballHead · · Score: 4, Insightful

    Fair questions, but easily answered: for whatever is being compared to in a Windows OS. Windows, as I recall, has a kernel, has components that are necessary, has components that are unnecessary, etc. It seems Linux fans easily lapse into thinking that Windows is one complete mess all bound into one, whereas Linux has messy parts but the core is great... but who installs "Linux" and doesn't install a "Linux distro." To be fair to Windows. I'd have to say you'd have to compare an entire Linux distro default installation to an entire Windows default installation... all software included in the iso, not the latest-updated-version-of-Amarok or whatever comes with it by default. Getting the latest Amarok version is just like getting the latest patch for Windows Media Player...

    As for CVS/SVN/BK diff's and whatnot, that's hard to come up with... I have no clue how much code differences there are in a given Windows patch. For all I know, it's one single typo, but since it's a binary, the entire thing is built and sent over in the patch, right? So who knows? I would think, from an end-user perspective, it only counts as a patch if it's distributed in an easily installed format; e.g., as an update or as an rpm or included in the distro, etc.

    Thanks for seeing my POV. :) hehe. I'm in an unfortunate position for my life on slashdot; I actually enjoy Windows OS's. And Linux distros. Awful, I know.

    I don't like AIX though...

  6. Re:in the last patch supertuesday by plague3106 · · Score: 3, Insightful

    Well stop pirating office and you won't have those kinds of problems.

  7. Re:The more crap you add... by jrumney · · Score: 4, Insightful

    The point the GP is trying to make is that they just aren't directly comparable. Limiting yourself to the Linux kernel is unfair to Windows, as Windows is much more than just a kernel. But comparing with a full distribution is unfair to Linux, as there is much more in a distribution than even Windows + Office + SQL Server + everything else that Microsoft Update covers.

  8. Re:Typical Bullshit by smash · · Score: 5, Insightful
    I've yet to see a good Linux/Unix distribution that offers centralized patch management in an easily administered manner to compare with WSUS.

    Kernel issues still require a reboot.

    I run both Linux and FreeBSD in the server room, and have for about 15 years - but in terms of managing, reporting on, and distributing updates to hundreds of desktops, there's nothing off the shelf for *nix that comes close.

    --
    I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
  9. Re:So? by Teun · · Score: 3, Insightful
    You said it: Updates.

    And you didn't have to wait for the magical Patch Day for Ubuntu to share them with you.

    --
    "The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."