Slashdot Mirror


Microsoft Releases Out-of-Band Security Patch For Windows

mrspoonsi writes Microsoft has announced that they will be pushing an out-of-band security patch today. The patch, which affects nearly all of the company's major platforms, is rated 'critical' and it is recommended that you install the patch immediately. The patch is rated 'critical' because it allows for elevation of privileges and will require a restart. The platforms that are affected include: Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows 8 and 8.1, Windows Server 2012 and Windows Server 2012 R2, Windows RT and Windows RT 8.1. Windows 10 Technical Preview customers are affected, too.

6 of 178 comments (clear)

  1. So... by jellomizer · · Score: 2, Interesting

    With Apple continuing to make a more closed ecosystem. And Google sharing all your data in the world, with little interesting movement in Linux. Now Microsoft trying to be more open.
    Should we be a bit more welcoming to Microsoft?

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    1. Re:So... by Anonymous Coward · · Score: 0, Interesting

      Yes.

      Linux desktop is just a tumbleweed passing by with huge amount of bugs and lack of developers.

      Apple is iOSifying everything and making silly lock-ins like removing third-party SSD TRIM support.

      Meanwhile, Microsoft is bringing back the classic desktop, making Windows even faster and more secure, open sourcing lots of things, and bringing professional full-feature free tools like the Visual Studio Community edition. They also seem to listen to feedback now, looking at the changes being made to the free Windows 10 Technical Preview.

  2. Re:XP as well? by rescendent · · Score: 3, Interesting

    Except reading the patch note, while Windows Vista, Windows 7, Windows 8 and Windows 8.1, Windows RT and Windows RT 8.1 are listed its to say they are not affected.

    So its a patch for the server products.

  3. Re:Better go kick WSUS into a sync... by bill_mcgonigle · · Score: 5, Interesting

    If you roll out your patches the moment they come in, you are a retard ... do you enjoy running around like a headless chicken when theres a compatibility conflict?

    If only security were so binary - in the real world it's a constant process of risk/reward calculations.

    Is this the vulnerability the boards have been buzzing about that gives a remote code exploit by merely visiting a malicious TLS server? If so, having all your end-user machines pwned inside the firewall is not better than the risk of a compatibility conflict. One cripples an organization, the other, at worst, breaks one app.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  4. Re:Better go kick WSUS into a sync... by DigiShaman · · Score: 3, Interesting

    Richard, I've lost clients because because these clients were 10+ employees or less running off a single Windows SBS box. It wasn't us. It was the fact IT was just too expensive in general. Running a business, especially a small was is exceedingly risky. They should be so lucky to afford rolling the dice ALONE! Many small business will just adhere to a BYOD policy with a NAS purchased from Best Buy. Yeah, good luck when Cryptolocker pulls you into bankruptcy.

    Risk assessment; learn it, love it, above all else, accept it! Can't stand the heat? Get out of the kitchen!

    BTW; you can't really duplicate an SBS box as it holds all the FSMO roles in addition to P2V testing being optional if they spend the time as a billable activity (assuming you can P2V with enough physical resources).

    --
    Life is not for the lazy.
  5. Re:Better go kick WSUS into a sync... by LordLimecat · · Score: 3, Interesting

    VMWare's fault tolerance mechanism is limited to a VM with one vCPU, but the ability to restart a VM if the physical machine is dead is a good one. Same with Hyper-V

    This is not correct.

    VMWare' Fault Tolerance is indeed limited, but it has nothing to do with the ability to restart a VM on a dead host. FT prevents a machine from ever going down in the first place by keeping 2 identical VMs on 2 different hosts in sync, CPU state and all.

    High Availability is the feature you refer to regarding rebooting a downed VM, and it has no vCPU restrictions.