According to a recent report from Microsoft, the company is planning on releasing a total of five security updates next week in order to fix 15 vulnerabilities located in Windows, Excel, SharePoint Server and Groove. All five of the updates will be rated as "important" which is the second highest ranking in the four-step security system set up by Microsoft.Typically, Microsoft ships a smaller number of updates in months labeled as an "odd number month" and is keeping to that plan. The volume of September is down compared to August when Microsoft patched 22 problems with 13 bulletins or individual security updates. According to Director of Security Operations at nCircle Security Andrew Storms, "Not a lot there, but we didn't expect much. It is the light month, the down month."
Microsoft laid out all the details about the coming patches in an advanced notice of next week's patch day which is Tuesday. Two of the updates affect Windows with one of them only impacting Server 2003, 2008 and 2008 R2. The second patch fixes a few more bugs found in all supported versions of the operating system which include XP and Windows 7.
"There are a number of server-only components that have been present through the whole lifecycle of Windows Server," Storms added about the server-only update. "SMB is an example. And they patched SMB often in the last several months."
SMB, or server message block, is a network and file-sharing protocol designed by Microsoft that has already been patched multiple times this year including an update that took place in April that stopped up a critical hole that some analysts believe could be used by criminals to construct a dangerous worm.
An additional two updates also coming out next week will patch up problems located in Excel 2010 and Excel 2011 for the Mac and in the Office software altogether. The fifth patch will fix a plethora of server-side software including SharePoint, Groove and Office Web Apps, which is the cloud-based version of Microsoft's suite.
Source: Computer World - Microsoft plans 15 patches for Windows, Office next week
