Seven Critical Patches on Tap for Tuesday

All seven updates will address critical issues, Microsoft said. Redmond lumped the bulletins into several groups, two of which affect Windows.

The Microsoft Security Response Center (MSRC) plans to publish seven security bulletins next Tuesday, according to Thursday's advance notification.

All seven updates will address critical issues, Microsoft said. Redmond lumped the bulletins into several groups, two of which affect Windows, three of which affect Office, one of which affects Exchange and a final update which affects Microsoft's CAPICOM and BizTalk Server.

The Windows Critical updates will require a system restart, Microsoft said; the Office updates may require a restart, as well.

As usual, Microsoft provided few clues as to which updates it plans to deliver. Microsoft officials did confirm, however, that next Tuesday's patch haul will include a fix for a DNS vulnerability that affects Windows 2000 Server (all versions) and Windows Server 2003 (all versions).

"We haven't seen any new information around attacks against the issue we discussed in Microsoft Security Advisory 935964," wrote Microsoft's Christopher Budd in a posting on the MSRC blog. "Also, the listing of updates slated for Tuesday does include the update we've been working on for this issue."

Last month, Budd indicated that Microsoft hoped to finish testing the DNS patch in time for Patch Tuesday.

"While we don't have a firm estimate on when we'll complete our development and testing of updates for this issue, we have teams around the world working on it 24 hours a day, and hope to have updates no later than May 8, 2007, for the May monthly bulletin release," he had written on the MSRC blog.

But this is not the full extent of Microsoft's patch plans. The company announced plans to deliver one non-security, high-priority update for Windows (via Windows Update and Software Update Services), as well as six non-security, high-priority updates (via Microsoft Update and Windows Server Update Services). In addition, Redmond plans to release still another version of its Windows Malicious Software Removal Tool.

Thursday's advance notification isn't always the last word in Patch Tuesday deliverables, of course. Earlier this year, for example, Microsoft yanked several promised Windows patches from its Patch Tuesday payload. Redmond typically pulls a patch if it discovers problems during testing, or if it identifies other issues.

About the Author

Stephen Swoyer is a Nashville, TN-based freelance journalist who writes about technology.


  • Windows 10 Hyper-V vs. Windows Server Hyper-V: Which Platform for Which Workloads?

    The differences between these two Hyper-V versions are pretty significant, depending on what you plan to use them for. Here's a quick rundown of each platform, from their features to licensing quirks to intended use cases.

  • Office Mobile Apps To End as Microsoft Highlights New Office App

    Microsoft plans to end support for Windows 10 Mobile applications on Jan. 12, 2021, according to a Friday announcement.

  • Is Microsoft Finally Reinventing Office?

    Microsoft is testing out a new technology called "Fluid Framework." It could mean that Brien's dream of one Office app to rule them all might soon become reality.

  • Azure Active Directory Connect Preview Adds Support for Disconnected AD Forests

    Microsoft on Thursday announced a preview of a new "Cloud Provisioning" feature for the Azure Active Directory Connect service that promises to bring together scattered Active Directory "forests."

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.