Microsoft sets for only two patches next Tuesday

gallery

Microsoft will issue only two security updates for its January 'Patch Tuesday' next week, it said in a notice late yesterday.

One has been given the software maker's highest rating, as "critical," and is expected to patch a remote code execution vulnerability found in all currently supported versions of Windows, including Windows 2000 SP4 to Windows Vista.

The other is rated as "important" and affects all versions of Windows, excluding Vista. Although Microsoft never releases details of the exact flaws it will patch until the first business-day Tuesday of every month, it classified this patch as addressing a flaw that requires "local elevation of privilege," typically meaning an attack to exploit this vulnerability needs local access.

Microsoft also said it planned to release five non-security related, high-priority updates via Microsoft Update and Windows Server Update Services (WSUS), which downloads and installs Windows fixes and updates for other Microsoft products, including Office.

Two other non-security related, high-priority updates for Windows on Windows Update and WSUS will round out the first Patch Tuesday of 2008.

This is in marked contrast to last month's bumper round of patches, which saw seven patches released that addressed a total of 11 vulnerabilities.

The two updates and accompanying support bulletins will go live next Tuesday, 1pm US Eastern time (6pm GMT).

Email to a friend

Print this page