Microsoft Expects Nine Security Fixes in October

After a quiet September, Microsoft Corp. is planning nine securityfixes — eight of them rated as critical — as part of October’srelease of security updates.

The eight critical patches are updates to the Windows OS, according toinformation on Microsoft’s Web site. A critical rating for a bug meansthat a worm could take advantage of it without user action.

The other update, which is meant for both Windows and Exchange, is rated as important, according to Microsoft.

The patch for the bugs, called “updates” by Microsoft, will come aspart of the company’s regular monthly patch release cycle. Microsoftreleases most software patches on the second Tuesday of each month, adate that has come to be known as “Patch Tuesday” by securityprofessionals.

Microsoft also will release an updated version of the Microsoft WindowsMalicious Software Removal Tool on Windows Update, Microsoft Update,Windows Server Update Services and the Download Center. The tool willnot be distributed using Software Update Services, however.

In September, Microsoft initially released one software fix on PatchTuesday, then pulled the patch a day later due to “quality” issues,according to a Microsoft spokeswoman.

Microsoft’s statement on next Tuesday’s update can be found here:http://www.microsoft.com/technet/security/bulletin/advance.mspx

By Elizabeth Montalbano – IDG News Service (San Francisco Bureau)