New Round of Vista SP1 and XP SP3 Vulnerabilities

http://filesharingtalk.com/vb3/pictu...&pictureid=203

"Microsoft is cooking patches for a new round of vulnerabilities impacting its Windows client and operating systems and Server software, including Windows Vista Service Pack 1 and Windows XP Service Pack 3. The Redmond company is preparing no less than four security bulletins for release on July 8, 2008, two of them dealing with security flaws in Windows platforms and the remaining two in SQL and Exchange. However, since the release date is not until next week, Microsoft warned that its plans could change if something unexpected were to intervene, revealed Bill Sisk, Microsoft Security Response Center Communications Manager."

" "As part of our regularly scheduled bulletin release, we’re currently planning to release four Microsoft Security Bulletins rated as Important. These updates may require a restart and will be detectable using the Microsoft Baseline Security Analyzer. As we do each month, the Microsoft Windows Malicious Software Removal Tool will be updated. We are also planning to release high-priority, non-security updates on Windows Update and Windows Server Update Services (WSUS) as well as high-priority, non-security updates on Microsoft Update and Windows Server Update Services (WSUS)," Sisk added.

All four security bulletins have been labeled with a maximum severity rating of Important even though some vulnerabilities allow, in the eventuality of successful exploits, for remote code execution. In addition to Vista RTM/SP1 and XP SP2/SP3, Microsoft informed that the following products are also affected: Windows 2000 SP2, Windows Server 2003 SP1/SP2, Windows Server 2008, SQL Server 7.0, SQL Server 2000, SQL Server 2005, Data Engine (MSDE) 1.0, Exchange Server 2003, and Exchange Server 2007. But given that none of the bulletins are designed to patch Critical vulnerabilities, the level of risk users are exposed to is not severe.

By the end of July, the Redmond company also plans to initiate the rollout of a refresh to the Windows Update infrastructure and client for Vista SP1 and XP SP3. However, Microsoft informed that serving the actual update would take a few months."

:source: Source: Softpedia

Hey Harry wish someone could explain to me why I need these SP3 any way . Like in layman terms . I never trusted the Winupdate site to begin with, what with trying to install old Video drivers that would BSOD or revert to 4 bit colors . Or the WGA comedy for that matter .

Quote:

---

“Service packs include security updates, DCRs, and Hotfixes (all updates that resolve issues discovered by customers or by the Microsoft internal testing team). Security Updates and Hotfixes are available on the current version of the service pack and for a limited time on the "immediately preceding service pack" as detailed in the Product Lifecycle Web [site]…”

---

So, like, a service pack includes all the previous Windows updates (fixes, new additions, etc. ) and security patches. It goes thru 'proper' testing versus the one month "patch Tuesday" hotfixes which can potentially cause some problems.

On Microsoft Update, you can ignore/hide updates so they won't appear in the results page. The WGA is for shitz n'giggles as you say, but if your comp. is legit there's not much to worry about.

Also, if you do install the hotfixes, it creates backup files so you can uninstall it and prior to SP3 there was like 80+ hotfixes ...that takes up a lotta harddrive space. When you install SP3 it removes these folders. Some say it makes their computer faster.
__________________
What happened to your stars? :unsure: You look rather nude.

WGA is about stopping non windows systems using windows update, see not so very long ago wine (the opensource windows compatibility layer) could use windows update to install updates to some windows apps that users had managed to get working under wine on linux, Microsoft thought this was a wee bit cheeky hence WGA, which later went onto become an anti-piracy tool.

Blame the linux users ;)