November 2005 Microsoft Security Response Center Bulletin Release

Dr.Melzer · 4. November 2005

Vom Microsoft Security Team haben wir heute diese Meldung brandneu hereinbekommen:

As part of the monthly security bulletin release cycle, Microsoft provides advance notification to our customers on the number of new security updates being released, the products affected, the aggregate maximum severity and information about detection tools relevant to the update. This is intended to help our customers plan for the deployment of these security updates more effectively.

In addition, to help customers prioritize monthly security updates with any non-security updates released on Microsoft Update, Windows Update, Windows Server Update Services and Software Update Services on the same day as the monthly security bulletins, we also provide:

* Information about the release of updated versions of the Microsoft Windows Malicious Software Removal Tool.

* Information about the release of NON-SECURITY, High Priority updates on Microsoft Update (MU), Windows Update (WU), Windows Server Update Services (WSUS) and Software Update Services (SUS). Note that this information will pertain ONLY to updates on Windows Update and only about High Priority, non-security updates being released on the same day as security updates. Information will NOT be provided about Non-security updates released on other days.

On 8 November 2005 Microsoft is planning to release:

Security Updates

* 1 Microsoft Security Bulletin affecting Microsoft Windows. The highest Maximum Severity rating for this is Critical. These updates will require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer (MBSA).

Microsoft Windows Malicious Software Removal Tool

* Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.

Note that this tool will NOT be distributed using Software Update Services (SUS).

Non-security High Priority updates on MU, WU, WSUS and SUS

* Microsoft will release NO new NON-SECURITY High-Priority Updates for Windows on Microsoft Update (MU), Windows Update (WU), Windows Server Update Services (WSUS) and Software Update Services (SUS).

Although we do not anticipate any changes, the number of bulletins, products affected, restart information and severities are subject to change until released.

Microsoft will host a webcast next week to address customer questions on these bulletins. For more information on this webcast please see below:

* TechNet Webcast: Information about Microsoft's Security Bulletins (Level 100)

* Wednesday, 9 November 2005 11:00 AM (GMT-08:00) Pacific Time (US & Canada)

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032283901&EventCategory=4&culture=en-US&CountryCode=US

At this time no additional information on these bulletins such as details regarding severity or details regarding the vulnerability will be made available until 8 November 2005.

Thank you,

Microsoft PSS Security Team

Dr.Melzer · 4. November 2005

Und noch einen Nachtrag dazu:

Why was this alert re-issued?

This alert was re-issued on 3 November 2005 when new information about Non-security High Priority updates on MU, WU, WSUS and SUS was discovered. This alert is being re-issued to make customers aware of this and to provide the updated information.

* Microsoft will release two NON-SECURITY High-Priority Updates for on Microsoft Update (MU), and Windows Server Update Services (WSUS).

* Microsoft will release two NON-SECURITY High-Priority Updates for Windows on Windows Update (WU), or Software Update Services (SUS).

There are no changes to the information about security updates to be released.

The body of the original alert has been updated and follows below.

What is this alert?