September’s Patch Day Looks Tame (But Watch Out for October)



September 7 , 2012 | Posted by Nachreiner | 4 Comments

September’s Patch Day Looks Tame (But Watch Out for October)

Yay! After months of relatively busy Microsoft Patch Days, we finally get a light one. This month, you can expect only two bulletins from Microsoft, and neither of them is Critical.

According to the September advanced notification post, Microsoft plans to release two security bulletins next Tuesday, affecting Visual FoxPro and Microsoft System Center Configuration Manager. Microsoft only rates the bulletins as Important.

While this month’s Patch Day looks a breeze, you need to be aware of the upcoming Patch Day in October. According to a Microsoft Trustworthy Computing (TWC) blog post, October’s Patch Day will include a significant change in the way Microsoft software handles digital certificates. In a June Security Advisory, Microsoft released an optional update that forces Windows platforms to only use digital certificates with keys of 1024 bits or higher; thereby increasing the security strength of their PKI. They plan to push this update out to all customers in October.

During the time you save updating this month, I recommend you review your certificate infrastructure to ensure you are using certificates with 1024 bits or more. If you find any certificates that don’t qualify, you can reissue them before October. Otherwise, you may want to use Microsoft’s patch management software to block one of their October updates, and prevent any certificate problems.

Despite the light September Patch Day, I still recommend you download and install any patches that apply to you.  I’ll know more about Microsoft’s updates on Tuesday the 11th, and will post detailed information about them here. — Corey Nachreiner, CISSP (@SecAdept)

Comments (4)

  1. WatchGuard Security Week in Review: Episode 32 – UDID Leaks and Java Updates | WatchGuard Security Center

  2. Light Patch Tuesday Brings Two XSS Fixes | WatchGuard Security Center

  3. Seven Bulletins Planned for October Patch Tuesday | WatchGuard Security Center

  4. Some were practical, of course, but others were psychological and emotional.

    Popular prizes include sports tickets, cash and vouchers for drinks, food –
    and dollars off of tabs. Theme Format: It is almost like standard format
    of the pub quiz.

Add Comment

Your email address will not be published. Required fields are marked *