Windows Updates May 2006

[nffc]

************************************************** ******************
Title: Microsoft Security Bulletin Advanced Notification
Issued: May 04, 2006
************************************************** ******************

Summary
=======

On 9 May 2006 Microsoft is planning to release:

Security Updates

. One Microsoft Security Bulletin affecting Microsoft Exchange.
The highest Maximum Severity rating for this is Critical. These
updates may require a restart. These updates will be detectable
using the Microsoft Baseline Security Analyzer.

Note that this update will include the functionality change
discussed in Microsoft Knowledge Base Article 912918. Administrators
are urged to review this Knowledge Base article prior to release and
take steps appropriate for their environment.

. Two Microsoft Security Bulletins affecting Microsoft Windows.
The highest Maximum Severity rating for these is Critical. These
updates may require a restart. These updates will be detectable
using the Microsoft Baseline Security Analyzer and the Enterprise
Scanning Tool.

Microsoft Windows Malicious Software Removal Tool

. Microsoft will release an updated version of the Microsoft
Windows Malicious Software Removal Tool on Windows Update, Microsoft
Update, Windows Server Update Services and the Download Center.
Note that this tool will NOT be distributed using Software Update
Services (SUS).

Non-security High Priority updates on MU, WU, WSUS and SUS

. Microsoft will not release any NON-SECURITY High-Priority
Updates for Windows on Windows Update (WU) and Software Update
Services (SUS).

. Microsoft will release two NON-SECURITY High-Priority Updates
on Microsoft Update (MU) and Windows Server Update Services (WSUS).

Although we do not anticipate any changes, the number of bulletins,
products affected, restart information and severities are subject to
change until released.

Microsoft will host a webcast next week to address customer
questions on these bulletins. For more information on this webcast
please see below:
. TechNet Webcast: Information about Microsoft's Security
Bulletins (Level 100)
. Wednesday, 10 May 2006 11:00 AM (GMT-08:00) Pacific Time (US &
Canada)
http://msevents.microsoft.com/CUI/We...aspx?EventID=1
032294228&EventCategory=4&culture=en-US&CountryCode=US

At this time no additional information on these bulletins such as
details regarding severity or details regarding the vulnerability
will be made available until 9 May 2006.

[Paul]

Don't forget to get your updates lads and lasses

[Aragorn]

Today's bulletins -

Originally Posted by Microsoft

Critical Security Bulletins
===========================

MS06-019 - Vulnerability in Microsoft Exchange Could Allow Remote
Code Execution (916803)


- Affected Software:
- Microsoft Exchange Server 2003 Service Pack 1
- Microsoft Exchange Server 2003 Service Pack 2
- Microsoft Exchange Server 2000 with the Exchange 2000
Post-Service Pack 3 Update Rollup of August 2004

- Impact: Remote Code Execution
- Version Number: 1.0


MS06-020 - Vulnerabilities in Macromedia Flash Player from Adobe
Could Allow Remote Code Execution (913433)


- Affected Software:
- Windows XP Service Pack 1
- Windows XP Service Pack 2

- Review the FAQ section of bulletin MS06-O20 for information
about these operating systems:
- Windows 98
- Windows 98 Second Edition (SE)
- Windows Millennium Edition (ME)

- Impact: Remote Code Execution
- Version Number: 1.0


Moderate Security Bulletins
===========================

MS06-018 - Vulnerability in Microsoft Distributed Transaction
Coordinator Could Allow Denial of Service (913580)


- Affected Software:
- Windows 2000 Service Pack 4
- Windows XP Service Pack 1
- Windows XP Service Pack 2
- Windows Server 2003
- Windows Server 2003 for Itanium-based Systems

- Impact: Denial of Service
- Version Number: 1.0

Interesting to see Macromedia in an MS security bulletin.

[grubbymitts]

Well, the Flash security patch never made it. I can't find it on Windows Update, anyway


:edit: Found it here:
http://www.microsoft.com/downloads/d...DisplayLang=en

[allanprg]

Yes the Flash security patch does not work for me. It says when I tried to download it, that it's not for your flash player. I have the latest one.I checked on the Adobe website.

[grubbymitts]

yep, doesn't work for me neither. It must be a patch for older versions of Flash and the Adobe site doesn't want to play.

[Aragorn]

The Flash patch is for version 6 and earlier.

One of my systems kept refusing to install it, so I downloaded Flash 8 from Adobe.