{"id":6677,"date":"2017-02-17T10:30:05","date_gmt":"2017-02-17T18:30:05","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/02\/17\/news-496\/"},"modified":"2017-02-17T10:30:05","modified_gmt":"2017-02-17T18:30:05","slug":"news-496","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/02\/17\/news-496\/","title":{"rendered":"IDG Contributor Network: Why February&#039;s Patch Tuesday is delayed"},"content":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/zapt2.staticworld.net\/images\/article\/2017\/01\/windows10-100705864-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Greg Lambert| Date: Fri, 17 Feb 2017 09:52:00 -0800<\/strong><\/p>\n<p> After a short break since our <em>Patch Tuesday Debugged<\/em> analysis in January, it looks like we are going to have <a href=\"http:\/\/www.computerworld.com\/article\/3170633\/microsoft-windows\/windows-update-issues-may-be-at-root-of-februarys-patch-delay.html\" target=\"_blank\">some delay with Patch Tuesday in February<\/a> due to a last minute <a href=\"https:\/\/blogs.technet.microsoft.com\/msrc\/2017\/02\/14\/february-2017-security-update-release\/\">technical<\/a> issue with the Microsoft release process. <\/p>\n<p> Microsoft had previously indicated that it was going to change the update process for security-related fixes this month &#8212; and a bug discovered during this process change may have caused the delay. <a href=\"http:\/\/blog.shavlik.com\/author\/chrisgoettl\/\">Chris Goettl<\/a> from Ivanti, offers this: \u201cIn the hours since Microsoft announced it was going to postpone Update Tuesday I have had a number of people asking if this delay was related to Microsoft\u2019s change to a cumulative update model. If it were just one update that was delayed I would agree, but with all updates being delayed I think it is more of a Windows Update Services infrastructure issue.&#8221; I would tend to agree. <\/p>\n<p> Though at present this is pure <a href=\"http:\/\/news.softpedia.com\/news\/microsoft-delays-this-month-s-security-updates-due-to-last-minute-bug-512937.shtml\">speculation<\/a>, I expect that Patch Tuesday is likely to happen next week on February 21.\u00a0 <\/p>\n<p> This month&#8217;s update cycle from Microsoft is especially important as a now\u00a0critical\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/Zero-day_(computing)\">zero-day<\/a>\u00a0vulnerability (<a href=\"https:\/\/www.kb.cert.org\/vuls\/id\/867968\">CVE867968<\/a>) has been reported related to how a component of the Microsoft <a href=\"https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/aa365233(v=vs.85).aspx\">SMB<\/a> protocol handles traffic. This was initially reported as a <a href=\"https:\/\/en.wikipedia.org\/wiki\/Denial-of-service_attack\">denial of service attack<\/a>, but now looks like to be rated as critical by Microsoft as it may lead to a more serious (<a href=\"https:\/\/en.wikipedia.org\/wiki\/Arbitrary_code_execution\">RCE<\/a>) remote code execution scenario. Expect this update &#8212; when Microsoft delivers it &#8212; to be a &#8220;Patch Now&#8221; update for all Microsoft platforms (server and desktops). <\/p>\n<p> For those that are not using modern &#8220;evergreen&#8221; browsers such as Microsoft Edge or Google Chrome, please download the latest Flash update <a href=\"http:\/\/www.softpedia.com\/blog\/adobe-flash-player-24-0-0-221-available-for-download-512915.shtml\">here<\/a>. <\/p>\n<p> Watch this space for an in-depth analysis of this month&#8217;s Microsoft Update Tuesday, coming next week. <\/p>\n<p><strong>This article is published as part of the IDG Contributor Network. <a href=\"\/contributor-network\/signup.html\">Want to Join?<\/a><\/strong><\/p>\n<p><a href=\"http:\/\/www.computerworld.com\/article\/3170886\/security\/why-februarys-patch-tuesday-is-delayed.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/zapt2.staticworld.net\/images\/article\/2017\/01\/windows10-100705864-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Greg Lambert| Date: Fri, 17 Feb 2017 09:52:00 -0800<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p> After a short break since our <em>Patch Tuesday Debugged<\/em> analysis in January, it looks like we are going to have <a href=\"http:\/\/www.computerworld.com\/article\/3170633\/microsoft-windows\/windows-update-issues-may-be-at-root-of-februarys-patch-delay.html\" target=\"_blank\">some delay with Patch Tuesday in February<\/a> due to a last minute <a href=\"https:\/\/blogs.technet.microsoft.com\/msrc\/2017\/02\/14\/february-2017-security-update-release\/\">technical<\/a> issue with the Microsoft release process.<\/p>\n<p> Microsoft had previously indicated that it was going to change the update process for security-related fixes this month &#8212; and a bug discovered during this process change may have caused the delay. <a href=\"http:\/\/blog.shavlik.com\/author\/chrisgoettl\/\">Chris Goettl<\/a> from Ivanti, offers this: \u201cIn the hours since Microsoft announced it was going to postpone Update Tuesday I have had a number of people asking if this delay was related to Microsoft\u2019s change to a cumulative update model. If it were just one update that was delayed I would agree, but with all updates being delayed I think it is more of a Windows Update Services infrastructure issue.&#8221; I would tend to agree.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3170886\/security\/why-februarys-patch-tuesday-is-delayed.html#jump\">To read this article in full or to leave a comment, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10761],"class_list":["post-6677","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows-10"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/6677","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=6677"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/6677\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=6677"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=6677"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=6677"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}