Good thing Microsoft gives users a month between each major update! This was one of the biggest set of patches ever. Eleven security updates were released although, in the pre-release bulletin last week, Microsoft said that 12 updates would be involved. Nevertheless the list of critical updates was long enough. These fix flaws found in Office, Office Publisher, Internet Explorer, Word, OLE Automation, WebDAV Mini-Redirector. The important patches affect Works File Converter, IIS, TCP/IP and Active Directory (with two patches released for IIS, as this Network World story discusses.) Additionally, Microsoft is releasing seven non-security, high-priority updates via Microsoft Update and Windows Server Update Services, plus two non-security, high-priority updates for Windows via Windows Update and WSUS.

Patches 006 and 005 for IIS are the most critical for corporate users to install first, experts say, as these allow an attacker to take over a Web site. The story says:

"With the combination of 006 and 005, I can remotely attack your Web site and become an administrator,” says Eric Schultze, CTO of Shavlik Technologies. “Each one is rated ‘important,’ but I call them critical in both cases.”

Go to Microsoft Subnet for more news, blogs, opinion.
Microsoft, Philips retest 'white spaces' device
Enterprise deployment guides for Vista SP1
How Hyper-V burned Robert McLaws's datacenter
A step by step on how to add a role to Server Core
Windows Server 2008 Management and Maintenance tips
Fabulous giveaways from Microsoft Subnet and Cisco Subnet All Micronet blog posts

Sign up for the bi-weekly Microsoft newsletter. (Click on News/Microsoft News Alert.)

Click to read the article this is in response to.