Microsoft Security Bulletin Advance Notification for August 2012

[ronjor]

Microsoft Security Bulletin Advance Notification for August 2012

Published: Thursday, August 09, 2012

Version: 1.0

This is an advance notification of security bulletins that Microsoft is intending to release on August 14, 2012.

This bulletin advance notification will be replaced with the August bulletin summary on August 14, 2012. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.

Microsoft will host a webcast to address customer questions on the security bulletins on August 15, 2012, at 11:00 AM Pacific Time (US & Canada). Register now for the August Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Bulletin Information
Executive Summaries
Affected Software
Detection and Deployment Tools and Guidance
Other Information
Microsoft Windows Malicious Software Removal Tool

Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

https://technet.microsoft.com/en-us/...letin/ms12-aug

[ronjor]

Advance Notification Service for August 2012 Security Bulletin Release

Today we're providing advanced notification on the release of nine bulletins, five Critical and four Important, for August 2012. The five Critical security bulletins are addressing ten vulnerabilities in Microsoft Windows, Internet Explorer, Exchange, SQL Server, Server Software, and Developer Tools. The bulletin for Exchange will address the issue first described in Security Advisory 2737111. The four bulletins that have been rated as Important will address vulnerabilities in Windows and Microsoft Office.

https://blogs.technet.com/b/msrc/arc...edirected=true

[ronjor]

Microsoft Security Bulletin Summary for August 2012

Published: Tuesday, August 14, 2012

Version: 1.0

This bulletin summary lists security bulletins released for August 2012.

With the release of the security bulletins for August 2012, this bulletin summary replaces the bulletin advance notification originally issued August 9, 2012. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.

Microsoft is hosting a webcast to address customer questions on these bulletins on August 15, 2012, at 11:00 AM Pacific Time (US & Canada). Register now for the August Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information

.https://technet.microsoft.com/en-us/...letin/ms12-jul

[ronjor]

August 2012 Bulletins Release

by MSRCTeam

Security Advisory 2661254 - Update For Minimum Certificate Key Length

Before we get into the details of this month’s bulletin release, let’s take a look at an important change on how Windows deals with certificates that have RSA keys of less than 1024 bits in length.

We’ve been talking about this subject since June, and today we are announcing the availability of an update to Windows that restricts the use of certificates with RSA keys less than 1024 bits in length with Security Advisory 2661254. As noted in the advisory, this update will be available in the Download Center as well as the Microsoft Update Catalog. This allows enterprise administrators to download and import the update into WSUS for testing before widely deploying the update throughout their enterprise. The security advisory includes instructions on how to configure the update and provides general guidance on what steps customers should take to become more secure. This update is planned to be released via Windows Update starting in October 2012.

For additional details on these defense-in-depth changes to how Windows deals with certificates please visit Public Key Infrastructure (PKI) blog.

https://blogs.technet.com/b/msrc/?Redirected=true

[FanJ]

Thanks Ron!

PS:
It looks like that there were problems with KB2647753.
See for example the thread at DSLR:
http://www.dslreports.com/forum/r274...-installing-it

[ronjor]

It looks like that there were problems with KB2647753

I believe that update was revised shortly after release to eliminate the problem.

[FanJ]

Originally Posted by ronjor

I believe that update was revised shortly after release to eliminate the problem.

Hi Ron,

From what I understood about the issue: yes, you are right.

[ronjor]

Assessing risk for the August 2012 security updates

Today we released nine security bulletins addressing 26 CVE’s (13 Microsoft and 13 Oracle CVE’s). Five of the bulletins have a maximum severity rating of Critical and the other four have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment.

https://blogs.technet.com/b/srd/arch...edirected=true