Microsoft Security Bulletin Advance Notification for January 2014

ronjor · Jan 9, 2014

Dustin C. Childs
9 Jan 2014 10:00 AM

Today we provide advance notification for the release of four bulletins for January 2014. All bulletins this month are rated Important in severity and address vulnerabilities in Microsoft Windows, Office, and Dynamics AX. The update provided in MS14-002 fully addresses the issue first described in Security Advisory 2914486. We have only seen this issue used in conjunction with a PDF exploit in targeted attacks and not on its own. This only impacts customers using Windows XP or Server 2003 as more recent Windows versions are not affected.
Click to expand...

https://blogs.technet.com/b/msrc/ar...e-january-2014-security-bulletin-release.aspx

ronjor · Jan 9, 2014

Re: Advance Notification Service for the January 2014 Security Bulletin Release

Microsoft Security Bulletin Advance Notification for January 2014

Published: Thursday, January 09, 2014

Version: 1.0

This is an advance notification of security bulletins that Microsoft is intending to release on January 14, 2014.

This bulletin advance notification will be replaced with the January bulletin summary on January 14, 2014. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

To receive automatic notifications whenever Microsoft Security Bulletins are issued, subscribe to Microsoft Technical Security Notifications.

Microsoft will host a webcast to address customer questions on the security bulletins on January 15, 2014, at 11:00 AM Pacific Time (US & Canada). Register now for the January Security Bulletin Webcast.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

http://technet.microsoft.com/en-us/security/bulletin/ms14-jan

ronjor · Jan 14, 2014

A Look Into the Future and the January 2014 Bulletin Release

Dustin C. Childs

In January, there are those who like to make predictions about the upcoming year. I am not one of those people. Instead, I like to quote Niels Bohr who said, “Prediction is very difficult, especially if it’s about the future.” However, I can say without a doubt that change is afoot in 2014.

In February, usage of the MD5 hash algorithm in certificates will be restricted, as first discussed in Security Advisory 2862973, and the update goes out through Microsoft Update on the 11th. This will impact applications and services using certificates with the MD5 hashing algorithm and will apply only to certificates utilized for server authentication, code signing and time stamping. The restriction is limited to certificates issued under roots in the Microsoft root certificate program.
Click to expand...

https://blogs.technet.com/b/msrc/ar...re-and-the-january-2014-bulletin-release.aspx

ronjor · Jan 14, 2014

Microsoft Security Bulletin Summary for January 2014

Published: Tuesday, January 14, 2014

Version: 1.0

This bulletin summary lists security bulletins released for January 2014.

With the release of the security bulletins for January 2014, this bulletin summary replaces the bulletin advance notification originally issued January 9, 2014. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.

Microsoft is hosting a webcast to address customer questions on these bulletins on January 15, 2014, at 11:00 AM Pacific Time (US & Canada). Register now for the January Security Bulletin Webcast.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Click to expand...

http://technet.microsoft.com/en-us/security/bulletin/ms14-jan

ronjor · Jan 14, 2014

Assessing risk for the January 2014 security updates

SRD Blog Author

Today we released four security bulletins addressing six CVE’s. All four bulletins have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment.
Click to expand...

https://blogs.technet.com/b/srd/arc...sk-for-the-january-2014-security-updates.aspx

FanJ · Jan 16, 2014

Thanks Ron!

On XP I got also for root certs:

Microsoft Security Advisory (2916652)
Improperly Issued Digital Certificates Could Allow Spoofing
Published: Monday, December 09, 2013 | Updated: Wednesday, January 15, 2014

Version: 2.1
Click to expand...

http://technet.microsoft.com/en-us/security/advisory/2916652

http://support.microsoft.com/kb/2917500

===

The strange thing is that I got also another (older) update for root certs. I don't know whether that was right or a glitch on my system or ...

Microsoft Security Advisory (2798897)
Fraudulent Digital Certificates Could Allow Spoofing
Published: Thursday, January 03, 2013 | Updated: Monday, January 14, 2013

Version: 1.1
Click to expand...

http://technet.microsoft.com/en-us/security/advisory/2798897

http://support.microsoft.com/kb/2798897

Log in or Sign up

Microsoft Security Bulletin Advance Notification for January 2014

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

FanJ Updates Team

Log in or Sign up

Microsoft Security Bulletin Advance Notification for January 2014

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

FanJ Updates Team

Useful Searches