MS Bulletin Advance Notification - August 2012

FYI…

- https://technet.microsoft.com/en-us/securit…lletin/ms12-aug
August 09, 2012 - "This is an advance notification of security bulletins that Microsoft is intending to release on August 14, 2012…
(Total of -9-)

Bulletin 1 - Critical - Remote Code Execution - Requires restart - Microsoft Windows, Internet Explorer
Bulletin 2 - Critical - Remote Code Execution - Requires restart - Microsoft Windows
Bulletin 3 - Critical - Remote Code Execution - Requires restart - Microsoft Windows
Bulletin 4 - Critical - Remote Code Execution - May require restart - Microsoft Office, Microsoft SQL Server, Microsoft Server Software, Microsoft Developer Tools
Bulletin 5 - Critical - Remote Code Execution - Does not require restart - Microsoft Exchange

Bulletin 6 - Important - Elevation of Privilege - Requires restart - Microsoft Windows
Bulletin 7 - Important - Remote Code Execution - May require restart - Microsoft Windows
Bulletin 8 - Important - Remote Code Execution - May require restart - Microsoft Office
Bulletin 9 - Important - Remote Code Execution - May require restart - Microsoft Office
___

- https://blogs.technet.com/b/msrc/archive/20…Redirected=true
9 Aug 2012 - "… The five Critical security bulletins are addressing ten vulnerabilities in Microsoft Windows, Internet Explorer, Exchange, SQL Server, Server Software, and Developer Tools. The bulletin for Exchange will address the issue first described in Security Advisory 2737111*. The four bulletins that have been rated as Important will address vulnerabilities in Windows and Microsoft Office…"
* http://technet.microsoft.com/en-us/security/advisory/2737111

.

FYI…

Critical non-security update to be released (?)
- https://blogs.technet.com/b/gladiatormsft/a…Redirected=true
9 Aug 2012 - "… Next week a security fix will be widely distributed which will prevent use of certificates which use weak (less than 1024 bit) RSA keys. Microsoft will issue a critical non-security update (KB 2661254) for Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2. The update will block the use of cryptographic keys that are less than 1024 bits. You could potentially run into issues as it may cause outages for those who have services that leverage IIS or any other application or service (client side or server side) if those services rely on those weak certificates…"