Microsoft warns April will be big month for patches

By Dave Nixon

Microsoft is to release eight security updates next week, five of which are rated vital by the software vendor.

The critical patches affect Windows, the VBScript programming software, Microsoft Project and Internet Explorer, which will get two updates. They will be released as part of the company’s monthly software update series, which provides security updates on the second Tuesday of each month, known as Patch Tuesday.

The updates were depicted in common terms in a note posted Thursday to Microsoft’s website. More details will be released Tuesday, when the patches are made available.

Two less critical updates, rated significant by Microsoft, are intended for Windows. A third important update is being readied for the Visio design software, the company said.

The critical Windows update, named Bulletin 2 by Microsoft, looks principally important since it affects all supported versions of Windows, said Andrew Storms, director of security operations with nCircle Network Security. “This really bucks the trend for Microsoft recently. Their trend is the newer operating systems have lower criticality,” he said. “It’s got to be something core to the operating system in order for it to be critical all the way across the board.”

The VBScript update is most likely the same one that Microsoft ended up pulling at the last minute in March, he said.

With two more updates this month, Office has been keeping Microsoft’s Security Response Center busy.