Microsoft posts security bulletins 4 days early, scrambles to fix mistake By Jon Brodkin
Each month, there is a clearly defined process Microsoft uses to release security patches to fix flaws in Windows and its other products. On a Thursday, Microsoft releases an advance notification, listing the software affected by the upcoming patches and the type of threat fixed, such as "elevation of privilege" or "remote code execution." But no specific details are released until the following Tuesday, the second Tuesday of each month, when the full security bulletins and accompanying patches are made public. But this month, the process went awry. The vague advance notification went out as scheduled yesterday. But today, the full security bulletins went live, four days before their scheduled release. We were able to view two of the five security bulletins before Microsoft unpublished them. Given that the security bulletins were unpublished within an hour of their release, give or take, and that they were dated "Tuesday, September 13, 2011" during the brief time they were live, it seems pretty clear someone at Redmond screwed up. ... http://arstechnica.com/microsoft/news/2011/09/microsoft-posts-security-bulletins-four-days-early-scrambles-to-fix-mistake.ars _______________________________________________ Medianews mailing list [email protected] http://lists.etskywarn.net/mailman/listinfo/medianews
