Microsoft’s Delay Of This Month’s Security Patch Bundle Makes Little Sense
Microsoft released this comment on its TechNet blog, this week, to let everyone know that the expected February update won’t arrive this month:
“Our top priority is to provide the best possible experience for customers in maintaining and protecting their systems,” said the company.
“This month, we discovered a last minute issue that could impact some customers and was not resolved in time for our planned updates today. After considering all options, we made the decision to delay this month’s updates. We apologize for any inconvenience caused by this change to the existing plan,” added the company.
It then also released the following update to its statement:
“We will deliver updates as part of the planned March Update Tuesday, March 14, 2017.”
This may be related,
So the following fix will be delayed,
support.microsoft.com/en-us/help/4011347
Makes you wonder though why that one patch wasn't pulled and the others released.
Maybe they couldn't figure out which update (or combo of) is the cause.
I wouldn't doubt that, and in the finest traditions of big business Microsoft is refusing yet again to acknowledge they've made a bad decision and reverse it.
Well something stinks. Normally Microsoft would go ahead and release it anyhow...then fix it in the next months patch.
What makes it even worse is that Microsoft handles Flash updates as well for Windows 8.1 and 10.
Microsoft's decision to scrap February security updates unnerves patch experts | PCWorld
“Is it [having an impact?] I’d say yes, it is, given the vibe I’m getting from my peers,” Bradley said.
Without February’s patches, security researchers have said, some unprotected systems may be compromised by exploits of now-known vulnerabilities.
Agreeing, Bradley ticked off several obvious ones. “We now have a potentially ticking time bomb on our hands as we’re not expected to get [this month’s Adobe] Flash update on our Windows 8 and Windows 10 [PCs] until March,” she said. “We have a SMB zero-day denial of service [vulnerability] we now need to investigate mediations for.”
T
he latter Windows vulnerability went public Feb. 2; a patch was anticipated in the now-canceled batch that was to ship Tuesday.
What does this have to do with it?