Today, in keeping with its usual schedule, Microsoft released its Security Bulletin Advanced Notification for January, previewing the security fixes it intends to release next Tuesday, January 8. Microsoft plans to release seven security bulletins this month. Six are for Windows and its components; two of these have a maximum severity rating of Critical, and the others are rated Important. All supported versions of Windows are affected.
The table below shows the breakdown of patches by Windows version and severity:
|Windows Server 2003||—||2||1|
|Windows Server 2008||—||4||1|
|Windows Server 2008 R2||1||4||1|
|Windows Server 2012||—||4||1|
|Windows Server Core||1||4||1|
One of the bulletins (Bulletin 2 in the preview announcement) also affects Microsoft Office, and is rated Critical. There is an additional bulletin, rated Important, which applies to Microsoft server software: SharePoint, Groove, Expression Web, and System Center.
According to Microsoft, three of the Windows bulletins will require a system restart, and the other bulletins may require one, depending on your system’s configuration.
As always, this information is subject to change between now and the actual release of the bulletins next Tuesday. I will post a note here once the actual updates are available.
Update Thursday, 3 January, 22:00 EST
Unfortunately, it appears that none of the security bulletins that Microsoft announced addresses the recently-discovered vulnerability in Internet Explorer. If you have not already done so, I recommend that you take some of the mitigation steps that Microsoft has suggested.