Six Security Bulletins coming

As part of its regular pre-announcement series, MS has said that it will release six Security Bulletins next Tuesday, covering twelve separately identified security holes.

A couple of interesting notes.

We want to make customers aware that we will be addressing the vulnerability discussed in Security Advisory 977981 in the IE bulletin on Tuesday. We know that customers are concerned about this issue and we are also aware that Proof of Concept (PoC) code is available publicly.

There’s a patch or two for Project 2000 (yawn), Word and Works 8.5 (another yawn).

The rest of it looks plain-vanilla to me. Get yourself patched up, for now, then make sure automatic updating is turned off. We remain at MS-DEFCON 4: There are isolated problems with current patches, but they are well-known and documented on this site.