MS Sec Notification mailing list archives
Microsoft Security Update Minor Revisions
From: "Microsoft" <securitynotifications () e-mail microsoft com>
Date: Fri, 20 Oct 2017 13:21:16 -0600
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ******************************************************************** Title: Microsoft Security Update Minor Revisions Issued: October 20, 2017 ******************************************************************** Summary ======= The following advisory and security bulletin have undergone a minor revision increment. * ADV170012 * MS14-085 Revision Information: ===================== ADV170012 - Title: ADV170012 | Vulnerability in TPM could allow Security Feature Bypass - https://portal.msrc.microsoft.com/en-us/security-guidance - Reasons for Revision: Removed the October security-only updates for Windows Server 2012, Windows Server 2012 R2, and Windows 8.1 from the Affected Products table because these updates do not address the vulnerability discussed in this advisory. Clarified in FAQ 9 and 10 that customers running these versions of Windows who install security-only updates must install either the September security-only updates or the October monthly rollup to receive the changes for this vulnerability. These are informational changes only. - Originally posted: October 10, 2017 - Updated: October 20, 2017 - CVE Severity Rating: Critical - Version: 1.5 MS14-085 - Title: Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3013126) - https://technet.microsoft.com/library/security/ms14-085 - Reasons for Revision: Corrected a typo in the CVE description. - Originally posted: December 9, 2017 - Updated: October 19, 2014 - CVE Severity Rating: Important - Version: 1.1 Other Information ================= Recognize and avoid fraudulent email to Microsoft customers: ============================================================= If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites. Microsoft does not distribute security updates via email. The Microsoft Security Response Center (MSRC) uses PGP to digitally sign all security notifications. However, PGP is not required for reading security notifications, reading security bulletins, or installing security updates. You can obtain the MSRC public PGP key at <https://technet.microsoft.com/security/dn753714>. ******************************************************************** THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. ******************************************************************** Microsoft respects your privacy. Please read our online Privacy Statement at <http://go.microsoft.com/fwlink/?LinkId=81184>. If you would prefer not to receive future technical security notification alerts by email from Microsoft and its family of companies please visit the following website to unsubscribe: <https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizar d.aspx?wizid=5a2a311b-5189-4c9b-9f1a-d5e913a26c2e&%3blcid=1033>. These settings will not affect any newsletters youâve requested or any mandatory service communications that are considered part of certain Microsoft services. For legal Information, see: <http://www.microsoft.com/info/legalinfo/default.mspx>. This newsletter was sent by: Microsoft Corporation 1 Microsoft Way Redmond, Washington, USA 98052 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 10.2.0 (Build 1950) - not licensed for commercial use: www.pgp.com Charset: utf-8 wsFVAwUBWeo1DPsCXwi14Wq8AQjSxA//daejXnvrMScA/LjQwlshHyx6IbfGDr27 H59IzsrVtmTSWYlGa8KlRRpt/2QuYysEYGvEzXGFw2KrY4dUfXSiko0JCEZ6Pm+s SKspyiNvcTnjL6LEz6JqZ0KN972cXid/TUcgLKDjz632epFmxT+t0D6ouH42fBrb jE2ZMRTkb1L+aZgotQIB3mbsQUpzGO9P8R8+l4PsyKiEGDZIvinz2NabSKW6Pd/M 5truWlBcvdXxWdqm7NpqMmXMxv1u2xhrwtkLsfImbkhzQc56EF4ZdxCfgfSB+RYD C0AohEHdJ6QVAmSM0l9ebmU+RsHPaLPfRtFgbIdMGchv9rpCNgsMvEXPd9+QeDqb M2Z34d0CZkrRQ6rOkH7RlSQr0rB/AyRGAAAzIrN3J5sOOs8QG1s4kZZ2fXrNI+jI hED1u3AZdowshCe1Ut4gp+Bt0Ow4U9AM5hnUm6BlnYaQgjg94/hGpsYAR7TvUnDJ NoAb7GJBiBVdlIIEy/UUqCnMDue/4g46V3Z6eNFJzTWKLCEr/ifdTOdBGa/ajZr+ V8FEsJQk/H/FJppulRS6OmhekAAOmuIgGsCLLuCrr3ldHG5mEuCXbPHQYbfEPvB6 FQCVlibkx/meC0QOKLb5nInNa7oINGQgOAwBcc9DhWZj8J8nSY5a9aWSrD0ntMPg gyXAtOseSgo= =cU5f -----END PGP SIGNATURE-----
Current thread:
- Microsoft Security Update Minor Revisions Microsoft (Oct 11)
- <Possible follow-ups>
- Microsoft Security Update Minor Revisions Microsoft (Oct 16)
- Microsoft Security Update Minor Revisions Microsoft (Oct 17)
- Microsoft Security Update Minor Revisions Microsoft (Oct 19)
- Microsoft Security Update Minor Revisions Microsoft (Oct 20)
- Microsoft Security Update Minor Revisions Microsoft (Oct 26)
- Microsoft Security Update Minor Revisions Microsoft (Nov 01)
- Microsoft Security Update Minor Revisions Microsoft (Nov 22)
- Microsoft Security Update Minor Revisions Microsoft (Nov 28)
- Microsoft Security Update Minor Revisions Microsoft (Dec 01)