Patch Tuesday - July 2008

Hi,

This is one of the initial views on the AOK Patch Impact Assessment of Microsoft's Patch Tuesday Security bulletin update.

Let me know what you think of the following;


The July release of Windows updates and patches includes the following critical patches;

1. Microsoft Security Bulletin MS08-030: Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (951376)
2. Microsoft Security Bulletin MS08-031: Cumulative Security Update for Internet Explorer (950759)
3. Microsoft Security Bulletin MS08-033: Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)

Further details can be found about these patches on the following Microsoft site;
http://www.microsoft.com/technet/security/bulletin/MS08-jun.mspx?

Using the Patch Impact Assessment functionality found in the ChangeBase AOK WorkBench tool-set, we analysed just under 700 unique applications and generated the following results;

The following table illustrates the number of application "overlaps" or conflicts with each listed patch. Where the RAG (Red, Amber, Green) icons indicate the corresponding risk to deployment of each patch on this sample application portfolio.