News

Only 2 Fixes Expected on Patch Tuesday

IT pros can expect one of the lightest Patch Tuesdays in recent memory this month as Redmond indicated there would only be two patches -- one critical, one important.

IT pros can expect one of the lightest Patch Tuesdays in recent memory this month as Redmond indicated there would only be two patches -- one critical, one important.

Both fixes in this thin November slate are related to remote code execution (RCE) vulnerabilities and are fixes for Windows programs.

The critical item affects Windows and Microsoft Office. Per Redmond's advance notice, it deals specifically with Windows Extensible Markup Language (XML) Core Services, versions 3.0, 4.0 and 6.0. XML programs are used for creating Web languages and help systems share structured data and encode documents over the Internet. This is particularly important for users of SharePoint Server. The applicable operating systems for this patch are Windows 2000 Service Pack 4, Windows XP, Vista and Windows Server 2003 and 2008.

The important item in this release is a general Windows patch that also affects Windows 2000 SP4, XP, Vista and Windows Server 2003 and 2008.

Both updates will require restarts.

Those interested in scanning items pertaining to general updates and other non-security content can look at this Knowledge Base article for a description of such updates on Microsoft Update, Windows Update and Windows Server Update Services.

About the Author

Jabulani Leffall is an award-winning journalist whose work has appeared in the Financial Times of London, Investor's Business Daily, The Economist and CFO Magazine, among others.

comments powered by Disqus

Featured

  • Kubernetes for Developers

    Microsoft's Dan Wahlin previews his introductory "Kubernetes for Developers" session at Visual Studio Live! San Diego 2026, explaining how developers can get past the Kubernetes learning curve by starting locally, mastering Pods first, and using Services to make containerized applications reliably accessible.

  • VS Code Keeps Eye on Costs in v1.126 Update

    Visual Studio Code 1.126 adds session-level Copilot cost information, continuing Microsoft's recent focus on helping developers monitor and manage usage-based GitHub Copilot billing.

  • Open VSX 1.0.0 Puts Focus on Open Extension Registry for VS Code Ecosystem

    Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.

  • Infragistics Puts MCP Toolchain at Center of Ultimate 26.1

    Infragistics Ultimate 26.1 introduces the Ignite UI Enterprise MCP toolchain for AI-assisted app development across Angular, React, Web Components and Blazor.

Subscribe on YouTube