MS Sec Notification mailing list archives

Microsoft Security Update Minor Revisions


From: "Microsoft" <securitynotifications () e-mail microsoft com>
Date: Tue, 17 Oct 2017 12:32:16 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

********************************************************************
Title: Microsoft Security Update Minor Revisions
Issued: October 17, 2017
********************************************************************

Summary
=======

The following advisory has been revised in the October 2017 Security
Updates. 

* ADV170012


Revision Information:
=====================

ADV170012

 - Title: ADV170012 | Vulnerability in TPM could allow Security
   Feature Bypass
 - https://portal.msrc.microsoft.com/en-us/security-guidance
 - Reasons for Revision: v1.3: The following revisions are 
   informational changes only: * Added CVE number and vulnerability
   name. * Added links for OEM information for HPE and Toshiba to the
   table under Step 4: Apply applicable firmware updates. * Added 
   information for MSA to the table under Step 5: Remediate services 
   based on your particular use cases.
 - Originally posted: October 10, 2017  
 - Updated: October 17, 2017
 - CVE Severity Rating: Critical
 - Version: 1.3


Other Information
=================

Recognize and avoid fraudulent email to Microsoft customers:
=============================================================
If you receive an email message that claims to be distributing 
a Microsoft security update, it is a hoax that may contain 
malware or pointers to malicious websites. Microsoft does 
not distribute security updates via email. 

The Microsoft Security Response Center (MSRC) uses PGP to digitally 
sign all security notifications. However, PGP is not required for 
reading security notifications, reading security bulletins, or 
installing security updates. You can obtain the MSRC public PGP key
at <https://technet.microsoft.com/security/dn753714>.

********************************************************************
THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT
DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING
THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE
LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT,
INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL
DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY
FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING
LIMITATION MAY NOT APPLY.
********************************************************************

Microsoft respects your privacy. Please read our online Privacy
Statement at <http://go.microsoft.com/fwlink/?LinkId=81184>.

If you would prefer not to receive future technical security
notification alerts by email from Microsoft and its family of
companies please visit the following website to unsubscribe:
<https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizar
d.aspx?wizid=5a2a311b-5189-4c9b-9f1a-d5e913a26c2e&%3blcid=1033>.

These settings will not affect any newsletters you’ve requested or
any mandatory service communications that are considered part of
certain Microsoft services.

For legal Information, see:
<http://www.microsoft.com/info/legalinfo/default.mspx>.

This newsletter was sent by:
Microsoft Corporation
1 Microsoft Way
Redmond, Washington, USA
98052

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 10.2.0 (Build 1950) - not licensed for commercial use: www.pgp.com
Charset: utf-8
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=BHVJ
-----END PGP SIGNATURE-----


Current thread: