Flawed April Security Bulletin Slated for Re-Release Tuesday

Microsoft will re-release one of its April security bulletins on Tuesday to fix a flaw in the patch that caused applications to crash on systems running either an older Hewlett-Packard utility or certain NVIDIA drivers.

"We're going to run a test pass on it and we will release this new update on Tuesday, April 25," Stephen Toulouse, a program manager for the Microsoft Security Response Center, disclosed in a posting Friday on the MSRC blog, where Microsoft has been updating users on the issue since Saturday.

The troubled patch is MS06-015. Originally released April 11 in Microsoft’s monthly "Patch Tuesday" event with four other bulletins, MS06-015 addressed a critical vulnerability in Windows Explorer that could allow remote code execution.

According to Microsoft, "well under a thousand" users reported problems with older versions of HP's "Share-to-web" software and older NVIDIA video card drivers. Both companies have newer versions of the software available for download online.

Microsoft initially provided user workarounds including a registry key fix, uploading the latest version of the HP or NVIDIA software or uninstalling the software. Some of those options are detailed in a Knowledge Base Article here.

Toulouse wrote that the new patch will have detection logic so it will only install on affected systems or on systems that haven't received the patch at all.

In trying to put the number of complaints in perspective, Microsoft released an interesting bit of data about the ubiquity and speed of its patching infrastructure: As of April 18, one week after the patch was first released, it had been successfully installed 120 million times.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.


  • Linux Apps Support Comes to Cameyo Virtual App Delivery Service

    Cameyo on Wednesday announced that its Virtual App Delivery service now supports Linux applications, expanding from Windows apps support.Cameyo's Virtual App Delivery service has extended its support to Linux applications, the company announced on Wednesday.

  • Rackspace-Hosted Exchange Service Gets Hit with Ransomware Attack

    Managed services provider Rackspace issued an announcement on Tuesday confirming that its hosted Microsoft Exchange e-mail service was disrupted by a ransomware attack. Rackspace's hosted Microsoft Exchange e-mail service was disrupted by a ransomware attacks, the managed services provider confirmed on Tuesday.

  • Microsoft Turns to Partners for Azure Kubernetes Service Boost

    In a joint statement by Microsoft and Isovalent on Monday, the two companies announced that Microsoft's Azure Kubernetes Service (AKS) will be receiving eBPF capabilities.

  • Microsoft Adds Privileged Identity Management Delegation to Azure Lighthouse

    The commercial release of Privileged Identity Management (PIM)-enabled Azure Lighthouse delegations is now available, Microsoft on Monday announced.