Microsoft Tuesday for November 2008

Hello, all you Windows folks. It's that time of the month again - Microsoft Tuesday!

So what fixes does Microsoft have in store for you this month? Well, it's actually a pretty light load, all things considered, especially given that they released the critical out of band patch back in mid-October.

There's one the Microsoft calls critical this month - MS08-069, that addresses vulnerabilities in the Microsoft XML Core Services that could lead to remote code execution. It effects just about every Microsoft desktop and server platform, plus Office, SharePoint, and a few other apps.

MS08-070 is rated as important by Microsoft, and deals with vulnerabilities in the Server Message Block (SMB) protocol, also resulting in remote code execution.

As always, run Windows Update or Microsoft Update if you don't have automatic updates turned on. I'd say you'll see exploits for 069 in a week to 10 days, so patch with all due haste.