Microsoft delays Patch Tuesday security updates by a month
Feb 17 2017 by Joanne Wise
Microsoft didn't release any information about the reason for the delay, but ZDNet reports that a a snafu in Microsoft's build system is responsible for the postponed update.
It's believable that the issue may be around the Windows Server SMB zero-day exploit, which the company apparently knew about for three months, but which got released into the wild a couple of weeks back.
Microsoft's Patch Tuesday came and went this week without any patches.
"After considering all options, we made the decision to delay this month's updates", the post continued.
As to when the WIP4Biz program will kick-off, Microsoft says the idea is to gradually roll it out over the coming months, so it shouldn't be long before we get the first taste of how all this will work.
Likewise, an unfinished patch for Windows 7 would not have, on its own, blocked the release of February's Windows 10 update: While both editions were to be served cumulative updates this month, each version would have received its own. "We apologise for any inconvenience caused by this change to the existing plan", it said. Because Microsoft isn't saying what exactly happened, we can only speculate. So if there is an issue with one fix then it holds all the others up too.
Wondering why you didn't receive any security patch love for your Windows PC earlier this past Tuesday? He learned about the Patch Tuesday delay from a bulletin on the SANS Institute Internet Storm Center site. Instead, they'll be rolled into March's update, which should arrive on March 14th.
Some updates, including the telemetry updates KB2952664 and KB2976978 have been pulled from the Microsoft Update Catalog as well.
It is not clear if the February security updates delay is related to Microsoft's move to the SUG and other changes to its patching process. In one of its notices, issued by a third-party PR firm, the company claimed using Windows 10 could keep users safe. The researcher who found the vulnerability claimed that Microsoft had planned to patch it in February.