Five critical Windows fixes are expected to be released this patch Tuesday. As reported in The Register:

Microsoft plans to release five critical update bulletins next Tuesday, all critical, in the September edition of its regular Patch Tuesday update cycle.

However, a fix for the IIS zero day flaw is not expected to be released. Which possibly leaves certain IIS configurations vulnerable for up to another month, unless Microsoft releases an out of band patch.

The list of affected software leaves out mention of Microsoft’s IIS Web Server software, which is currently the target of exploits capitalising on a zero-day vulnerability. More specifically, the flaw involves problems in the Microsoft FTP services component bundled with IIS 5.0, IIS 5.1, IIS 6.0 or IIS 7.0.

The lack of mention of IIS in Microsoft’s pre-alert implies a set of patches for Microsoft’s web server software software will have to wait until at least October.

Remember to patch your servers!