Patch Tuesday: Patch Early, Patch Often (April 2011)

[ViRGE]

I hope everyone is up to date on their patches, since this month is a whopper. MS has issued 17 security bulletins this month covering everything from IE8 to WordPad to MFC. If you have a piece of Microsoft software, it probably has a remote code execution vulnerability due to be patched right now.😛 So get to work, some of this stuff is already being actively exploited.

http://www.eweek.com/c/a/Security/M...n-Aprils-Massive-Patch-Tuesday-Update-614552/

http://isc.sans.edu/diary.html?storyid=10693

 

[Absolution75]

20 updates for me


jeesh

 

[VirtualLarry]

yeah, I updated my machines. Lots of patches. Makes me wonder if Win7 really is in any way more secure than XP. Good that they're patching though, I'd rather have patches than exploits.

 

[dennilfloss]

NM. Just checked my update history and got a bunch. Somehow my system had switched to automatic install whereas I had it set to automatic download but I decice when to install (don't like the computer rebooting to install stuff while I'm doing something like it did last night).

One update failed (Visual C Service Pack 1) probably because I haven't installed SP1 yet. I know... I'm slow. Just trying to organize my C partition better before I image it and install SP1.

 

[bruceb]

21 for my computers (22 if you count Malicious Software Removal Tool)
And of course it wanted to reboot after it was all done.

 

[ViRGE]

yeah, I updated my machines. Lots of patches. Makes me wonder if Win7 really is in any way more secure than XP. Good that they're patching though, I'd rather have patches than exploits.

Oh it's definitely more secure. Several of these issues are at least partially mitigated by UAC. Microsoft's severity ratings however are based on the assumption that UAC is off since that's the least-secure way people can use Win7.

 

[KentState]

Have to let the patches roll through DEV and QA before they go into production. My practice is to manually patch my servers the last Wednesday of every months to let them bake in.

 

[ImDonly1]

Anyone else get an error when installing the .net framework update kb2446708?

It keeps failing to install and getting error code 063. When you shut down the pc, it says installing, but when you restart, the update failed to install.

Edit: Fixed by going to control panel, add or remove programs, find .net framework 4 and do the repair installation. Then restart. The update installed ok now.