-
Is it time to install the July security patches?
Good question from JM:
I’ve been following the site on and off for a little while, and have had good results so far. With the recent releases though I was wondering if 5 of the security updates are ok to install or not. I get that the recommended updates (non-security) ones should be avoided, but I didn’t want to ignore it all for now and possibly leave my machine open. In years part, I would’ve downloaded it without question, but now with the things MS has tried to do, I wanted verify first.
The KB’s in question are:
KB3163245 – Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems
KB3164025 – Security Update for Microsoft .NET Framework 4.6.1 on Windows 7 and Windows Server 2008 R2 for x64
KB3168965 – Security Update for Windows 7 for x64-based Systems
KB3170455 – Security Update for Windows 7 for x64-based Systems
KB890830 – Windows Malicious Software Removal Tool x64 – July 2016
Is it a good rule of thumb that the security updates won’t create issues?
Thanks for you time!
I think it’s premature to install the security patches for July. We just had a bug in the Excel updates raise its ugly head a few days ago. There’s still a chance we’ll see problems with this month’s patches.
As long as you don’t use Internet Explorer, none of the security patches are really pressing. See https://isc.sans.edu/forums/diary/Microsoft+Patch+Tuesday+Summary+for+July+2016/21249/ for a rundown.
Best to sit it out and wait for MS-DEFCON 3 or better. (The MSRT can run anytime.)
There’s an extra reason for waiting it out this month: Microsoft has to make some changes on or around July 29, just to yank the “free upgrade” nags, if nothing else. I have no idea what will happen, but it may affect outstanding patches.
I think it’s smart to wait and see what happens over the weekend. Not to worry, I’ll raise the MS-DEFCON level when it looks like things are OK.