• Is it time to install the July security patches?

    Good question from JM:

    I’ve been following the site on and off for a little while, and have had good results so far. With the recent releases though I was wondering if 5 of the security updates are ok to install or not. I get that the recommended updates (non-security) ones should be avoided, but I didn’t want to ignore it all for now and possibly leave my machine open. In years part, I would’ve downloaded it without question, but now with the things MS has tried to do, I wanted verify first.

    The KB’s in question are:

    KB3163245 – Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems

    KB3164025 – Security Update for Microsoft .NET Framework 4.6.1 on Windows 7 and Windows Server 2008 R2 for x64

    KB3168965 – Security Update for Windows 7 for x64-based Systems

    KB3170455 – Security Update for Windows 7 for x64-based Systems

    KB890830 – Windows Malicious Software Removal Tool x64 – July 2016

    Is it a good rule of thumb that the security updates won’t create issues?

    Thanks for you time!

    I think it’s premature to install the security patches for July. We just had a bug in the Excel updates raise its ugly head a few days ago. There’s still a chance we’ll see problems with this month’s patches.

    As long as you don’t use Internet Explorer, none of the security patches are really pressing. See https://isc.sans.edu/forums/diary/Microsoft+Patch+Tuesday+Summary+for+July+2016/21249/ for a rundown.

    Best to sit it out and wait for MS-DEFCON 3 or better. (The MSRT can run anytime.)

    There’s an extra reason for waiting it out this month: Microsoft has to make some changes on or around July 29, just to yank the “free upgrade” nags, if nothing else. I have  no idea what will happen, but it may affect outstanding patches.

    I think it’s smart to wait and see what happens over the weekend. Not to worry, I’ll raise the MS-DEFCON level when it looks like things are OK.