-
April Patch Tuesday Windows and Office patches are out
Martin Brinkmann has posted his synopsis on ghacks.net:
- Microsoft released security updates for all client and server versions of Windows.
- Other Microsoft software with security updates: Microsoft Edge, Internet Explorer, Microsoft Exchange Server, Team Foundation Server, Azure DevOps Server, Windows Admin Center, Microsoft Office
- Microsoft fixed many long standing known issues.
Dustin Childs’s usual pack-leading analysis on the Zero Day Initiative blog paints a tolerable picture: 74 separately identified security holes. Two actively exploited, both of which seem to be used by nation-state attackers.
Worthy of note: Win10 1903 — which hasn’t been released yet to the hoi polloi — has its own security cumulative update.
As expected, Win10 1607 and 1703 are getting their last patches.
The sole new Security Advisory, ADV190011, talks about the April 2019 Adobe Flash Security Update.
Looks like a dull one. Leave your blocks in place, there’s nothing much to see here.
We’re staying at MS-DEFCON 2.