Newsletter Archives

• Are the January security patches still relevant?

  Posted on January 26, 2017 at 16:18 CST by woody • Comment in the Forums

  Good question from Reader P:

  I’m in Group B when it comes to updates — security is my only concern, I quit using IE years ago.

  I saw your Devcon 3 rating re: patching, but January is almost over and I wonder how relevant that Jan security package is now. Are there patches in it (and future packs) that may be useful in terms of protecting from future attacks?

  My answer:
  If you’re “Group B” you need to follow the (admittedly difficult) instructions every month when I shift DEFCON levels. In this case, yep, there are January patches that you need to install.
  http://www.infoworld.com/article/3158713/microsoft-windows/nows-the-time-to-patch-windows-and-office.html
  If you like, you can follow the (frequently amusing!) comments at
  https://www.askwoody.com/2017/ms-defcon-3-time-to-get-patched-but-watch-out-for-a-few-gotchas/
  Windows Patches/Security January 2017 Black Tuesday

• MS-DEFCON 3: Time to get patched, but watch out for a few gotchas

  Posted on January 18, 2017 at 17:23 CST by woody • Comment in the Forums

  InfoWorld Woody on Windows.

  In many ways it’s easier getting up to date this month than at any time in recent memory. There wasn’t any patch for Windows 8.1 in January!

  In other ways, though, it’s the same-old, same-old. Lots of little twists and turns and, in particular, dicey driver updates.

  Windows Patches/Security January 2017 Black Tuesday

• Windows 7, 8.1 patches are up

  Posted on January 10, 2017 at 13:05 CST by woody • Comment in the Forums

  OK, not exactly. Other than MSRT, there are no patches for 8.1, and only one small security patch (plus a Flash patch) for Win7.

  This month only we’re getting old-fashioned Security Bulletins (such as they are) plus the new Security Updates Guide.

  MS17-001 for Edge only – “important” (which means it isn’t really important)

  MS17-002 – Word 2016 and SharePoint Enterprise 2016 – critical

  MS17-003 – Flash Player but only on 8.1 and 10 – critical

  MS 17-004 – Only on Vista and Win7 – important

  Windows 7 

  January 10, 2017—KB3212642 (Security-only update)
  This update includes only security fixes. No new operating system features are being introduced in this update.

  January 10, 2017—KB3212646 (Monthly Rollup)
  Includes the Security-only update above, plus the non-security stuff in last month’s Dec. 13 Monthly Rollup.

  Windows 8.1

  “There are no security fixes or quality improvements for release on January 10, 2017. As such, there is no Security-only update nor Monthly Rollup release for this month.”

  That’s the lightest Patch Tuesday I’ve ever seen.

  Reminder: We’re still on MS-DEFCON 2. Wait to see what happens to everybody else.

  Windows Patches/Security January 2017 Black Tuesday

• Ms Defcon 2 – unknown Office patches on the horizon

  Posted on January 4, 2017 at 07:43 CST by woody • Comment in the Forums

  Apologies for this very abbreviated note. I’m on the road and working from my phone.

  Microsoft just pushed a bunch of non security Office patches. I suggest you avoid them until we have a chance to scope them out.

  Accordingly, I’m switching to Ms Defcon 2. Unless you have a pressing need to install a specific patch, don’t do it

  Windows Patches/Security January 2017 Black Tuesday