Woody Leonhard's no-bull news, tips and help for Windows, Office and more… Please disable your ad blocker – our (polite!) ads help keep AskWoody going!
Home icon Home icon Home icon Email icon RSS icon
  • Are the January security patches still relevant?

    Posted on January 26th, 2017 at 16:18 woody Comment on the AskWoody Lounge

    Good question from Reader P:

    I’m in Group B when it comes to updates — security is my only concern, I quit using IE years ago.

    I saw your Devcon 3 rating re: patching, but January is almost over and I wonder how relevant that Jan security package is now. Are there patches in it (and future packs) that may be useful in terms of protecting from future attacks?

    My answer:
    If you’re “Group B” you need to follow the (admittedly difficult) instructions every month when I shift DEFCON levels. In this case, yep, there are January patches that you need to install.
    If you like, you can follow the (frequently amusing!) comments at
  • MS-DEFCON 3: Time to get patched, but watch out for a few gotchas

    Posted on January 18th, 2017 at 17:23 woody Comment on the AskWoody Lounge

    InfoWorld Woody on Windows.

    In many ways it’s easier getting up to date this month than at any time in recent memory. There wasn’t any patch for Windows 8.1 in January!

    In other ways, though, it’s the same-old, same-old. Lots of little twists and turns and, in particular, dicey driver updates.

  • Windows 7, 8.1 patches are up

    Posted on January 10th, 2017 at 13:05 woody Comment on the AskWoody Lounge

    OK, not exactly. Other than MSRT, there are no patches for 8.1, and only one small security patch (plus a Flash patch) for Win7.

    This month only we’re getting old-fashioned Security Bulletins (such as they are) plus the new Security Updates Guide.

    MS17-001 for Edge only – “important” (which means it isn’t really important)

    MS17-002 – Word 2016 and SharePoint Enterprise 2016 – critical

    MS17-003 – Flash Player but only on 8.1 and 10 – critical

    MS 17-004 – Only on Vista and Win7 – important

    Windows 7 

    January 10, 2017—KB3212642 (Security-only update)
    This update includes only security fixes. No new operating system features are being introduced in this update.

    January 10, 2017—KB3212646 (Monthly Rollup)
    Includes the Security-only update above, plus the non-security stuff in last month’s Dec. 13 Monthly Rollup.

    Windows 8.1

    “There are no security fixes or quality improvements for release on January 10, 2017. As such, there is no Security-only update nor Monthly Rollup release for this month.”

    That’s the lightest Patch Tuesday I’ve ever seen.

    Reminder: We’re still on MS-DEFCON 2. Wait to see what happens to everybody else.

  • Ms Defcon 2 – unknown Office patches on the horizon

    Posted on January 4th, 2017 at 07:43 woody Comment on the AskWoody Lounge

    Apologies for this very abbreviated note. I’m on the road and working from my phone.

    Microsoft just pushed a bunch of non security Office patches. I suggest you avoid them until we have a chance to scope them out.

    Accordingly, I’m switching to Ms Defcon 2. Unless you have a pressing need to install a specific patch, don’t do it