Newsletter Archives

  • MS-DEFCON 4: Get patched now

    True to form, October’s Black Tuesday patches had one major stinker: the Internet Explorer update MS09-054 was so bad that Microsoft had to release a patch to the patch. Matter of fact, they rolled two patches to the patch into one patched patch.

    Got that?

    Knowledge Base article 976749 describes the carnage. If you’ve already applied MS09-054/KB  974455 (but you haven’t, right?), then you need to apply KB 976749. But if you mistakenly apply the patch to the patch (KB 974455) before you apply the patch itself (MS09-054/KB 976749), you break Internet Explorer.

    Fun ‘n games. There have also been major changes to MS09-050 (which was changed just yesterday), MS09-056 (the associated KB article is up to version 7.1), and MS09-062.

    Anyway, the bottom line is that it now appears safe to apply all the outstanding Windows and Office patches. That includes those of you running Windows 7.

    Get your machines brought up to speed because there’s six more Security Bulletins coming next Tuesday.

    I’m moving us down to MS-DEFCON 4: There are isolated problems with current patches, but they are well-known and documented here. Check this site to see if you’re affected and if things look OK, go ahead and patch.