Patch Management

Microsoft has announced their May 2013 advanced notification.  The May edition of Patch Tuesday will include 10 security bulletins.

Microsoft is working to have the Internet Explorer Security Update to address the issue described in Security Advisory 2847140, supplementing the currently available Fix it.

Security Bulletin breakdown:

2 bulletins are rated as Critical
8 bulletins are rated as Important
5 bulletins address vulnerabilities that could lead to Remote Code Execution
1 bulletins address vulnerabilities that could lead to Elevation of Privilege
2 bulletin addresses a vulnerability that could lead to Information Disclosure
1 bulletin addresses a vulnerability that could lead to a Denial of Service attack
1 …

Read More»

Microsoft announced their April 2013 advanced notification for Patch Tuesday.  The April edition of Patch Tuesday will be bringing nine security bulletins.

Security Bulletin Breakdown:

2 bulletins are rated as Critical
7 bulletins are rated as Important
2 bulletins address vulnerabilities that could lead to Remote Code Execution
5 bulletins address vulnerabilities that could lead to Elevation of Privilege
1 bulletin addresses a vulnerability that could lead to Information Disclosure
1 bulletin addresses a vulnerability that could lead to a Denial of Service attack

Affected Products:

All Internet Explorer versions
All supported Windows Operating Systems
InfoPath 2010 SP1
SharePoint Server 2010 SP1
Groove Server 2010 SP1
Office Web Apps 2010 SP1
SharePoint Foundation 2010 SP1

I …

Read More»

In addition to our Patch Tuesday Webinar we are starting a few new Webinar series.  These are as follows:

vCenter Protect Demonstration – This webinar series is intended to provide a basic overview of the vCenter Protect features for customers evaluating the product.  Each demonstration will be followed by Q&A with the host and is a great way to get a quick introduction to the Protect product.

vCenter Protect Tech Talk – This webinar series is intended to provide focused feature demonstrations.  Each Tech Talk will focus on a specific feature or scenario to provide Protect users with guidance on …

Read More»

Hey Everyone!

This is the first of many announcements to come.  We are currently gearing up for the vCenter Protect 9.0 public beta and looking for participants.  Invitations will start being sent at the end of this week.  We are targeting to launch the public beta on March 11th, 2013.  If you would like to participate in the beta you can send an email to Shavlik-Beta@vmware.com.   The beta will be fully supported in production environments.  This means full upgrade support for the beta version when the GA version releases.   Now, on to the good stuff, WHATS NEW in vCenter Protect 9.0!

This …

Read More»

This week New York gets hammered with snow and IT Admins get hammered with patches.  Microsoft has released 12 new security bulletins addressing 55 vulnerabilities.  The number of vulnerabilities this month comes very close to the record 64 vulnerabilities resolved in the April 2011 Patch Tuesday.

Of the 12 bulletins released this Patch Tuesday, 5 are critical.  MS13-009 and MS13-010 affecting Internet Explorer, MS13-011 and MS13-020 affecting the Windows Operating System, and MS13-012 affecting Exchange Server.

The first browser patch this month is MS13-009.  This is a cumulative security update covering 13 of the reported vulnerabilities and should be a …

Read More»

After an eventful past couple of weeks in patch management, this week was relatively quiet.  Here is a quick recap in the happenings of patch management this week.

On Monday, a new version of Audacity was released.  Audacity 2.0.3 is a non-security update fixing numerous issues.

On Tuesday, Google released new security updates for their Chrome and Chrome Frame browsers.  Google Chrome / Chrome Frame version 24.0.1312.56 fixes three high, and two medium vulnerabilities.

On Wednesday, Core FTP released a new version with version 2.2.  This version was originally released on January 17th, but the details were …

Read More»

Happy New Year.  I hope IT administrators got some much needed patching rest over the past couple of weeks.  2013 is started out quite heavy in the world of patching.

This week was highlighted by a busy Patch Tuesday.  You can read my write up on the January 2013 edition of Patch Tuesday here.

There were also other vendors releasing critical security bulletins on Patch Tuesday.  Adobe released two security bulletins.  APSB13-02 was pre-announced last Thursday as a part of their quarterly update for Adobe Acrobat and Adobe Reader.  Adobe Acrobat / Reader versions 9.5.3 / 10.1.5 / …

Read More»

To ring in the New Year, today Microsoft has released seven new security bulletins addressing 12 vulnerabilities.

However, the most notable headline from this Patch Tuesday is a security bulletin that was not released.  On December 29, 2012, Microsoft released a security advisory (2794220) informing administrators of a vulnerability in Internet Explorer was currently being exploited.  Microsoft provided a non-security update to prevent exploitation to that vulnerability.  Recently, security researchers have found a way to bypass this temporary fix to carry out an attack on the vulnerability.  As we continue to wait for a security bulletin for …

Read More»

Patching quietly came to an end for 2012, and 2013 is starting off with a bang.  Here is a quick recap of the happenings in patch management this first week of the New Year:

On Wednesday, a new version of CDBurnerXP was released with version 4.5.0.3717.  This new version is a non-security update.  On Friday, Google released a non-security update for their Picasa program with version 3.9.136.120.

Microsoft announced their January 2013 Patch Tuesday Advance Notification.  You can read my write up here on the upcoming Patch Tuesday notification details.  In addition to the seven Microsoft …

Read More»

To ring in the New Year, Microsoft has announced their January 2013 advanced notification for Patch Tuesday.  The January 2013 edition of Patch Tuesday will be bringing seven security bulletins addressing 12 vulnerabilities.

Security Bulletin Breakdown:

2 bulletins are rated as Critical
5 bulletins are rated as Important
2 bulletins addressing vulnerabilities that could lead to Remote Code Execution
3 bulletins addressing vulnerabilities that could lead to Elevation of Privilege
1 bulletin addressing a vulnerability that could lead to Security Feature Bypass
1 bulletin addressing a vulnerability that could lead to Denial of Service

Affected Products:

All supported Microsoft operating systems
Microsoft Office 2003, 2007
Microsoft Word Viewer
Microsoft Office …

Read More»