Barney's Blog

Blog archive

Patch Tuesday: Déjà Vu, Take Two, Do Over, Rinse and Repeat, Etc.

I really should have saved what I wrote last month about Patch Tuesday, used cut and paste to write today's preview, and my work would be done. That's because this month's patch batch is nearly identical to the last.

Like in May, we have three critical fixes, and the same number of important ones (four). And just like all the Patch Tuesdays in recent memory, remote code execution flaw fixes lead the charge, with elevation of privilege trailing just behind.

What is different is the software targeted this time around. Beside Office, a patch stalwart, Visual Basic for Applications gets a fix. Now there's a blast from the past. (Do you use VBA? If so, what for and how do you like it? Let me know at [email protected])

One security expert advises fixing the RCE flaws first and only then going after the elevation of privilege problems. Makes sense to me.

Posted by Doug Barney on 06/11/2012 at 1:19 PM


Featured

  • Microsoft Offers More 'Solorigate' Advice Using Microsoft 365 Defender Tools

    Microsoft issued yet another article with advice on how to use its Microsoft 365 Defender suite of tools to protect against "Solorigate" advanced persistent threat types of attacks in a Thursday announcement.

  • Microsoft FastTrack Support Extended to Microsoft 365 Defender Solutions

    The Microsoft FastTrack support program has been extended to Microsoft 365 Defender products for certain qualified subscribers, Microsoft indicated this week.

  • Microsoft 365 File-Size Support Expanding to 250GB

    Microsoft 365 users will be getting expanded file-size support, allowing files to be shared that are 250GB maximum in size, per a Microsoft announcement this week.

  • Windows Server Update Services Users Getting Proxy-Use Change This Month

    Microsoft on Tuesday notified Windows Server Update Services (WSUS) users that it's no longer going to automatically support "user proxies" to get patches from Microsoft's content delivery networks (CDNs), starting with this month's cumulative update release.

comments powered by Disqus