{"id":13065,"date":"2018-08-10T04:30:13","date_gmt":"2018-08-10T12:30:13","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/08\/10\/news-6832\/"},"modified":"2018-08-10T04:30:13","modified_gmt":"2018-08-10T12:30:13","slug":"news-6832","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/08\/10\/news-6832\/","title":{"rendered":"A word to the wise: Skip Microsoft\u2019s July patches"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security2-100734733-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Fri, 10 Aug 2018 05:22:00 -0700<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">On July 9,\u00a0<\/span><a href=\"https:\/\/www.computerworld.com\/article\/3287912\/microsoft-windows\/make-sure-windows-update-is-temporarily-disabled-particularly-on-win7.html\"><span style=\"font-weight: 400;\">I recommended<\/span><\/a><span style=\"font-weight: 400;\"> that you disable Windows Automatic Update and wait to see if the July Microsoft patches brought more mayhem than relief. With the August patches just a few days away, it\u2019s time to put a nail in the July coffin. I strongly recommend that you <strong><em>not<\/em><\/strong> install any of the July patches, and pray that Microsoft treats us better in August.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It\u2019s been a <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-still-reeling-from-one-of-the-worst-patching-months-ever.html\"><span style=\"font-weight: 400;\">tumultuous month<\/span><\/a><span style=\"font-weight: 400;\">. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Each of the current Win10 versions has seen three hefty cumulative updates. In each case, the second cumulative update was solely dedicated to fixing bugs introduced in the first. The third cumulative update still has an outstanding, acknowledged bug that is throwing Access Denied errors.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Win7 and 8.1 bugs are so bad that Microsoft took the unprecedented step of changing Monthly Rollup Previews to \u201crecommended\u201d so they\u2019re installed automatically. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">And the botched .NET patches are still <\/span><a href=\"https:\/\/github.com\/dotnet\/announcements\/issues\/74\" rel=\"nofollow\"><span style=\"font-weight: 400;\">bouncing around somewhere<\/span><\/a><span style=\"font-weight: 400;\"> in the ether. \u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Office patches passed relatively unscathed, except the KB 4018385 non-security patch for a bug in a three-month-old security patch that crashed Office \u2014\u00a0and the new non-security patch <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3289787\/microsoft-windows\/microsoft-yanks-buggy-office-2016-patch-kb-4018385-republishes-all-of-this-months-patch-downloads.html\"><span style=\"font-weight: 400;\">also crashes Office<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Aren\u2019t you glad you aren\u2019t paying for this stuff?<\/span><\/p>\n<p><span style=\"font-weight: 400;\">(Forgive me. That was entirely rhetorical.)<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Fortunately, the July crop of security plugs weren\u2019t critical. I\u2019m not aware of any major exploits that take advantage of security holes fixed by the July patches. They\u2019re a whole lot of pain for essentially no gain.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you want to tip-toe through the minefield of July patches and choose individual patches that may (or may not) be worthy of installation, you can check Susan Bradley\u2019s massive <\/span><a href=\"https:\/\/www.askwoody.com\/patch-list-master\/master-patch-list-july-2018\/\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">Master Patch List<\/span><\/a><span style=\"font-weight: 400;\">. But for most people, and most organizations, you\u2019re best advised to keep the Automatic Update block in place and wait to see if Microsoft makes things better in August.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Good luck with that.<\/span><\/p>\n<p><i><span style=\"font-weight: 400;\"> Got a patching problem? Join us on the <\/span><\/i><a href=\"https:\/\/www.askwoody.com\/2018\/we-continue-at-ms-defcon-1-dont-install-any-of-the-july-patches\/\" rel=\"nofollow noopener\" target=\"_blank\"><i><span style=\"font-weight: 400;\">AskWoody Lounge<\/span><\/i><\/a><i><span style=\"font-weight: 400;\">.<\/span><\/i><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3296461\/microsoft-windows\/a-word-to-the-wise-skip-microsofts-july-patches.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security2-100734733-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Fri, 10 Aug 2018 05:22:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p><span style=\"font-weight: 400;\">On July 9,\u00a0<\/span><a href=\"https:\/\/www.computerworld.com\/article\/3287912\/microsoft-windows\/make-sure-windows-update-is-temporarily-disabled-particularly-on-win7.html\"><span style=\"font-weight: 400;\">I recommended<\/span><\/a><span style=\"font-weight: 400;\"> that you disable Windows Automatic Update and wait to see if the July Microsoft patches brought more mayhem than relief. With the August patches just a few days away, it\u2019s time to put a nail in the July coffin. I strongly recommend that you <strong><em>not<\/em><\/strong> install any of the July patches, and pray that Microsoft treats us better in August.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It\u2019s been a <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-windows\/microsoft-patch-alert-still-reeling-from-one-of-the-worst-patching-months-ever.html\"><span style=\"font-weight: 400;\">tumultuous month<\/span><\/a><span style=\"font-weight: 400;\">. <\/span><\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3296461\/microsoft-windows\/a-word-to-the-wise-skip-microsofts-july-patches.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10525],"class_list":["post-13065","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/13065","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=13065"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/13065\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=13065"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=13065"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=13065"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}