LandzDown Forum

Security => Security Alerts & Briefings => Topic started by: winchester73 on February 09, 2016, 06:43:03 PM

Title: Microsoft Security Bulletins for February 2016
Post by: winchester73 on February 09, 2016, 06:43:03 PM
Bulletin Summary:  https://technet.microsoft.com/en-us/library/security/ms16-Feb

Critical (6):

Cumulative Security Update for Internet Explorer (3134220): http://go.microsoft.com/fwlink/?LinkId=722212

Cumulative Security Update for Microsoft Edge (3134225): http://go.microsoft.com/fwlink/?LinkId=722213

Security Update for Microsoft Windows PDF Library to Address Remote Code Execution (3138938): http://go.microsoft.com/fwlink/?LinkId=623622

Security Update for Windows Journal to Address Remote Code Execution (3134811): http://go.microsoft.com/fwlink/?LinkId=722340

Security Update for Microsoft Office to Address Remote Code Execution (3134226): http://go.microsoft.com/fwlink/?LinkId=722214

Security Update for Adobe Flash Player (3135782): http://go.microsoft.com/fwlink/?LinkId=723603

Important (7):

Security Update for Microsoft Windows to Address Remote Code Execution (3134228): http://go.microsoft.com/fwlink/?LinkId=722215

Security Update for WebDAV to Address Elevation of Privilege (3136041): http://go.microsoft.com/fwlink/?LinkId=722536

Security Update for Remote Desktop Display Driver to Address Elevation of Privilege (3134700) : http://go.microsoft.com/fwlink/?LinkId=722326

Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege (3136082): http://go.microsoft.com/fwlink/?LinkId=722617

Security Update for .NET Framework to Address Denial of Service (3137893): http://go.microsoft.com/fwlink/?LinkId=718008

Security Update for Active Directory Federation Services to Address Denial of Service (3134222): http://go.microsoft.com/fwlink/?LinkId=722534

Security Update for NPS RADIUS Server to Address Denial of Service (3133043): http://go.microsoft.com/fwlink/?LinkId=722535

Title: Re: Microsoft Security Bulletins for February 2016
Post by: Corrine on February 09, 2016, 08:01:45 PM
As a very welcome change in response to feedback, Microsoft is now providing more details about the Windows 10 updates delivered through Windows Update. A summary of important product developments included in each update, with links to more details is available at Windows 10 Update History (http://windows.microsoft.com/en-us/windows-10/update-history-windows-10). The page will be regularly refreshed, as new updates are released.
Title: Re: Microsoft Security Bulletins for February 2016
Post by: pastywhitegurl on February 13, 2016, 11:28:45 PM
I got a message after rebooting from this update that "we were not able to install all updates".  However, when I looked at the history, every update was marked as successfully installed.  Do I need to do anything? Or will future updates take care of any dangling updates?
Title: Re: Microsoft Security Bulletins for February 2016
Post by: plodr on February 14, 2016, 12:02:19 AM
I read that Windows 10 checks updates twice a day. I can neither confirm nor deny that. Anyway, if you are running 10, MS will take care of the updates so there isn't anything you need to worry about.
Title: Re: Microsoft Security Bulletins for February 2016
Post by: pastywhitegurl on February 15, 2016, 04:27:37 AM
Thanks.  Interesting.  So Windows is another one of the many applications phoning home constantly.
Title: Re: Microsoft Security Bulletins for February 2016
Post by: plodr on February 15, 2016, 06:01:28 PM
Other applications you have control over.
I don't have Adobe flash checking for updates - ever. (In Win 10 MS does the flash updates so you've lost control over that). My computers came with some updating program. I turned that off. If something breaks, I'll head to the manufacturer's site and check myself.

I have Sumatra, my pdf reader only checking for updates on my main desktop. If I get a notice, then I'll update the other computers in the house.

I don't have my browsers set to check for updates. I'll know, thanks to Corrine, when FF gets updated. Then I check Palemoon at the same time.

So look over your programs and turn off some of the checking if you read at a lot of forums and see posts of what is updated.

Java only gets updated every 3 months - usually. If there is an out of band update, someone posts it here so having Java checking daily or even weekly for updates isn't necessary. Note: I've removed Java from the only computer in the house that had it installed. I don't need it.
Title: Re: Microsoft Security Bulletins for February 2016
Post by: Corrine on February 15, 2016, 09:54:07 PM
Quote from: plodr on February 15, 2016, 06:01:28 PM
(In Win 10 MS does the flash updates so you've lost control over that)
Flash Player for IE and Microsoft Edge were changed to a Bulletin this month, rather than an Advisory.  Chrome handles Flash updates, however, Windows 10 users of other alternate browsers need to take care of the updates.