[Micronet] Microsoft Patch Tuesday January 2016 and Microsoft support updates

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[Micronet] Microsoft Patch Tuesday January 2016 and Microsoft support updates

Ben Gross
Hello everyone,

In addition to Patch Tuesday Microsoft is ending support for security updates for Windows 8 (you must upgrade to Windows 8.1) as well as versions of Internet Explorer older than IE11 (you must upgrade to IE 11). Finally, versions of .NET Framework 4 older than 4.5.2 are deprecated. Nearly all machines with EEI patching services should have already received the IE 11 and .NET framework upgrades.

Windows 8.1 Support Lifecycle Policy FAQ

"Windows 8.1 falls under the same lifecycle policy as Windows 8, and will reach end of Mainstream Support on January 9, 2018, and end of Extended Support on January 10, 2023. With the General Availability of Windows 8.1, customers on Windows 8 have 2 years, until January 12, 2016, to move to Windows 8.1 in order to remain supported."

Stay up-to-date with Internet Explorer | IEBlog

"After January 12, 2016, only the most recent version of Internet Explorer available for a supported operating system will receive technical support and security updates. For example, customers using Internet Explorer 8, Internet Explorer 9, or Internet Explorer 10 on Windows 7 SP1 should migrate to Internet Explorer 11 to continue receiving security updates and technical support. "

Moving to the .NET Framework 4.5.2 - .NET Blog - Site Home - MSDN Blogs

"Beginning January 12, 2016 only .NET Framework 4.5.2 will continue receiving technical support and security updates. There is no change to the support timelines for any other .NET Framework version, including .NET 3.5 SP1, which will continue to be supported for the duration of the operating system lifecycle."

Patch Tuesday patches this month, are a bit lighter than recently. Of particular note is a potential remote code execution in Windows 7 and older. Also a potential remote code execution in Microsoft office and Silverlight.

Microsoft Security Bulletin Summary for January 2016

Security Advisories 2016

January 2016 Office Update Release - Office Updates - Site Home - TechNet Blogs

Office 2016 for the Mac received updates as well

MS16-004: Description of the security update for Office 2016 for Mac: January 12, 2016

Microsoft Silverlight 5 Build 5.1.41212.0 Released January 12, 2016 fixes remote code execution vulnerabilities

Readable summaries

Microsoft Patches Six Critical Flaws with January 2016 Updates | Threatpost | The first stop for security news

The Laws of Vulnerabilities: Patch Tuesday Janu... | Qualys Community

Adobe Security Bulletin
Security Updates Available for Adobe Acrobat and Reader
Release date: January 7, 2016
Last updated: January 12, 2016
Vulnerability identifier: APSB16-02

Readable summary.
January 2016 Adobe Reader, Acrobat Security Patches | Threatpost | The first stop for security news

Adobe released Shockwave Player version 12.2.3.183 today, but there are no updated release notes at this time.

Release Notes | Shockwave 12

A Public Service Announcement, the next Oracle Critical Patch Update is next Tuesday January 19 and Java will be updated among other products.

Critical Patch Updates and Security Alerts

Critical Patch Updates are collections of security fixes for Oracle products. They are available to customers with valid support contracts. They are released on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:

19 January 2016
19 April 2016
19 July 2016
18 October 2016

Firefox 44 is scheduled for January 26, 2016

Add-on Compatibility for Firefox 44 | Mozilla Add-ons Blog

Firefox 44 for developers - Mozilla | MDN

Releases - MozillaWiki

Thank you,
Ben

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.