January 13th 2015 Windows Updates

[Brink]

Today, as part of Update Tuesday, we released eight security updates – one rated Critical and seven rated Important in severity, to address eight unique Common Vulnerabilities and Exposures (CVEs) in Microsoft Windows.

We encourage you to apply all of these updates. For more information about this month’s security updates, including the detailed view of the Exploit Index (XI) broken down by each CVE, visit the Microsoft Bulletin Summary webpage. If you are not familiar with how we calculate XI, a full description can be found here.

We re-released one Security Bulletin:

• MS14-080 Cumulative Security Update for Internet Explorer

One Security Advisory was revised:

• Update for Vulnerabilities in Adobe Flash Player in Internet Explorer (2755801)

For the latest information, you can follow the MSRC team on Twitter at @MSFTSecResponse.

MSRC Team

Source: January 2015 Updates - MSRC - Site Home - TechNet Blogs

 

[ThrashZone]

I have no idea why Microsoft pushes updates to write windows apps for as Important :/

 

[cluberti]

Critical vulnerabilities are those that can compromise a system without any indication or lack mitigation without patching, and Important vulnerabilities are those that would cause prompts or indications, or requires physical access, or can be mitigated without patching by modifying the system (or some combination of those).

 

[ThrashZone]

Yea I'm referring to net frame work 4.5.2 :/
Ha looks like CorelDraw needs that one

 

[cluberti]

There are apparently some security updates as part of 4.5.2, although it does introduce 2 runtime changes that could affect ASP.NET pages (there do not appear to be any changes that affect .NET applications) with documented workarounds for code that is affected.

I'm guessing that because of the security updates in 4.5.2, it's being released via Windows Update. There are registry keys to block it being delivered, although you have to upgrade to 4.5.2 by January of next year to continue getting security updates for .NET 4.5.

 

[gulls777]

Just installed. No issue
So it's gonna be security updates only from now on for 7.

 

[robinb9]

the one kb3019215 for kernel driver, is that to replace the last disaster one from last month?
anyone else see any problems?
robin

 

[NoN]

the one kb3019215 for kernel driver, is that to replace the last disaster one from last month?
anyone else see any problems?
robin

Hi Robin....

The only issue i see on my system is that the System Icons on the right side taskbar are set to default and shows the system icons only. Whatever i set the others Icons to be showed on the taskbar are not retained at next reboot.

I also do have to resize the explorer windows as i does not retain its position. I tried to reset the value and folders parameters too, to default, then try to resize....same same!!!

 

[robinb9]

Hmm do you know which one caused this? Was it this kb or any of the other ones?
I installed on 1 machine so far and have not seen this

 

[ThrashZone]

Everything seems fine so far Robin on 2 systems :/

 

[NoN]

Hmm do you know which one caused this? Was it this kb or any of the other ones?
I installed on 1 machine so far and have not seen this

I'm not sure but i do suspect the Kb Article ID: 3025421 to be related as it could have known issues with others article IDs mentioned in that link.

I haven't yet uninstall that one as the attack seems pretty nasty...i'll check that when not connected to internet.

Otherwise kb3019215 seems ok here. Its a security update for a specially crafted local/logged attack.

 

[robinb9]

I have a client that when installing all these updates he now has no icons on the desktop and when you click on them in the start menu they come up asking you Do you want to save this .ink file. I told him to uninstall all the security updates from tues. Would anyone know which one would have wiped out his icons and now no programs will load at all?
He is in the middle of u installing now, i do not know if this would even fix it.

 

[ThrashZone]

No still no problems to report :/

 

[ThrashZone]

This one seems the most docile
https://support.microsoft.com/kb/3022777
Interesting network stuff ?