Microsoft Issues Massive Security Bulletin

And just in case you don't believe it's insane, check out this handy chart, which provides a matrix of the security fixes and the products they affect:

Yep, it's that time of the month. Here's the official word:

Today, as part of its routine monthly security update cycle, Microsoft is releasing 11 security bulletins to address 25 vulnerabilities: five rated Critical, five rated Important and one rated Moderate. This month's release affects Windows, Microsoft Office, and Microsoft Exchange. Additionally, the Malicious Software Removal Tool (MSRT) was updated to include Win32/Magania.

Microsoft recommends that customers deploy all security updates as soon as possible. However, Microsoft's guidance on deployment priority is that customers should consider MS10-019, MS10-026, and MS10-027 as the top priority bulletins for April.

By the way, the point of the chart above isn't high comedy, but is rather to "demonstrate the reduced impact of the April security bulletins on operating systems that have benefitted from the Security Development Lifecycle (SDL)." In other words: Newer versions of Microsoft software are not as impacted by security issues as are older versions. Fair enough.

Discuss this Article 5

jlavetan
on Apr 13, 2010
Your link to the security bulletins is pointing to March. Shouldn't it be: http://www.microsoft.com/technet/security/bulletin/ms10-apr.mspx
GoodThings2Life
on Apr 13, 2010
Wow. Definitely makes me feel more justified in my decision to begin Windows 7 deployments in my enterprise, but it's still a slow process that's going to take me all year.
infiniteloop
on Apr 13, 2010
Heh, They even manage to make a chart look ugly.
subzerohitman721
on Apr 13, 2010
Honestly, Compared to Snow Leopard's 10.6.3 upgrade that has 66 patches fixing 88 vulnerabilities at anywhere from 437 MB to 737 MB, I'll take the 11 patches fixing 25 vulnerabilities which on my machine was a grand total of 25 MB. It was quick, easy, & painless.
pthurrott
on Apr 14, 2010
Morgman: I got that via emai (also the source of the March/April mixup from before). But you can find it, and other similar charts, here: http://blogs.technet.com/msrc/archive/2010/04/13/april-2010-security-bul... Paul

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• 120 Technical
Sessions
• Networking with Peers
• Expert Speakers


Come See Paul Thurrott & Mary Jo Foley in Person!

Register Now

Office 365 InfoCenter

Get the latest insight and info from Paul

Read Now!

What I Use