Patching catch 22

Patching catch 22. Prime example last week of why patching is sometimes a whole lot more complicated than it seems to be from the outside.

Tuesday was patch day. For many of us in the Eastern Time Zone, who set Automatic Updates to pick up patches overnight, it's really Wednesday for all intents and purposes. So Weds. would be the first chance to test a patch. On Thursday I saw the story in my RSS reader about exploits already being out in the wild. Friday, I spotted the story about what the MS patch might actually break if you apply it. So you should have applied it immediately, because if you don't your users will be vulnerable to existing exploits, but you should test it before you give it to them, because it might break stuff.

Yeah, good luck with that!  [Out of the Frying Pan, and into the Cube]

Leave a comment