Today is the second Tuesday of April, so, in keeping with its usual schedule, Microsoft has released this month’s batch of security bulletins and patches for Windows and related software. This month, there are six patches, for nine identified vulnerabilities. Three of the patches are for Windows itself, and its .NET components; all supported versions of Windows are affected, and have at least two Critical bulletins. For a breakdown of patches by version and severity, check this month’s preview post.
There is also a bulletin for Microsoft Office, rated Important; one for Microsoft Forefront Unified Access Gateway, also rated Important; and one rated Critical, that affects Office, SQL Server, and other server software and development tools (see the Security Bulletin Summary for details).
Further details, and download links, are in the Security Bulletin Summary for April 2012. Microsoft says that two of the patch installations will definitely require a system restart, and the others may require one, depending on the configuration of your system.
The folks at the SANS Internet Storm Center have posted their usual analysis of this month’s patches, along with their severity ratings for client and server systems.
As always, I recommend that you update your systems as soon as you conveniently can.