Busy Patch Tuesday coming up

[Rik]

According to El Reg:

Microsoft has lined up 11 patches that collectively address 25 security vulnerabilities as part of its April Patch Tuesday security update.

Five of the scheduled patches fix critical flaws, all involving Windows vulnerabilities. All supported versions of Windows are addressed by this much heavier than usual update batch. "Important" patches for Microsoft Office and Microsoft Exchange are also being loaded up for delivery next week.

Microsoft is due to fix two open zero-day vulnerabilities, notes Wolfgang Kandek, CTO at vulnerability scanning services firm Qualys. These are the F1 attack through Internet Explorer and the SMBv2 Denial of Service vulnerability, which only affects Windows 7 and Windows Server 2008.

Full details here:

http://www.microsoft.com/technet/security/bulletin/ms10-apr.mspx