Microsoft has released new critical out of band security updates.  These updates will be pushed to all campus managed computers on 07/23/2015, please see below for specific updates being pushed.

Microsoft
Security Updates

MS15-065 : Security Update for Internet Explorer (3076321)
More info: https://technet.microsoft.com/en-us/library/security/MS15-065
Severity : Critical

MS15-066 : Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3072604)
More info: https://technet.microsoft.com/en-us/library/security/MS15-066
Severity : Critical

MS15-067 : Vulnerability in RDP Could Allow Remote Code Execution (3073094)
More info: https://technet.microsoft.com/en-us/library/security/MS15-067
Severity : Critical

MS15-068 : Vulnerabilities in Windows Hyper-V Could Allow Remote Code Execution (3072000)
More info: https://technet.microsoft.com/en-us/library/security/MS15-068
Severity : Critical

MS15-069 : Vulnerabilities in Windows Could Allow Remote Code Execution (3072631)
More info: https://technet.microsoft.com/en-us/library/security/MS15-069
Severity : Important

MS15-070 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)
More info: https://technet.microsoft.com/en-us/library/security/MS15-070
Severity : Important

MS15-072 : Vulnerability in Windows Graphics Component Could Allow Elevation of Privilege (3069392)
More info: https://technet.microsoft.com/en-us/library/security/MS15-072
Severity : Important

MS15-073 : Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3070102)
More info: https://technet.microsoft.com/en-us/library/security/MS15-073
Severity : Important

MS15-074 : Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)
More info: https://technet.microsoft.com/en-us/library/security/MS15-074
Severity : Important

MS15-075 : Vulnerabilities in OLE Could Allow Elevation of Privilege (3072633)
More info: https://technet.microsoft.com/en-us/library/security/MS15-075
Severity : Important

MS15-076 : Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505)
More info: https://technet.microsoft.com/en-us/library/security/MS15-076
Severity : Important

MS15-077 : Vulnerability in ATM Font Driver Could Allow Elevation of Privilege (3077657)
More info: https://technet.microsoft.com/en-us/library/security/MS15-077
Severity : Important

MS15-078 : Vulnerability in Microsoft Font Driver Could Allow Remote Code Execution (3079904)
More info: https://technet.microsoft.com/library/security/MS15-078
Severity : Critical

Re-released

MS15-006 : Vulnerability in Windows Error Reporting Could Allow Security Feature Bypass (3004365)
More info: https://technet.microsoft.com/library/security/MS15-006
Severity : Important

Microsoft Security Advisory

KB3079777: Security Update for Internet Explorer Flash Player for Windows 8
More info: https://support.microsoft.com/en-us/kb/3079777

Non – Security Critical Updates

April 2015 Office Update Release
More info : http://blogs.technet.com/b/office_sustained_engineering/archive/2015/07/14/july-2015-office-update-release.aspx
Adobe

Update Adobe Flash Player ActiveX to version 18.0.0.209
More info: http://helpx.adobe.com/security/products/flash-player/apsb15-18.html
Severity: Critical

Update Adobe Flash Player Plugin to version 18.0.0.209
More info: http://helpx.adobe.com/security/products/flash-player/apsb15-18.html
Severity: Critical

Update Adobe Reader/Acrobat 11 to version 11.0.12
More info: http://helpx.adobe.com/security/products/reader/apsb15-15.html
Severity: Critical

Update Adobe Reader/Acrobat 10 to version 10.1.15
More info: http://helpx.adobe.com/security/products/reader/apsb15-15.html
Severity: Critical

Update Adobe Air to version 18.0.0.180
More info:  http://helpx.adobe.com/security/products/flash-player/apsb15-16.html
Severity: Critical

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

• Microsoft Security Updates
  • MS15-056 : Cumulative Security Update for Internet Explorer (3058515)
    More info: https://technet.microsoft.com/library/security/MS15-056
    Severity : Critical
  • MS15-057 : Vulnerability in Windows Media Player Could Allow Remote Code Execution (3033890)
    More info: https://technet.microsoft.com/library/security/MS15-057
    Severity : Critical
  • MS15-059 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3064949)
    More info: https://technet.microsoft.com/library/security/MS15-059
    Severity : Important
  • MS15-060 : Vulnerability in Microsoft Common Controls Could Allow Remote Code Execution (3059317)
    More info: https://technet.microsoft.com/library/security/MS15-060
    Severity : Important
  • MS15-061 : Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (3057839)
    More info: https://technet.microsoft.com/library/security/MS15-061
    Severity : Important
  • MS15-063 : Vulnerability in Windows Kernel Could Allow Elevation of Privilege (3063858)
    More info: https://technet.microsoft.com/library/security/MS15-063
    Severity : Important
• Re-released
  • MS15-046 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3057181)
    More info: https://technet.microsoft.com/library/security/MS15-046
    Severity : Important
• Microsoft Security Advisory
  • KB3062760: Security Update for Windows 8.1
    More info: https://support.microsoft.com/en-us/kb/3062760
  • KB3065820: Security Update for Internet Explorer Flash Player for Windows 8
    More info: https://support.microsoft.com/en-us/kb/3065820
• Security Mitigations
  • Update EMET to version 5.2
    More info: http://blogs.technet.com/b/srd/archive/2015/03/16/emet-5-2-is-available.aspx
• Non – Security Critical Updates
  • June 2015 Office Update Release
    More info : http://blogs.technet.com/b/office_sustained_engineering/archive/2015/06/09/june-2015-office-update-release.aspx
• Adobe
  • Update Adobe Flash Player ActiveX to version 18.0.0.160
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-11.html
    Severity: Critical
  • Update Adobe Flash Player Plugin to version 18.0.0.160
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-11.html
    Severity: Critical
  • Update Adobe Air to version 18.0.0.144
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-11.html
    Severity: Critical

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

• Microsoft Security Updates
  • MS15-032 : Cumulative Security Update for Internet Explorer (3038314)
    More info: https://technet.microsoft.com/library/security/MS15-032
    Severity : Critical
  • MS15-033 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3048019)
    More info: https://technet.microsoft.com/library/security/MS15-033
    Severity : Critical
  • MS15-034 : Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553)
    More info: https://technet.microsoft.com/library/security/MS15-034
    Severity : Critical
  • MS15-035 : Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (3046306)
    More info: https://technet.microsoft.com/library/security/MS15-035
    Severity : Critical
  • MS15-037 : Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (3046269)
    More info: https://technet.microsoft.com/library/security/MS15-037
    Severity : Important
  • MS15-038 : Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3049576)
    More info: https://technet.microsoft.com/library/security/MS15-038
    Severity : Important
  • MS15-039 : Vulnerability in XML Core Services Could Allow Security Feature Bypass (3046482)
    More info: https://technet.microsoft.com/library/security/MS15-039
    Severity : Important
  • MS15-041 : Vulnerability in .NET Framework Could Allow Information Disclosure (3048010)
    More info: https://technet.microsoft.com/library/security/MS15-041
    Severity : Important
  • MS15-042 : Vulnerability in Windows Hyper-V Could Allow Denial of Service (3047234)
    More info: https://technet.microsoft.com/library/security/MS15-042
    Severity : Important
• Microsoft Security Advisory
  • KB3045755 : Security Update for Windows 8.1
    More info: https://support.microsoft.com/en-us/kb/3045755/
  • KB3049508 : Security Update for Internet Explorer Flash Player for Windows 8
    More info: https://support.microsoft.com/en-us/kb/3049508/
• Non – Security Critical Updates
  • KB3042085 : Update for Windows 8.1
    More info:
    https://support.microsoft.com/en-us/kb/3042085/
  • KB3044374 : Update for Windows 8.1
    More info: https://support.microsoft.com/en-us/kb/3044374/
  • April 2015 Office Update Release
    More info: http://blogs.technet.com/b/office_sustained_engineering/archive/2015/04/14/april-2015-office-update-release.aspx
• Adobe
  • Update Adobe Flash Player ActiveX to version 17.0.0.169
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-06.html
    Severity: Critical
  • Update Adobe Flash Player Plugin to version 17.0.0.169
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-06.html
    Severity: Critical
  • Update Adobe Air to version 17.0.0.144
    More info:  http://helpx.adobe.com/security/products/flash-player/apsb15-06.html
    Severity: Critical
• VideoLAN
  • Update VLC Media Player to version 2.2.0
    More info: http://www.videolan.org/vlc/index.html

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

• MicrosoftSecurity Updates
  • MS15-009 : Security Update for Internet Explorer (3034682)
    More info: https://technet.microsoft.com/library/security/MS15-009
    Severity : Critical
  • MS15-010 : Vulnerabilities in Windows Kernel-Mode Driver Could Allow Remote Code Execution (3036220)
    More info: https://technet.microsoft.com/library/security/MS15-010
    Severity : Critical
  • MS15-011 : Vulnerability in Group Policy Could Allow Remote Code Execution (3000483)
    More info: https://technet.microsoft.com/library/security/MS15-011
    Severity : Critical
  • MS15-012 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3032328)
    More info: https://technet.microsoft.com/library/security/MS15-012
    Severity : Important
  • MS15-013 : Vulnerability in Microsoft Office Could Allow Security Feature Bypass (3033857)
    More info: https://technet.microsoft.com/library/security/MS15-013
    Severity : Important
  • MS15-014 : Vulnerability in Group Policy Could Allow Security Feature Bypass (3004361)
    More info: https://technet.microsoft.com/library/security/MS15-014
    Severity : Important
  • MS15-015 : Vulnerability in Microsoft Windows Could Allow Elevation of Privilege (3031432)
    More info: https://technet.microsoft.com/library/security/MS15-015
    Severity : Important
  • MS15-016 : Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3029944)
    More info: https://technet.microsoft.com/library/security/MS15-016
    Severity : Important
• Microsoft Security Advisory
  • KB3021953 : Security Update for Internet Explorer Flash Player for Windows 8
    More info : http://support.microsoft.com/kb/3021953
  • KB3004375 : Security Update for Windows
    More info : http://support.microsoft.com/kb/3004375
• Non – Security Critical Updates
  • KB2955808 : Update for Windows 8
    More info : http://support.microsoft.com/kb/2955808
  • KB2976978 : Update for Windows 8
    More info : http://support.microsoft.com/kb/2976978
  • KB3008273 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3008273
  • KB3016074 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3016074
  • KB3019868 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3019868
  • KB3020338 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3020338
  • KB3036437 : Update for Forefront Endpoint Protection 2010 Client
    More info : http://support2.microsoft.com/kb/3036437
  • February 2015 Office Update Release
    More info : http://blogs.technet.com/b/office_sustained_engineering/archive/2015/02/10/february-2015-office-update-release.aspx
• Adobe
  • Update Adobe Flash Player ActiveX to version 16.0.0.305
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-04.html
    Severity: Critical
  • Update Adobe Flash Player Plugin to version 16.0.0.305
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-04.html
    Severity: Critical

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

• MicrosoftSecurity Updates
  • MS15-001 : Vulnerability in Windows Application Compatibility Cache Could Allow Elevation of Privilege (3023266)
    More info: https://technet.microsoft.com/library/security/MS15-001
    Severity : Important
  • MS15-002 : Vulnerability in Windows Telnet Service Could Allow Remote Code Execution (3020393)
    More info: https://technet.microsoft.com/library/security/MS15-002
    Severity : Critical
  • MS15-003 : Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege (3021674)
    More info: https://technet.microsoft.com/library/security/MS15-003
    Severity : Important
  • MS15-004 : Vulnerability in Windows Components Could Allow Elevation of Privilege (3025421)
    More info: https://technet.microsoft.com/library/security/MS15-004
    Severity : Important
  • MS15-005 : Vulnerability in Network Location Awareness Service Could Allow Security Feature Bypass (3022777)
    More info: https://technet.microsoft.com/library/security/MS15-005
    Severity : Important
  • MS15-006 : Vulnerability in Windows Error Reporting Could Allow Security Feature Bypass (3004365)
    More info: https://technet.microsoft.com/library/security/MS15-006
    Severity : Important
  • MS15-008 : Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3019215)
    More info: https://technet.microsoft.com/library/security/MS15-008
    Severity : Important
• Re-released
  • MS14-080 : Cumulative Security Update for Internet Explorer (3008923)
    More info: https://technet.microsoft.com/library/security/ms14-080
    Severity : Critical
• Microsoft Security Advisory
  • KB3024663 : Security Update for Internet Explorer Flash Player for Windows 8
    More info: http://support.microsoft.com/kb/3024663
• Non – Security Critical Updates
  • KB3031044 : Update for Windows 8.1
    More info: https://support.microsoft.com/kb/3031044
  • KB3025390 : Update for Internet Explorer 11
    More info : https://support.microsoft.com/kb/3025390
• Adobe
  • Update Adobe Flash Player ActiveX to version 16.0.0.257
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-01.html
    Severity: Critical
  • Update Adobe Flash Player Plugin to version 16.0.0.257
    More info: http://helpx.adobe.com/security/products/flash-player/apsb15-01.html
    Severity: Critical
  • Update Adobe Air to version 16.0.0.245
    More info:  http://helpx.adobe.com/security/products/flash-player/apsb15-01.html
    Severity: Critical

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

• Microsoft Security Updates
  • MS14-068 : Vulnerability in Kerberos Could Allow Elevation of Privilege (3011780)
    More info: https://technet.microsoft.com/library/security/MS14-068
    Severity : Critical
  • MS14-080 : Cumulative Security Update for Internet Explorer (3008923)
    More info: https://technet.microsoft.com/library/security/ms14-080
    Severity : Critical
  • MS14-081 : Vulnerabilities in Microsoft Word and Microsoft Office Web Apps Could Allow Remote Code Execution (3017301)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-081.aspx
    Severity : Critical
  • MS14-082 : Vulnerability in Microsoft Office Could Allow Remote Code Execution (3017349)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-082.aspx
    Severity : Important
  • MS14-083 : Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (3017347)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-083.aspx
    Severity : Important
  • MS14-084 : Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3016711)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-084.aspx
    Severity : Critical
  • MS14-085 : Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3013126)More info: https://technet.microsoft.com/en-us/library/security/ms14-085.aspx
    Severity : Important
  • Re-released
  • MS14-066 : Vulnerability in Schannel Could Allow Remote Code Execution (2992611)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-066.aspx
    Severity : Critical
• Microsoft Security Advisory
  • KB3008925 : Security Update for Internet Explorer Flash Player for Windows 8
    More info : https://support.microsoft.com/kb/3008925
• Security Mitigations
  • Update Secunia CSI Agent to 7.0.0.9002
    More info: http://secunia.com/vulnerability_scanning/
  • Update EMET to version 5.1
    More info: http://blogs.technet.com/b/srd/archive/2014/11/10/emet-5-1-is-available.aspx
  • Removal of Adobe Flash versions not at current patch level ( < 16.0.0.235 )
• Non – Security Critical Updates
  • KB3021128 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3021128
  • KB2994290 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/2994290
  • KB3012199 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3012199
    
  • KB3008242 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3008242
    
  • KB3013816 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3013816
  • KB2989930 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/2989930
  • KB3013769 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3013769
  • KB3013767 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3013767
  • KB3013410 : Update for Windows
    More info : http://support.microsoft.com/kb/3013410
  • KB3000853 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3000853
  • KB3000850 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3000850
  • KB2998627 : Update for Forefront Endpoint Protection 2010 Client
    More info : http://support.microsoft.com/kb/2998627
  • KB2969817 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/2969817
  • December 2014 Office Update Release
    More info : http://blogs.technet.com/b/office_sustained_engineering/archive/2014/12/10/december-2014-office-update-release.aspx
• Adobe
  • Update Adobe Flash Player ActiveX to version 16.0.0.235
    More info: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
    Severity: Critical
  • Update Adobe Flash Player Plugin to version 16.0.0.235
    More info: http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
    Severity: Critical
  • Update Adobe Reader/Acrobat 11 to version 11.0.10
    More info: http://helpx.adobe.com/security/products/reader/apsb14-28.html
    Severity: Critical
  • Update Adobe Reader/Acrobat 10 to version 10.1.13
    More info: http://helpx.adobe.com/security/products/reader/apsb14-28.html
    Severity: Critical

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

• Microsoft Security Updates
  • MS14-064 : Vulnerabilities in Windows OLE Could Allow Remote Code Execution (3011443)
    More info: https://technet.microsoft.com/library/security/MS14-064
    Severity : Critical
  • MS14-065 : Cumulative Security Update for Internet Explorer (3003057)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-065.aspx
    Severity : Critical
  • MS14-066 : Vulnerability in Schannel Could Allow Remote Code Execution (2992611)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-066.aspx
    Severity : Critical
  • MS14-067 : Vulnerability in XML Core Services Could Allow Remote Code Execution (2993958)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-067.aspx
    Severity : Critical
  • MS14-069 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3009710)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-069.aspx
    Severity : Important
  • MS14-070 : Vulnerability in TCP/IP Could Allow Elevation of Privilege (2989935)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-070.aspx
    Severity : Important
  • MS14-071 : Vulnerability in Windows Audio Service Could Allow Elevation of Privilege (3005607)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-071.aspx
    Severity : Important
  • MS14-072 : Vulnerability in .NET Framework Could Allow Elevation of Privilege (3005210)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-072.aspx
    Severity : Important
  • MS14-074 : Vulnerability in Remote Desktop Protocol Could Allow Security Feature Bypass (3003743)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-074.aspx
    Severity : Important
  • MS14-076 : Vulnerability in Internet Information Services (IIS) Could Allow Security Feature Bypass (2982998)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-076.aspx
    Severity : Important
  • MS14-078 : Vulnerability in IME (Japanese) Could Allow Elevation of Privilege (2992719)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-078.aspx
    Severity : Important
  • MS14-079 : Vulnerability in Kernel Mode Driver Could Allow Denial of Service (3002885)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-079.aspx
    Severity : Important
• Microsoft Security Advisory
  • KB3004150 : Security Update for Internet Explorer Flash Player for Windows 8More info : http://support.microsoft.com/kb/3004150
• Security Mitigations
  • Removal of Adobe Shockwave – Phased Rollout  (All Campus)More info: http://secunia.com/advisories/product/44140/?task=statistics
  • Removal of Adobe Flash versions not at current patch level ( < 15.0.0.223 ) – pending
  • Internet Explorer 10 Update – pending
    More info: http://support.microsoft.com/kb/2718695
• Non – Security Critical Updates
  • KB2670838 : Platform Update for Windows 7
    More info : http://support.microsoft.com/kb/2670838
  • KB2726535 : Update for Windows 7
    More info : http://support.microsoft.com/kb/2726535
  • KB2729094 : Update for Windows 7
    More info : http://support.microsoft.com/kb/2729094
  • KB2834140 : Update for Windows 7
    More info : http://support.microsoft.com/kb/2834140
  • KB2977218 : Update for Microsoft Silverlight
    More info : http://support.microsoft.com/kb/2977218
  • KB3004908 : Update for Windows 7
    More info : http://support.microsoft.com/kb/3004908
  • KB2976978 : Update for Windows 8
    More info : http://support.microsoft.com/kb/2976978
  • KB3000853 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3000853
  • KB3003663 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3003663
  • KB3003667 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3003667
  • KB3003727 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3003727
  • KB3004908 : Update for Windows
    More info : http://support.microsoft.com/kb/3004908
  • KB3006178 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3006178
  • KB3006958 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3006958
  • KB3008188 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3008188
  • KB3008627 : Update for Windows 8
    More info : http://support.microsoft.com/kb/3008627
  • KB3002340 : Update for Microsoft Visual Studio 2010 Service Pack 1
    More info : http://support.microsoft.com/kb/3002340
  • November 2014 Office Update Release
    More info :
    http://blogs.technet.com/b/office_sustained_engineering/archive/2014/11/11/october-2014-office-update.aspx
• Adobe
  • Update Adobe Flash Player ActiveX to version 15.0.0.223
    More info: http://helpx.adobe.com/security/products/flash-player/apsb14-24.html
    Severity: Critical
  • Update Adobe Flash Player Plugin to version 15.0.0.223
    More info: http://helpx.adobe.com/security/products/flash-player/apsb14-24.html
    Severity: Critical
  • Update Adobe Air to version 15.0.0.356
    More info:  http://helpx.adobe.com/security/products/flash-player/apsb14-24.html
    Severity: Critical
• Apple
  • Apple QuickTime Player update to version 7.7.6Severity: ImportantMore info: http://support.apple.com/kb/HT6493

How to update your PC

How to update your Mac

Important notice to computers joined to the UTPA domain: The update distribution process has recently changed. On the day that the updates are distributed, your computer will present you with a notification (see screenshot below) giving you the choice to update your computer before the deadline of 11:00pm. This will allow people to be familiar with the updates that are being installed and it will also give the opportunity for installing the updates at your convenience (this way your machine is not forcefully restarted during the evening).

Software Update Installation Notification

• Microsoft Security Updates
  • MS14-056 : Cumulative Security Update for Internet Explorer (2987107)
    More info: https://technet.microsoft.com/library/security/ms14-056
    Severity : Critical
  • MS14-057 : Vulnerabilities in .NET Framework Could Allow Remote Code Execution (3000414)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-057.aspx
    Severity : Critical
  • MS14-058 : Vulnerability in Kernel-Mode Driver Could Allow Remote Code Execution (3000061)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-058.aspx
    Severity : Critical
  • MS14-060 : Vulnerability in Windows OLE Could Allow Remote Code Execution (3000869)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-060.aspx
    Severity : Important
  • MS14-061 : Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-061.aspx
    Severity : Important
  • MS14-062 : Vulnerability in Message Queuing Service Could Allow Elevation of Privilege (2993254)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-062.aspx
    Severity : Important
  • MS14-063 : Vulnerability in FAT32 Disk Partition Driver Could Allow Elevation of Privilege (2998579)
    More info: https://technet.microsoft.com/en-us/library/security/ms14-063.aspx
    Severity : Important
• Microsoft Security Advisory
  • KB2973501 : Security Update for Windows 8
    More info: http://support.microsoft.com/kb/2973501
  • KB2977292 : Security Update for Windows 8.1
    More info: http://support.microsoft.com/kb/2977292
  • KB2984981 : Security Update for Windows 7
    More info: http://support.microsoft.com/kb/2984981
  • KB2984976 : Security Update for Windows 7
    More info: http://support.microsoft.com/kb/2984976
  • KB2984972 : Security Update for Windows 7
    More info : http://support.microsoft.com/kb/2984972
  • KB3001237 : Security Update for Internet Explorer Flash Player for Windows 8
    More info: https://support.microsoft.com/kb/3001237
  • KB2949927 : Security Update for Windows 7
    More info: http://support.microsoft.com/kb/2949927
• Security Mitigations
  • Removal of Adobe Shockwave – Phased Rollout  (All Campus)
    More info: http://secunia.com/advisories/product/44140/?task=statistics
  • Removal of Adobe Flash versions not at current patch level ( < 15.0.0.167 ) – pending
• Non – Security Critical Updates
  • KB2976978 : Update for Windows 8
    More info : http://support.microsoft.com/kb/2976978
  • KB2989542 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/2989542
  • KB2995387 : Update for Windows 8
    More info : http://support.microsoft.com/kb/2995387
  • KB2995388 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/2995388
  • KB2998174 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/2998174
  • KB3000988 : Update for Windows 8.1
    More info : http://support.microsoft.com/kb/3000988
  • KB2952678 : Update for Forefront Endpoint Protection 2010 Client
    More info : http://support.microsoft.com/kb/2952678
  • October 2014 Office Update Release
    More info : http://blogs.technet.com/b/office_sustained_engineering/archive/2014/10/14/october-2014-office-update-release.aspx
• Adobe
  • Update Adobe Flash Player ActiveX to version 15.0.0.189
    More info: http://helpx.adobe.com/security/products/flash-player/apsb14-22.htmlSeverity: Critical
  • Update Adobe Flash Player Plugin to version 15.0.0.189
    More info: http://helpx.adobe.com/security/products/flash-player/apsb14-22.htmlSeverity: Critical
  • Update Adobe Air to version 15.0.0.293
    More info:  http://helpx.adobe.com/security/products/flash-player/apsb14-22.htmlSeverity: Critical

What can I do to protect myself while the vendor releases a patch?

Disable network services like SSH or web servers.  Keep checking with your operating system vendor (like Apple) to obtain the update as soon as it is available.

What can I do as a Mac user?

Go to System Preferences > Sharing > Remote Login.  Make sure this service is turned off.

What can I do as a Linux user?

Upgrade bash on your computer to a version that does not have this vulnerability.

What is the University doing to protect its resources against this threat?

Our perimeter firewall is already configured to block traffic that matches the signature for this threat. We still recommend that you exercise caution while your device is unpatched for this vulnerability.

How can I check if my computer is vulnerable or not?

Read the second article below. It will give you detailed information about the procedure. Please note, it will require some level of advanced computer skill.

Where can I get more information?

1. Article from Symantec Security Response: http://www.symantec.com/connect/blogs/shellshock-all-you-need-know-about-bash-bug-vulnerability
2. Article from WonderHowTo Mac Tips: http://mac-how-to.wonderhowto.com/how-to/every-mac-is-vulnerable-shellshock-bash-exploit-heres-patch-os-x-0157606/

UTPA OCISO Incident Reporting Form: http://portal.utpa.edu/utpa_main/dba_home/iso_home/incident_form