Microsoft Patches the Patch Process

The company's new update system may not be the answer to all your prayers.

Stuart J. Johnston is a contributing editor for PC World. Click here for more Bugs and Fixes columns.

Tired of constantly plugging security holes in Windows? Sometimes it feels like you're patching more holes than a Montana road crew in the spring. (I should know. I grew up in rural Montana.)

Flawed Microsoft software is an unfortunate fact of life, but fixing the snags shouldn't be such a hassle. (Turn to News and Trends this month for a report on readers' complaints about patch headaches.)

Well, apparently, Microsoft officials feel our pain. The company recently made two changes in the way it issues patches. First, for XP users, the company released Update Rollup 1 for Windows XP, which consolidates a bunch of critical patches into a single patch. Second, Microsoft has begun posting a monthly patch summary, which supplies information on all the new fixes making the rounds.

You might argue that anything is an improvement over the current state of affairs, but I remain skeptical. You will still need to stay on top of all the updates that are not included in the roll-up; plus, the summary bulletins can often be vague or just difficult to understand.

A Super Patch?

The premiere roll-up compresses 17 separate security updates into a single download. This bundle of goodies will bring you up-to-date with all XP-specific security patches from the release of service pack 1 (November 21, 2001), up to September 10, 2003. The roll-up also includes some service pack 1 components and other nonsecurity fixes.

To grab the roll-up, visit Windows Update and look for a link labeled KB826939 on the list that appears. Or click here to get the patch. Remember, the roll-up does not correct flaws in IE, Outlook, Outlook Express, or Office, so you need to keep tabs on alerts related to these other apps.

Monthly Alerts

Microsoft thinks that a lot of the drudgery of finding and installing security patches will disappear, thanks to the company's monthly Security Bulletin Summary posting. These summaries give information regarding all of the security fixes released for the month, and they provide links to fixes. The bulletins also include workaround instructions, if they exist. If you have patch problems, you can now call Microsoft at 866/727-2338 to talk to a technician for free.

Microsoft is raising a lot of dust, but it's hard to tell how much of the innovation is useful and how much is hype.

Will the new patch processes make your life easier? Write to bugs@pcworld.com and let us know. And tell us if the phone support works out as promised, too.

Shock Hazard Prompts Sony Recall

Sony is recalling 5600 of its VAIO notebooks because they could give users an electrical shock. The affected model numbers are PCG-FRV25 and PCG-FRV27, and the recall affects units sold in June and July of 2003. No one has been injured, but Sony and the U.S. Consumer Product Safety Commission aren't taking any chances. Shocks could occur when the PC runs on AC power while connected online via dial-up modem, and the phone then rings.

If your VAIO model number matches one of the recalled model numbers, you need to download and run Sony's diagnostic program. If the program determines that your notebook is defective, disconnect the power adapter immediately and contact Sony at 800/880-9743. If your notebook PC needs repair, Sony will extend the computer's warranty for two more years and cover all shipping costs.

In Brief: Five Windows Fixes

Microsoft has released patches for five critical security holes for Windows XP, Windows 2000, and server versions of its OS. The fixes for these holes are not included in Update Rollup 1 because they were released after September 10. Click here to grab the patches.

Bugged?

Found a hardware or software bug? Tell us about it via e-mail at bugs@pcworld.com.