I think* there is a recent zdnet article about a potential mitm threat-- but I'm not quite sure whether to take the advice or not. Specifically, is there a hive mind that already knows the/some of the proxies that might be affected by not allowing redirects on update & upgrade commands?
Also, I think what's being suggested is to turn off redirects, run a patch, and then update again. Never having run a patch like this before, I'm cautious. Don't see a lot of discussion of this here already. Did I miss it?