You don't always need to patch, thanks SANS for reminding us of that. It is way to easy to get caught up in patch fever, but the principle of 'least change' is a good one to keep in mind. Sometimes the workarounds point to a way of setting up a component better or removing a component your organisation doesn't need, these workarounds often help to prevent future exploits, but not always.