{"id":13861,"date":"2018-11-19T08:30:15","date_gmt":"2018-11-19T16:30:15","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/11\/19\/news-7628\/"},"modified":"2018-11-19T08:30:15","modified_gmt":"2018-11-19T16:30:15","slug":"news-7628","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/11\/19\/news-7628\/","title":{"rendered":"Microsoft yanks two buggy Office patches but keeps pushing one that crashes"},"content":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Mon, 19 Nov 2018 08:15:00 -0800<\/strong><\/p>\n

Two related Office 2010 non-security patches issued on Nov. 6 were pulled on Nov. 17. <\/span>KB 4461522<\/span><\/a> and <\/span>KB 2863821<\/span><\/a> are both related to changes coming in the Japanese calendar next month <\/span>attributed to the abdication<\/span><\/a> of Emperor Akihito in favor of his son, Naruhito. The event has been compared to the Y2K problem in the west. It\u2019s not clear why two patches were released on Nov. 6 to accommodate that calendar change, but both KB articles now sport the admonition:<\/span><\/p>\n

After you install this update, you may experience crashes in Microsoft Access or other applications. To resolve this issue, uninstall the update by following the instructions in the “<\/span>More information<\/span><\/a>” section.<\/span><\/p>\n

This update is no longer available.<\/span><\/p>\n

Windows observers <\/span>WZorNET claim<\/span><\/a> that the problem is more widespread:<\/span><\/p>\n

Please note that this update <\/span>KB 4461522<\/strong> causes an error (Entry Point Not Found: The procedure entry point GetDateFormatEx could not be located in the dynamic link library KERNEL32.dll) when you run Office 2010 – 32-Bit, Word, Excel, and others when working with Windows XP.<\/span><\/p>\n

Accordingly, those patches have been pulled from the Microsoft Update Catalog. There\u2019s no indication when they\u2019ll be back. <\/span><\/p>\n

Also on Friday, Microsoft officially confirmed that the November Outlook 2010 security patch, <\/span>KB 4461529<\/span><\/a>, causes the 64-bit version of Outlook 2010 to crash or freeze on startup. It\u2019s a problem we\u2019ve <\/span>known about since Wednesday<\/span><\/a>, the day after the patch was released. The KB article has been modified to say:<\/span><\/p>\n

After \u00a0you install the 64-bit version of this security update, Outlook may crash on start-up.<\/span><\/p>\n

A <\/span>separate advisory<\/span><\/a> states:<\/span><\/p>\n

After updating Outlook 2010 to the November 2018 Public Update KB 4461529 Outlook crashes or closes suddenly on start up. The issue only affects 64-bit installations of Outlook 2010.<\/span><\/p>\n

More Information<\/span><\/p>\n

In the Application Event Viewer the following event details are observed:<\/span><\/p>\n

Faulting application name: OUTLOOK.EXE, version: 14.0.7224.5000, time stamp: 0x5bcb80d1<\/span><\/p>\n

Faulting module name: olmapi32.dll, version: 14.0.7224.5000, time stamp: 0x5bcb809a<\/span><\/p>\n

Exception code: 0xc0000005<\/span><\/p>\n

Fault offset: 0x000000000001e4b9<\/span><\/p>\n

Faulting process id: 0x3998<\/span><\/p>\n

Faulting application start time: 0x01d47d3befb78cd8<\/span><\/p>\n

Faulting application path: C:Program FilesMicrosoft OfficeOffice14OUTLOOK.EXE<\/span><\/p>\n

Faulting module path: C:Program FilesMicrosoft OfficeOffice14olmapi32.dll<\/span><\/p>\n

Microsoft is investigating the issue and we will update this page when further details become available. As a workaround, you could try using Outlook Web Access.<\/span><\/p>\n

Caution: We do not recommend removing security update KB 4461529.<\/span><\/p>\n

Which is a bizarre turn of events. The patch covers four separate security holes in Outlook 2010, identified as <\/span>CVE-2018-8522<\/span><\/a>, <\/span>-8524<\/span><\/a>, <\/span>-8576 <\/span><\/a>and <\/span>-8582<\/span><\/a>. All four of those security weaknesses are rated \u201cImportant\u201d (which means they aren\u2019t) and have no known exploits or public disclosures. <\/span><\/p>\n

While Microsoft figures out a way to fix the fix, you\u2019re instructed to use a product that doesn\u2019t look or act one whole heckuvalot like Outlook 2010. Adding injury to insult, at the moment Office 365 OWA using <\/span>Multi-Factor Authorization is down<\/span><\/a>.<\/span><\/p>\n

Join us to get your Office questions answered on the <\/span>AskWoody Lounge<\/span><\/a>.<\/span><\/em><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Mon, 19 Nov 2018 08:15:00 -0800<\/strong><\/p>\n

\n
\n

Two related Office 2010 non-security patches issued on Nov. 6 were pulled on Nov. 17. <\/span>KB 4461522<\/span><\/a> and <\/span>KB 2863821<\/span><\/a> are both related to changes coming in the Japanese calendar next month <\/span>attributed to the abdication<\/span><\/a> of Emperor Akihito in favor of his son, Naruhito. The event has been compared to the Y2K problem in the west. It\u2019s not clear why two patches were released on Nov. 6 to accommodate that calendar change, but both KB articles now sport the admonition:<\/span><\/p>\n

To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10516,10909,714,10525],"class_list":["post-13861","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-microsoft","tag-microsoft-office","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/13861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=13861"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/13861\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=13861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=13861"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=13861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}