{"id":9804,"date":"2017-10-11T04:30:01","date_gmt":"2017-10-11T12:30:01","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/10\/11\/news-3577\/"},"modified":"2017-10-11T04:30:01","modified_gmt":"2017-10-11T12:30:01","slug":"news-3577","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/10\/11\/news-3577\/","title":{"rendered":"Early reports of myriad Microsoft Patch Tuesday problems"},"content":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Wed, 11 Oct 2017 04:28:00 -0700<\/strong><\/p>\n

This month\u2019s massive bundle<\/a> of Patch Tuesday patches almost certainly contains more than a few surprises, and they\u2019re only starting to surface. Here\u2019s a rundown of what I\u2019ve seen in the wee hours of Wednesday morning.<\/p>\n

There are lots of reports of delayed, failed and rolled back installations of KB 4041676<\/a>, the Win10 Creators Update (version 1703) monthly cumulative update, which brings 1703 up to build 15063.674. A quick glance at the KB article confirms that there are dozens and dozens of fixes in this cumulative update \u2014 a remarkable state of affairs, considering the Fall Creators Update, version 1709, is due on Oct. 17.<\/p>\n

Overnight, G\u00fcnter Born<\/a> and Bogdan Popa<\/a> accumulated long lists of people reporting problems with the update, including reports of hangs<\/a>, uncontrolled restarts<\/a>, and exceedingly slow downloads<\/a>. Born reports<\/a> that the source of some problems may be attributable to Norton. If you\u2019re having problems, my long-standing advice<\/a> for cleaning things up and running the Update Troubleshooter may help.<\/p>\n

For those of you wondering what happened to this month\u2019s Flash security patches, there\u2019s a surprising answer: You aren\u2019t seeing any Adobe security patches this month because there aren\u2019t any! All of this month\u2019s patches<\/a> are quality updates, er, bug fixes.<\/p>\n

@PKCano on AskWoody has confirmed<\/a> that there were no .NET Security-only updates this month. All of the .NET updates contain non-security patches only.<\/p>\n

@MrBrian<\/a> found this little gem in two Microsoft posts:<\/p>\n

All updates for .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 require the D3 Compiler to be installed. We recommend that you install the included D3 Compiler before applying this update. For more information about the D3 Compiler, see KB 4019990.<\/p>\n

MrBrian goes on to note<\/p>\n

On a Windows 7 x64 virtual machine with no Windows monthly rollups installed, and .NET Framework 4.6.1 installed, Windows Update does not list the October 2017 .NET Framework monthly rollup\u2026 But the manual installer for the October 2017 .NET Framework monthly rollup successfully installed. Ugh!<\/p>\n

Tero Alhonen has important information<\/a> about the TPM vulnerability. You may recall that Microsoft\u2019s Security Advisory ADV170012<\/a> contains the warning:<\/p>\n

Do NOT apply the TPM firmware update prior to applying the Windows operating system mitigation update. Doing so will render your system unable to determine if your system is affected. You will need this information to conduct full remedation.<\/p>\n

And ZDI illuminates:<\/p>\n

This is just a stop-gap measure and still requires manual intervention. When the actual firmware updates roll out from TPM vendors, the process will need to happen all over again \u2014 except this time, new TPM firmware needs to be installed on every affected device.<\/p>\n

Which is enough to tie any admin in knots. Alhonen offers some insight:<\/p>\n

If your hardware is a Surface device, firmware updates are yet not available as of October 10, 2017. Surface Laptop and the Surface Pro (released in June 2017) are NOT affected\u2026 [for Surface Pro 3] Infineon firmware version 5.0 TPM is not safe. Please update your firmware.<\/p>\n

If you\u2019re patching the 2015 LTSC version of Windows 10, you need to see Microsoft’s \u00a0admission that the Windows Presentation Framework may get munged. WPF crashes after the October 2017 Security and Monthly Quality Rollup is applied on Windows 10 version 1507 that has Microsoft .NET Framework 4.6.2 installed.<\/a><\/p>\n

There\u2019s also a lot of confusion about Microsoft\u2019s explanation for its fix<\/a> of CVE-2017-11776. Microsoft says: \u201cAn attacker who exploited the vulnerability could use it to obtain the email content of a user,\u201d when in fact no attack is necessary. The SEC-Consult blog<\/a> has a detailed explanation:<\/p>\n

If you used Outlook\u2019s S\/MIME encryption in the past 6 months (at least, we are still waiting for Microsoft to release detailed information and update the blog) your mails might not have been encrypted as expected. In the context of encryption this can be considered a worst-case bug.<\/p>\n

Kevin Beaumont (@GossiTheDog) has tied the pieces together and concluded:<\/p>\n

Outlook S\/MIME bug is absolutely reproducible, I just did it. Does not need an attacker. Microsoft have classified it wrong.<\/p>\n

So if you used Outlook\u2019s S\/MIME encryption for text emails in the past six months, your emails haven\u2019t been encrypted at all. The \u201cencrypted\u201d emails went out in plain text, no antivirus backdoor required. Gotcha.<\/p>\n

No definitive word as yet on whether the Win 8.1 Monthly Rollup, KB 4041693<\/a>, or the Security-only update, KB 4041687<\/a>, fix the baffling problem where Win 8.1 customers can\u2019t sign in with a Microsoft account<\/a>. That bug was introduced in the September Monthly Rollup. The topic isn\u2019t even mentioned in the KB articles.<\/p>\n

\u2026 and it\u2019s been less than a day since the patches rolled out.<\/p>\n

Got a patching problem? Hit us on the AskWoody Lounge<\/a>.<\/em><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Wed, 11 Oct 2017 04:28:00 -0700<\/strong><\/p>\n

\n
\n

This month\u2019s massive bundle<\/a> of Patch Tuesday patches almost certainly contains more than a few surprises, and they\u2019re only starting to surface. Here\u2019s a rundown of what I\u2019ve seen in the wee hours of Wednesday morning.<\/p>\n

There are lots of reports of delayed, failed and rolled back installations of KB 4041676<\/a>, the Win10 Creators Update (version 1703) monthly cumulative update, which brings 1703 up to build 15063.674. A quick glance at the KB article confirms that there are dozens and dozens of fixes in this cumulative update \u2014 a remarkable state of affairs, considering the Fall Creators Update, version 1709, is due on Oct. 17.<\/p>\n

To read this article in full or to leave a comment, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10525],"class_list":["post-9804","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9804","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=9804"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9804\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=9804"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=9804"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=9804"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}