-
What’s up with the “new” XP patch KB 982316?
I don’t know what to make of it.
I’m seeing reports all over the internet that Microsoft has released a new Windows XP patch, KB982316.
Yes, Windows XP.
There’s a download link that’s dated May 19, 2017 — last Friday.
But there’s no Microsoft Update Catalog listing.
The KB article says it was last reviewed on June 10, 2011:
This update implements a defense-in-depth change that some customers may decide to deploy.. This update changes the Access Control Lists (ACLs) for the following registry entry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Telephony
By default, Network Service (NS) users explicitly have full permission to this registry entry. After you install this update, NS users will have Read-Only access to this registry entry. The update will apply the same ACLs to all subkeys of the registry entry.
The KB article points to Security Advisory 2264072, Elevation of Privilege Using Windows Service Isolation Bypass, but that article’s dated Aug. 10, 2010. Version 1.0.
Is this another supercedence screw-up? (We’ve seen many, lately.) Is it related to the Shadow Brokers trove?
And, if it’s really a new patch – not some phantom resurrected erroneously — is Microsoft going to patch XP for NSA-derived exploits?