Patch List for August 13, 2024

Topic

New Reply

Once again I don’t recommend installing updates at this time.  I’ve updated the master patch list here. In my early consumer testing I’m personally no
[See the full post at: Patch List for August 13, 2024]

Susan Bradley Patch Lady/Prudent patcher

3 users thanked author for this post.

abbodi86, deuce120, lmacri

Reply | Quote

Replies

I would like to point out that there are security patches in this week’s updates for IPv6. The CVE is rated a 9.8 in severity which is… not good. Even if you don’t use internet-facing IPv6, by simply having it enabled, you are vulnerable.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063

Reply | Quote

On a consumer side -firewalls block ipv6. In business settings the attacker would need to be inside first.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan Bradley wrote:

On a consumer side -firewalls block ipv6.

Any documentation for this? Most sources say IPv6 is enabled by default in Windows.

Susan Bradley wrote:

In business settings the attacker would need to be inside first.

But …

The vulnerable component is bound to the network stack and the set of possible attackers extends beyond the other options listed, up to and including the entire Internet. Such a vulnerability is often termed ‘remotely exploitable’ and can be thought of as an attack being exploitable at the protocol level one or more network hops away (e.g., across one or more routers).

Reply | Quote

Not Windows, the firewall of your router is more than likely not going to pass along these packets based on my understanding at this time – mind you there is not a lot of detail on this CVE I’m going by past vulnerabilities like this for my judgement call.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Susan Bradley wrote:

On a consumer side -firewalls block ipv6. In business settings the attacker would need to be inside first.

This vulnerability is unlikely to come through an external firewall. More likely to exploit via malware, which would be an attack from the “inside”.

Reply | Quote

Sneak peak for Monday –  I call this the “don’t click” month and reserve the right to pull the trigger early.  At this time there are no working Proof of concepts and no full details about how the attack can occur.  Until I know more details, I consider a “patched human” good enough for now.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

ISP doesn’t yet support IPv6 and I eventually disabled it for all my Network adapters because having it enabled sometimes caused severe bandwidth issues (i.e. only getting ~50% of what I was paying for.)

I also had issues where the Cisco & PanGPS VPNs I use to connect to sites I support sometimes wouldn’t work with it enabled.

Once I disabled it, all those problems disappeared!

Since it’s currently not enabled on my PCs, I should be protected.

Have to wonder though, if having it disabled, might cause issues with the new update installing without errors once it’s clear to do so??

Reply | Quote

n0ads wrote:

Have to wonder though, if having it disabled, might cause issues with the new update installing without errors once it’s clear to do so??

A VERY good question!! I wouldn’t be a bit surprised if it were revealed that MS just assumed that everybody has IPv6 enabled “because that’s how we ship Windows”.

Now, if only someone had a machine that were only a test bed where they could disable IPv6 and then install this month’s patch to find out if it installs OK, or if the install goes sideways because of IPv6 being disabled.

Reply | Quote

No it would not cause issues in patching.  Patches will install whether ipv6 is enabled or disabled.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Alex5723

Reply | Quote

Just checked – IPv6 is disabled on my ASUS {RT-AX3000) router.  Not sure if I did that or is the default setting.

Reply | Quote

Thanks as always @sb for the comprehensive patch list.

One remark though: Vivaldi has long passed Version 6.5. It’s on Version 6.8 now https://vivaldi.com/changelog-vivaldi-browser-6-8/

LMDE is my daily driver now. Old friend Win10 keeps spinning in the background

Reply | Quote