Newsletter Archives

• Various out of band updates out to fix January patch issues

  Posted on January 17, 2022 at 17:01 CST by Susan Bradley • Comment in the Forums

  When Microsoft has issues with updates, it normally takes until Fridayish before they identify a root cause and then it’s Mondayish of the following week that fixes get released. And here we are with out of band updates to fix the various issues that were triggered by the January updates. Now I STILL am not budging from my MS-DEFCON 1 stance of don’t patch. But if you are in a situation were you are mandated to patch, at least you can grab a fix.

  https://twitter.com/WindowsUpdate/status/1483212333560172545

  https://support.microsoft.com/en-us/topic/january-17-2022-kb5010793-os-builds-19042-1469-19043-1469-and-19044-1469-out-of-band-f2d4f178-5b36-49cb-a6fd-4bf9857574f9   Fixes for various Windows 10
  Updates a known issue that affects VPN connections.

  Updates a known issue that causes unexpected restarts on Windows Server domain controllers.  Should be “offered up” on Windows update but not pushed

  https://support.microsoft.com/en-us/topic/january-17-2022-kb5010795-os-build-22000-438-out-of-band-2d2b9310-d845-41c4-9907-aeea24f36a63  Fixes to Windows 11 for VPN issues – should be “offered up” on Windows update but not pushed

  https://support.microsoft.com/en-us/topic/kb5010794-out-of-band-update-for-windows-8-1-and-windows-server-2012-r2-january-17-2022-a92500fb-f227-400e-b70e-f7dd50386fd3

  Fixes to Server 2012 R2 HyperV issues – only on the Microsoft catalog site. You’ll need to manually download it and apply, note it’s a security only update, not a monthly rollup.

  Bottom line, out of band updates are out to fix various issues seen in the January updates.  Note that not all are out on Windows update, but rather on the catalog site.
  MS-DEFCON, Windows Security January 2022 Black Tuesday, Patch Lady Posts

• January 2022 patch day is here

  Posted on January 11, 2022 at 12:11 CST by Susan Bradley • Comment in the Forums

  It’s that time of the month again for Windows updates where we all pause, ensure we have a GOOD backup of our machines and that we have deferrals in place in the form of “date deferrals”, or “metered”, or all the ways that we can hold back a bit.

  The raw MSRC guide is out, and it looks like this month we have .NET security patches. That means that this month I’ll recommend that you install them rather than being a bit wishy washy as to whether or not to hold back when they don’t contain security content. I know .NET patching is confusing.

  It’s unclear if these updates still trigger a problem with indexing in Outlook desktop.  Outlook searching has never been that great, if I really need an email I will launch outlook on the web and use that search box as well.

  Those of you that run desktop Exchange mail servers – there’s an update out for Exchange. Test and patch accordingly.

  There’s a couple of those “you need to update the store” as there’s a HEVC extension bug. So if you’ve disabled your Microsoft store updating, be aware we have another Store bug this month.

  Already seeing issues with L2TP vpn connections source:  —  KB5009543 – January 11, 2022 Breaks L2TP VPN Connections : sysadmin (reddit.com)  Note this is not consumer vpn software, but business style vpn software.

  Seeing issues with servers stuck in a boot loop   “So it sounds like the monthly Microsoft screw-up is going to be 2012 DCs getting stuck in boot loop?” ” Not just 2012R2’s, we also have a report of a 2019 in the mix.”   Source:  Patch Tuesday Megathread (2022-01-12) : sysadmin (reddit.com) and Patchday: Windows 8.1/Server 2012 R2 Updates (January 11, 2022), boot loop reported | Born’s Tech and Windows World (borncity.com)

  For those of you on Apple devices, by now you should make sure your December updates are installed.

  If you are one of the  “take one for the team” members that do have a backup and do early testing on behalf of the rest of us, as always I ask that you report patching successes as well as failures.

  Edit 1-13-2022 hearing that Microsoft has pulled updates from Windows update/Microsoft update – not sure if WSUS patches have been pulled.

  Security, Windows Security January 2022 Black Tuesday, Patch Lady Posts

• January 2022 Office non-Security Updates are now available

  Posted on January 4, 2022 at 12:34 CST by PKCano • Comment in the Forums

  The January 2022 Office non-Security updates have been released Tuesday, Jan. 4, 2022. They are not included in the DEFCON-4 approval for the December 2021 patches. Unless you have a specific need to install them, you should wait until Susan Bradley (Patch Lady) approves them and any problems have been reported.

  Remember, Susan’s patching sequence and recommendations are based on a business environment that has IT support and may have time constraints on the updating process. Consumer patching should be more cautious due to limited technical and mechanical resources. The latter is the reason for the AskWoody DEFCON system.

  Office 2016
  Update for Microsoft Project 2016 (KB4504713)

  There were no non-security listings for Office 2013.
  On April 10, 2018, Office 2013 reached End of Mainstream Support. Extended Support will end for Office 2013 on April 11, 2023.
  Office 2016 also reached  End of Mainstream Support on October 13, 2020. EOS for Office 2016 is October 14, 2025.

  Updates are for the .msi version (perpetual). Office 365 and C2R are not included.

  Security updates for all supported versions of Microsoft Office are released on the second Tuesday of the month (Patch Tuesday).

  Office Patches/Security January 2021 Office non-Security patches, January 2022 Black Tuesday, Office 2013, Office 2016