Newsletter Archives

• Master patch list as of October 17, 2022

  Posted on October 17, 2022 at 19:50 CDT by Susan Bradley • Comment in the Forums

  #PatchTuesday

  I’ve updated the Master Patch List for today’s out of band release

  Microsoft released an “out of band” that is on the Microsoft Catalog site for Windows 10 and 11 releases only for issues with SSL and TLS.  It’s due to new behavior introduced after the September optional updates rolled into the October cumulative/security updates. See https://support.microsoft.com/en-us/topic/kb5017811-manage-transport-layer-security-tls-1-0-and-1-1-after-default-behavior-change-on-september-20-2022-e95b1b47-9c7c-4d64-9baf-610604a64c3e 

  I noted in the newsletter that side effects may be seen on older applications (for example Citrix Workspace does not connect after October 2022 update) so you may wish to see if this out of band update will help.

  Consumer impact:  Not seeing issues with this on consumer devices.

  Business impact:  May see issues with older applications.

  As always, thank you all for supporting the cause! Remember a donation will give you access and if you donate $50 or more you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.

  Windows Security Master Patch List, October 2022 Black Tuesday, Patch Lady Posts

• Master Patch List as of October 11, 2022

  Posted on October 12, 2022 at 22:23 CDT by Susan Bradley • Comment in the Forums

  #PatchTuesday

  I’ve updated the Master Patch List for yesterday’s releases

  I’ll be keeping an eye out for issues and will be updating that page and spreadsheet should I seen anything trending.

  Not seeing anything in my personal home testing for consumer/home issues

  Business impact only:  Group policy issue after the install of October releases (same issue as last month).  See master patch list page.

  2012 R2 server OS only – seeing Internet explorer/access is denied in the event log

  TLS1.0/1.1 is only disabled on Windows 10 and Server 2019 this patch. 2016 retains it and Windows 11/ Server 2022 already have it disabled by default.

  As always, thank you all for supporting the cause! Remember a donation will give you access and if you donate $50 or more you’ll get a special code to enable text messages sent to your phone each time the Master Patch List gets updated and when I change the MS-DEFCON level.

  Uncategorized Master Patch List, October 2022 Black Tuesday, Patch Lady Posts

• Ready for October’s Patches?

  Posted on October 11, 2022 at 12:07 CDT by Susan Bradley • Comment in the Forums

  It’s DefCon Tuesday again.  Remember Windows 10 22H2 will be out later this month.

  We have yet to get the details on the Windows 10/11 ‘moment’ releases – those incremental dribble updates. My gut tells me to look for these starting to come out in the preview updates and as I see the details, I’ll alert you about them as well.

  In the meantime for those of you that patch Exchange servers, don’t forget to review the updated guidance regarding those zero day attacks.

  For those on Windows 11 22H2 remember Microsoft warned about a file copy slowdown.

  Links below as they go public…..

  Listing of vulnerabilities

  Dustin Child’s zero day blog

  Ghacks

  SANS Internet Storm Center

  Group policy bug still there and not fixed – impacts business patchers only not home/consumers.

  Exchange mail server bug not fixed even though security updates for Exchange were released today.

  Windows Security MS-DEFCON 2, October 2022 Black Tuesday, Patch Lady Posts

• October 2022 Office non-Security updates have been released

  Posted on October 4, 2022 at 12:25 CDT by PKCano • Comment in the Forums

  The October 2022 Office non-Security updates have been released Tuesday, October 4, 2022. They are not included in the DEFCON-4 approval for the September 2022 patches. Unless you have a specific need to install them, you should wait until Susan Bradley (Patch Lady) approves them and any problems have been reported.

  Remember, Susan’s patching sequence and recommendations are based on a business environment that has IT support and may have time constraints on the updating process. Consumer patching should be more cautious due to limited technical and mechanical resources. The latter is the reason for the AskWoody DEFCON system.

  Office 2016
  Update for Microsoft Office 2016 (KB5002243)

  Office 2013
  Update for Microsoft Office 2013 (KB5002274)

  On April 10, 2018, Office 2013 reached End of Mainstream Support. Extended Support ends for Office 2013 on April 11, 2023.
  Office 2016 also reached  End of Mainstream Support on October 13, 2020. EOS for Office 2016 is October 14, 2025.

  Updates are for the .msi version (perpetual). Office 365 and C2R are not included.

  Security updates for all supported versions of Microsoft Office are released on the second Tuesday of the month (Patch Tuesday).

  Office 2013, Office Patches/Security October 2022 Black Tuesday, October 2022 Office non-Security updates, Office 2013, Office 2016