May updates fix risks to networks

Topic

New Reply

PATCH WATCH By Susan Bradley It’s looking like consumers may have an issue-free month — if they don’t run Windows 11 machines — and businesses will ha
[See the full post at: May updates fix risks to networks]

Susan Bradley Patch Lady

4 users thanked author for this post.

lmacri, abbodi86, mcbsys, jburk07

Reply | Quote

Replies

So it sounds like hold off on updating servers with AD?

Re. the AD CS updates, I checked Server Essentials and blogged about the Certificate Authority Web Enrollment mitigation:

https://www.mcbsys.com/blog/2022/05/secure-ad-cd-on-essentials-2016/

Re. the Essentials’ remotewebaccess DDNS updater going offline, that’s apparently fixed now, with the Microsoft rep summarizing as follows:  “The tenant id had changed due to some internal changes. We fixed those. We do not expect to see the issue come back again.”

https://docs.microsoft.com/en-us/answers/questions/836775/remotewebaccesscom-anywhere-access-broken-on-serve.html?childToView=849836#comment-849836

Reply | Quote

CISA is recommending not patching DCs.  I’m not sure I would go that far, as not all networks use computer certificates.  If you use NPS and certs for purposes of wirelesss access you will be impacted.  If you don’t, you won’t see the side effects.

Susan Bradley Patch Lady

1 user thanked author for this post.

mcbsys

Reply | Quote

Will Dormann on Twitter: “@topotam77 @garrfoster @raphajohnsec @mkolsek OK, I can confirm the same. With the May 2022 updates, petitpotam still works for an authenticated attacker. The problem I ran into earlier was that my DC was at May 2022, but my ADCS was at the August level, from my earlier testing. As such, the trust relationship was broken.😡 https://t.co/NdUFUUxr8V” / Twitter

And even with the updates – we’re still vulnerable.

Susan Bradley Patch Lady

1 user thanked author for this post.

oldfry

Reply | Quote

I am a consumer and installed May’s updates. No issues found and all installed successfully nothing broken. I am running HP Home, Win10,  21H/2.

Reply | Quote

Something for Master Patch List browsers: Firefox ESR

For those of us who don’t mind, not getting all the latest features but prefer stability. Currently it is Firefox ESR 91.9; it works on most web sites. Between Firefox ESR and Chrome you can usually get a web site working.

1 user thanked author for this post.

Alex5723

Reply | Quote

21H/2   consumer home user.  went smooth , No problems.

Reply | Quote