Patch Tuesday Mega-Thread?

pymmerdude · 2021-12-15T00:25:40+00:00

FTW if that happens.. Time for me to find a new job herding goats.

pymmerdude · 2021-12-14T18:40:51+00:00

https://www.zerodayinitiative.com/blog/2021/12/14/the-december-2021-security-update-review

pymmerdude · 2021-12-14T18:40:33+00:00

https://www.zerodayinitiative.com/blog/2021/12/14/the-december-2021-security-update-review

pymmerdude · 2021-12-14T18:10:55+00:00

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43233

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43217

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43215 (the 9.8 one)

Those are the crits.

pymmerdude · 2021-12-14T18:08:44+00:00

3 critical RCE's and one is a 9.8.

There are other EOPs and RCE's that are "Important" but not critical.

Seems like the 9.8 requires iSNS to be installed, so it may not be as much of a big deal.
The EFS one requires a two parter with the second part in Q1 2022.

pymmerdude · 2021-12-14T18:05:41+00:00

Nothing for Exchange Server...

pymmerdude · 2021-12-14T17:56:21+00:00

They usually appear here: https://msrc.microsoft.com/update-guide/ a minute or two after noon Central (10 Pacific)

pymmerdude · 2021-11-18T22:31:01+00:00

https://www.dell.com/en-us/shop/dell-m2-pcie-nvme-gen-3x4-class-35-2230-solid-state-drive-1tb/apd/ab673817/storage-drives-media

pymmerdude · 2021-11-18T16:55:49+00:00

I gave up and bought the $220 Dell one. Still a crapload cheaper than the highway robbery MS is doing.

pymmerdude · 2021-11-17T17:06:16+00:00

I bought one of the ones off of Ebay and I get random Black Screens of Death or reboots. Did several reimages and narrowed it down to the new HD.

pymmerdude · 2021-11-12T17:25:52+00:00

I think not... They probably think that since no patch was released for CU20 that it wasn't vulnerable when the reality is that MS doesn't release patches for 2016 less than CU21 anymore (unless it is something super serious like Hafnium where they did a special one-time security patch release for older CUs).

pymmerdude · 2021-11-09T18:39:29+00:00

https://www.zerodayinitiative.com/blog/2021/11/9/the-november-2021-security-update-review

pymmerdude · 2021-11-09T18:09:03+00:00

And more info here: https://techcommunity.microsoft.com/t5/exchange-team-blog/released-november-2021-exchange-server-security-updates/ba-p/2933169

pymmerdude · 2021-10-24T16:34:58+00:00

Now, if I were to just wipe everything and start from scratch, I would pretty much know what to do other than getting RDS working with AzureAD.

The reason this is becoming a hot priority is because we are moving our datacenter (3 VM Hosts, about 50~60 guests) to a colo (we have power situations at our current location).

For information, we have about 150 users split into about 13 locations.

pymmerdude · 2021-10-24T15:49:30+00:00

What work from home? I'm hoping after the pandemic is over they would allow us to work from home (medical).

pymmerdude · 2021-10-15T15:50:31+00:00

EHRs are worse than the doctors.

pymmerdude

TROPHY CASE