Microsoft Updates And Notifications for February 2019

ronjor · Feb 2, 2019

Office 365 ProPlus

Version 1901
Build 11231.20130
January 31, 2019
Click to expand...

guest · Feb 5, 2019

February 2019 Non-Security Office Update Release
February 5, 2019
https://blogs.technet.microsoft.com...uary-2019-non-security-office-update-release/

Listed below are the non-security updates we released on the Download Center and Microsoft Update today. See the linked KB articles for more information.
Click to expand...

ronjor · Feb 6, 2019

ADV190007 | Guidance for "PrivExchange" Elevation of Privilege Vulnerability

Security Advisory

Published: 02/05/2019
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. To exploit the vulnerability, an attacker would need to execute a man-in-the-middle attack to forward an authentication request to a Microsoft Exchange Server, thereby allowing impersonation of another Exchange user.
Click to expand...

guest · Feb 6, 2019

February 5, 2019
Intel recently announced that they have completed software validations and have started to release new microcode for current CPU platforms in reaction to the following threats:

Spectre Variant 3a (CVE-2018-3640: "Rogue System Register Read (RSRE)")

Spectre Variant 4 (CVE-2018-3639: "Speculative Store Bypass (SSB)")

L1TF (CVE-2018-3620, CVE-2018-3646: "L1 Terminal Fault")

This new release includes a microcode update from Intel for the following CPUs.
Click to expand...

KB4465065: Intel microcode updates
Applies to: Windows Server 2019, all versions, Windows 10, version 1809
https://support.microsoft.com/en-us/help/4465065/kb4465065-intel-microcode-updates

KB4346084: Intel microcode updates
Applies to: Windows 10, version 1803, Windows Server version 1803
https://support.microsoft.com/en-us/help/4346084/kb4346084-intel-microcode-updates

KB4346085: Intel microcode updates
Applies to: Windows 10, version 1709, Windows Server 2016 Version 1709
https://support.microsoft.com/en-us/help/4346085/kb4346085-intel-microcode-updates

ronjor · Feb 6, 2019

Announcing the new Security Engineering website

Tony Rice Principal Security PM Manager, Customer Security and Trust
February 4, 2019
We are sharing the results of our experiences through our new Security Engineering website, which includes updated Microsoft Security Development Lifecycle (SDL) practices that focus on development teams and what we believe to be the basic minimum steps for addressing security concerns when using open source. Additionally, we’ve included more specific Operational Security Assurance (OSA) practices, aligned with the operational lifecycle of cloud services, and we touch on how these can be brought together to deliver Secure DevOps.
Click to expand...

ronjor · Feb 12, 2019

February 2019 Security Update Release

MSRC Team February 12, 20190
Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates.
More information about this month’s security updates can be found on the Security Update Guide.
Click to expand...

https://blogs.technet.microsoft.com/msrc/2019/02/12/february-2019-security-update-release/

https://portal.msrc.microsoft.com/en-us/security-guidance/summary

ronjor · Feb 12, 2019

Release Notes
February 2019 Security Updates

guest · Feb 12, 2019

February 12, 2019—KB4487044 (OS Build 17763.316)
Applies to: Windows 10, version 1809, Windows Server 2019, all versions
https://support.microsoft.com/en-us/help/4487044/windows-10-update-kb4487044

February 12, 2019—KB4487017 (OS Build 17134.590)
Applies to: Windows 10, version 1803
https://support.microsoft.com/en-us/help/4487017/windows-10-update-kb4487017

February 12, 2019—KB4486996 (OS Build 16299.967)
Applies to: Windows 10, version 1709
https://support.microsoft.com/en-us/help/4486996/windows-10-update-kb4486996

February 12, 2019—KB4487020 (OS Build 15063.1631)
Applies to: Windows 10, version 1703
https://support.microsoft.com/en-us/help/4487020/windows-10-update-kb4487020

February 12, 2019—KB4487026 (OS Build 14393.2791)
Applies to: Windows 10, version 1607, Windows Server 2016
https://support.microsoft.com/en-us/help/4487026/windows-10-update-kb4487026

February 12, 2019—KB4487018 (OS Build 10240.18132)
Applies to: Windows 10
https://support.microsoft.com/en-us/help/4487018/windows-10-update-kb4487018

guest · Feb 12, 2019

Microsoft Windows Security Updates February 2019 overview
February 12, 2019
https://www.ghacks.net/2019/02/12/microsoft-windows-security-updates-february-2019-overview/

guest · Feb 12, 2019

Cumulative Update 12 for Exchange Server 2016
February 12, 2019
https://support.microsoft.com/en-au/help/4471392/cumulative-update-12-for-exchange-server-2016

Cumulative Update 12 for Microsoft Exchange Server 2016 was released on February 12, 2019. This cumulative update is a security update. It includes fixes for nonsecurity issues and all previously released fixes for security and nonsecurity issues. These fixes will also be included in later cumulative updates for Exchange Server 2016.

This update provides a security advisory in Microsoft Exchange. For more information, see Security Advisory ADV190004. It also resolves some vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2019-0686 and Microsoft Common Vulnerabilities and Exposures CVE-2019-0724.
Click to expand...

ronjor · Feb 12, 2019

February 2019 Office Update Release

The Microsoft Office Sustained Engineering Team February 12, 2019
The February 2019 Public Update releases for Office are now available! This month, there are 19 security updates and 28 non-security updates. All of the security and non-security updates are listed in KB article 4488446.
A new version of Office 2013 Click-To-Run is available: 15.0.5111.1001
Click to expand...

ronjor · Feb 13, 2019

Office 365 ProPlus

Code:

Channel    Version    Build                 Release date

Monthly      1901       11231.20174    February 12, 2019

Minimalist · Feb 13, 2019

Microsoft Patches Zero-Day Browser Bug Under Active Attack

It’s a busy Patch Tuesday for Microsoft with a total of 20 critical vulnerabilities addressed in this February’s monthly security bulletin. Four bugs, rated important, were previously publicly known. Worse, Microsoft said a zero-day bug tied to its Internet Explorer browser, also rated important, is being actively exploited in the wild.

The zero-day bug is now patched (CVE-2019-0676) and is identified as an Internet Explorer Information Disclosure vulnerability. According to researchers, an attacker could persuade a user to open a malicious website to exploit the browser flaw.
Click to expand...

https://threatpost.com/microsoft-patches-zero-day-browser-bug-under-active-attack/

guest · Feb 19, 2019

February 19, 2019—KB4487029 (OS Build 17134.619)
Applies to: Windows 10, version 1803
https://support.microsoft.com/en-us/help/4487029/windows-10-update-kb4487029

February 19, 2019—KB4487021 (OS Build 16299.1004)
Applies to: Windows 10, version 1709
https://support.microsoft.com/en-us/help/4487021/windows-10-update-kb4487021

February 19, 2019—KB4487011 (OS Build 15063.1659)
Applies to: Windows 10, version 1703
https://support.microsoft.com/en-us/help/4487011/windows-10-update-kb4487011

February 19, 2019—KB4487006 (OS Build 14393.2828)
Applies to: Windows 10, version 1607, Windows Server 2016
https://support.microsoft.com/en-us/help/4487006/windows-10-update-kb4487006

guest · Feb 21, 2019

ADV190005 | Guidance to adjust HTTP/2 SETTINGS frames
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190005

Security Advisory
Published: 02/20/2019
Microsoft is aware of a potential condition which can be triggered when malicious HTTP/2 requests are sent to a Windows Server running Internet Information Services (IIS). This could temporarily cause the system CPU usage to spike to 100% until the malicious connections are killed by IIS.
Click to expand...

Microsoft publishes security alert on IIS bug that causes 100% CPU usage spikes
February 21, 2019
https://www.zdnet.com/article/micro...-on-iis-bug-that-causes-100-cpu-usage-spikes/

The Microsoft Security Response Center published yesterday a security advisory about a denial of service (DOS) issue impacting IIS (Internet Information Services), Microsoft's web server technology.

According to Microsoft, IIS servers shipped with Windows 10 and Windows Server 2016 are impacted by a vulnerability when processing HTTP/2 requests.
The Redmond-based OS maker addressed the issue by adding the ability to define thresholds on the number of SETTINGS parameters included in an HTTP/2 request that an IIS server would be able to handle.

Cumulative updates KB4487006, KB4487011, KB4487021, and KB4487029 were released two days ago to address the IIS DOS bug.
Click to expand...

guest · Feb 21, 2019

February 21, 2019—KB4491101 (OS Build 10240.18135)
Applies to: Windows 10
https://support.microsoft.com/en-us/help/4491101/february212019kb4491101osbuild1024018064

ronjor · Feb 28, 2019

Microsoft Security Intelligence Report Volume 24 is now available

Diana Kelley Cybersecurity Field CTO February 28, 2019
The 24th edition of the Microsoft Security Intelligence Report (SIR) is now available. And this year, I’m thrilled to share that not only can you download the PDF, but you can also visit an online, interactive version that provides tools to filter and deep dive into the data. This edition of the report is a reflection on last year’s security events and includes an overview of the security landscape, lessons learned from the field, and recommended best practices.
Click to expand...

Log in or Sign up

Microsoft Updates And Notifications for February 2019

ronjor Global Moderator

guest Guest

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

Log in or Sign up

Microsoft Updates And Notifications for February 2019

ronjor Global Moderator

guest Guest

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

Useful Searches