Over the previous 12 months, we have seen Microsoft make radical enhancements in its browser stability and important constructive modifications to its Home windows replace communication and telemetry methods. And this month’s Patch Tuesday launch brings with it an extremely mild set of updates — perhaps the fewest variety of updates I’ve ever seen.
There are not any zero-days, which is a good end to 2023, although Home windows will get three important updates and Visible Studio would require quick consideration attributable to a number of re-releases of previous important utility patches.
The group at Readiness has created a useful infographic to stipulate the dangers related to every replace on this final launch of 2023. One notice of warning: we have now seen a number of potential updates to older patches (October/November) probably coming down the discharge pipeline from Microsoft. It is perhaps price checking in through the upcoming vacation break to see whether or not there are any out-of-band patches for the Home windows ecosystem.
Identified points
Every month, Microsoft particulars the recognized points associated to the working system and platforms included in its replace cycle.
- Microsoft has raised a reporting-related problem with Microsoft Intune and BitLocker. Utilizing the FixedDrivesEncryptionType or SystemDrivesEncryptionType coverage settings within the BitLocker configuration service supplier (CSP) node in cell machine administration (MDM) apps would possibly incorrectly present a 65000 error within the “Require Gadget Encryption” setting for some gadgets in your setting. Microsoft continues to be engaged on resolving this problem.
- Home windows gadgets utilizing a couple of monitor would possibly expertise points with desktop icons transferring unexpectedly between screens or see different icon alignment points when trying to make use of Copilot in Home windows. This was raised final month and it seems Microsoft continues to be engaged on the difficulty.
Although we aren’t experiencing printer issues with Patch Tuesday as we have now previously, HP Printers are actually being displayed on Home windows computer systems, even when HP printers are neither related nor put in. Signs of this could embody:
- Some Home windows 10 and Home windows 11 gadgets are putting in the HP Good app.
- Printers are renamed as HP printers no matter their producer. Most are being named because the HP LaserJet M101-M106 mannequin. Printer icons may also be modified.
- Double clicking on a printer shows the on-screen error “No duties can be found for this web page.”
Microsoft has confirmed that this isn’t the results of an HP Printer replace and is engaged on a decision.
Main revisions
That is an uncommon month for Microsoft, as there are usually a number of “info solely” revisions to earlier updates. This month, Microsoft has re-published updates for each Microsoft Edge and Microsoft Visible Studio that can require (within the case of Visible Studio, pressing) consideration. I’ve up to date these Browser and Improvement sections accordingly.
Mitigations and workarounds
Following the sample set this month, Microsoft broke with custom and has not launched any documentation on present vulnerability mitigations or workarounds.
Testing steering
Every month, the group at Readiness analyses the newest Patch Tuesday updates and gives detailed, actionable testing steering primarily based on a big utility portfolio and an in depth evaluation of the Microsoft patches and their potential influence on the Home windows platforms and utility installations.
For this end-of-year replace, we have now not seen any high-risk or important performance modifications for Home windows. Nevertheless, there have been a number of modifications to core performance that can require some consideration, together with:
- Home windows Networking: Web Connection Sharing (ICS), the Home windows DHCP IP providers supplier has been up to date. We suggest that you just progress the next assessments:
- Ping native/distant gadgets (embody Google.com and Bing.com).
- Browse the web, with each massive and small file downloads.
- Stream music and video.
- Run messaging apps (embody Microsoft Groups).
- Home windows kernel updates. The Home windows kernel lies on the very core of the Home windows working system and any modifications needs to be examined with care. That stated, the modifications carried out this month have a really low floor space and may current themselves with a easy reboot.
- SQL Purchasers and OLE: The Microsoft SQL shoppers for each SQL server and OLE have been up to date. We suggest working primary SQL instructions to fetch/replace knowledge from each a neighborhood and distant server.
You won’t bear in mind Faxing (displaying my age right here) however Microsoft has made a minor replace to a single discrete perform name within the MakeCall API perform. In case you are utilizing automated faxes in your workflows or depend on a FAX server corresponding to FAXPress, then you will have to carry out a whole check that features sending, receiving, and the administration of current faxes.
Automated testing will assist with these eventualities (particularly a testing platform that provides a “delta” or comparability between builds). Nevertheless, for line of enterprise purposes, getting the applying proprietor (doing UAT) to check and approve the testing outcomes continues to be completely important.
Home windows lifecycle replace
This part consists of vital modifications to servicing (and most safety updates) to Home windows desktop and server platforms. There are not any main modifications or finish of assist notices for the Home windows or Workplace platforms this month. Nevertheless, Microsoft has printed the top of neighborhood assist for PHP 8.0. For these affected, Microsoft offers a few steps to assist with updating applications.
Every month, we break down the replace cycle into product households (as outlined by Microsoft) with the next primary groupings:
- Browsers (Microsoft IE and Edge).
- Microsoft Home windows (each desktop and server).
- Microsoft Workplace.
- Microsoft Trade Server.
- Microsoft Improvement platforms (NET Core, .NET Core and Chakra Core).
- Adobe (retired???, perhaps subsequent 12 months).
Browsers
The most important modifications included with this December browser replace lie inside the Chrome browser parts together with:
These revisions are comparatively minor and shouldn’t pose a compatibility downside; add these updates to your commonplace browser patch launch schedule.
Home windows
This month, Microsoft launched three important updates and 22 patches rated vital to the Home windows platform that cowl the next key parts:
- Home windows Networking, ICS, DHCP and DNS;
- Home windows Kernel and Win32Okay drivers;
- Home windows Telephony Server (a single API replace);
- Microsoft Bluetooth drivers.
Your testing and deployment focus needs to be on making certain that goal techniques are working as anticipated with this month’s networking updates. Each time Microsoft updates the Kernel (far too usually), care have to be taken with exterior gadgets that depend on system degree drivers. A great couple of reboots this month ought to do the trick.
Add this Home windows replace to your commonplace launch schedule.
Microsoft Workplace
Microsoft launched three comparatively minor updates to Microsoft Phrase. These patches tackle lowe- threat vulnerabilities, have a low testing profile, and are rated as vital. Add these Workplace updates to your commonplace launch schedule.
Microsoft Trade Server
Fortunate for us — and for these working over the Christmas break — there are not any Microsoft Trade Server updates.
Microsoft growth platforms
There have been no new growth platforms (.NET or Microsoft Visible Studio) updates from Microsoft this month. However there are a number of important updates which were revised outdoors of the Patch Tuesday calendar together with: CVE-2023-36792, CVE-2023-36793, CVE-2023-36794 and CVE-2023-36796.
All of those reported CVE entries relate to a cluster of Visible Studio distant code execution vulnerabilities. Microsoft is rereleasing KB5029365 to handle the next recognized problem: Prospects who’re utilizing Microsoft Visible Studio 2013 Replace 5 would possibly obtain a “C2471” error after trying to compile a construct that has precompiled headers (PCH) that use the /Gm and /ZI (Edit and Proceed) switches.
These re-releases of those 4 Visible Studio updates (from September) are rated important by Microsoft and can must be added to your “Patch Now” launch schedule.
Adobe Reader (nonetheless right here, however simply not this month)
There have been no updates from Adobe for Reader or Acrobat this month. And no updates to third-party purposes such WinRAR nor deprecations to main system parts. Now that we have now a little bit of time left within the 12 months, we are able to begin speaking in regards to the potential compatibility points in Home windows 23H2.
For Patch Tuesday Debugged, that is a wrap for 2023. It has been a pleasure and a privilege to assist with Patch Tuesday testing and deployment challenges over the previous 12 months. I can not wait to see what 2024 will convey us.
