{"id":208008,"date":"2018-08-16T02:45:18","date_gmt":"2018-08-16T00:45:18","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=208008"},"modified":"2022-08-22T10:18:58","modified_gmt":"2022-08-22T08:18:58","slug":"microsoft-security-advisory-notification-14-august-2018","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2018\/08\/16\/microsoft-security-advisory-notification-14-august-2018\/","title":{"rendered":"Microsoft Security Advisory Notification (14.\/15. August 2018)"},"content":{"rendered":"

Microsoft  hat zum 14. und 15. August 2018 mehrere Security Advisory Notification ver\u00f6ffentlicht, die die neu entdeckten Schwachstellen (L1TF) zum Thema haben. Erg\u00e4nzung:<\/strong> Sicherheitsmitteilungen vom 15. August 2018 hinzugef\u00fcgt.<\/p>\n

<\/p>\n

********************************************************************
Security Advisories Released or Updated on August 14, 2018
<\/strong>********************************************************************
\"\"* Microsoft Security Advisory ADV180018<\/p>\n

– Title: Microsoft guidance to mitigate L1TF variant
– ADV180018<\/a>
– Reason for Revision: Information published.
– Originally posted: August 14, 2018
– Updated: N\/A
– Version: 1.0<\/p>\n

* Microsoft Security Advisory ADV180016<\/p>\n

– Title: Microsoft Guidance for Lazy FP State Restore
– ADV180016<\/a>
– Reason for Revision: Microsoft is announcing that the Windows
   security updates released on August 14, 2018 provide mitigations
   for CVE-2018-3665 – Lazy FP State Restore. These updates are
   available for 32-bit versions of Windows 7 and Windows Server
   2008. See the Affected Products table to download and install
   the security updates.
– Originally posted: June 13, 2018
– Updated: August 14, 2018
– Version: 4.0<\/p>\n

******************************************************************** <\/p>\n

Microsoft Security Update Releases August 15, 2018<\/strong>
<\/strong>********************************************************************<\/p>\n

Summary
=======<\/p>\n

The following CVEs have undergone a major revision increment:<\/p>\n

* CVE-2018-8202
* CVE-2018-8284<\/p>\n

Revision Information:
=====================<\/p>\n

– CVE-2018-8202 | .NET Framework Elevation of Privilege
   Vulnerability
– https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance<\/a>
– Reason for Revision: Microsoft is releasing the August Monthly
   Rollup, Security Only, and Security Updates to fully resolve known
   issues some customers experienced after installing the July security
   updates for .NET Framework. Customers who installed either the
   Standalone updates or Alternate Cumulative update should also install
   the August updates. See the Affected Products table for links
   to download and install the August updates.
– Originally posted: July 10, 2018
– Updated: August 15, 2018
– Aggregate CVE Severity Rating: Important
– Version: 5.0<\/p>\n

– CVE-2018-8284 | .NET Framework Remote Code Injection
   Vulnerability
– https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance<\/a>
– Reason for Revision: Updated the Affected Products to include
   affected versions of Microsoft SharePoint Server, Microsoft
   SharePoint Foundation, Microsoft SharePoint Enterprise Server,
   and Microsoft Project Server. Customers running any of the
   SharePoint products listed in the Affected Products table and
   who are also running any affected versions of .NET Framework
   need to install the security updates for the versions of .NET
   running on their system to be fully protected from this
   vulnerability.
– Originally posted: July 10, 2018
– Updated: August 14, 2018
– Aggregate CVE Severity Rating: Important
– Version: 3.0<\/p>\n

******************************************************************** <\/p>\n

Microsoft Security Advisory Notification August 15, 2018<\/strong>
<\/strong>********************************************************************<\/p>\n

Security Advisories Released or Updated on August 15, 2018
======================================================<\/p>\n

Das Microsoft Security Advisory ADV180002 sollten sich vor allem Besitzer eines Systems mit AMD-CPUs durchlesen. <\/p>\n

* Microsoft Security Advisory ADV180002<\/p>\n

– Title: Guidance to mitigate speculative execution side-channel
   vulnerabilities
– ADV180002<\/a>
– Reason for Revision: Updated FAQ #18 to announce that with the
   Windows security updates released on Augus 18, 2918, Microsoft
   is providing the solution for customers with AMD-based devices
   who experienced high CPU utilization after installing the June
   or July security updates and updated microcode from AMD. Microsoft
   recommends that these customers install the August Windows
   secrurity updates and re-enable the Spectre Variant 2 mitigations
   if they were previously disabled. This solution is available in
   the August Windows security updates for: Windows 10 version 1607.
   Windows 10 version 1709. Windows 10 version 1803, Windows 7
   Service Pack 1, Windows Server 2016, Windows Server, version 1709
   (Server Core Installation), Windows Server, version 1803 (Server
   Core Installation), and Windows Server 2008 R2 Service Pack 1.
   The FAQ will be updated as further updates become available.
– Originally posted: January 3, 2018
– Updated: August 15, 2018
– Version: 24.0<\/p>\n

* Microsoft Security Advisory ADV180021<\/p>\n

– Title: Microsoft Office Defense in Depth Update
– ADV180021<\/a>
– Reason for Revision: Information published.
– Originally posted: August 15, 2018
– Updated: N\/A
– Version: 1.0<\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft  hat zum 14. und 15. August 2018 mehrere Security Advisory Notification ver\u00f6ffentlicht, die die neu entdeckten Schwachstellen (L1TF) zum Thema haben. Erg\u00e4nzung: Sicherheitsmitteilungen vom 15. August 2018 hinzugef\u00fcgt.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[426],"tags":[4328],"class_list":["post-208008","post","type-post","status-publish","format-standard","hentry","category-sicherheit","tag-sicherheit"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/208008","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=208008"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/208008\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=208008"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=208008"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=208008"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}