Microsoft SharePoint Server: Patch for RCE vulnerability CVE-2024-21318, and CISA warns about CVE-2023-29357

Posted on 2024-01-13 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[English]Another addendum from the January 2024 patchday for Microsoft SharePoint Server. I mentioned the SharePoint Server RCE vulnerability CVE-2024-21318 in the patchday articles. This was closed with the security updates of January 9, 2023. There is a second Elevation of Privilege vulnerability CVE-2023-29357, which was already closed in June 2023 and for which an exploit is known. The US CISA has published a warning because attacks on RCE vulnerabilities have been observed in the meantime. Administrators should therefore ensure that their SharePoint servers are up to date with the latest patches.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

Order/license chaos for VMware products after Broadcom takeover (Jan. 2024)

Posted on 2024-01-13 by guenni

Stop - Pixabay[English]These are currently difficult times for customers and resellers of VMware products who want to reorder, extend licenses or simply activate product licenses. After the Broadcom takeover, absolute chaos reigns. Dealers have been terminated, orders via OEMs are sometimes impossible, and the end customer portal for license activation has been shut down. After reporting on problems for the first time a few days ago, I now have internal information that confirms this. Incidentally, this is not the first incident in which Broadcom products and dealer/customer relationships have been "badly strained", to say the least, as I discovered when searching the blog.

Continue reading →

Posted in General, Security | Tagged , | 3 Comments

Microsoft patches CVE-2024-21325 in Printer Metadata Troubleshooter Tool (KB5034510)

Posted on 2024-01-12 by guenni

Windows[German]In December 2023, Microsoft released the Printer Metadata Troubleshooter Tool (KB5034510) to fix the HP Smart App issue. Shortly afterwards, following a tip from Stefan Kanthak, I reported on security problems with this tool here in the blog. Microsoft has now updated the Printer Metadata Troubleshooter Tool (KB5034510) as of January 9, 2024 to close the vulnerability now named CVE-2024-21325.

Continue reading →

Posted in issue, Security, Windows | Tagged , , , , | 1 Comment

Issues with Office Deployment Tool? Readiness Toolkit for Office VBA AddIns retired

Posted on 2024-01-12 by guenni

[German]I'm putting two Microsoft Office-related topics in this blog post. A reader asked me whether there are any known problems with the Office Deployment Tool – in his environment there are suddenly crashes. In addition, Microsoft is retiring the Readiness Toolkit for Office VBA AddIns.

Continue reading →

Posted in issue, Office | Tagged , | Leave a comment

Edge 120.0.2210.133

Posted on 2024-01-12 by guenni

Edge[German]Microsoft has released another security update for the Edge (Chromium) browser with version 120.0.2210.133 on January 11, 2024. It is a security update that is intended to close vulnerabilities. Continue reading →

Posted in browser, Security, Update | Tagged , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

VMware OEM portal offline, customers cannot activate VMware licenses

Posted on 2024-01-12 by guenni

Stop - Pixabay[German]Is Broadcom starting the "shakeout" of VMware customers? After Broadcom terminated all VMware partners as of February 4, 2024, the OEM portal is now down. However, the VMware OEM portal is required to activate VMware licenses purchased through OEMs. A blog reader has just informed me about this disaster.

Continue reading →

Posted in General | Tagged , , | 1 Comment

Microsoft Cloud: Personal data can be kept within the European data border

Posted on 2024-01-11 by guenni

[German]Microsoft has today announced an important expansion of its EU data boundary for the Microsoft Cloud. Customers will be able to store and process all personal data within the EU. This brings Microsoft closer to the goal it announced last year of ensuring local storage and processing of personal data for its cloud products within the EU.

Continue reading →

Posted in Cloud | Tagged , | Leave a comment

Exchange Server 2019 Mainstream Support ended on January 9, 2024 – but has few consequences

Posted on 2024-01-11 by guenni

Exchange Logo[German]Small addendum from this week. Microsoft points out in a post that mainstream support for Exchange Server 2019 ended on January 9, 2024. Before anyone panics, this has no consequences for the time being, as Exchange Server 2019 is still in (extended) support. Microsoft will also roll out two more CUs for Exchange Server 2019. Here is a brief overview of the status.

Continue reading →

Posted in Software, Update | Tagged | Leave a comment

Windows WinRE update (for Bitlocker Bypassing vulnerability CVE-2024-20666) fails with installation error 0x80070643 (Jan. 2024, KB5034441)

Posted on 2024-01-11 by guenni

Windows[German]Microsoft has released security updates for Windows 10 and Windows 11 (and Windows Server 2016, 2019, 2022) on January 9, 2024. This update also includes a fix (according to KB5034441) to eliminate the BitLocker Security Feature Bypass vulnerability CVE-2024-20666 in the WinRE partition. This is a disaster with an announcement, as the installation fails for many users with the installation error 0x80070643 (the WinRE partition is too small). Below I summarize the information that is now known.

Continue reading →

Posted in issue, Update, Windows | Tagged , , , , | 6 Comments

Windows 7/Server 2008 R2; Server 2012 R2: Updates (January 9, 2024)

Posted on 2024-01-11 by guenni

Windows[German]Various security updates for Windows Server 2008 R2 (in the 4th ESU year) and for Windows Server 2012/R2 (1st ESU year) were released on January 9, 2024 (the updates can also be installed under Windows 7 SP1). Here is an overview of these updates for Windows Server 2008 R2 and Windows Server 2012/R2 as well as Windows 7 SP1. Continue reading →

Posted in Security, Update, Windows | Tagged , , , , | Leave a comment