[German]Mozilla's developers have released the versions 106.0.0 and 102.4.0 ESR of the Firefox browser on October 18, 2022. The ESR versions are maintenance updates that are supposed to fix bugs. Firefox 106 is a new development branch. In both updates, vulnerabilities are eliminated.
[German]There is a vulnerability in Apache Commons, similar to Log4Shell, which can be exploited to inject malicious JAVA code. Blog reader Ludwig L. emailed me about this issue, which is described in more detail by Sophos in the post Dangerous hole in Apache Commons Text – like Log4Shell all over again detaillierter beschrieben wird.
[German]Quick note for people who use AltN (MDaemon Technologies) email servers. The provider has fallen victim to a cyberattack – the systems have been infected by ransomware. At the moment, their entire business operations should be at a standstill. Here is a brief overview.
[German]As of October 18, 2022, Microsoft has released an unscheduled update KB5019509 for Windows 11 22H2. This update releases the improved File Explorer with Tabs and also brings some other improvements (it's the Moments 1 Feature Drop update).
[German]Microsoft has – as I expected – released Windows 10 22H2 (official name is Windows 10 2022 Update) as a feature update on October 18, 2022. In addition, ISO installation media is available for upgrading older Windows versions. Here's an overview of what to know regarding this feature update.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has published security updates for Windows on October 11, 2022 – among others also the update KB5018421 for Windows Server 2022. So far so good – but now they already offer a security update for "Windows Server 22H2" – whereby it is unclear to me what this is about. It seems also that a new category with this name has been established in WSUS.
[German]The Federal Office of Justice (Bundesamt für Justiz, BfJ) in Bonn has just issued two penalty notices against Telegram FZ-LLC. The reason is the fact that the company violated requirements of the Network Enforcement Act (Netzwerkdurchsetzungsgesetz, NetzDG) in 2021 and 2022. In total, the BfJ imposed fines of 5.125 million euros.
[German]Since May 2022, a bug has been known to exist in Windows that prevents the "Mark of the Web" flag from being set for files extracted from ZIP archives. Microsoft itself has not yet released a patch for this 0-day vulnerability. The vulnerability is already being exploited. Therefore, ACROS Security has addressed the problem and developed a 0Patch micropatch to close it. The patch is freely available, only the 0patch agent is needed.
[German]As of October 17, 2022, Microsoft has released an unscheduled update KB5020387 for Windows 11 21H2. This update fixes a connection problem that can occur with SSL and TLS connections. All Windows client and server versions that are still in support are probably affected by this problem. The update also fixes a connection issue with Citrix clients that I just reported on.
[German]Small addendum from last week. Since the October patchday (October 11, 2022), administrators of Citrix installations have noticed that connections no longer work for Citrix clients once Windows update KB5018410 has been installed. This update for Windows 10 version 20H2-21H2 is likely where the TLS 1.0/1.1 issue struck. Addendum: It seems that an out-of-band update from Microsoft has fixed this issue.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
