{"id":32295,"date":"2023-11-15T07:20:24","date_gmt":"2023-11-15T06:20:24","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=32295"},"modified":"2023-11-15T07:21:21","modified_gmt":"2023-11-15T06:21:21","slug":"exchange-server-security-updates-november-14-2023","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2023\/11\/15\/exchange-server-security-updates-november-14-2023\/","title":{"rendered":"Exchange Server security updates (November 14, 2023)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"margin: 0px 10px 0px 0px;\" title=\"Exchange Logo\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2022\/06\/Exchange.jpg\" alt=\"Exchange Logo\" width=\"152\" height=\"133\" align=\"left\" border=\"0\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2023\/11\/15\/exchange-server-sicherheitsupdates-14-november-2023\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]Microsoft has released security updates for Exchange Server 2016 and Exchange Server 2019 on November 14, 2023. These security updates close vulnerabilities in this software. The updates should be installed on the systems promptly to close the vulnerabilities in question.<!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg05.met.vgwort.de\/na\/2d64c4e5bbd240cd90fe17ab7a34516f\" alt=\"\" width=\"1\" height=\"1\" \/>I came across the following <a href=\"https:\/\/twitter.com\/MSFTExchange\/status\/1724488511079006533\" target=\"_blank\" rel=\"noopener\">tweet<\/a> from the Exchange team on Twitter about the security updates for Exchange Server 2016 and Exchange Server 2019.<\/p>\n<p><a href=\"https:\/\/i.postimg.cc\/qq5SPK3N\/image.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" title=\"Exchange Nov. 2023 Updates\" src=\"https:\/\/i.postimg.cc\/qq5SPK3N\/image.png\" alt=\"Exchange Nov. 2023 Updates\" width=\"522\" height=\"177\" \/><\/a><\/p>\n<p>Microsoft has published the Techcommunity articl <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/released-november-2023-exchange-server-security-updates\/ba-p\/3980209\" target=\"_blank\" rel=\"noopener\">Released: November 2023 Exchange Server Security Updates<\/a> with a description of the security updates. Security updates are available for the following Exchange Server CU versions.<\/p>\n<ul>\n<li>Exchange Server 2016 <a href=\"https:\/\/www.microsoft.com\/download\/details.aspx?familyID=f15bf797-0ac3-4bff-9483-d8afeef5bdfc\" target=\"_blank\" rel=\"noopener\">CU23<\/a> (<a href=\"http:\/\/support.microsoft.com\/kb\/KB5032147\" target=\"_blank\" rel=\"noopener\">KB5032147<\/a>)<\/li>\n<li>Exchange Server 2019 <a href=\"https:\/\/www.microsoft.com\/download\/details.aspx?familyID=1341ffc6-c9ca-49b0-a560-16c0e6a914cd\" target=\"_blank\" rel=\"noopener\">CU12<\/a> and <a href=\"https:\/\/www.microsoft.com\/download\/details.aspx?familyID=abd1dd17-c0c1-434f-8929-5f129956700d\" target=\"_blank\" rel=\"noopener\">CU13<\/a> (<a href=\"http:\/\/support.microsoft.com\/kb\/5032146\" target=\"_blank\" rel=\"noopener\">KB5032146<\/a>, <a href=\"http:\/\/support.microsoft.com\/kb\/5032146\" target=\"_blank\" rel=\"noopener\">KB5032146<\/a>)<\/li>\n<\/ul>\n<p>SUs are <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/new-exchange-server-security-update-and-hotfix-packaging\/ba-p\/3301819\" target=\"_blank\" rel=\"noopener\">available<\/a> as self-extracting .exe packages and as original update packages (.msp files), and can be downloaded from the <a href=\"https:\/\/www.catalog.update.microsoft.com\/Home.aspx\" target=\"_blank\" rel=\"noopener\">Microsoft Update Catalog<\/a>.<\/p>\n<p>Microsoft writes in the Techcommunity post that the security updates fix vulnerabilities reported to Microsoft by security partners and found by Microsoft's internal processes. These vulnerabilities affect Exchange Server. Exchange Online customers are already protected against the vulnerabilities.<\/p>\n<h3>Certificate signing of PowerShell serialization payloads<\/h3>\n<p>Microsoft notes that as of November 2023 SU, certificate signing of PowerShell serialization payloads will be enabled by default (as a reminder, this feature was released as an optional feature in January 2023). Once the November 2023 SU (or later) is installed on a server, certificate signing will be enabled automatically (for that specific server only). Further information can be found in the <a href=\"https:\/\/aka.ms\/ExchangeSDS\" target=\"_blank\" rel=\"noopener\">documentation<\/a> of the feature.<\/p>\n<p>Before installing the security update, make sure that the <a href=\"https:\/\/learn.microsoft.com\/exchange\/plan-and-deploy\/integration-with-sharepoint-and-skype\/maintain-oauth-certificate\" target=\"_blank\" rel=\"noopener\">Exchange-Auth certificate<\/a> is valid. Microsoft already provides the <a href=\"https:\/\/aka.ms\/MonitorExchangeAuthCertificate\" target=\"_blank\" rel=\"noopener\">MonitorExchangeAuthCertificate.ps1<\/a> script to perform a quick check.<\/p>\n<h3>Known issues<\/h3>\n<p>Certain cmdlets via the pipeline (e.g. Get-MailboxDatabase | Get-Mailbox) may only fail on computers with management tools. Further details and possible workarounds can be found in the <a href=\"https:\/\/aka.ms\/ExchangeSDS#november-2023-su\" target=\"_blank\" rel=\"noopener\">documentation for the Serialized Data Signing feature<\/a>. So far I have not encountered any (further) problems in connection with this update. Please refer to the FAQ in the linked <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/released-november-2023-exchange-server-security-updates\/ba-p\/3980209\" target=\"_blank\" rel=\"noopener\">Techcommunity article<\/a>.<\/p>\n<p><strong>Similar articles:<br \/>\n<\/strong><a href=\"https:\/\/borncity.com\/win\/2023\/11\/15\/microsoft-security-update-summary-november-14-2023\/\">Microsoft Security Update Summary (November 14, 2023)<\/a><br \/>\nPatchday: Windows 10-Updates (November 14, 2023)<br \/>\nPatchday: Windows 11\/Server 2022-Updates (November 14, 2023)<br \/>\nWindows 7\/Server 2008 R2; Server 2012 R2: Updates (November 14, 2023)<br \/>\nMicrosoft Office Updates (November 14, 2023)<\/p>\n<p><a href=\"https:\/\/borncity.com\/win\/2023\/11\/15\/exchange-server-security-updates-november-14-2023\/\">Exchange Server security updates (November 14, 2023)<\/a><br \/>\n<a href=\"https:\/\/www.borncity.com\/blog\/2023\/11\/14\/curl-8-4-0-0-kommt-zum-14-november-2023-patchday-fr-windows\/\">Windows: cURL 8.4.0 Update kommt zum 14. November 2023-Patchday<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]Microsoft has released security updates for Exchange Server 2016 and Exchange Server 2019 on November 14, 2023. These security updates close vulnerabilities in this software. The updates should be installed on the systems promptly to close the vulnerabilities in question.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,1547,22],"tags":[869,2831,69,195],"class_list":["post-32295","post","type-post","status-publish","format-standard","hentry","category-security","category-software","category-update","tag-exchange","tag-patchday-11-2023","tag-security","tag-update"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/32295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=32295"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/32295\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=32295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=32295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=32295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}