Patch Tuesday Οκτώβριος 2022

Η δεύτερη Τρίτη του μήνα πέρασε και αυτό σημαίνει ότι η Microsoft κυκλοφόρησε ενημερώσεις ασφαλείας για όλες τις υποστηριζόμενες εκδόσεις client και server των Windows. Η Patch Day (Patch Tuesday) Οκτωβρίου 2022 φέρνει ενημερώσεις και για άλλα προϊόντα της Microsoft, ορισμένες από τις οποίες αφορούν την ασφάλεια.

Οι αθροιστικές ενημερώσεις για τα Windows περιλαμβάνουν ενημερώσεις ασφαλείας αλλά και άλλες που δεν αφορούν την ασφάλεια, όπως επιδιορθώσεις σφαλμάτων, αλλά μερικές νέες δυνατότητες.

Περίληψη των κυριότερων σημείων

Η Microsoft αύξησε τη διαθεσιμότητα της Ενημερωμένης έκδοσης των Windows 11 2022. Από χθες θα πρέπει να προσφέρεται σε περισσότερα συστήματα μετά την αρχική του κυκλοφορία στα μέσα Σεπτεμβρίου.
Οι ενημερώσεις του Οκτωβρίου 2022 περιλαμβάνουν διορθώσεις ασφαλείας για όλες τις εκδόσεις client και server των Windows.
Ενημερώσεις ασφαλείας είναι επίσης διαθέσιμες για το Azure, τις υπηρεσίες Active Directory, τον Microsoft Edge, το Microsoft Office, το NuGet Client, το Remote Access Service Point-to-Point Tunneling Protocol και άλλες εφαρμογές και υπηρεσίες.
Οι client ενημερώσεις των Windows διορθώνουν γνωστά προβλήματα στα λειτουργικά: Windows 7, Windows 8.1, Windows 10, Windows 11
Οι server ενημερώσεις των Windows διορθώνουν γνωστά προβλήματα στα λειτουργικά: Windows Server 2008, 2008 R2, 2012, 2012 R2, 2019 και Windows Server 2022.

Όλες οι ενημερώσεις

Operating System Distribution

• Windows 7 (extended support only): 43 vulnerabilities: 8 critical and 35 important
  • Windows CryptoAPI Spoofing Vulnerability — CVE-2022-34689
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-22035
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-30198
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-33634
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-24504
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-41081
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-38000
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-38047
• Windows 8.1: 49 vulnerabilities: 8 critical and 41 important
  • same critical vulnerabilities as Windows 7
• Windows 10 version 21H1 and 21H2 : 64 vulnerabilities, 9 critical and 5g important
  • same as Windows 7, plus the following:
  • Windows Hyper-V Elevation of Privilege Vulnerability — CVE-2022-37979
• Windows 11 and Windows 11 version 22H2:  64 vulnerabilities, 9 critical and 55 important
  • same as Windows 10.

Windows Server products

• Windows Server 2008 R2 (extended support only): 44 vulnerabilities: 9 critical and 35 important
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-24504
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-33634
  • Windows CryptoAPI Spoofing Vulnerability — CVE-2022-34689
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-30198
  • Active Directory Certificate Services Elevation of Privilege Vulnerability — CVE-2022-37976
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-22035
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-41081
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-38000
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-38047
• Windows Server 2012 R2: 50 vulnerabilities: 9 critical and 41 important
  • same critical vulnerabilities as Windows Server 2008 R2.
• Windows Server 2016: 54 vulnerabilities: 10 critical and 44 important
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-30198
  • Active Directory Certificate Services Elevation of Privilege Vulnerability — CVE-2022-37976
  • Windows CryptoAPI Spoofing Vulnerability — CVE-2022-34689
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-22035
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-33634
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-24504
  • Windows Hyper-V Elevation of Privilege Vulnerability — CVE-2022-37979
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-41081
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-38000
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability — CVE-2022-38047
• Windows Server 2019: 61 vulnerabilities: 10 critical and 51 important
  • same as Windows server 2016.
• Windows Server 2022:  66 vulnerabilities: 10 critical and 56 important
  • same as Windows server 2016.

Windows Security Updates

Windows 7 SP1 and Windows Server 2008 R2

• Monthly Rollup: KB5018454 
• Security-Only: KB5018479

Updates and improvements:

• Fixed an issue that could lead to UDP packet drops from Linux Virtual Machines.
• Chile daylight saving times updated to start on September 11 instead of September 4.

Windows 8.1 and Windows Server 2012 R2

• Monthly Rollup: KB5018474 
• Security-only: KB5018476

Updates and improvements:

• Same as Windows 7

Windows 10 version 20H2, 21H1 and 21H2

• Support Page: KB5018410 

Updates and improvements:

• Includes security updates and improvements of the preview update, released on September 20, 2022.

Windows 11 Release version 

• Support Page: KB5018418

Updates and improvements:

Includes security updates and improvements of the preview update, released on September 20, 2022.

Windows 11 version 22H2  

• Support Page: KB5018427 

Updates and improvements:

Includes security updates and improvements of the preview update, released on September 30, 2022.

Other security updates

2022-10 Cumulative Security Update for Internet Explorer (KB5018413)

2022-10 Cumulative Update for (KB5018425) for Windows 10 Version 1507

Server updates

2022-10 Cumulative Update for Windows Server 2016 and Windows 10 Version 1607 (KB5018411)

2022-10 Cumulative Update for Windows Server 2019 and Windows 10 Version 1809 (KB5018419)

2022-10 Security Only Quality Update for Windows Server 2008 (KB5018446)

2022-10 Security Monthly Quality Rollup for Windows Server 2008 (KB5018450)

2022-10 Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012 (KB5018457)

2022-10 Security Monthly Quality Rollup for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 (KB5018474)

2022-10 Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012 (KB5018478)

.NET Framework

2022-10 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11 (KB5017271)

2022-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system, version 22H2 for x64 (KB5018541)

Servicing Stack Updates

2022-10 Servicing Stack Update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 (KB5018922)