News: 1642505655

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Microsoft patches the patch that broke VPNs, Hyper-V, and left servers in boot loops

(2022/01/18)


Microsoft has [1]patched the patch that broke chunks of Windows and emitted fixes for a Patch Tuesday cock-up that left servers rebooting and VPNs disconnected.

There was a time when out-of-band updates from Microsoft were considered a rarity. Not so much these days. On the receiving end of the company's attention were Windows desktop and Windows Server installs left a little broken following Microsoft's latest demonstration of its legendary quality control.

[2]KB5010793 , [3]KB5010792 , [4]KB5010790 and [5]KB5010789 were slung out for Windows 10 and Windows Server. Even Windows 7 and Windows Server 2008 R2 got some love with [6]KB5010798 and [7]KB5010799 , such was the blast radius of last week's whoopsie.

[8]

To recap, last week's patches [9]caused all manner of problems for administrators. Hyper-V gave up the ghost and domain controllers experienced surprise restarts. The perhaps inappropriately named Windows Resilient File System (ReFS) also had problems following the update, which left volumes inaccessible for some users. Other users reported problems with VPN connections on Windows versions from the 2015 LTSB edition right up to Windows 11, something Microsoft acknowledged with an update to its [10]Windows release health dashboard .

[11]Email blocklisting: A Christmas gift from Microsoft that Linode can't seem to return

[12]Microsoft hires law firm to review sexual harassment policies, probe gender discrimination

[13]Microsoft rolls out Files On-Demand with tighter macOS integration – but it defaults to 'on' and can't be disabled

[14]Microsoft poaches Apple chip expert for custom silicon

[15]Admins report Hyper-V and domain controller issues after first Patch Tuesday of 2022

The VPN problem could be dealt with by disabling the Vendor ID (if available) within the server-side settings. Or admins could throw caution to the wind and uninstall the patches, even though some pretty important security fixes also lurked within.

As for the nature of the problems, a [16]patch to fix the issue of VMs in Hyper-V failing to start noted that "Virtual machines (VMs) located on a server that has Unified Extensible Firmware Interface (UEFI)" had problems.

[17]

As for VPNs, the patches dealt with "a known issue that might cause IP Security (IPSEC) connections that contain a Vendor ID to fail. VPN connections using Layer 2 Tunneling Protocol (L2TP) or IP security Internet Key Exchange (IPSEC IKE) might also be affected."

Microsoft has had a torrid time of it with the quality of its patches. 2021 featured updates [18]that borked printers and triggered Blue Screens of Death. While some might have hoped that a new leaf would be turned over in 2022, the company's approach to testing has thus far remained reassuringly consistent. ®

Get our [19]Tech Resources



[1] https://support.microsoft.com/en-gb/topic/january-17-2022-kb5010796-os-build-20348-473-out-of-band-2e0408ba-10d4-4c68-9b3d-cc5fb8d6f4a8

[2] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010793-os-builds-19042-1469-19043-1469-and-19044-1469-out-of-band-f2d4f178-5b36-49cb-a6fd-4bf9857574f9

[3] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010792-os-build-18363-2039-out-of-band-631ef9bc-7b22-4932-aa7a-a0c2499bbf9a

[4] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010790-os-build-14393-4889-out-of-band-567c392a-b10c-4dba-bed5-d3648af05164

[5] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010789-os-build-10240-19179-out-of-band-e99c8948-dadf-49e2-8ba3-479b80064c5f

[6] https://support.microsoft.com/en-gb/topic/kb5010798-out-of-band-update-for-windows-7-sp1-and-server-2008-r2-sp1-january-17-2022-5b976915-5de5-4197-9b45-35c19050f656

[7] https://support.microsoft.com/en-gb/topic/kb5010799-out-of-band-update-for-windows-server-2008-sp2-january-17-2022-d05d2821-1534-45aa-a1cc-d8ca5af5bef4

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YebyOlB-GDN1Sp2lvNtkbwAAAMk&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[9] https://www.theregister.com/2022/01/13/microsoft_patch_tuesday_titsup/

[10] https://docs.microsoft.com/en-gb/windows/release-health/status-windows-10-21h2#2773msgdesc

[11] https://www.theregister.com/2022/01/17/linode_microsoft_email/

[12] https://www.theregister.com/2022/01/14/microsoft_sexual_discrimination_review/

[13] https://www.theregister.com/2022/01/14/files_on_demand_macos/

[14] https://www.theregister.com/2022/01/13/microsoft_apple_chip_expert/

[15] https://www.theregister.com/2022/01/13/microsoft_patch_tuesday_titsup/

[16] https://support.microsoft.com/en-gb/topic/kb5010794-out-of-band-update-for-windows-8-1-and-windows-server-2012-r2-january-17-2022-a92500fb-f227-400e-b70e-f7dd50386fd3

[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YebyOlB-GDN1Sp2lvNtkbwAAAMk&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[18] https://www.theregister.com/2021/03/11/printer_problems_windows_10/

[19] https://whitepapers.theregister.com/



Sounds familiar

ThatOne

"The goal is not to provide the best service, but to provide the only service"

Reacher Gilt, CEO The Clacks

Re: Sounds familiar

b0llchit

That is covered and finalized with the "extinguish" part from embrace, extend, extinguish .

Use Linux

Clausewitz 4.0

Use Linux.

If there is a real need to use windows, install it in a virtual machine inside Linux.

Remember to take a snapshot before any windows update.

Borked update? Just restore the snapshot

Re: Use Linux

djvrs

I can understand your point about restoring from a snapshot, but easier said than done when you're 12-24hrs in before the issue is realised on a Domain Controller and things have changed moved along, and restoring to a previous time will cause more issues than just uninstalling the patches.....

Quite a blast radius!

DoctorPaul

I installed KB5009719 (.NET security rollup) on my Win7 box last week and it broke the AVIdemux video software somehow.

Upgrade from v2.7 to v2.8 didn't help, but rolling back the update fixed things.

If only I could get Media Companion to run via Wine (developer says it can't be done) then I could jump ship to Mint full time and be done with this. Oh, and on another box where I'm having to do a reinstall, the copy of Office 2010 that I paid for refuses to activate - WTF? It may be out of support, but I bloody paid for it and I sure as hell won't be taking out a 365 (ymmv) subscription as an alternative.

Re: Quite a blast radius!

Clausewitz 4.0

You can try to pay Wine developers to fix the Media Companion. I am sure some will happily jump aboard.

For office, can libreoffice do the trick?

Re: Quite a blast radius!

fidodogbreath

365 (ymmv)

I see what you did there...

Weekend Ruined

djvrs

How will Microsoft compensate me for the lost hours last weekend undoing their c0ckup, and the undue stress and panic indured after one of those weekend calls? I feel I may be waiting a loonnnngggg time///////////

Re: Weekend Ruined

fidodogbreath

How will Microsoft compensate me for the lost hours last weekend undoing their c0ckup

The same way they always do, of course.

Here's your updates for 2012, 2012 R2 & Win 8.1

Anonymous Coward

Got to catalogue shopping though..

https://support.microsoft.com/en-gb/topic/kb5010797-out-of-band-update-for-windows-server-2012-january-17-2022-1f14f497-8404-404d-8d78-0c962c9e486d

https://support.microsoft.com/en-gb/topic/kb5010794-out-of-band-update-for-windows-8-1-and-windows-server-2012-r2-january-17-2022-a92500fb-f227-400e-b70e-f7dd50386fd3

My God, I'm depressed! Here I am, a computer with a mind a thousand times
as powerful as yours, doing nothing but cranking out fortunes and sending
mail about softball games. And I've got this pain right through my ALU.
I've asked for it to be replaced, but nobody ever listens. I think it would
be better for us both if you were to just log out again.