Microsoft patches the patch that broke VPNs, Hyper-V, and left servers in boot loops
- Reference: 1642505655
- News link: https://www.theregister.co.uk/2022/01/18/patching_patch_tuesday/
- Source link:
There was a time when out-of-band updates from Microsoft were considered a rarity. Not so much these days. On the receiving end of the company's attention were Windows desktop and Windows Server installs left a little broken following Microsoft's latest demonstration of its legendary quality control.
[2]KB5010793 , [3]KB5010792 , [4]KB5010790 and [5]KB5010789 were slung out for Windows 10 and Windows Server. Even Windows 7 and Windows Server 2008 R2 got some love with [6]KB5010798 and [7]KB5010799 , such was the blast radius of last week's whoopsie.
[8]
To recap, last week's patches [9]caused all manner of problems for administrators. Hyper-V gave up the ghost and domain controllers experienced surprise restarts. The perhaps inappropriately named Windows Resilient File System (ReFS) also had problems following the update, which left volumes inaccessible for some users. Other users reported problems with VPN connections on Windows versions from the 2015 LTSB edition right up to Windows 11, something Microsoft acknowledged with an update to its [10]Windows release health dashboard .
[11]Email blocklisting: A Christmas gift from Microsoft that Linode can't seem to return
[12]Microsoft hires law firm to review sexual harassment policies, probe gender discrimination
[13]Microsoft rolls out Files On-Demand with tighter macOS integration – but it defaults to 'on' and can't be disabled
[14]Microsoft poaches Apple chip expert for custom silicon
[15]Admins report Hyper-V and domain controller issues after first Patch Tuesday of 2022
The VPN problem could be dealt with by disabling the Vendor ID (if available) within the server-side settings. Or admins could throw caution to the wind and uninstall the patches, even though some pretty important security fixes also lurked within.
As for the nature of the problems, a [16]patch to fix the issue of VMs in Hyper-V failing to start noted that "Virtual machines (VMs) located on a server that has Unified Extensible Firmware Interface (UEFI)" had problems.
[17]
As for VPNs, the patches dealt with "a known issue that might cause IP Security (IPSEC) connections that contain a Vendor ID to fail. VPN connections using Layer 2 Tunneling Protocol (L2TP) or IP security Internet Key Exchange (IPSEC IKE) might also be affected."
Microsoft has had a torrid time of it with the quality of its patches. 2021 featured updates [18]that borked printers and triggered Blue Screens of Death. While some might have hoped that a new leaf would be turned over in 2022, the company's approach to testing has thus far remained reassuringly consistent. ®
Get our [19]Tech Resources
[1] https://support.microsoft.com/en-gb/topic/january-17-2022-kb5010796-os-build-20348-473-out-of-band-2e0408ba-10d4-4c68-9b3d-cc5fb8d6f4a8
[2] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010793-os-builds-19042-1469-19043-1469-and-19044-1469-out-of-band-f2d4f178-5b36-49cb-a6fd-4bf9857574f9
[3] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010792-os-build-18363-2039-out-of-band-631ef9bc-7b22-4932-aa7a-a0c2499bbf9a
[4] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010790-os-build-14393-4889-out-of-band-567c392a-b10c-4dba-bed5-d3648af05164
[5] https://support.microsoft.com/en-us/topic/january-17-2022-kb5010789-os-build-10240-19179-out-of-band-e99c8948-dadf-49e2-8ba3-479b80064c5f
[6] https://support.microsoft.com/en-gb/topic/kb5010798-out-of-band-update-for-windows-7-sp1-and-server-2008-r2-sp1-january-17-2022-5b976915-5de5-4197-9b45-35c19050f656
[7] https://support.microsoft.com/en-gb/topic/kb5010799-out-of-band-update-for-windows-server-2008-sp2-january-17-2022-d05d2821-1534-45aa-a1cc-d8ca5af5bef4
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YebyOlB-GDN1Sp2lvNtkbwAAAMk&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[9] https://www.theregister.com/2022/01/13/microsoft_patch_tuesday_titsup/
[10] https://docs.microsoft.com/en-gb/windows/release-health/status-windows-10-21h2#2773msgdesc
[11] https://www.theregister.com/2022/01/17/linode_microsoft_email/
[12] https://www.theregister.com/2022/01/14/microsoft_sexual_discrimination_review/
[13] https://www.theregister.com/2022/01/14/files_on_demand_macos/
[14] https://www.theregister.com/2022/01/13/microsoft_apple_chip_expert/
[15] https://www.theregister.com/2022/01/13/microsoft_patch_tuesday_titsup/
[16] https://support.microsoft.com/en-gb/topic/kb5010794-out-of-band-update-for-windows-8-1-and-windows-server-2012-r2-january-17-2022-a92500fb-f227-400e-b70e-f7dd50386fd3
[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YebyOlB-GDN1Sp2lvNtkbwAAAMk&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[18] https://www.theregister.com/2021/03/11/printer_problems_windows_10/
[19] https://whitepapers.theregister.com/
Re: Sounds familiar
That is covered and finalized with the "extinguish" part from embrace, extend, extinguish .
Use Linux
Use Linux.
If there is a real need to use windows, install it in a virtual machine inside Linux.
Remember to take a snapshot before any windows update.
Borked update? Just restore the snapshot
Re: Use Linux
I can understand your point about restoring from a snapshot, but easier said than done when you're 12-24hrs in before the issue is realised on a Domain Controller and things have changed moved along, and restoring to a previous time will cause more issues than just uninstalling the patches.....
Quite a blast radius!
I installed KB5009719 (.NET security rollup) on my Win7 box last week and it broke the AVIdemux video software somehow.
Upgrade from v2.7 to v2.8 didn't help, but rolling back the update fixed things.
If only I could get Media Companion to run via Wine (developer says it can't be done) then I could jump ship to Mint full time and be done with this. Oh, and on another box where I'm having to do a reinstall, the copy of Office 2010 that I paid for refuses to activate - WTF? It may be out of support, but I bloody paid for it and I sure as hell won't be taking out a 365 (ymmv) subscription as an alternative.
Re: Quite a blast radius!
You can try to pay Wine developers to fix the Media Companion. I am sure some will happily jump aboard.
For office, can libreoffice do the trick?
Re: Quite a blast radius!
365 (ymmv)
I see what you did there...
Weekend Ruined
How will Microsoft compensate me for the lost hours last weekend undoing their c0ckup, and the undue stress and panic indured after one of those weekend calls? I feel I may be waiting a loonnnngggg time///////////
Re: Weekend Ruined
How will Microsoft compensate me for the lost hours last weekend undoing their c0ckup
The same way they always do, of course.
Here's your updates for 2012, 2012 R2 & Win 8.1
Got to catalogue shopping though..
https://support.microsoft.com/en-gb/topic/kb5010797-out-of-band-update-for-windows-server-2012-january-17-2022-1f14f497-8404-404d-8d78-0c962c9e486d
https://support.microsoft.com/en-gb/topic/kb5010794-out-of-band-update-for-windows-8-1-and-windows-server-2012-r2-january-17-2022-a92500fb-f227-400e-b70e-f7dd50386fd3
Sounds familiar
"The goal is not to provide the best service, but to provide the only service"
Reacher Gilt, CEO The Clacks