19 November 20, 17:39
Quote:Last week, Microsoft ended support for Windows 10 version 1809, at least for Home and Pro SKUs. But here we are just over a week later and there's already an important security fix rolling out for that particular version of the OS (no other versions got updates).
It comes in the form of a cumulative update, more specifically KB4594442, bringing the build number to 17763.1579. You can manually download it here, and this is the highlight:
Quote:Here's the full list of improvements and fixes:
- Updates an issue that might cause Kerberos authentication and ticket renewal issues that are related to the implementation of CVE-2020-17049.
Quote:
- Addresses issues with Kerberos authentication related to the PerformTicketSignature registry subkey value in CVE-2020-17049, which was a part of the November 10, 2020 Windows update. The following issues might occur on writable and read-only domain controllers (DC):
- Kerberos service tickets and ticket-granting tickets (TGT) might not renew for non-Windows Kerberos clients when PerformTicketSignature is set to 1 (the default).
- Service for User (S4U) scenarios, such as scheduled tasks, clustering, and services for line-of-business applications, might fail for all clients when PerformTicketSignature is set to 0.
- S4UProxy delegation fails during ticket referral in cross-domain scenarios if DCs in intermediate domains are inconsistently updated and PerformTicketSignature is set to 1.
Read more: https://www.neowin.net/news/microsoft-re...curity-fix