14 DAY TRIAL // Microsoft has released a new Windows 10 cumulative update, but this time it’s an out-of-band security patch that is supposed to resolve an important issue in version 1809.
That’s right, the cumulative update is aimed at Windows 10 October 2018 Update, the OS version that has already been pulled for Home and Pro SKUs, and which according to Microsoft’s update policy should no longer receive any new security improvements.
And yet, cumulative update KB4594442 lands as an out-of-band security patch, and Microsoft explains that the purpose is to resolve a Kerberos authentication bug.
“Addresses issues with Kerberos authentication related to the PerformTicketSignature registry subkey value in CVE-2020-17049, which was a part of the November 10, 2020 Windows update,” Microsoft explains on the official KB page of the update.
Just one known issue
The company says that it’s aware of three different issues that could occur on writable and read-only domain controllers because of this problem, as follows:
- Kerberos service tickets and ticket-granting tickets (TGT) might not renew for non-Windows Kerberos clients when PerformTicketSignature is set to 1 (the default).
- Service for User (S4U) scenarios, such as scheduled tasks, clustering, and services for line-of-business applications, might fail for all clients when PerformTicketSignature is set to 0.
- S4UProxy delegation fails during ticket referral in cross-domain scenarios if DCs in intermediate domains are inconsistently updated and PerformTicketSignature is set to 1.
Other than that, there’s nothing new in this cumulative update, but users are recommended to install it as soon as possible, especially since it resolves a security bug.
The update comes with one known issue that affects devices where some Asian language packs are installed, and Microsoft says it’s already working on a fix, and it should be released at some point in the future.
No other cumulative updates for the rest of Windows 10 versions were released today.