14 DAY TRIAL // This month’s Patch Tuesday rollout also brought a new monthly rollup for Windows 7, despite this operating system no longer receiving security updates since January last year.
Worth knowing, however, is that these updates are shipped to devices enrolled in the Extended Security Update (ESU) program for paying companies.
The January 2021 rollup is KB4598279, and in addition to the typical security improvements for the Windows App Platform and Frameworks, Windows Graphics, Windows Media, and Windows Fundamentals, it also corrects an issue affecting the MIT realm.
“Addresses an issue in which a principal in a trusted Managed Identity for Application (MIT) realm does not obtain a Kerberos Service ticket from Active Directory domain controllers (DCs). This issue occurs after Windows Updates that contains CVE-2020-17049 protections released between November 10 and December 8, 2020 are installed and PerfromTicketSignature is configured to 1 or higher. Ticket acquisition fails with KRB_GENERIC_ERROR if callers submit a PAC-less Ticket Granting Ticket (TGT) as an evidence ticket without providing the USER_NO_AUTH_DATA_REQUIRED flag,” Microsoft explains.
No new known issue specific to this update
In addition, this monthly rollup also resolves a security bypass vulnerability affecting the Printer Remote Procedure Call binding, as well as a bug with HTTPS-based intranet servers.
More details about these fixes are available in the changelog embedded in the box after the jump.
There are two known issues, both of them inherited from the previous monthly rollups, though worth knowing that one is actually an error you might come across if you want to install the update on a device that’s not enrolled in the ESU program.
“After installing this update and restarting your device, you might receive the error, “Failure to configure Windows updates. Reverting Changes. Do not turn off your computer,” and the update might show as Failed in Update History,” Microsoft says about this error.