-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
*******************************************************************************
*****
Title: Microsoft Security Update Revisions
Issued: March 8, 2022 *********************************************************
***************************
Summary
=======
The following CVEs have undergone revision increments. ========================
============================================================
* CVE-2021-3711
* CVE-2021-36927
* CVE-2022-21957
- CVE-2021-3711 | OpenSSL: CVE-2021-3711 SM2 Decryption Buffer Overflow
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-3711
- Version: 2.0
- Reason for Revision: Added Visual Studio 2022 version 17.0 and Visual Studio
2022
version 17.1 to the Security Updates table as these versions of Visual Studio
are
affected by this vulnerability. Customers running either version of Visual
Studio
2022 should install the March 2022 security updates to be protected from this
vulnerability.
- Originally posted: November 9, 2021
- Updated: March 8, 2022
- Aggregate CVE Severity Rating: Critical
- CVE-2021-36927 | Windows Digital TV Tuner device registration application
Elevation of Privilege Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36927
- Version: 1.1
- Reason for Revision: To comprehensively address CVE-2021-36927, Microsoft has
released March 2022 security updates for all affected versions of Microsoft
Windows.
Microsoft strongly recommends that customers install the updates to be fully
protected from the vulnerability. Customers whose systems are configured to
receive automatic updates do not need to take any further action.
- Originally posted: August 10, 2021
- Updated: March 8, 2022
- Aggregate CVE Severity Rating: Important
- CVE-2022-21957 | Microsoft Dynamics 365 (on-premises) Remote Code Execution
Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21957
- Version: 1.1
- Reason for Revision: Added FAQ to explain that the security updates for
Microsoft Dynamics 365 (on-premises) version 8.2 and Microsoft Dynamics 365
(on-premises) version 9.1 are not immediately available, and that customers
will
be notified via a revision to the CVE when the updates are available.
- Originally posted: February 8, 2022
- Updated: March 8, 2022
- Aggregate CVE Severity Rating: Important
Other Information
=================
Recognize and avoid fraudulent email to Microsoft customers:
=============================================================
If you receive an email message that claims to be distributing
a Microsoft security update, it is a hoax that may contain
malware or pointers to malicious websites. Microsoft does
not distribute security updates via email.
The Microsoft Security Response Center (MSRC) uses PGP to digitally
sign all security notifications. However, PGP is not required for
reading security notifications, reading security bulletins, or
installing security updates. You can obtain the MSRC public PGP key
at <https://technet.microsoft.com/security/dn753714>.
********************************************************************
THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT
DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING
THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE
LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT,
INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL
DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY
FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING
LIMITATION MAY NOT APPLY.
********************************************************************
IMPORTANT ANNOUNCEMENT: In the coming months we will be moving to a new, more
user-friendly and flexible system for delivering Microsoft Technical Security
Notifications. See "Coming Soon: New Security Update Guide Notification System"
(https://aka.ms/SUGNotificationProfile) for information about how you can sign
up for
and receive these Technical Security Notifications.
Microsoft respects your privacy. Please read our online Privacy
Statement at <http://go.microsoft.com/fwlink/?LinkId=81184>.
These settings will not affect any newsletters youΓÇÖve requested or
any mandatory service communications that are considered part of
certain Microsoft services.
For legal Information, see:
<http://www.microsoft.com/info/legalinfo/default.mspx>.
This newsletter was sent by:
Microsoft Corporation
1 Microsoft Way
Redmond, Washington, USA
98052
We would love to get your feedback on your experience with these
security notifications. Please help us improve your security
notifications experience by filling out the form here: https://forms.office.co
m/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR4ekF0eHYitGhfGrzmE_ydpUQUdMQU
kzMFQwQzdYSjFBOTlXTjZWMDRRTi4u
If you would prefer not to receive future technical security
notification alerts by email from Microsoft and its family of
companies please visit the following website to unsubscribe:
https://account.microsoft.com/profile/unsubscribe?CTID=0&ECID=VhJUQD9fr8Tmk1Gi%
2BNbVq7ZAAAAe%2F21WWIg%2BddvFzA4%3D&K=3f88c2a0-a643-4203-8e71-04688744e92d&CMID
=null&D=637822820571122599&PID=18015&TID=adfd46f4-992a-45ec-935c-4c9bc4baf506
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEE4Q6SUN6tupDaY1CaExnEoumP1aEFAmInnaUACgkQExnEoumP
1aGl+BAAoNV1kULweq/kMQEWraHPCWE8Ab8ZxujeJjG2mc45YmQ72aOtmXWJlDSu
MsfqFvQ83dwABUl1IZsHSUjgE1rctmuLvJFwSdgvLaitEcstXjlfTl0kPVgg1DzT
EYqujM5ezsay2gCqH5nZDQxj2aLA2WhCF3RcW30tMobjlrEzRNWgKBhPk+Ng09uB
7Ht2gTg9jsWyZgjErlD1Djpkgt1mcXmnm63dhQ+uU5+Cafh9+jeV1NAHuapvPCSH
pT4HmikNk/LCydYp5SBhk8kd7KaO1D8bc9qaVWtJmCivObwXh7OQ1GmRvJqPoih9
FSOwjPaperVNBZFvek2XkrooblEbSQvOk6UImLas6n9+Luv7zTSL4oGafvMuPoPS
u+09ehsOSpCT1tuVMyESBnyME7M7WXTEATSUveAJff5UXeYIk3mXsGJ/fgxIyhBG
nv19uxh9U6kChDkJ3dvY1jy7EkZNUX5gdaRfbhQadygeuE48GGHZQI8iM5KqJNYM
xsjhcBIy6HEiJGFW2IBlT9DQPulG2mbFYYRiH7LqpW4lR2ESIFGwOMOpBn+oQUox
eAnpPqa896YGBCU2fxOYEl4ZHZIT+kLb36HAnHnpjGAfTqptseC/aOPohKI4Ydjo
25JtbesdQWUHuqa+sfnX7Ey0cYMLsYzAzQD7AMuvEspYeO6O+A8=
=yfGB
-----END PGP SIGNATURE-----
If you would prefer not to receive future technical security
notification alerts by email from Microsoft and its family of
companies please visit the following website to unsubscribe:
https://account.microsoft.com/profile/unsubscribe?CTID=0&ECID=VhJUQD9fr8Tmk1Gi%
2BNbVq7ZAAAAe%2F21WWIg%2BddvFzA4%3D&K=3f88c2a0-a643-4203-8e71-04688744e92d&CMID
=null&D=637822820571122599&PID=18015&TID=adfd46f4-992a-45ec-935c-4c9bc4baf506
---
■ Synchronet ■ Time Warp of the Future BBS - Home of League 10 IBBS Games
|
