Patching in Review – Week 5 of 2020

The echoes of Patch Tuesday past and anticipation of our next patch week are the themes here with Microsoft staying in the spotlight and Apple keeping things interesting this week.

It looks like the pesky wallpaper bug on Windows 7 from the final security release will indeed see a post end of life update for not just extended support customers, but all customers! The known issue listed in KB4534310 was just updated with an anticipated resolution in the coming week.

Mentioned in last week’s post, Microsoft released an advisory detailing a zero-day vulnerability that has yet to be patched but offered a workaround. According to BleepingComputer, this temporary fix is currently breaking windows printing with other unforeseen issues such as sfc failing when jscript.dll is read for integrity. It doesn’t look like we will see an out of band patch before February’s security release, so many environments may have to wait until then.

To play a bit of catch up, I’m coming in with the whole month of January. Please see the other articles below to get prepared for February’s patch week!

• Week 1
• Week 2
• Week 3
• Week 4

Security Releases

Apple released updates for their iTunes and iCloud applications on Windows with a total of 8 vulnerabilities shared between the two. The most severe vulnerability is awarded to CVE-2020-3825, CVE-2020-3868, and CVE-2020-3865 with a CVSSv3 score estimated at 8.8. All 3 vulnerabilities could lead to arbitrary code execution if malicious web content were to be accessed.

Third-Party Updates

See the list of additional third-party updates below from our supported vendors to keep your environments up to date.