Cumulative Update KB4025342 Windows 10 v1703 Build 15063.483

Hi,

khanmein said:

Do we really need to edit the registry key?

After installing the security updates for CVE-2017-8563, administrators need to set registry key LdapEnforceChannelBinding to enable the fix for the CVE. For more information about setting the registry key, see Microsoft Knowledge Base article 4034879.

The way I understand it, no, you do not:

********************************************************************
Title: Microsoft Security Update Releases
Issued: July 11, 2017
********************************************************************

Summary
=======

The following CVEs and Microsoft security bulletins have undergone
a major revision increment.


* CVE-2016-3305
* CVE-2017-0292
* CVE-2017-8543
* MS16-111
* MS16-SEP

CVE Revision Information:
=====================

CVE-2016-3305

- Title: CVE-2016-3305 | Windows Session Object Elevation of
Privilege Vulnerability
- https://portal.msrc.microsoft.com/en...urity-guidance
- Reason for Revision: Revised the Affected Products table to
include 10 Version 1703 for 32-bit Systems and Windows 10 Version
1703 for x64-based Systems because they are affected by
CVE-2016-3305. Microsoft recommends that customers running Windows
10 Version 1703 should install update 4025342 to be protected from
this vulnerability.
- Originally posted: September 13, 2016
- CVE Severity Rating: Important
- Version: 2.0

Source MS Security Update e-mail.

Cheers,

khanmein said:

Do we really need to edit the registry key?

After installing the security updates for CVE-2017-8563, administrators need to set registry key LdapEnforceChannelBinding to enable the fix for the CVE. For more information about setting the registry key, see Microsoft Knowledge Base article 4034879.

Only on a DC, which most people won't have, you can set the registry to enhance the security for the communication between a workstation and a domain controller.

https://portal.msrc.microsoft.com/en...c-000d3a32fc99

After installing the updates for CVE-2017-8563, to make LDAP authentication over SSL/TLS more secure, administrators need to create a LdapEnforceChannelBinding registry setting on a Domain Controller

https://support.microsoft.com/en-us/help/4034879/how-to-add-the-ldapenforcechannelbinding-registry-entry

To help make LDAP authentication over SSL/TLS more secure, administrators can configure the following registry setting on a Domain Controller

khanmein said:

Do we really need to edit the registry key?

After installing the security updates for CVE-2017-8563, administrators need to set registry key LdapEnforceChannelBinding to enable the fix for the CVE. For more information about setting the registry key, see Microsoft Knowledge Base article 4034879.

I am having the same question. Does anyone have the answer?

KB4025342 installed on both of my PCs without any issues. Ran Disk Cleanup right after this CU; It saved me 2.55GB on both PCs

Czecher said:

Hello guys,
I did this update and everything went ok.
Just wanna ask you, is there any update for adobe flash player, it used to be there.
Thank you
Czecher

Attachment 143495

Yeah I'm not getting flash either even though I know there has been an update for it released. My v1607 machine got the flash update via WU, but this v1703 machine is not getting it. Odd