NewApp Digest
search bot

KB5034440

Microsoft posts guidance for CVE-2024-21302 VBS flaw that downgrades modern Windows PCs
Winsage
August 16, 2024

Microsoft posts guidance for CVE-2024-21302 VBS flaw that downgrades modern Windows PCs

Microsoft released Patch Tuesday updates for Windows operating systems, including KB5041580, KB5041578, KB5041773, and KB5041782 for Windows 10, and KB5041585, KB5041592 for Windows 11 versions 23H2, 22H2, and 21H2, along with KB5041571 for the upcoming 24H2 version. The company retired the problematic WinRE updates, KB5034440 and KB5034441. A newly discovered security vulnerability, tracked as CVE-2024-21302 and CVE-2024-38202, allows attackers to downgrade systems to vulnerable states undetected. This vulnerability affects Windows 10, Windows 11, Windows Server 2016, and higher systems, enabling attackers to replace current system files with outdated versions. Microsoft is developing a security update to address this issue and has released mitigation strategies for supported Windows versions. Administrators can deploy a Microsoft-signed revocation policy to prevent loading vulnerable VBS system files. Home users are advised against manually installing the policy and should wait for an automatic fix.
Microsoft retires Windows updates causing 0x80070643 errors
Winsage
August 14, 2024

Microsoft retires Windows updates causing 0x80070643 errors

Microsoft has retired several updates released during the January 2024 Patch Tuesday due to installation errors linked to the 0x80070643 error when installing Windows Recovery Environment (WinRE) updates. The updates affected were KB5034441 for Windows 10, KB5034440 for Windows 11, and KB5034439 for Windows Server 2022, which aimed to address a critical vulnerability (CVE-2024-20666) related to BitLocker encryption. The error was caused by insufficient space in the WinRE partition, requiring an additional 250 MB of free space. Microsoft announced that users must manually expand their WinRE partitions to resolve the errors, as an automated fix will not be provided. New replacement updates—KB5042320, KB5042321, and KB5042322—have been introduced, which will only be available to users with adequate free space in their WinRE partitions. Microsoft offers guidance for users to either follow manual steps or use a script to resize their partitions to ensure they can install the new updates.
Microsoft kills unfixable KB5034440/KB5034441 updates, replaces with KB5042321/KB5042320
Winsage
August 14, 2024

Microsoft kills unfixable KB5034440/KB5034441 updates, replaces with KB5042321/KB5042320

Microsoft released its monthly Patch Tuesday updates, including KB5041580, KB5041578, KB5041773, and KB5041782 for Windows 10, and KB5041585, KB5041592, and KB5041571 for Windows 11 across versions 23H2, 22H2, 21H2, and the new 24H2. The company retired the problematic KB5034441 and KB5034440 WinRE updates, which caused the "0x80070643 - ERRORINSTALLFAILURE" error due to insufficient space in recovery partitions. These updates were initially meant to address a BitLocker Secure Boot bypass vulnerability (CVE-2024-20666). Microsoft acknowledged that an automatic fix for the installation failure would not be provided, leaving manual workarounds as the solution. The retired updates have been replaced with new support documents KB5042321 and KB5042320, which clarify that the update requires 250 MB of free space in the recovery partition to install successfully. Users are advised to resize their recovery partitions if necessary.
Can’t update Windows due to error code 0x80070643? Here’s what to do
Winsage
July 15, 2024

Can’t update Windows due to error code 0x80070643? Here’s what to do

A Windows update bug is causing installation issues for some users when trying to install specific updates for Windows 10 and Windows 11, resulting in error codes 0x80070643 or 0x80070643 - ERRORINSTALLFAILURE. The problem is caused by the Windows recovery partition not being large enough to complete the update, leading to a failure in the update to WinRE. Microsoft has provided self-help instructions to address this issue, including checking the WinRE version and adjusting the size of the recovery partition if necessary.
Search