update catalog

Winsage
April 22, 2025
Microsoft has released the optional KB5055612 preview cumulative update for Windows 10 22H2, which addresses a GPU paravirtualization issue in the Windows Subsystem for Linux 2 (WSL2). This update is part of Microsoft's initiative for optional non-security preview updates, typically available at the end of each month, allowing administrators to test upcoming fixes and features. The update does not include security updates and can be installed manually through Windows Update or downloaded from the Microsoft Update Catalog. The key changes in the KB5055612 update include security improvements to internal Windows OS functionality, a fix for the case-sensitive GPU paravirtualization check in WSL2, and updates to the Windows Kernel Vulnerable Driver Blocklist to include drivers with known vulnerabilities exploited in BYOVD attacks. Microsoft has noted two known issues: one related to the Citrix Session Recording Agent (SRA) version 2411 causing update failures, with a suggested workaround, and another involving an Event 7023 error in Windows EventViewer regarding SgrmBroker.exe, which is currently non-functional and can be ignored. A fix for this bug is expected in future updates.
Winsage
April 17, 2025
Microsoft released emergency updates for Windows Server to address startup failures in containers operating under Hyper-V isolation mode, caused by compatibility issues with the 2025.04 B container images. The updates enhance access to essential system files from the Windows Server host, improving compatibility and reliability. These out-of-band updates for Windows Server 2019, 2022, and 2025 must be manually downloaded from the Microsoft Update Catalog, as they will not be delivered through Windows Update. This update follows previous challenges, including authentication issues and boot problems caused by earlier security updates for Windows Server 2019 and 2022.
Winsage
April 14, 2025
Microsoft is releasing emergency patches to address an issue with local audit logon policies in Active Directory Group Policy, affecting various Windows versions including Windows 11 and Windows Server editions. The problem involves a reporting error where audit logon/logoff events may not appear as enabled in the Local Group Policy Editor, despite being active. The updates released include: - Windows 11, versions 23H2 and 22H2 (KB5058919) - Windows Server 2022 (KB5058920) - Windows 10 Enterprise LTSC 2019 and Windows Server 2019 (KB5058922) - Windows 10 LTSB 2016 and Windows Server 2016 (KB5058921) - Azure Stack HCI, version 22H2 (KB5058920) These patches are not security updates and are intended for affected organizations only. They can be downloaded from the Microsoft Update Catalog. The current updates are cumulative, meaning previous updates do not need to be installed first. Microsoft notes that home users are unlikely to be affected by this issue.
Winsage
April 9, 2025
Microsoft released its Patch Tuesday updates on the second Tuesday of April, including the KB5055523 patch for Windows 11 24H2, which addresses a File Explorer menu issue and includes security enhancements. This patch encompasses improvements from the previous KB5053656 build. The update resolves a glitch with the three dots menu in File Explorer, fixes a critical issue causing a Blue Screen of Death (BSOD) when waking from sleep, and upgrades Task Manager to display standardized CPU usage metrics. For Copilot+ PCs with Snapdragon chips, it introduces AI-driven Windows Search capabilities and improves Live Captions for real-time translation in over 44 languages. New features include an enhanced search functionality, a Gamepad keyboard layout for touch, and a new system tray icon for emoji. The update also provides a quick overview of key specifications in the Settings menu and resolves issues with Credential Roaming. KB5055523 is a mandatory security update, and older versions of Windows 10 have also received updates.
Winsage
April 8, 2025
April 2025 Patch Tuesday introduced fixes for over 120 vulnerabilities, including a critical zero-day vulnerability (CVE-2025-29824) that is actively exploited. CVE-2025-29824 is a user-after-free vulnerability in the Windows Common Log File System (CLFS), allowing privilege escalation to SYSTEM on compromised Windows machines. Microsoft has patched 32 CLFS vulnerabilities since 2022, with six exploited in the wild. Updates for Windows 10 are not yet available. Other notable vulnerabilities include CVE-2025-26663 and CVE-2025-26670, both unauthenticated user-after-free vulnerabilities in Windows LDAP, and CVE-2025-27480 and CVE-2025-27482 in Windows Remote Desktop Services. None of these vulnerabilities have been patched for Windows 10 systems, but updates are forthcoming. Microsoft reversed its decision to discontinue driver update synchronization to WSUS servers, confirming that WSUS will continue to synchronize driver updates.
Winsage
April 8, 2025
Microsoft has announced an extension of support for Windows Server Update Services (WSUS), postponing the planned end of support originally set for April 2025, in response to user feedback. The decision comes shortly before the scheduled cutoff and addresses challenges associated with disconnected device scenarios. Initially, Microsoft planned to make drivers available only through the Microsoft Update Catalog, but user feedback prompted a change. While some IT administrators may welcome the decision, others argue that WSUS is outdated and lacks essential capabilities for modern security. Gene Moody, field CTO at Action1, noted that WSUS is ill-equipped to meet contemporary demands and highlighted its limitations in enforcing updates and providing real-time visibility. Moody suggested that the extension of support is influenced by specific scenarios where WSUS remains necessary, such as environments with legal obligations or air-gapped networks. He cautioned that this decision should not be seen as a shift away from Microsoft's goal of phasing out WSUS in favor of cloud-based solutions.
Winsage
April 8, 2025
Microsoft has decided to postpone the removal of Windows Server Update Services (WSUS) driver synchronization, which was initially scheduled for April 18, 2025, due to user feedback. WSUS will continue to synchronize driver updates from the Windows Update service and import them from the Microsoft Update Catalog. Microsoft is encouraging administrators to consider alternative technologies such as Windows Autopatch, Microsoft Intune, and Azure Update Manager.
Winsage
April 8, 2025
Microsoft has postponed the discontinuation of driver distribution via Windows Server Update Services (WSUS), originally set for April 18, due to substantial user feedback. WSUS Driver Synchronization, initially marked as “deprecated,” will continue to be supported and operational, although it will not receive active development. Microsoft acknowledged the needs of users in disconnected environments and will maintain the service for synchronizing driver updates from the Windows Update Service and importing updates from the Microsoft Update Catalog. The company is also developing a new roadmap to streamline services and promote alternative technologies like Microsoft Intune and Windows Autopatch for Windows 11 devices.
Search