Patchday: Windows 11/Server 2022-Updates (June 13, 2023)

Windows[German]On June 13, 2023 (second Tuesday of the month, patchday at Microsoft), Microsoft also released cumulative updates for Windows 11 22H1 and 22H2. In addition, Windows Server 2022 received an update. Here are some details about these updates, which are supposed to fix vulnerabilities as well as issues.

Updates for Windows 11 21H1 – 22H2

A list of Windows 11 updates can be found on this Microsoft web page. I have pulled out the details below. Microsoft now provides the following updates for the Windows 11 versions mentioned above.

Update KB5027231 for Windows 11 22H2

Cumulative Update KB5027231 raises the OS build for Windows 11 to 22621.1848 and includes quality improvements as well as security patches. This update also includes the new features mentioned in the preview update from the previous month (see Windows 11 22H2: Preview (Feature) Update KB5026446 (May 24, 2023)). In the support article, Microsoft states the following:

  • This update addresses security issues for your Windows operating system.
  • This update addresses a known issue that affects 32-bit apps that are large address aware and use the CopyFile API. You might have issues when you save, copy, or attach files. If you use some commercial or enterprise security software that uses extended file attributes, this issue will likely affect you. For Microsoft Office apps, this issue only affects the 32-bit versions. You might receive the error, "Document not saved."
  • This update addresses a compatibility issue. The issue occurs because of unsupported use of the registry.
  • This update addresses an issue that affects the Windows Kernel. This issue is related to CVE-2023-32019. To learn more, see KB5028407.

The long known copying problem with files has thus been provided with a fix. This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog and via WSUS and WUfB. The patch includes the Windows 11 Servicing Stack Update. The update causes various problems, which are listed in the support article.

Update KB5027223 foür Windows 11 21H2

Cumulative Update KB5027223 raises the OS build for Windows 11 to 22000.2057 and includes quality improvements and security patches, but no new operating system features. The fixes from the previous month's preview update have been incorporated (see Windows 11 21H2 Preview Update KB5026436 (May 23, 2023)). Microsoft lists the following fixes and improvements:

This update addresses a race condition in Windows Local Administrator Password Solution (LAPS). The Local Security Authority Subsystem Service (LSASS) might stop responding. This occurs when the system processes multiple local account operations at the same time. The access violation error code is 0xc0000005.

Microsoft notes that this update makes quality improvements to the servicing stack (which is responsible for Microsoft updates). This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog and via WSUS and WUfB. Notes on known issues with the update can be found in the support article.

Windows Server 2022

According to this Microsoft page cumulative Update KB5027225 for Windows Server 2022 has been released, which raises the OS build to 20348.1787. About the fixes this update makes, Microsoft writes:

  • This update addresses an issue that affects servers that have Citrix and Ivanti as a Remote Desktop Services (RDS) server. Signing in to them takes a very long time.
  • This update addresses a resource conflict issue between two or more threads (known as a deadlock). This deadlock affects COM+ applications.
  • This update addresses an issue that affects the Storage Spaces Direct (S2D) cluster. It might not come online. This occurs after a periodic password rollover. The error code is 1326.
  • This update addresses a memory leak. It occurs every time you print a rich text document.
  • This update addresses an issue that might affect the Domain Name System (DNS) suffix search list. When you configure it, the parent domain might be missing.
  • This update changes the support phone number for Microsoft India for Windows activation.
  • This update addresses an issue that might cause some systems to stop working. This occurs when you implement firewall logging.
  • This update addresses an issue that might affect the Local Security Authority Subsystem Service (LSASS). It might close sporadically. The system logs the exception 0xc0000710 in the Application Error event 1000. Because of this, the domain controller restarts unexpectedly. This issue affects read-only DCs (RODC) that also run Microsoft Defender Advanced Threat Protection (ATP).
  • This update addresses an issue that affects the Windows Kernel. This issue is related to CVE-2023-32019. To learn more, see KB5028407.

Microsoft notes that this update makes quality improvements to the servicing stack (which is responsible for Microsoft updates). This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog and via WSUS and WUfB. Notes on known issues with the update can be found in the support article.

Similar articles:
Microsoft Security Update Summary (June 13, 2023)
Patchday: Windows 10-Updates (June 13, 2023)
Patchday: Windows 11/Server 2022-Updates (June 13, 2023)
Windows 7/Server 2008 R2; Server 2012 R2: Updates (June 13, 2023)

Microsoft Office Updates (June 6, 2023)
Microsoft Office Updates (June 13, 2023)
Exchange Server Security Updates (June 13, 2023)

This entry was posted in Security, Update, Windows and tagged , , , , . Bookmark the permalink.

2 Responses to Patchday: Windows 11/Server 2022-Updates (June 13, 2023)

  1. Dawna Pritchard says:

    Our older konica minolta printer could only scan to the computer if I enabled the SMB1. With the latest update, and using the same method I previously deployed, I have now lost this function. Any ideas on how to fix?

  2. Steve says:

    Dawna – this may be due to the NETLOGON changes / RPC Sealing changes that Microsoft introduced and began soft enforcement of in June. There is a registry change that may help on the affected SMB share host, but you may end up having to upgrade your MFD.

    https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25

Leave a Reply

Your email address will not be published. Required fields are marked *