[German]Microsoft is not really having a good run with its security updates for Exchange Server 2016 and Exchange Server 2019. The version of the security updates released on November 12, 2024 had to be withdrawn due to a bug. Version 2, released on November 27, 2024, contains a time zone bug that Microsoft has already acknowledged.
Bug in the first version of the November 2024 updates
Microsoft had released security updates (SU) for Exchange Server 2016 and 2019 on November 12, 2024. These updates are intended to close vulnerabilities found by Microsoft or security partners in Exchange Server. In addition, some new features such as improvements to Exchange Server AMSI integration or warnings against spoofing emails will be introduced. I had reported in the blog post Microsoft Exchange Server Updates November 12, 2024.
The problem was that the transport rules no longer worked after installing the security updates. In the afternoon (CET) of November 14, 2024, Microsoft issued the message in the Techcommunity post Released: November 2024 Exchange Server Security Updates that the rollout of the November 2024 security updates had been stopped.
Re-release of version 2 of the November 2024 updates
On November 27, 2024, Microsoft released version 2 of the November 2024 security updates for Exchange Server 2016 and 2019. I reported in the blog post Microsoft Exchange Server Nov. Updates Re-Release (27. Nov. 2024) and assume that some administrators will want to install them at the weekend.
German Exchange specialist Frank Carius points out in the above tweet that version 2 of the November 2024 security updates for Exchange Server 2016 and 2019 still contain a bug.
After installing Exchange Server November 2024 SU (version 1 or version 2), problems occur when Exchange Server processes calendar-related information and files such as .ical or .ics attachments. Users cannot preview the files or add them to the calendar.
The issue occurs when users use Outlook on the Web (OWA) and the Exchange Active Sync (EAS) email client on a mobile device. The issue can also affect Exchange Transport when processing emails with .ical or .ics files as attachments.
If the Exchange Server cannot process calendar information, corresponding event log entries are created. Microsoft has published the details in the support article Time zone exception occurs after installing Exchange Server November 2024 SU (Version 1 or Version 2).
