Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/fabian_bader/statuses/109667024838358180">Fabian Bader (fabian_bader@infosec.exchange)'s status on Wednesday, 11-Jan-2023 07:12:09 JST</a><a href="https://infosec.exchange/@fabian_bader" title="fabian_bader@infosec.exchange"><img src="https://gnusocial.jp/avatar/87037-48-20230110221208.webp" width="48" height="48" alt="Fabian Bader" style="position: absolute; left: 0; top: 0;">Fabian Bader</a></section><article><p>If you didn't apply the out of band december patch, the offical fix for the <a href="https://infosec.exchange/tags/RC4" rel="tag">#RC4</a> issue is now included in all patches.</p><p><a href="https://infosec.exchange/tags/PatchTuesday" rel="tag">#PatchTuesday</a> <a href="https://infosec.exchange/tags/Kerberos" rel="tag">#Kerberos</a> <a href="https://infosec.exchange/tags/Fix" rel="tag">#Fix</a> <a href="https://infosec.exchange/tags/OOB" rel="tag">#OOB</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/1025109#notice-2277422">In conversation</a><time datetime="2023-01-11T07:12:09+09:00" title="Wednesday, 11-Jan-2023 07:12:09 JST">Wednesday, 11-Jan-2023 07:12:09 JST</time> <span>from <span><a href="https://infosec.exchange/@fabian_bader/109667024838358180" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@fabian_bader/109667024838358180">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/604785">This update addresses an issue that might affect authentication. It might fail after you set the higher 16-bits of the msds-SupportedEncryptionTypes attribute. This issue might occur if you do not set the encryption types or you disable the RC4 encryption type on the domain.</a></label><br><a href="https://media.infosec.exchange/infosecmedia/media_attachments/files/109/667/024/020/715/556/original/806b21a8f84afb54.png" rel="external">https://media.infosec.exchange/infosecmedia/media_attachments/files/109/667/024/020/715/556/original/806b21a8f84afb54.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Fabian Bader (fabian_bader@infosec.exchange)'s status on Wednesday, 11-Jan-2023 07:12:09 JST Fabian Bader
If you didn't apply the out of band december patch, the offical fix for the #RC4 issue is now included in all patches.
#PatchTuesday #Kerberos #Fix #OOB
In conversationWednesday, 11-Jan-2023 07:12:09 JST from infosec.exchangepermalink
Attachments
1. This update addresses an issue that might affect authentication. It might fail after you set the higher 16-bits of the msds-SupportedEncryptionTypes attribute. This issue might occur if you do not set the encryption types or you disable the RC4 encryption type on the domain.
  https://media.infosec.exchange/infosecmedia/media_attachments/files/109/667/024/020/715/556/original/806b21a8f84afb54.png

Public

Embed Notice

HTML Code

Corresponding Notice