Hyland Connect

Freddie_Jimenez · ‎11-30-2021

December Update - November's testing of patches is deemed complete, and there have been no known issues reported by testing teams relating to any of the Hyland products.'

The following is a summary of Microsoft's Security Bulletin Guide for November, 2021. Hyland has downloaded these patches and applied them to our R&D Infrastructure. We will be performing SCR, automated, and regression testing in environments containing these patches over the next month. If no issues have been found or reported, we will deem testing to be complete.

The testing is not all-inclusive; issues may still be found upon implementation. Follow best practices for testing and installing software updates/patches in a development environment before implementing the updates in a production environment. Where applicable, the updates are tested on all supported Windows platforms with the latest OnBase® version.

November 2021 Security Updates

Updates this Month

This release consists of security updates for the following products, features and roles.

3D Viewer
Azure
Azure RTOS
Azure Sphere
Microsoft Dynamics
Microsoft Edge (Chromium-based)
Microsoft Edge (Chromium-based) in IE Mode
Microsoft Exchange Server
Microsoft Office
Microsoft Office Access
Microsoft Office Excel
Microsoft Office SharePoint
Microsoft Office Word
Microsoft Windows
Microsoft Windows Codecs Library
Power BI
Role: Windows Hyper-V
Visual Studio
Visual Studio Code
Windows Active Directory
Windows COM
Windows Core Shell
Windows Cred SSProvider Protocol
Windows Defender
Windows Desktop Bridge
Windows Diagnostic Hub
Windows Fastfat Driver
Windows Feedback Hub
Windows Hello
Windows Installer
Windows Kernel
Windows NTFS
Windows RDP
Windows Scripting
Windows Update Assistant
Windows Virtual Machine Bus

Please note the following information regarding the security updates:

Security Update Guide Blog Posts

Date	Blog Post
February 9, 2021	Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021	Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020	Security Update Guide: Let’s keep the conversation going
November 9, 2020	Vulnerability Descriptions in the New Version of the Security Update Guide

Relevant Information

Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds

The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

CVE-2021-26443
CVE-2021-26444
CVE-2021-3711
CVE-2021-38631
CVE-2021-38665
CVE-2021-38666
CVE-2021-40442
CVE-2021-41368
CVE-2021-41371
CVE-2021-41373
CVE-2021-41374
CVE-2021-41375
CVE-2021-41376
CVE-2021-41379
CVE-2021-42275
CVE-2021-42277
CVE-2021-42278
CVE-2021-42280
CVE-2021-42282
CVE-2021-42284
CVE-2021-42287
CVE-2021-42291
CVE-2021-42292
CVE-2021-42296
CVE-2021-42297
CVE-2021-42298
CVE-2021-42300
CVE-2021-42301
CVE-2021-42302
CVE-2021-42303
CVE-2021-42304
CVE-2021-42321
CVE-2021-42323
CVE-2021-43208
CVE-2021-43209
CVE-2021-43211

Known Issues reported by Microsoft

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

KB Article	Applies To
5007186	Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2, Windows 10, Version 21H1, Windows Server, Version 21H1
5007189	Windows 10, Version 1909
5007192	Windows 10, Version 1607, Windows Server 2016
5007205	Windows Server 2022
5007206	Windows 10, Version 1809, Windows Server 2019
5007207	Windows 10
5007233	Windows 7, Windows Server 2008 R2 (Security-only update)
5007236	Windows 7, Windows Server 2008 R2 (Monthly Rollup)
5007245	Windows Server 2012 (Security-only update)
5007246	Windows Server 2008 (Security-only update)
5007247	Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
5007255	Windows 8.1, Windows Server 2012 R2 (Security-only update)
5007260	Windows Server 2012 (Monthly Rollup)
5007263	Windows Server 2008 (Monthly Rollup)
5007409	Exchange Server

Hyland Software - Microsoft Updates Statement

Hyland Software is dedicated to ensuring the monthly cumulative updates released by Microsoft® are compatible with OnBase®. On the second Tuesday of each month, the Quality Assurance Department of Hyland Software evaluates the cumulative fixes released and labeled as Critical or Important by Microsoft®. The details of the update provided by Microsoft are reviewed for interaction with OnBase® and installed when appropriate for testing its compatibility with OnBase®.