Security News > 2022 > November > November 2022 Patch Tuesday forecast: Wrapping up loose ends?

Microsoft turned around and released a series of non-security updates that fixed some discovered connections issues - forcing many to conduct another unplanned patch cycle.

The initial concern was that CVE-2022-3602 could lead to another Heartbleed situation which did result in widespread exploitation in 2014 of CVE-2014-0160 in OpenSSL. The good news is these recent CVEs are much harder to exploit, but you should update to the latest version of OpenSSL in your environment during your next patch cycle to protect yourself from the sure-to-come attacks.

As with all the Microsoft updates, we'll be getting these come next week's Patch Tuesday if you haven't had a chance to update and you do need them.

Despite October Patch Tuesday and several out-of-band releases throughout the month, we've not seen an update yet.

November 2022 Patch Tuesday forecast As I anticipated last month, the ESU updates are continuing to get a lot of attention with 40+ CVEs addressed as their EOL approaches.

It will be nice if Microsoft provides us with some updates this month that wrap up a lot of the loose ends I mentioned, and we can move into the end-of-year holidays with secure, stable systems and peace of mind.

News URL

https://www.helpnetsecurity.com/2022/11/04/november-2022-patch-tuesday-forecast/