July 11, 2017—KB4025341 (Monthly Rollup)

https://support.microsoft.com/en-gb/help/4025341

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4022168 (released June 27, 2017) and resolves the following issues:

  • Addressed issue called out in KB4022168 where Internet Explorer 11 may close unexpectedly when you visit some websites.
  • Security updates to Microsoft Graphics Component, Windows Search, Windows Virtualization, Windows Storage and File Systems, Datacenter Networking, Windows Server, Windows kernel, Microsoft PowerShell, Windows shell, Internet Explorer 11, Microsoft NTFS, Windows kernel-mode drivers, and ASP.NET.

For more information about the security vulnerabilities resolved, please refer to the Security Update Guide.

More Information

Important

  • After installing the security updates for CVE-2017-8563, administrators need to set registry key LdapEnforceChannelBinding to enable the fix for the CVE. For more information about setting the registry key, see Microsoft Knowledge Base article 4034879.

Known issues in this update

Symptom Workaround
Due to a defect in WLDAP32.DLL, applications that perform LDAP referral chasing can consume excessive or all of the available TCP dynamic ports after installing KB 4025337 and KB4025341. Applications and roles known to make these referrals may include Outlook.exe, DFSR, and others.

If restarting applications that perform LDAP referral chasing returns normal functionality on machines that installed KB 4025337 and KB4025341, you may be experiencing this issue.

To work around the problem, restart services or applications that perform LDAP referral chasing to free TCP dynamic ports. A reboot will also free ports. For example, restarting Outlook will free ports used by that application.

To work around the problem for cluster computers hosting the DFSR service, place the virtual cluster object under the Computers container to avoid reaching the referral chasing search, which leads to the dynamic port leak.

Microsoft is working on a resolution and will provide an update in an upcoming release.

 

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.

 

File information

For a list of the files that are provided in this update, download the file information for update 4025341.

Leave a Reply