News

Microsoft’s Schannel Security Update May Have Problems

Software giant Microsoft has issued a warning today based around it’s MS14-066 update which was pushed to consumers late last week. They’ve provided a workaround for those who have already installed the update and are urging all users to avoid or uninstall the update if possible.

This update was designed to fix a critical vulnerability in Schannel, with Microsoft implementing SSL/TLS encryption. This update was previously seen as highly critical by the wider audience with many tech companies and news channels urging users to update immediately. Unfortunately, this update is causing some major issues for some consumers, coming in the form of configurations in which TLS 1.2 is enabled by default and leading negotiations to fail. When the failure occurs, Microsoft and ZDNET has explained:

“TLS 1.2 connections are dropped, processes hang (stop responding), or services become intermittently unresponsive.” There may also be an event ID 36887 in the System event log withe description “A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 40.” ZDNET

The MS14-066 update also contained some new features including four ciphers for TLS. The workaround as given by Microsoft is to delete the following ciphers from your system:

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
TLS_RSA_WITH_AES_256_GCM_SHA384
TLS_RSA_WITH_AES_128_GCM_SHA256

Microsoft has provided a step-by-step process on their official website.

What exactly is happening about this update is somewhat of a grey area, with Microsoft and others reportedly claiming that this update did succeed in protecting the previous mentioned loopholes – but it’s seemingly providing users with more issues than wanted or expected.

Image courtesy of Mashable

Chris Smith

Disqus Comments Loading...

Recent Posts

Yoshi-P Says He Would Like a Re-Release of Vagrant Story and Final Fantasy Tactics

More than twenty years after the launch of Vagrant Story, many are still dreaming of…

6 mins ago

Still Wakes the Deep 

LIVE THE HORROR: An immersive disaster story aboard a stunningly realised North Sea oil rig,…

5 hours ago

PHILIPS 275V8LA – 27 Inch QHD Monitor

The Philips VA LED display uses an advanced multi-domain vertical alignment technology that gives you…

5 hours ago

EPOMAKER Ajazz AK820 Pro 75% Gasket-mounted Mechanical Keyboard 

【TFT Screen: The Interactive Interface】This 75% mechanical keyboard comes equipped with a TFT Screen, serving…

5 hours ago

Funko Fusion

FANDOM FUSION Play as your favorite characters and wield their unique weapons and skills. Team…

5 hours ago

Shin Megami Tensei V: Vengeance Standard Edition

The Definitive Version of Shin Megami Tensei V - Fully evolved with stunning visuals for…

5 hours ago