SSU Fixes Security Update Issue

Microsoft has released a Secure Boot security update and is recommending this SSU be prioritized as it resolves an issue in the Secure Boot.

CVE-2020-0689 is a vulnerability that could allow attackers to bypass Secure Boot and install untrusted software. The new SSU fixes the issue by making sure prerequisite updates are installed in the proper order for the CVE-2020-0689 security update to install without errors.

Customers using Syxsense Manage and Syxsense Secure can find KB5001205 available now for immediate deployment.

What are Servicing Stack Updates?

Servicing stack updates provide fixes to the Windows servicing stack, the fundamental component that installs Windows updates.

It also contains the “component-based servicing stack” (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components.

Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don’t install the latest servicing stack update, there’s a risk that your device can’t be updated with the latest Microsoft security fixes.