<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi All,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">A <b>critical security vulnerability</b> has been discovered, which affects computers running
<b>Microsoft Windows 7 and earlier (including XP, server 2008).</b> Windows 8 and 10 are unaffected.<o:p></o:p></p>
<p class="MsoNormal">The vulnerability compromises the Remote Desktop Protocol, and would allow malicious actors to access vulnerable computers. It also can spread automatically across a network once it’s introduced.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Microsoft has released an update patch to defend against this, and the university is directing IT staff to apply this patch as widely as possible today (a ‘drop everything and fix’ priority level). We have deployed the patch automatically
and a majority of our computers are already applying the patch. However, we have identified some systems that are not patching correctly.
<b>Given the criticality and time-sensitive nature in this case, today I may connect over the network to affected computers, in order to apply the patch manually.
</b>There will almost certainly be more to do next week including physical visits to some computers, so please look out for further communications.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">More info: <a href="https://nvd.nist.gov/vuln/detail/CVE-2019-0708">
<span style="color:#0563C1">https://nvd.nist.gov/vuln/detail/CVE-2019-0708</span></a>
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you for your patience and understanding. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Andrew<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><img border="0" width="224" height="45" style="width:2.3333in;height:.4687in" id="Picture_x0020_1" src="cid:image001.png@01D50CA1.329B1570" alt="cid:image002.png@01D424CE.59244880"></span><span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#BB0000;background:white">Andrew D. Canale</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333"><br>
<span style="background:white">Systems Manager</span><br>
</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#BB0000;background:white">College of Arts and Sciences</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333;background:white"> Technology Services</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333"><br>
<span style="background:white">1199 Physics Research Building, 191 W Woodruff Ave, Columbus, OH 43210</span><br>
<span style="background:white">614-292-4767 Office</span><br>
</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><a href="mailto:canale.6@osu.edu"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:blue;background:white">canale.6@osu.edu</span></a></span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333;background:white"> </span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><a href="http://asctech.osu.edu/" target="_BLANK"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:blue;background:white">asctech.osu.edu</span></a></span><span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>