Skip to content

Commit 367e784

Browse files
Merge pull request #17707 from alkohli/7-2504
Added 2 security updates for April
2 parents a7f8ad2 + 41cb22d commit 367e784

File tree

1 file changed

+106
-1
lines changed

1 file changed

+106
-1
lines changed

azure-local/security-update/security-update.md

Lines changed: 106 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,112 @@ ms.reviewer: alkohli
1010

1111
# Security updates for Azure Local
1212

13-
This article lists the various security updates that are available in Azure Local.
13+
This article lists the various security updates that are available for Azure Local.
14+
15+
::: moniker range="=azloc-2504"
16+
17+
## April OS security updates (KB5055527) for Azure Local
18+
19+
<!--For the 2504 release of Azure Local, Microsoft released two security updates: one for existing deployments and another for new deployments.
20+
21+
The following table provides information about different deployment types, their corresponding security updates, and OS builds:
22+
23+
24+
| Deployment type | Security update | OS build |
25+
|---------|---------|---------|
26+
| Existing deployments | KB5055527 | 25398.1551 |
27+
| New deployments | KB5055523 | 26100.3775 |-->
28+
29+
30+
<!--# [Existing deployments](#tab/existing-deployments)
31+
32+
This section applies to existing deployments of 2504 running OS build **25398.1551**.-->
33+
34+
## Improvements
35+
36+
This security update includes quality improvements. Below is a summary of the key issues that this update addresses when you install this KB. If there are new features, it lists them as well. The bold text within the brackets indicates the item or area of the change.
37+
38+
- **[Daylight saving time (DST)]** Update for the Aysen region in Chile to support the government DST change order in 2025. For more info about DST changes, see the [Daylight Saving Time & Time Zone Blog](https://techcommunity.microsoft.com/category/windows/blog/dstblog).
39+
40+
For more information about security vulnerabilities, see the [Security Update Guide](https://portal.msrc.microsoft.com/security-guidance) and the [April 2025 Security Updates](https://msrc.microsoft.com/update-guide/releaseNote/2025-Apr).
41+
42+
## Known issues
43+
44+
The following is a known issue with this update.
45+
46+
**Symptom**
47+
48+
Devices that have certain Citrix components installed might be unable to complete installation of the January 2025 Windows security update. This issue was observed on devices with [Citrix Session Recording Agent (SRA)](https://docs.citrix.com/en-us/session-recording/current-release/install-upgrade-uninstall.html), version 2411. The 2411 version of this application was released in December 2024.
49+
50+
Affected devices might initially download and apply the January 2025 Windows security update correctly, such as via the Windows Update page in Settings. However, when restarting the device to complete the update installation, an error message with text similar to "*Something didn’t go as planned. No need to worry – undoing changes*" appears. The device will then revert to the Windows updates previously present on the device. 
51+
52+
This issue likely affects a limited number of organizations as version 2411 of the SRA application is a new version. Home users are not expected to be affected by this issue. 
53+
54+
**Workaround**
55+
56+
Citrix has documented this issue, including a workaround, which can be performed prior to installing the January 2025 Windows security update. For details, see [Citrix support documentation](https://support.citrix.com/s/article/CTX692505-microsofts-january-security-update-failsreverts-on-a-machine-with-2411-session-recording-agent?language=en_US).
57+
58+
Microsoft is working with Citrix to address this issue and will update this documentation once a resolution is available.
59+
60+
## To install
61+
62+
Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see [Servicing stack updates](/windows/deployment/update/servicing-stack-updates) and [Servicing Stack Updates (SSU): Frequently Asked Questions](https://support.microsoft.com/topic/servicing-stack-updates-ssu-frequently-asked-questions-06b62771-1cb0-368c-09cf-87c4efc4f2fe).
63+
64+
To install the LCU on your Azure Local instance, see [Update Azure Stack Local instances](../update/about-updates-23h2.md).
65+
66+
## File list
67+
68+
For a list of the files that are provided in this update, download the file information for [Cumulative update KB 5055527](https://go.microsoft.com/fwlink/?linkid=2313660).
69+
70+
71+
<!--# [New deployments](#tab/new-deployments)
72+
73+
This section applies to new deployments of 2504 running OS build **26100.3775**.
74+
75+
## Improvements
76+
77+
This security update includes quality improvements. Below is a summary of the key issues that this update addresses when you install this KB. If there are new features, it lists them as well. The bold text within the brackets indicates the item or area of the change.
78+
79+
- **[Authentication]** This update addresses an issue affecting machine password rotation in the Identity Update Manager certificate/Pre-Bootstrapping Key Initialization path. This issue occurred particularly when Kerberos was used and Credential Guard was enabled, potentially causing user authentication problems. The feature **Machine Accounts in Credential Guard**, which is dependent on password rotation via Kerberos, has also been disabled until a permanent fix is made available.
80+
81+
- **[Daylight Saving Time (DST)]** This update is for the Aysen region in Chile to support the government DST change order in 2025. For more info about DST changes, see the [Daylight Saving Time & Time Zone Blog](https://techcommunity.microsoft.com/category/windows/blog/dstblog).
82+
83+
- **[PcaUiArm]** This update addresses an issue affecting the **PcaUiArmUpdate** feature, which results in unexpected behavior in specific scenarios.
84+
85+
For more information about security vulnerabilities, see the [Security Update Guide](https://portal.msrc.microsoft.com/security-guidance) and the [April 2025 Security Updates](https://msrc.microsoft.com/update-guide/releaseNote/2025-Apr).
86+
87+
## Known issues
88+
89+
The following is a known issue with this update.
90+
91+
**Symptom**
92+
93+
Devices that have certain Citrix components installed might be unable to complete installation of the January 2025 Windows security update. This issue was observed on devices with [Citrix Session Recording Agent (SRA) version 2411](https://docs.citrix.com/en-us/session-recording/current-release/install-upgrade-uninstall.html). The version 2411 version of this application was released in December 2024.
94+
95+
Affected devices might initially download and apply the January 2025 Windows security update correctly, such as via the Windows Update page in Settings. However, when restarting the device to complete the update installation, an error message with text similar to *"Something didn’t go as planned. No need to worry – undoing changes"* appears. The device will then revert to the Windows updates previously present on the device. 
96+
97+
This issue likely affects a limited number of organizations as version 2411 of the SRA application is a new version. Home users are not expected to be affected by this issue. 
98+
99+
**Workaround**
100+
101+
Citrix has documented this issue, including a workaround, which can be performed prior to installing the January 2025 Windows security update. For details, see the [Citrix documentation](https://support.citrix.com/s/article/CTX692505-microsofts-january-security-update-failsreverts-on-a-machine-with-2411-session-recording-agent?language=en_US).
102+
103+
Microsoft is working with Citrix to address this issue and will update this documentation once a resolution is available.
104+
105+
## To install
106+
107+
Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see [Servicing stack updates](/windows/deployment/update/servicing-stack-updates) and [Servicing Stack Updates (SSU): Frequently Asked Questions](https://support.microsoft.com/topic/servicing-stack-updates-ssu-frequently-asked-questions-06b62771-1cb0-368c-09cf-87c4efc4f2fe).
108+
109+
To install the LCU on your Azure Local instance, see [Update Azure Stack Local instances](../update/about-updates-23h2.md).
110+
111+
## File list
112+
113+
For a list of the files that are provided in this update, download the file information for [Cumulative update KB5055523](https://go.microsoft.com/fwlink/?linkid=2313854).
114+
115+
---
116+
-->
117+
118+
::: moniker-end
14119

15120
::: moniker range="=azloc-2503"
16121

0 commit comments

Comments
 (0)