Lync Server 2013 Update – January 2016

Posted by on

This update takes two components on the server from 5.0.8308.941 to 5.0.8308.945, although – as with the December update that gave us .941 – I’m still struggling to see the point of one of them.

What’s Fixed?

It looks like the sole (documented) fix is for the Web Components and relates to the “You can’t join a meeting … on iOS 9” issue we first saw patched in the October update as Kb 3097592. It seems iOS 9.2 broke it again, and thus we now need Kb 3126487.

  • Kb 3126638 (Web Components server). This cumulative update resolves an issue that prevents you from joining a meeting from outside Lync 2013 for iPhone or Lync 2013 for iPad on iOS 9.2.
  • Kb 3126637 (Core Components). This cumulative update resolves the issues that were previously discussed in the following Microsoft Knowledge Base articles…

Continue reading ‘Lync Server 2013 Update – January 2016’ »

Lync Server 2013 Update – December 2015

Posted by on

This update takes the server from 5.0.8308.933 to 5.0.8308.941, although I’m struggling to see anything that’s actually fixed or changed at this stage.

What’s Fixed?

Nothing apparently! According to the kb articles, this cumulative update simply resolves issues that have previously been resolved in earlier updates this year!

What’s New?

Nothing apparently.

Download

Continue reading ‘Lync Server 2013 Update – December 2015’ »

Lync Phone Edition Update – December 2015

Posted by on

This update takes Phone Edition to 4.0.7577.4487 / 4488 & adds SHA-2 support.

There doesn’t seem to be an over-arching KB that goes into any more detail (that I can find), just David Paulino’s post on the UC Lobby page on TechNet:

This update for Microsoft Lync Phone Edition devices adds support for the SHA-2 suite of digest hash and signing algorithms for connections from clients. The SHA-2 protocol uses digest lengths of 224, 256, 384, or 512 bits. After you apply this update, Lync Phone Edition devices can be connected to a Microsoft Lync server that contains a certificate that is issued from the same Certification Authority (CA).

Download the relevant CAB files from here:

Revision History

9th December 2015: This is the initial post.
10th December 2015: Updated version numbers to reflect changes in the KB articles since yesterday. (Thanks Richard!). Firmware loaded into Lync 2013 using http://www.ehloworld.com/1217 and all version numbers above confirmed correct.
 
-G.

SfB 2016 Client Security Update – December 2015

Posted by on

This week’s security update also covers the Office 2016 client for SfB.

Kb3114372: “MS15-128: Description of the security update for Skype for Business 2016: December 8, 2015

This security update resolves vulnerabilities in Skype for Business 2016 that could allow remote code execution if a user opens a specially crafted document or visits a webpage that contains specially crafted embedded fonts. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS15-128.

For a complete list of affected software, see Microsoft Knowledge Base article 3104503.”

Continue reading ‘SfB 2016 Client Security Update – December 2015’ »

Lync 2013 / SfB 2015 Client Security Update – December 2015

Posted by on

This week’s security update takes the Office 2013-based Lync/SfB client from 15.0.4771.1001 to 15.0.4779.1001.

Kb3114351 "MS15-128: Description of the security update for Lync 2013 (Skype for Business): December 8, 2015

This security update resolves vulnerabilities in Microsoft Lync 2013 and Skype for Business. The vulnerabilities could allow remote code execution if a user opens a specially crafted document or visits a webpage that contains specially crafted embedded fonts.

To learn more about the vulnerabilities, see Microsoft Security Bulletin MS15-128.

For a complete list of affected software, see Microsoft Knowledge Base article 3104503".

Continue reading ‘Lync 2013 / SfB 2015 Client Security Update – December 2015’ »

SfB 2015 CU1 Server Update – November 2015

Posted by on

Just to keep us on our toes and to confuse those of us who – like Andrew – keep a rolling “CU” count of updates, Microsoft’s just released the third server update for Skype for Business 2015 and officially labelled it  “CU1”. I know; just go with it.

This update (Kb3061064) takes the server from 6.0.9319.88 to 6.0.9319.102, with lots of components affected.

What’s Fixed?

The Kbs contain lots of broad-sweeping “this cumulative update improves the reliability, stability, and performance of Skype for Business Server 2015” without going into detail. These are the named fixes:

  • Kb3095143 This cumulative update resolves an issue in which Windows 10 users who use Edge can’t join a meeting from Skype for Business Web App
  • Response Group issues:
    • Kb3092726 Holiday set names conflict when you run the Move-CsRgsConfiguration cmdlet in Skype for Business Server 2015
    • Kb3092728 Event ID 31128 when RGS can’t synchronize an Agent Group member’s SIP address in Skype for Business Server 2015
    • Kb3092729 High CPU usage after you publish a changed topology in Skype for Business Server 2015 with the Response Group Service
    • Kb3092730 Response group usage report takes longer to run or cannot complete in a Skype for Business Server 2015 environment

What’s New?

Continue reading ‘SfB 2015 CU1 Server Update – November 2015’ »

Quick Tip: Am I SE or EE?

Posted by on

I occasionally find myself thrown into a strange Lync or SfB environment – sometimes it’s even a TeamViewer session – and I need to hit the ground running and start discovering what’s going on.

Quicker than running up Topology Builder or wading through the output of Get-CsPool, “Get-CsComputer –Local” will tell you very quickly if the machine you’re on is a Standard Edition or Enterprise Edition.

PS C:\> Get-CsComputer -Local

Identity : sfb2015fe.contoso.local
Pool     : sfb2015fe.contoso.local
Fqdn     : sfb2015fe.contoso.local

PS C:\>

If all three values are the same, you’re on an SE machine – and if it turns out to be an EE server, its pool will be identified for you too!

 

 

SfB 2016 Client Security Update – November 2015

Posted by on

This week’s security update also covers the Office 2016 client for SfB.

Kb3085634: “MS15-116 and MS15-123: Description of the security update for Skype for Business 2016: November 10, 2015

This security update resolves vulnerabilities in Skype for Business 2016. These vulnerabilities could allow remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded OpenType fonts. Or, these vulnerabilities could allow information disclosure if an attacker invites a user to an instant message session and then sends that user a message that contains specially crafted JavaScript content.

To learn more about the vulnerabilities, see Microsoft Security Bulletin MS15-116 and Microsoft Security Bulletin MS15-123.

Note After you apply this security update, you may see a popup window that states that a website wants to open web content in protected mode in Internet Explorer. See Updates to change the way that Internet Explorer interacts with features in Microsoft Office applications for more information.”

What’s Fixed

No other fixes documented.

Continue reading ‘SfB 2016 Client Security Update – November 2015’ »

Lync 2013 / SfB 2015 Client Security Update – November 2015

Posted by on

This week’s security update takes the Office 2013-based Lync/SfB client from 15.0.4763.1001 to 15.0.4771.1001.

Kb3101496: “MS15-116 and MS15-123: Description of the security update for Lync 2013 (Skype for Business): November 10, 2015

This security update resolves vulnerabilities in Microsoft Lync 2013 and Skype for Business. These vulnerabilities could allow remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded OpenType fonts. Or, these vulnerabilities could allow information disclosure if an attacker invites a user to an instant message session and then sends that user a message that contains specially crafted JavaScript content.

To learn more about the vulnerabilities, see Microsoft Security Bulletin MS15-116 and Microsoft Security Bulletin MS15-123.

Note After you apply this security update, you may see a popup window that states that a website wants to open web content in protected mode in Internet Explorer. See Updates to change the way that Internet Explorer interacts with features in Microsoft Office applications for more information.”

What’s Fixed

This security update fixes the following non-security-related issues:

  • Kb3085626 Sent emoticons are displayed differently in instant messages between Lync 2010 or 2013 and Skype for Business clients
  • Kb3085629 Large conversations in Lync 2013 (Skype for Business) are lost in the Conversation History folder in Outlook
  • Kb3085630 Skype for Business client crashes when you search for a contact in the Skype Directory tab
  • Kb3085631 No phone numbers are displayed for a user whose photo is disabled in the contact list in Lync 2013 (Skype for Business)
  • Kb3085632 The Current Conversations option is missing when you do a consultative transfer in Lync 2013
  • Kb3085633 Call button is unavailable (grayed out) for a meeting organizer in Lync 2013 (Skype for Business)
  • Kb3087562 Registry key isn’t honored when you customize the title name of user interface in Skype for Business
  • Kb3101307 Lync 2013 (Skype for Business) users can’t save meeting contents to a redirected folder that’s in Offline mode

Continue reading ‘Lync 2013 / SfB 2015 Client Security Update – November 2015’ »

Use RegEx in Word to Mask IP Addresses

Posted by on

Some of my customers get a bit touchy about IP addresses leaving their corporate environment, so they need to be removed before any documents see the outside world. I’ve already added this as a feature in my script that turns a Sonus gateway backup into a DOCX and PDF.

Occasionally I need to send a trace file to a colleague or the vendor, so it needs to be cleansed first. If the addresses aren’t in themselves significant in the interpretation of the file, I generally just open the LOG file in Word and use this quick-and-dirty Find/Replace:

[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}

WordFindReplaceIpAddresses

Continue reading ‘Use RegEx in Word to Mask IP Addresses’ »