Microsoft is pausing the rollout of an Exchange security update after it became clear that the patch could break transport rules for some customers. T

Microsoft Exchange update fixes security flaws, breaks other stuff

submited by

Style Pass

2024-11-17 17:00:04

Microsoft is pausing the rollout of an Exchange security update after it became clear that the patch could break transport rules for some customers.

The November 2024 Security Updates deal with various vulnerabilities in Microsoft's email server. While Exchange Online is already protected, customers using Exchange in a hybrid mode or fully on-premises must install the patches.

That is, unless the patches are abruptly pulled. On November 14, Microsoft admitted that customers with their own transport or data loss protection (DLP) rules found that the transport rules were "stopping periodically" after the update was installed. The company then "temporarily paused the rollout" of the update.

Some affected users have reported that, in a worst case scenario, email may stop flowing altogether. Obviously implementation varies widely from org to org, and only a subset of users are affected. Microsoft has noted that "Customers who might not use Transport or DLP rules and did not run into the issue with rules, can continue using the November SU update."

The Register contacted Microsoft for more detail on the failure modes and we will update this article should the company respond."