#cve202420666 — Public Fediverse posts

It's insane that #Microsoft #Windows10 #KB5034441 update fixing #CVE202420666 just outright fails to install in most cases (error 0x80070643). The reason for this is that the recovery partition can be too small, and the updater is unable to resize it. Manual admin level tweaking is needed to rectify this: disabling the recovery, removing the old recovery partition, resizing the existing partition to make enough room for the new large enough recovery partition, creating a new recovery partition to the free space and finally re-enabling the recovery. It was quite annoying to do this for my Win10 VMs. Yet I can't even imagine the grief this will cause when IT support staff need to do the same dance for most of their Win10 fleet. Skipping the update is of course not an option as the vulnerable recovery will allow #BitLocker security bypass (if no TPM PIN is used). #rant #WinRE #windows #fail