New era for Japan, familiar problems: Microsoft withdraws crash-tastic patches
Upcoming calendar change more than Office can handle
Stop us if you've heard this one, but Microsoft has pulled a couple of buggy patches in Office. It also left a crash-worthy Outlook security fix in place.
The two non-security patches were part of this month's Patch Tuesday, both for Office 2010. The patches in question were supposed to support Japan's upcoming epochal turnover.
Last year, Japanese Emperor Akihito announced that he would abdicate in favour of his son, Naruhito. As Microsoft explained in this blog post, that will bring the "Heisei era"* to a close, something that's never happened "in the history of .NET" – meaning a calendar transition would be needed.
In both cases, the patches caused application crashes:
After you install this update, you may experience crashes in Microsoft Access or other applications. To resolve this issue, uninstall the update by following the instructions in the "More information" section.
Another patch that has been causing crashes, but hasn't yet been pulled, is Outlook 2010 KB 4461529.
Microsoft's knowledge base post warned that if the 64-bit version of that patch has been installed, Outlook might crash on start-up.
That was a security patch covering CVE-2018-8522, CVE-2018-8524, CVE-2018-8576, and CVE-2018-8582 – a collection of vulnerabilities that allowed remote code execution if the user opened a crafted Office file.
Rather than withdraw the patch, Redmond said it's researching the problem – a hint, perhaps, at the seriousness of the vulnerability. ®
* which started on 8 January 1989, the day after the death of the Emperor Hirohito and the ascension of Akihito.
Sponsored: Becoming a Pragmatic Security Leader