March 2020 Security Updates

Release Notes

March 2020 Security Updates

Release Date: March 10, 2020

The March 2020 security release consists of security updates for the following software:

• Microsoft Windows
• Microsoft Edge (EdgeHTML-based)
• Microsoft Edge (Chromium-based)
• ChakraCore
• Internet Explorer
• Microsoft Exchange Server
• Microsoft Office and Microsoft Office Services and Web Apps
• Azure DevOps
• Windows Defender
• Visual Studio
• Open Source Software
• Azure
• Microsoft Dynamics

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

The following CVEs have additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

• CVE-2020-0765
• CVE-2020-0774
• CVE-2020-0775
• CVE-2020-0795
• CVE-2020-0813
• CVE-2020-0820
• CVE-2020-0850
• CVE-2020-0851
• CVE-2020-0852
• CVE-2020-0853
• CVE-2020-0855
• CVE-2020-0859
• CVE-2020-0861
• CVE-2020-0863
• CVE-2020-0871
• CVE-2020-0874
• CVE-2020-0876
• CVE-2020-0879
• CVE-2020-0880
• CVE-2020-0882
• CVE-2020-0885
• CVE-2020-0891
• CVE-2020-0892
• CVE-2020-0893
• CVE-2020-0894
• CVE-2020-0902 *

Known Issues

The following KBs contain information about known issues with the security updates. For a complete list of security update KBs, please see 20200310

KB Article	Applies To
4538032	Visual Studio
4538461	Windows 10 Version 1809, Windows Server 2019
4540123	Microsoft Exchange Server
4540670	Windows 10, version 1607, Windows Server 2016
4540671	Internet Explorer
4540688	Windows 7, Windows Server 2008 R2 (Monthly Rollup)
4540694	Windows Server 2012 (Security-only update)
4541500	Windows 7, Windows Server 2008 R2 (Security-only update)
4541504	Windows Server 2008 (Security-only update)
4541505	Windows 8.1, Windows Server 2012 R2 (Security-only update)
4541506	Windows Server 2008 Service Pack 2 (Monthly Rollup)
4541509	Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4541510	Windows Server 2012 (Monthly Rollup)
4551762	Windows 10, version 1903, Windows Server version 1903, Windows 10, version 1909, Windows Server version 1909

- Link:

- wong chee tat :)

November 2019 Security Updates

Release Notes

November 2019 Security Updates

Release Date: November 12, 2019

The November security release consists of security updates for the following software:

• Microsoft Windows
• Internet Explorer
• Microsoft Edge (EdgeHTML-based)
• ChakraCore
• Microsoft Office and Microsoft Office Services and Web Apps
• Open Source Software
• Microsoft Exchange Server
• Visual Studio
• Azure Stack

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Starting in May 2019, Internet Explorer 11 is available on Windows Server 2012. This configuration is present only in the IE Cumulative package.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

• ADV190024 *
• CVE-2018-12207 *
• CVE-2019-11135 *
• CVE-2019-1324
• CVE-2019-1370
• CVE-2019-1374
• CVE-2019-1381
• CVE-2019-1402
• CVE-2019-1409
• CVE-2019-1411
• CVE-2019-1412
• CVE-2019-1418
• CVE-2019-1432
• CVE-2019-1436
• CVE-2019-1439
• CVE-2019-1440
• CVE-2019-1442 *
• CVE-2019-1443
• CVE-2019-1445
• CVE-2019-1446
• CVE-2019-1447
• CVE-2019-1448
• CVE-2019-1449
• CVE-2019-1457

Known Issues
The following KBs contain information about known issues with the security updates. For a complete list of security update KBs, please see 20191112

KB Article	Applies To
4484113	Microsoft Exchange Server
4523171	Microsoft Exchange Server
4523205	Windows 10, version 1809, Windows Server 2019
4524570	Windows 10, version 1903, Windows Server version 1903
4525232	Windows 10
4525236	Windows 10, version 1607, Windows Server 2016
4525237	Windows 10, version 1803, Windows Server version 1803
4525241	Windows 10, version 1709
4525243	Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4525246	Windows Server 2012 (Monthly Rollup)
4525250	Windows 8.1, Windows Server 2012 R2 (Security-only update)
4525253	Windows Server 2012 (Security-only update)

- Link 


- wong chee tat :)

July 2019 Security Updates

Release Notes

July 2019 Security Updates

Release Date: July 09, 2019

The July security release consists of security updates for the following software:

• Microsoft Windows
• Internet Explorer
• Microsoft Edge
• Microsoft Office and Microsoft Office Services and Web Apps
• Azure DevOps
• Open Source Software
• .NET Framework
• Azure
• SQL Server
• ASP.NET
• Visual Studio
• Microsoft Exchange Server

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Starting in May 2019, Internet Explorer 11 is available on Windows Server 2012. This configuration is only present in only the IE Cumulative package.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

• CVE-2019-0962 *
• CVE-2019-1006 *
• CVE-2019-1068 *
• CVE-2019-1071
• CVE-2019-1073
• CVE-2019-1079
• CVE-2019-1084
• CVE-2019-1091
• CVE-2019-1093
• CVE-2019-1094
• CVE-2019-1095
• CVE-2019-1096
• CVE-2019-1097
• CVE-2019-1098
• CVE-2019-1099
• CVE-2019-1100
• CVE-2019-1101
• CVE-2019-1108
• CVE-2019-1109
• CVE-2019-1110
• CVE-2019-1111
• CVE-2019-1112
• CVE-2019-1116
• CVE-2019-1134

Known Issues

KB Article	Applies To
4493730	Servicing stack update for Windows Server 2008 SP2
4507434	Internet Explorer 11
4507435	Windows 10, version 1803
4507448	Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4507449	Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Monthly Rollup)
4507450	Windows 10, version 1703
4507453	Windows 10, version 1903, Windows Server version 1903
4507455	Windows 10, version 1709
4507457	Windows 8.1, Windows Server 2012 R2 (Security-only update)
4507458	Windows 10
4507460	Windows 10 1607 and Windows Server 2016
4507462	Windows Server 2012 (Monthly Rollup)
4507464	Windows Server 2012 (Security-only update)
4507469	Windows 10, version 1809, Windows Server 2019
4509408	Microsoft Exchange Server 2019
4509409	Microsoft Exchange Server 2013 and 2016
4509410	Microsoft Exchange Server 2010

- Link: 


- wong chee tat :)

System Status: Fan Maintenance

System Status: Fan Maintenance

Cleaned! ^^




- wong chee tat :)

Scheduled Maintenance - POSB

Scheduled Maintenance

We are constantly upgrading our systems to bring you a more pleasant banking experience. During the mentioned period of scheduled maintenance, some of the services will not be available:

digibank Online (Internet Banking)

Date	Services Under Maintenance
Daily 05:00am - 06:00am	- Services that involve foreign currency exchanges (e.g. multi-currency funds transfer between Multi-Currency Accounts, foreign currency remittances) will be unavailable.
10 Mar 01:25am to 01:30am 05:25am to 05:30am	- Funds Transfer Involving Multi-Currency Settlement Account (MCSA) - Portfolio Enquiry
10 Mar 01:25am to 05:30am	- Online Funds Investment
10 Mar 01:25am to 05:50am	- Online Equity Trading - IB Onboarding using S-Account
17 Mar 12:00am to 08:00am	- Credit Card and Cashline Applications using MyInfo
17 Mar 01:00am to 07:00am	Please note that the following services will also be disabled during this maintenance: - Fast Funds Transfer to Other Bank (New or Existing Recipients) - Fast Funds Transfer to Other Bank (One-Time) - PayNow Transfer - Register/Manage PayNow

digibank Mobile

Date	Services Under Maintenance
Daily 05:00am - 06:00am	- Services that involve foreign currency exchanges (e.g. multi-currency funds transfer between Multi-Currency Accounts, foreign currency remittances) will be unavailable.
10 Mar 01:25am to 01:30am 05:25am to 05:30am	- Funds Transfer Involving Multi-Currency Settlement Account (MCSA)
10 Mar 01:25am to 05:50am	- IB Onboarding using S-Account
10 Mar 02:00am to 05:00am	- Intermittent Unavailability for Scan & Pay                                                                   - All Credit Card Transactions
17 Mar 01:00am to 07:00am	Please note that the following services will also be disabled during this maintenance: - Fast Funds Transfer to Other Bank (New or Existing Recipients) - Fast Funds Transfer to Other Bank (One-Time) - PayNow Transfer - Register/Manage PayNow
24 Mar 12:05am to 02:05am	- Digital Token Provisioning

DBS iWealth App

Date	Services Under Maintenance
Daily 05:00am - 06:00am	- Services that involve foreign currency exchanges (e.g. multi-currency funds transfer between Multi-Currency Accounts, foreign currency remittances) will be unavailable.
10 Mar 01:25am to 01:30am 05:25am to 05:30am	- Funds Transfer Involving Multi-Currency Settlement Account (MCSA) - Portfolio Enquiry
10 Mar 01:25am to 05:30am	- Online Funds Investment
10 Mar 01:25am to 05:50am	- Online Equity Trading - IB Onboarding using S-Account
10 Mar 02:00am to 05:00am	- Intermittent Unavailability for Scan & Pay - All Credit Card Transactions
17 Mar 01:00am to 07:00am	Please note that the following services will also be disabled during this maintenance: - Fast Funds Transfer to Other Bank (New or Existing Recipients) - Fast Funds Transfer to Other Bank (One-Time) - PayNow Transfer - Register/Manage PayNow
24 Mar 12:05am to 02:05am	- Digital Token Provisioning

PayLah!

Date	Services Under Maintenance
10 Mar 02:00am to 05:00am	- All QR payments will be intermittent
17 Mar 01:00am to 07:00am	- Top up for wallets registered via non-DBS/POSB iBanking will be unavailable  - PayNow transfers will be unavailable

Services using Card and PIN

Date	Services Under Maintenance
17 Mar 12:00am to 08:00am	- Personal Particulars Update using MyInfo

Public Web

Date	Services Under Maintenance
17 Mar 12:00am to 08:00am	- Credit Card, Cashline and Bank Account Applications using MyInfo

- Link

- wong chee tat :)

Scheduled Maintenance - POSB

Scheduled Maintenance

We are constantly upgrading our systems to bring you a more pleasant banking experience. During the mentioned period of scheduled maintenance, some of the services will not be available:

digibank Online (Internet Banking)

Date	Services Under Maintenance
Daily 05:00am - 06:00am	- Services that involve foreign currency exchanges (e.g. multi-currency funds transfer between Multi-Currency Accounts, foreign currency remittances) will be unavailable.
03 Mar 01:00am to 03:00am	- Fund Transfer to Other DBS/POSB Account
09 Mar 01:25am to 01:30am 05:25am to 05:30am	- Funds Transfer Involving Multi-Currency Settlement Account (MCSA) - Portfolio Enquiry
09 Mar 01:25am to 05:30am	- Online Funds Investment
09 Mar 01:25am to 05:50am	- Online Equity Trading - IB Onboarding using S-Account

digibank Mobile

Date	Services Under Maintenance
Daily 05:00am - 06:00am	- Services that involve foreign currency exchanges (e.g. multi-currency funds transfer between Multi-Currency Accounts, foreign currency remittances) will be unavailable.
03 Mar 01:00am to 03:00am	- Fund Transfer to Other DBS/POSB Account
09 Mar 01:25am to 01:30am 05:25am to 05:30am	- Funds Transfer Involving Multi-Currency Settlement Account (MCSA)
09 Mar 01:25am to 05:50am	- IB Onboarding using S-Account
10 Mar 02:00am to 05:00am	- Intermittent Unavailability for Scan & Pay - All Credit Card Transactions

DBS iWealth App

Date	Services Under Maintenance
Daily 05:00am - 06:00am	- Services that involve foreign currency exchanges (e.g. multi-currency funds transfer between Multi-Currency Accounts, foreign currency remittances) will be unavailable.
03 Mar 01:00am to 03:00am	- Fund Transfer to Other DBS/POSB Account
09 Mar 01:25am to 01:30am 05:25am to 05:30am	- Funds Transfer Involving Multi-Currency Settlement Account (MCSA) - Portfolio Enquiry
09 Mar 01:25am to 05:30am	- Online Funds Investment
09 Mar 01:25am to 05:50am	- Online Equity Trading - IB Onboarding using S-Account
10 Mar 02:00am to 05:00am	- Intermittent Unavailability for Scan & Pay - All Credit Card Transactions

PayLah!

Date	Services Under Maintenance
10 Mar 02:00am to 05:00am	- All NETS QR payments will be unavailable  - All Credit Card Transactions

- Link:

- wong chee tat :)