Microsoft has released security updates (SUs) for vulnerabilities found in:
Exchange Server 2013
Exchange Server 2016
Exchange Server 2019
IMPORTANT: Starting with this release of Securit...
Updated May 27, 2022
Version 21.0
Blog Post
Hi Exchange team,
Please advise.
We are planning to migrate exchange servers to another subnet and location.
Healthchecker script detected the following on existing Exchange 2013 CU23 servers:
FIP-FS Update Issue Detected: True
More Information: https://aka.ms/HC-FIPFSUpdateIssue
Security Vulnerability
----------------------
Security Vulnerability: CVE-2021-26427
See: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2021-26427 for more information.
Security Vulnerability: CVE-2021-42305
See: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2021-42305 for more information.
Security Vulnerability: CVE-2021-41349
See: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2021-41349 for more information.
Security Vulnerability: CVE-2022-21855
See: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2022-21855 for more information.
Security Vulnerability: CVE-2022-21846
See: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2022-21846 for more information.
Security Vulnerability: CVE-2022-21969
See: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2022-21969 for more information.
Security Vulnerability: CVE-2022-23277
See: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2022-23277 for more information.
Security Vulnerability: CVE-2021-34470
PrepareSchema required: https://aka.ms/HC-July21SU
Security Vulnerability: CVE-2022-21978
Unable to perform vulnerability testing. If Exchange admins do not have domain permissions this might be expected, please re-run with domain account. - See: https://aka.ms/HC-May22SU
What is the appropriate way to migrate Exchange 2013 CU23 to another location taking into account the May 22SU?
Deploy Exchange Server 2013 CU23 with latest binary (I believe https://www.microsoft.com/en-us/download/details.aspx?id=58392 which should contain May 22 SU) on a new location, migrate all databases, and etc. , then prepare schema/domain?
Or, prepare the schema as it may not prepared after July 21 SU and which HealthChecker script detects it, patch the existing Exchange Servers 23CU with May 22 SU prepare domain, and then migrate to another location?
Regards,