![]() |
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
Search Results for '3177467'
Posted on Comment on the AskWoody Lounge-
AuthorSearch Results
-
November 24, 2020 at 4:43 pm #2314192
In reply to: Win7 Fresh installation November 2020
Volume Z
AskWoody Lounger3177467 doesn’t make a difference either. The 3-somethings are relics of the pre-SHA-2-era. Then again you can’t start off with anything newer than KB4490628 because it’s a prerequiste to the later SSUs.
KB4490628 ist the one to start with.
November 24, 2020 at 11:40 am #2314101In reply to: Win7 Fresh installation November 2020
EP
AskWoody_MVPyou should NOT be installing KB3020369 anymore as it is already obsolete and replaced by newer updates like KB3177467, KB4490628 and KB4580970 & KB4536952 and greater
when installing Win7 from scratch, include KB3177467 or better and discard KB3020369
-
This reply was modified 2 months ago by
EP.
March 28, 2020 at 5:07 pm #2211938In reply to: Win 7 ESU missing SSUs
ch100
AskWoody_MVPThis is an ongoing discussion.
I would say the SSU should be installed by itself instead of has to.
There are SSUs indeed which have to be installed by themselves, KB3177467 being a good example for Windows 7.
Most other SSUs are not required to be installed separately, although this is certainly the best practice when installing manually.
An example in favour of my statement would be that when installing from Windows Update, the SSU is bundled and installed with other updates in one step.
Another one would be when using WSUS (or SCCM leveraging WSUS), although the SSU comes separately there, it can be bundled and installed with the other updates coming on Patch Tuesday to avoid unnecessary multiple reboots. At least this is the most common practice.January 8, 2020 at 8:43 pm #2042644In reply to: 2019-12 Servicing Stack Win7/2008R2 only?
abbodi86
AskWoody_MVPServer 2012 R2 was skipped too ๐
what’s wrong on having SSU for one or certain Windows only?
they never were synced together for downloevel Windows, except for last few months (KB3177467 was released on its own for Win 7)and yes, 2019-12 SSUs for Win7/2008/2008R2 are only to update ExtendedSecurityUpdatesAI.dll component
1 user thanked author for this post.
November 25, 2019 at 6:05 am #2010760In reply to: only install specific updates without issues?
PKCano
ManagerYou should only need the SSUs I linked to. But installing old SSUs, like KB 3177467 from Dec 2018, won’t hurt anything as long as it’s done in chronological order and one at a time. It’s just not necessary unless the later ones won’t install.
1 user thanked author for this post.
November 25, 2019 at 5:48 am #2010755In reply to: only install specific updates without issues?
tom341
AskWoody LoungerSo on the servicing stack side of this would i need to also install KB 3177467 (Dec 18 ssu)? or just the latest which you linked to?
November 18, 2019 at 11:33 am #2007452EP
AskWoody_MVPbut KB3020369 is an obsolete update and KB3177467 should be used instead. avoid using KB3020369 since windows update does not offer that one anymore
KB3177467 was originally released in late September 2016 but got a V2 release on October 2018 as a “security update”. download & install KB3177467 from MS Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=3177467
October 28, 2019 at 3:00 pm #1994411In reply to: Still need WU KB4490628?
EP
AskWoody_MVPwhoops. it seems the KB4516655 servicing stack update fails to install on Win7 systems without the previous SSU KB4490628 update installed (MS made a boo-boo on their support article 4516655 saying it superseded the KB4490628 update but in reality it was not. on the MS update catalog site, MS got the info about KB4516655 correct where it does NOT replace KB4490628 but KB4516655 does replace KB3177467)
so I take back my statement of KB4516655 superseding KB4490628 in my previous post as KB4516655 truly requires the older KB4490628 update installed first.
-
This reply was modified 1 year, 2 months ago by
EP.
May 27, 2019 at 10:29 am #1746466In reply to: Windows 7 service pack 2
EP
AskWoody_MVPall except KB3020369 which the August 2018 Win7 ISOs have KB3177467 instead
May 27, 2019 at 10:27 am #1746465In reply to: Windows 7 service pack 2
EP
AskWoody_MVPAVOID installing KB3020369 as THAT update is OBSOLETE and replaced by newer updates like KB3177467 and KB4490628.
Substitute KB3020369 with either KB3177467 or KB4490628 as either one can be installed first
April 16, 2019 at 3:16 pm #483024In reply to: Fresh Install (Group B) best way to do it
PKCano
ManagerThere is a new servicing stack since that method was written. You should install KB4490628 in place of the older KB3177467. But basically, that is still a good method.
April 11, 2019 at 7:44 pm #351239In reply to: Latest Kb 4490628
ardvark
AskWoody LoungerOne more question… does Kb4490628ย ย require removal of the old Stacking Kb3177467 or will the ne one just replace it?
Regards, ardvark
March 28, 2019 at 6:09 pm #346143In reply to: Windows 10 nag for Windows 7 makes an appearance
Speccy
AskWoody Lounger-For separate updates, CBS handle files per assembly component version, update package version does not matter at all
you can install 10 SSUs, CBS is smart enough to make the latest one with higher components version to be effective
in this case: KB4490628 v6.1.7601.24383 < KB3177467 v6.1.7601.23505
Thank you!!! Now it suddenly made sense. ๐
I just dig into the first “main” .mum (of the “package chain”, let’s put it this way, overlooking the fact that the whole package contains multiple .mum files) and didn’t realize that the “final” Servicing Stack version was both at the end of the “package chain” (in the last .mum) and also in the package contents (in the very own name of the sub-directories!).
But you meant
“KB4490628 v6.1.7601.24383 > KB3177467 v6.1.7601.23505″
right? ๐
โ SSUs are always safe, Windows users should accept this fact and stop struggling about to install them or not
He he… Point taken. ๐ But I was not struggling (or expecting anyone here to go into the lengths I did), just testing. ๐
โ removing the permanence tag is what made KB3177467 to be removed,
Yes.
editing KB4490628 mum file has no effect here
Right. In this case, I simply edited it for “compliance” (and to describe it correctly as a “Security Update”).
separate update package name = no direct relation or effect (SSUs)
chained update package name = auto supersedence (W10 CUs or W7 Monthly Rollups)I see. That explains why KB4490628 won’t remove KB3177467 (only new, updated releases of a given package – or an updated, different package that embedds that one as one of multiple dependencies [chained updates] – may actually remove it).
abbodi86, once again: Thank You. I was wrong. I didn’t understand correctly a few important things about the package supersedence model. You posted perfectly: shortly, but enlightening – and generously shared invaluable knowledge (we grasshoppers try to learn something new each day… you taught me a lot, today). ๐
March 28, 2019 at 11:05 am #346016In reply to: Windows 10 nag for Windows 7 makes an appearance
abbodi86
AskWoody_MVP– For separate updates, CBS handle files per assembly component version, update package version does not matter at all
you can install 10 SSUs, CBS is smart enough to make the latest one with higher components version to be effective
in this case: KB4490628 v6.1.7601.24383 < KB3177467 v6.1.7601.23505
– SSUs are always safe, Windows users should accept this fact and stop struggling about to install them or not ๐
– removing the permanence tag is what made KB3177467 to be removed, editing KB4490628 mum file has no effect here
separate update package name = no direct relation or effect (SSUs)
chained update package name = auto supersedence (W10 CUs or W7 Monthly Rollups)Regards.
March 28, 2019 at 7:45 am #345918In reply to: Windows 10 nag for Windows 7 makes an appearance
Speccy
AskWoody LoungerHi abbodi86,
I do realize KB4490628 is a separate update from KB3177467 (not only because the KB numbers are different), but shouldn’t the former be replacing (superseding) the latter?
And, if so, isn’t the incremental version numbering relevant?
In which case yes, the exclusive tag DOES have an interest here and yes, installing multiple SSU versions with conflicting version numbers MIGHT be causing undesired side-effects (of which the fact of the KB4493132 “EOL nagging update” not being consistently offered is a minor issue, compared with the potential problems that might arise due to the SSUs conflicting and blocking each other).
You are totally right in the assumption that, under “normal” circumstances, SSUs are usually safe and should be installed prior to other security and cumulative updates. I also admit having the wrong info: in fact, I already wrote before that I’m NOT an MVP – just another dude here trying to help people – and, therefore, I lack the skills and expertise required to fully grasp the technical complexity and subtle inner details of how XML works (and Microsoft uses it). Therefore, please correct me and help us to better understand and handle this complex subject. I do appreciate reading and learning from the valuable comments and knowledge that you and other MVPs kindly share with us! ๐
I am truly sorry for over-complicating things up (I really tried not to…) but, right now, from what I’m able to understand about the inner details of how SSUs work I can not endorse your recommendation to promptly install KB4490628 (SSUv3) ASAP. Instead, I can only recommend people to WAIT and see if Microsoft releases an updated (fixed?) version of the SSU – that will automatically handle and fix what, in my view, is a complete mess.
Most of our readers should stop reading right now and decide if they should, or should not, install KB4490628 (SSUv3) immediately or, at least, wait until we’re at MS-DEFCON 3: what follows below is not for the faint-hearted.
You see… I was actually able to create a working, updated version of my Windows 7 system with SSUv3 *ONLY* and SSUv2 removed (my “beta testing” branch). Here’s how:
cd %WINDIR%\servicing\Packages takeown /F Package_for_KB3177467~31bf3856ad364e35~amd64~~6.1.2.5.mum /A takeown /F Package_for_KB4490628~31bf3856ad364e35~amd64~~6.1.1.2.mum /A cacls Package_for_KB3177467~31bf3856ad364e35~amd64~~6.1.2.5.mum /E /G BUILTIN\Administrators:F cacls Package_for_KB4490628~31bf3856ad364e35~amd64~~6.1.1.2.mum /E /G BUILTIN\Administrators:F notepad Package_for_KB3177467~31bf3856ad364e35~amd64~~6.1.2.5.mum
Removed the ‘permanence=”permanent”‘ attribute of the <package> tag, saved the .mum file and exited Notepad. Then,
notepad Package_for_KB4490628~31bf3856ad364e35~amd64~~6.1.1.2.mum
changed the ‘releaseType=”Update”‘ attribute to ‘releaseType=”Security Update”‘, added the
<mum:packageExtended xmlns:mum="urn:schemas-microsoft-com:asm.v3" exclusive="true"/>
tag right above (before) the closing </package> tag, saved the .mum file and exited Notepad. Finally, I removed SSUv2:
dism /online /remove-package /packagename:Package_for_KB3177467~31bf3856ad364e35~amd64~~6.1.2.5
and now I’m left with (a properly installed?) SSUv3 *ONLY*:
C:\>dism /online /get-packages /Format:Table|findstr KB3177467 C:\>dism /online /get-packages /Format:Table|findstr KB4490628 Package_for_KB4490628~31bf3856ad364e35~amd64~~6.1.1.2 | Installed | Security Update | 2019/03/27 01:23
Under Control Panel > All Control Panel Items > Programs and Features > Installed Updates, KB4490628 is listed as
Security Update for Microsoft Windows (KB4490628)
with no “Uninstall” option (as expected, because it is a permanent update).
I tried WU: it appears to be working well. I rebooted and tried again: all OK.
Isn’t that how we should expect KB4490628 to behave like? ๐
1 user thanked author for this post.
-
This reply was modified 2 months ago by
-
AuthorSearch Results
-
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Search The Lounge
Recent Replies
Donald Crossman on Can’t add, or remove, any bluetooth device
40 minutes agoOlderGeeks.com on Freeware spotlight โ 3 tiny tech tools for your flash drive
1 hour, 3 minutes agoFred on Google threatens to remove search engine from Australia
1 hour, 5 minutes agoPaul T on Can’t add, or remove, any bluetooth device
1 hour, 25 minutes agoanonymous on So I opened up an HP and where’s the hard drive?
1 hour, 34 minutes agoAlex5723 on Tasks for the Weekend – January 23, 2021
2 hours, Just nowDonald Crossman on Can’t add, or remove, any bluetooth device
2 hours, 4 minutes agoAlex5723 on Can’t add, or remove, any bluetooth device
2 hours, 12 minutes agoDonald Crossman on Can’t add, or remove, any bluetooth device
2 hours, 26 minutes agoAlex5723 on Giving you the choice
2 hours, 48 minutes agoOscarCP on Linux is now completely usable on the Mac mini M1
4 hours, 40 minutes agoMatador on Tasks for the Weekend – January 23, 2021
4 hours, 53 minutes agoPaul T on Outlook 2019 send and receive
5 hours, 2 minutes agoPaul T on This should be the best patching experience
5 hours, 10 minutes agoPaul T on Files don’t copy from Win7 HDD to Win10 computer
5 hours, 13 minutes agoOscarCP on Giving you the choice
5 hours, 13 minutes agoPaul T on Need inexpensive domain
5 hours, 17 minutes agoScotchJohn on Giving you the choice
5 hours, 19 minutes agoPaul T on Can’t add, or remove, any bluetooth device
5 hours, 22 minutes agoScotchJohn on Outlook 2019 send and receive
5 hours, 22 minutes agoPaul T on Do we need Java?
5 hours, 25 minutes agoPaul T on Standalone installer script for Windows 7 ESU, regardless the license
5 hours, 38 minutes agoPaul T on Giving you the choice
5 hours, 39 minutes agoCybertooth on Giving you the choice
5 hours, 59 minutes agoPierre77 on Standalone installer script for Windows 7 ESU, regardless the license
6 hours, 1 minute agoBundaburra on Outlook 2019 send and receive
6 hours, 25 minutes agoNathan Parker on macOS Catalina running on iPad Pro 2020
6 hours, 42 minutes agoNathan Parker on Linux is now completely usable on the Mac mini M1
6 hours, 43 minutes agoNathan Parker on Apple to block sideloading iOS apps on M1
6 hours, 45 minutes agoBundaburra on Fiber optic not available; options please
6 hours, 46 minutes ago
Recent Topics
-
Chrome browser stopped playing video
1 hour, 21 minutes ago
-
The Classic Browser v6.3
3 hours, 2 minutes ago
-
Apple News Wrap Up: January 23, 2020
5 hours, 45 minutes ago
-
Tasks for the Weekend – January 23, 2021
2 hours ago
-
Need inexpensive domain
5 hours, 17 minutes ago
-
Outlook 2019 send and receive
5 hours, 2 minutes ago
-
Can’t add, or remove, any bluetooth device
40 minutes ago
-
Customize the mouse w10 2004–19041.746
16 hours, 57 minutes ago
-
Can’t install any programs since Win 2004 update
11 hours, 8 minutes ago
-
SFC errors not repairable, upgrade to 2004?
13 hours, 47 minutes ago
-
Slow file copy
17 hours, 20 minutes ago
-
Do we need Java?
5 hours, 25 minutes ago
-
Windows 10 version changes
16 hours, 11 minutes ago
-
Lost Post
22 hours, 6 minutes ago
-
Hasta la vista, TeamViewer Free
13 hours, 39 minutes ago
-
Files don’t copy from Win7 HDD to Win10 computer
5 hours, 13 minutes ago
-
Does the HP Spectre Notebook (2016 model) have a removable wireless LAN Card?
1 day, 7 hours ago
-
Windows 10 2004 and Intel Ethernet Problem Solving
18 hours, 24 minutes ago
-
KB4023057 while on Win10-2004
19 hours, 31 minutes ago
-
MS Shared Experience warning
1 day, 13 hours ago
-
Google threatens to remove search engine from Australia
1 hour, 5 minutes ago
-
macOS Catalina running on iPad Pro 2020
6 hours, 42 minutes ago
-
How to check if someone else accessed your Google account
2 days, 4 hours ago
-
This should be the best patching experience
5 hours, 10 minutes ago
-
Windows 10 Insider build 19042.782 (20H2) released to Beta & Release Preview
2 days, 10 hours ago
-
Browser Settings Block Linux Mint Downloads
2 days, 10 hours ago
-
Windows 10 Insider Preview build 20296 released to DEV Channel
2 days, 17 hours ago
-
Google Analytics Notice
2 days, 18 hours ago
-
Beeper combines 15 chatting apps
2 days, 13 hours ago
-
File Explorer cannot see external 2Tb drive in full
2 days, 21 hours ago
Search for Topics
Recent blog posts
- Tasks for the Weekend – January 23, 2021
- Slow file copy
- This should be the best patching experience
- So I opened up an HP and where’s the hard drive?
- What Linux is and why it has persisted
- Find the cable modem that’s just right for your ISP
- Four GB of RAM vanishes … but then reappears
- Wow! Even more Office updates!
Key Links
Copyright ยฉ 2004 – 2021 AskWoody Tech LLC. All rights reserved.