An update on MS-DEFCON level this month

Topic

New Reply

I had high hopes that Microsoft’s latest version of KB 2919355 would solve the installation problems folks were having with Windows 8.1 Update. At thi
[See the full post at: An update on MS-DEFCON level this month]

Reply | Quote

Replies

What about installing these two updates? They’re the only two Security Updates I have listed.

1. Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2922229)
https://technet.microsoft.com/library/security/ms14-019

2. And this one doesn’t make a lot of sense:
http://support.microsoft.com/kb/2964358

It says it’s for if you have 2929437 installed, but I don’t see that I do (unless it’s under another number). And if you click through to the IT Professionals link, it has a different KB number on it (2965111)
https://technet.microsoft.com/library/security/ms14-021

Is this tied to the whole IE thing you’ve been talking about?

Please advise. Thanks, Woody!

Reply | Quote

Well, it seems to be just an installation problem.
“and I’d guess there are maybe ten people in the world gullible enough to go that route.”
I wouldn’t go that far. In fact one way to go to Win8.1 is to do two in-place upgrades.

Reply | Quote

BTW, I checked the new Win8.1 update and the only difference is that it adds clearcompressionflag.exe to the update sequence.

Reply | Quote

For Windows 7 users, aren’t we in the clear except for unchecking KB 2952664?

Reply | Quote

Woody, more info:
Windows Update has put KB2919355 back in my chute, along with some other things. Beside KB2936068 & KB2964444 (Security Update for IE 11 with & without KB2919355), I now have KB2922229 & KB2964757 (Security Update for Windows 8.1 with & without KB2919355). KB2964757 is 1.7 MB & published 05/04/14; KB2922229 is 1.5 MB & was published 04/07/14.
Not asking for advice this time; will install the ‘without 8.1 Update’ stuff with other KB’s, then set a restore point & install Win 8.1 Update. I’ll give that a couple of days, then set a restore point & install the ‘with 8.1 Update’ KB’s; unless Redmond removes the ‘with’ stuff automatically after I install 8.1 Update.
Waiting for the OK & crossing my fingers…

Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...

Reply | Quote

As always, great to have your advice on what has become increasingly complicated due to MS problems and policies.

You suggest holding off on Black Tuesday patches, but what about the IE stuff issued after that? And if we install those, should we also install the IE Black Tuesday items?

Reply | Quote

Hi Woody, I turned off my XP updates after April 13th and have been watching your defcon posts as usual for future advise. I turned it on to get the security patch 2963983 but instead have several come up so could you please advise me. KB numbers are, 2936068, 2964358, 2922229, 2929961, 2930275, 890830, 2934207, should I just download them then wait for the emergency patch to arrive. Thanks Tom

Reply | Quote

Woody,

What does that mean for us who have Win7 machines and DON’T care about Win8?

Should we go ahead and allow the other Win7 patches?

I’ve got 100 machines here waiting on April’s patches.

Reply | Quote

@woody: update this article. Even though MS security advisory 2963983 exists, the actual KB2963983 IE patches do NOT exist. They are avaiable in MS security bulletin MS14-021 as either KB2964358 for all IE users including XP or KB2964444 for IE11 under Win7/Win8.1.

Reply | Quote

Thanks EP! The KB info really helps me. I have installed IE 11 on Win 7 Home Premium, and I was wondering if there was a different KB for the IE 11 patch.

Reply | Quote