Apply Missing Security Patch?

Topic

New Reply

I checked the installed security only patches since October 16 and I found the following:

October, November 2016 and January March 2017 are installed, but December KB3205394 is not. Should I go ahead and install it now, or should I uninstall October & November, install it and then reinstall the 2?

I don’t see any IE11 security patches in Control Panel since 2013, which is strange because until mid 2015 when GWX started I applied ALL WU patches — were there any and should they appear in control panel? DO I need to go back and hunt for all of them?

Reply | Quote

Replies

The Security-only Updates for Windows are not cumulative, so you can install the ones you are missing without a problem. The links are in AKB2000003

The Cumulative patch for IE11 used to be included in the Security-only Update, but as of March, MS separated it out. The links for the IE11 update are included in AKB2000003. You will need to install them manually as well.

If you want to avoid patches that contain telemetry, you can hide the patches mentioned at the top of AKB2000003. Those should be the only patches you hide.

If you are missing anything else, it should show up in Windows Update. Do not check anything that is unchecked by default. If you are trying to stay in Group B, uncheck the Security Monthly Quality ROLLUP for Windows and any driver updates, then install the rest.

1 user thanked author for this post.

fp

Reply | Quote

Are the .net framework  security patches CumulativeAs i’m missing DEC and November 2016

the rollup’s i think  are, but are the standalone patches ?

Reply | Quote

I find that the Rollup superseded the previous Rollup (Dec) but find no indication that the Security-only Updates are cumulative.

Reply | Quote

Thanks.

Do security updates for either windows or IE11  contain telemetry?

I have all security updates for Windows since mid-2015 when GWX started. The only ones that I seemed to be missing were

* one Net 4.6.2 from Dec 2015, which I just installed

* KB3205394 from Dec 2016, which I will install now

* any IE11 security patches since GWX, which should not have happened; I need to check, but the problem is

* your list goes only back to october

* I don’t like to  enable WU just to check for earlier stuff

Is there any list anywhere I can consult to find any IE11 security patches 2013-now?

 

I will check with the list, but where the security ones always explicitly identified as such, or mixed together with non-security ones?

Reply | Quote

The Security Only Quality UPDATES for Windows and the cumulative updates for IE11 do not contain telemetry.

2 users thanked author for this post.

fp, JDeC

Reply | Quote

I found a page with all the IE11 security patches.

https://www.manageengine.com/products/desktop-central/patch-management/Internet-Explorer-11-updates.html

If they are cumulative, if I apply the last one in April when Woody OKs it, it takes care of all the previous ones, right?

Reply | Quote

PKCano wrote:

The Cumulative patch for IE11 used to be included in the Security-only Update, but as of March, MS separated it out.

Have you have applied the Security-Only updates and the March IE update listed in AKB2000003?

I would caution about using 3rd-party download sites if you don’t know their pedigree first.

Reply | Quote

Yes, I did.

Which is precisely why I asked here first.

If they are cumulative, then I will install the April one when Woody OKs it and I don’t need the other site.

Reply | Quote

As you have installed the March IE update, it really doesn’t matter if the new IE updating patches are cumulative or not, from what I can see.

Anyway, @Woody posted the instructions for installing the April updates about 5 days ago, on Infoworld and linked from here. The download links were posted in AKB2000003.

Reply | Quote