• December 2021 Patch Tuesday arrives – say goodbye to 2004

    Home » Forums » Newsletter and Homepage topics » December 2021 Patch Tuesday arrives – say goodbye to 2004

    Author
    Topic
    #2406303

    It’s that day of the month again when we turn and look (northward in my case, your location may vary) to Redmond and see what Holiday helpings they ar
    [See the full post at: December 2021 Patch Tuesday arrives – say goodbye to 2004]

    Susan Bradley Patch Lady/Prudent patcher

    3 users thanked author for this post.
    Viewing 15 reply threads
    Author
    Replies
    • #2406309

      AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Dec 14, 2021.

      There is a Security-only Update for those with Win7 ESU subscriptions.
      There was no Dec. IE11 CU  for Win7.

      December Rollup KB5008244 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

      You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

      There is a October 2021 Servicing Stack KB5006749 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

      There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

      There are no new .NET updates listed for Win7. See #2406293

      5 users thanked author for this post.
    • #2406305

      W10 21H2 kb5008212 installed on test m/c bringing OS build to 19044.1415 No problems reported via event viewer and system SFC all good. O&Oshutup++ remained the same, no re-introduction of config settings required.

      Win8.1/R2 Hybrid lives on...
      3 users thanked author for this post.
    • #2406306

      December 2021 Security Updates
      Updates this Month
      This release consists of security updates for the following products, features and roles.

      Apps
      ASP.NET Core & Visual Studio
      Azure Bot Framework SDK
      BizTalk ESB Toolkit
      Internet Storage Name Service
      Microsoft Defender for IoT
      Microsoft Devices
      Microsoft Edge (Chromium-based)
      Microsoft Local Security Authority Server (lsasrv)
      Microsoft Message Queuing
      Microsoft Office
      Microsoft Office Access
      Microsoft Office Excel
      Microsoft Office SharePoint
      Microsoft PowerShell
      Microsoft Windows Codecs Library
      Office Developer Platform
      Remote Desktop Client
      Role: Windows Fax Service
      Role: Windows Hyper-V
      Visual Studio Code
      Visual Studio Code – WSL Extension
      Windows Common Log File System Driver
      Windows Digital TV Tuner
      Windows DirectX
      Windows Encrypting File System (EFS)
      Windows Event Tracing
      Windows Installer
      Windows Kernel
      Windows Media
      Windows Mobile Device Management
      Windows NTFS
      Windows Print Spooler Components
      Windows Remote Access Connection Manager
      Windows Storage
      Windows Storage Spaces Controller
      Windows SymCrypt
      Windows TCP/IP
      Windows Update Stack

      2 users thanked author for this post.
      • #2406314

        “Windows Print Spooler Components”

        Susan translation:  Ugh we have to keep an eye out for side effects again.

        Susan Bradley Patch Lady/Prudent patcher

        1 user thanked author for this post.
    • #2406328

      Microsoft December 2021 Patch Tuesday fixes 6 zero-days, 67 flaws

      Today is Microsoft’s December 2021 Patch Tuesday, and with it comes fixes for six zero-day vulnerabilities and a total of 67 flaws. These updates include a fix for an actively exploited Windows Installer vulnerability used in malware distribution campaigns.

      Microsoft has fixed 55 vulnerabilities (not including Microsoft Edge) with today’s update, with seven classified as Critical and 60 as Important.

      The number of each type of vulnerability is listed below:

      21 Elevation of Privilege Vulnerabilities
      26 Remote Code Execution Vulnerabilities
      10 Information Disclosure Vulnerabilities
      3 Denial of Service Vulnerabilities
      7 Spoofing Vulnerabilities..

    • #2406431

      On my dual boot daily driver,

      Windows 10
      KB5008212 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems

      Windows 11
      KB5008215 Cumulative Update for Windows 11 for x64-based Systems

      Microsoft still hasn’t stopped updating my unsupported Windows 11, and there are no hiccups on either side.

      Always create a fresh drive image before making system changes/Windows updates; you may need to start over!
      We were all once "Average Users". We all have our own reasons for doing the things that we do with our systems, we don't need anyone's approval, and we don't all have to do the same things.

      1 user thanked author for this post.
    • #2406432

      PC #2 updated with no problems so far. Macrium Reflect images made before updating, of course.

      I’ll connect up PC #1 in the next day or two and update that.

      Gigabyte B560M D2V Motherboard, Intel i5 11400 CPU, 16GB RAM, NVIDIA GeForce GTX 1650 Graphics Card, 1x Samsung 870 EVO 250GB SSD, 1x Samsung 860 EVO 250GB SSD, Windows 10 Professional 22H2 64bit.

      • #2406860

        PC #1 updated with no problems.

        Also updated my little Lenovo laptop with Windows 10 Home. No problems there so far as well.

        Macrium images were made before updating, of course.

        Gigabyte B560M D2V Motherboard, Intel i5 11400 CPU, 16GB RAM, NVIDIA GeForce GTX 1650 Graphics Card, 1x Samsung 870 EVO 250GB SSD, 1x Samsung 860 EVO 250GB SSD, Windows 10 Professional 22H2 64bit.

        1 user thanked author for this post.
    • #2406435

      Updated Win11 on ARM Insider Beta from Build 22000.348 to Build 22000.376
      Upgraded x4 Win10 from 21H1 Build 19043.1348 to 21H2 Build 19044.1415
      Updated x3 Win8.1 from Nov Rollup KB5007236 to Dec Rollup KB5008244

      All up and running with no problems.
      See #2406425 for list of Apple/Mac updates

      Remaining: one Win7 Home and one Win7 Pro

    • #2406441

      December Office Updates: beware!
      Office 2016 kb5002099 causing Access dbase editing issues
      Office 2013 kb5002104 MAY also be affected? – unconfirmed –
      more info over on:
      https://borncity.com/win/2021/12/15/patchday-microsoft-office-dezember-2021-updates-14-12-2021-verursacht-access-probleme/

      Win8.1/R2 Hybrid lives on...
      2 users thanked author for this post.
    • #2406442

      2021-12 Cumulative Update for Windows 11 for x64-based Systems (KB5008215)

      2021-12 .NET 5.0.13 Security Update for x64 Client (KB5009194)

      2021-12 .NET Core 3.1.22 Security Update for x64 Client (KB5009193)

      Windows Malicious Software Removal Tool x64 – v5.96 (KB890830)

      All installed without incident. Windows 11 Pro now 22000.376

      --Joe

    • #2406507

      Windows 10 21H2 pro.

      KB890830 Windows Malicious Software Removal Tool x64

      KB5008212 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems.

      Wonder why KB890830 running service takes up to 20% GPU.

      All is well.

    • #2406534

      I’m pending reboot on my 20h2 machine.

       

      But, let me get this straight.  MS still hasn’t fully patched the vulnerability in the MSI installer system, CVE-2021-41379?

    • #2406568

      So CVE-2021-43890 is supposedly a big deal. Problem is that it appears to just offer a manual patch, which does not help business users. The December 2021 monthly does not seem to address it in any way. Am I just blind and missing something? 🙂

    • #2406729

      Win 10 21H1 64 bit.  The December CU KB5008212 downloaded and installed by WuMgr OK, and machine is stable for 2 days.

    • #2406880

      I thought I had my pause on longer is my excuse for being hijacked by update. I had just done a thorough clean-up, DISM and all using a fairly robust cleaner. It was after the clean I noticed the ‘update and restart’.   Restore points had been cleaned. Its too late to clone the disk. Click restart and hope.

      Update while shutting down seemed on par with normal monthly updates.

      When it restarted, it took me a long time to realise the inordinate delay was due to Hello Face not switching on. Windows had the we’re getting things ready screen showing (my guess is a glitch there). Eventually I swapped to PIN and signed in without an issue.

      The first task was to check sign-in options. Settings opened and its search box gave me enough focus to type ‘sign’. I saw ‘change the sign in requirements’ and touched it. Nothing happened. I was unable to write anything else in the text box. The settings window would not close. Restart seemed to fix the issue. No other problems experienced so far.

      I don’t print from this machine and cannot comment on print spooler.

      Group A (but Telemetry disabled Tasks and Registry)
      1) Dell Inspiron with Win 11 64 Home permanently in dock due to "sorry spares no longer made".
      2) Dell Inspiron with Win 11 64 Home (substantial discount with Pro version available only at full price)

    • #2406950

      Will doing a System Restore in Windows 10 revert your Update Pause status back to what it was on the restore-point date (which in my case was December 9)?  Because today Win10 updated despite the Pause I set a few days ago.

      I don’t know if it’s Update related, but after the reboot I had no audio.  When I clicked on the audio icon the system assistant asked if it should look into the no-audio situation for me, and I said OK.  After its initial try at a fix failed, it asked if it could try updating the audio driver.  My thought was, “yeah, sure, then I’ll end up with a generic Windows audio driver instead of the correct Synaptics driver.”  Or worse.  So I thought, “how about we just try a reboot.”

      So I rebooted, and the audio did come back.  Sheesh, can’t the assistant suggest a simple reboot for something like this before it wants to try a new driver??  I wonder how many people get led astray from the simple solution, and maybe even end up with a more challenging problem.

      Anyway, everything seems OK so far.

      Does anyone have any thoughts regarding whether System Restore can undo an Update Pause?

    • #2408224

      I have not looked at Windows Update in a while, but had some time this afternoon to think about updates on this old Thinkpad.

      WU offers me the following

      1. 2012-12 Cumulative Update for 20H2  KB 5008212
      2. 2021-10   Update for 20H2  KB 5005463
      3. 2021-09   Update for 20H2  KB 4023057

      Should I be surprised to see those last two entries?  Would they be included automatically in the 2012-12 Cumulative Update ?  Any risk to just letting WU run as offered ?

      (Of course I will back up to external HD before doing anything.)

      Thank you.

      Happy Holidays and Good Health to All.

       

      • #2408228

        Read Microsoft docs about what KB4023057 does and decide if you want it.
        I have never installed it on my computers.

        Read Bleepingcomputer about what KB5005463 does and decide if you want it.
        Microsoft docs for KB5005463 say this (I didn’t install it either):

        Important By default, when you open the PC Health Check application, it will automatically install important application updates when they become available. PC Health Check users will not be able to turn off automatic updates.

        You can uninstall PC Health Check by going to Apps > Apps & Features > App list (Windows PC Health Check) > Uninstall.

        1 user thanked author for this post.
    Viewing 15 reply threads
    Reply To: December 2021 Patch Tuesday arrives – say goodbye to 2004

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: