News, tips, advice, support for Windows, Office, PCs & more
Home icon Home icon Home icon Email icon RSS icon

We're community supported and proud of it!

  • July 2021 security updates are out

    Home Forums AskWoody blog July 2021 security updates are out

    Viewing 24 reply threads
    • Author
      Posts
      • #2377441
        Susan Bradley
        Manager

        Which means we wait and see how the month fares before dipping our toes into the patching waters. Remember the Print spooler patch that was released e
        [See the full post at: July 2021 security updates are out]

        Susan Bradley Patch Lady

        2 users thanked author for this post.
      • #2377446
        anonymous
        Guest

        comment link broken on this topic; you need a hyphen between july and 2021 in the url

      • #2377452
        PKCano
        Manager

        AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on July 13, 2021.

        There is a Security-only Update for those with Win7 ESU subscriptions.
        There is a July IE11 CU KB5004233 for Win7. Download 32-2it or 64-bit.

        July Rollup KB5004289 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

        You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

        There is a new July Servicing Stack KB5004378 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

        There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

        There are .NET updates listed for Win7. See #2377439.

        2 users thanked author for this post.
        • #2377546
          rick41
          AskWoody Lounger

          For my 2 machines that use the Win 7 ESU rollups:  Am I correct in assuming that WU won’t offer the new servicing stack update until after I have installed the new July rollup (KB5004289)?

          • #2377599
            PKCano
            Manager

            That is correct. THe SSU has to install by itself, and won’t show in WU unless/untill there are no other pending updates.

            If you want to install it first, you can hide the other updates, check for updates, install the SSU, then unhide the rest and install.

            1 user thanked author for this post.
      • #2377454
        bbearren
        AskWoody MVP

        KB5004237 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems

        installed, no hiccups.

        Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
        "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
        "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

        6 users thanked author for this post.
        • #2377649
          bbearren
          AskWoody MVP

          My NAS got the same, plus KB5003537 Cumulative Update for .NET 3.5 and 4.8 for Windows 10 Version 21H1 for x64.

          Also without hiccups.

          Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
          "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
          "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

          • #2377775
            EP
            AskWoody_MVP

            no hiccups, including no printing problems with the KB5004237 CU, bbearren?

      • #2377470
        Alex5723
        AskWoody Plus

        Windows 7 – 30 vulnerabilities

        Windows 8.1 – 39 vulnerabilities

        Windows 10 version 1903 and 1909 – 67 vulnerabilities

        Windows 10 version 2004, 20H2 and 21H1 – 68 vulnerabilities

        Each new Windows version is “more secure” than previous version.

        Windows 11 ?

      • #2377483
        vandermeer
        AskWoody Lounger

        I updated three Win7 machines with the Bypass and my Win10 21H1 normally.

        I’ve been testing for about two hours. As far as I can see, everything works.

        Let it be said that I’m on a tiny home network. I don’t think I’d be so cavalier if I were responsible for a massive corporate environment.

        3 users thanked author for this post.
        • #2377665
          GoneToPlaid
          AskWoody Plus

          Same here for my primary Win7 computer. No apparent issues with the windows updates, the IE update, and the .NET update for July.  I always create a system restore point before installing updates. I always make sure that I have performed a very recent backup of my OS hard drive before installing updates.

          1 user thanked author for this post.
      • #2377486
        Seff
        AskWoody Plus

        Just a heads-up to Win7 users, there’s been a new 0patch agent (client) launched in the last day or two. If you bring up the console you can install it from there. A blog on their website details the changes.

        4 users thanked author for this post.
        • #2377549
          rick41
          AskWoody Lounger

          Fyi…I use 0patch on one of my Win 7 machines.  When I opened the 0patch console, saw the new agent available notice, and clicked to update, 0patch crashed (or maybe it was just the console…I didn’t really check carefully).  At that point I just waited, and less than a minute later the console came back up, and it had updated to the new agent (21.05.05.10500).

      • #2377487
        ajcoll5
        AskWoody Lounger

        Each new Windows version is “more secure” than previous version.

        Exactly.

        Windows 11 ?

        Zero.

        See – the power of TPM 2.0 and Intel® 8th (-1) generation and higher chips!

        1 user thanked author for this post.
        b
      • #2377496
        b
        AskWoody MVP

        Installed 2021-07 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5004237):

        No apparent issues after restart.

        OS build now 19043.1110

        Windows 10 Pro version 21H2 build 19044.1151 + Microsoft 365 (group ASAP)

      • #2377573
        Alex5723
        AskWoody Plus

        Wonder why it takes 3-4 days for Belarc Advisor the display missing security updates.

      • #2377608
        Alex5723
        AskWoody Plus

        So Microsoft ignores GP settings for monthly updates deferrals ?

        Got notice today for July CU KB5004945 while quality Updates are deferred to 7 days.

        • #2377618
          sheldon
          AskWoody Plus

          KB5004945 was released on July 6th.  A 7 day deferral should be July 13th or 14th

          1 user thanked author for this post.
        • #2377623
          PFC
          AskWoody Plus

          two for July

        • #2377664
          anonymous
          Guest

          Curious if  4945 installs.  It’s a moving roadblock for me, countless downloads, partial installs, then removed.  I finally disabled win updates.

          Seems I already have the changes it implements, beside the ones vaguely described, not sure about them.   Why won’t it stop???

      • #2377595
        anonymous
        Guest

        It’s always been that way with Belarc.

         

        • #2377914
          wavy
          AskWoody Plus

          Good question though. Could it be to keep folk from jumping the gun into a MS update nightmare that they might be associated??
          I miss the old Baseline Security Analyzer 😥

          🍻

          Just because you don't know where you are going doesn't mean any road will get you there.
      • #2377642
        CBA
        AskWoody Plus

        Installed July CU KB5004237 on my W10 Pro 21H1 x64.  Download and install smooth/swift and so far no hiccups.

        Probably not connected, but some hours later Edge WebView2 Runtime was also silently installed.  A big chunk of software which I didn’t ask for, so I uninstalled it right away (I use Office H&S 2010).

         

      • #2377637
        anonymous
        Guest

        I tried using WuMgr, and for some reason this update (2021-07 Cumulative for 20H2) is not showing up there.

        However, Windows attempts to download it if I resume updates.

        Just wondering if anyone else sees the same discrepancy.

        • #2377638
          PKCano
          Manager

          WuMgr and Windows Update use the same Windows Update Service to search for updates. If you have Pause set, neither can search for updates.

          1 user thanked author for this post.
      • #2377663
        anonymous
        Guest

        The recent dot Net update installed fine.  Nothing else will except early June updates.  I use the Catalog.  Win Update hit its pause limit and continued to try to install KB5004945.  “We have updates for you that install to 7%, then revert.  We will do this day after day after day until….”

        Until I disable windows update.  Now all is again well as it has been since upgrading in April.

        Stuck on 19043.928, 21H1 Win 10 Pro, which is fine if MS goes away and stays away.

        • #2377675
          Susan Bradley
          Manager

          What error messages are you getting?

          Have you done an inplace repair over the top?  (note I don’t say to do dism or sfc/scannow as I think those don’t help)

          Susan Bradley Patch Lady

      • #2377677
        Alex5723
        AskWoody Plus

        KB5004945 was released on July 6th

        You are right.
        Don’t see the need for KB5004945. Hidden with WUmgr.

      • #2377682
        PFC
        AskWoody Plus

        Don’t see the need for KB5004945. Hidden with WUmgr.

        did you notice from my second attachment (installed updates) that 4945 is SSU?

      • #2377686
        Alex5723
        AskWoody Plus

        Don’t see the need for KB5004945. Hidden with WUmgr.

        did you notice from my second attachment (installed updates) that 4945 is SSU?

        ..945 is a fix for the print nightmare bug. It has been superseded by July 13 KB5004237.

      • #2377690
        huntpt
        AskWoody Plus

        Windows Update installed KB5004237 on Windows 10 20H2 on three PCs of differing hardware configurations without any apparent problems.

        2 users thanked author for this post.
      • #2377779
        EP
        AskWoody_MVP

        can any of you folks who have installed the July 13 updates check to see if your printers (whether connected locally thru a USB cable or connected thru a network either by WiFi or ethernet LAN cable) are working as expected? just asking. 🙂

        • #2377806
          huntpt
          AskWoody Plus

          Printer that is connected through WiFi network is working as expected.

      • #2377840
        ylm
        AskWoody Lounger

        FYI,

        After making the necessary Macrium system backup images, “resumed update” via Windows Update for 2 Windows 10 Home v21H1 systems (one x64 laptop and another x86 netbook) and installed the following:

        – 2021-07 Cumulative Update for Windows 10 Version 21H1 for x64 (x86)-based Systems (KB5004237)
        – 2021-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 for x64
        (x86)-based Systems (KB5003537)
        – Windows Malicious Software Removal Tool for x64 (x86)-based Systems v5.91 (KB890830)
        – 2021-06 Update for Windows 10 Version 21H1 for x64-based Systems (KB4023057)

        For KB4023057 the Microsoft Update Health Tools version 2.81.0.0 was installed on my x64 laptop but failed on the x86 netbook. It is listed as both a program under Control Panel > All Control Panel Items > Programs And Features and as an app under Settings > Apps & features. The netbook’s Microsoft Update Health Tools remained at version 2.77.0.0 installed back in May 2021.

        Paused Windows Update for both systems to furthest date available.

        New OS Build : 19043.1110. Both systems are running stable so far.

        Both scanning and printing via USB cable to local printer are working (no WIFI network or ethernet LAN to printer though).

        Hope this helps.

      • #2377833
        millerah
        AskWoody Lounger

        I read your article on Computer World dated Monday, July 12, 2021. Unfortunately, this article appeared in that web site’s newsletter on Wednesday, July 14. In that article you give your approval to upgrade to Windows 10 21H1. However, July 14 was the day after Microsoft’s regular Patch Tuesday.

        I believe that in order to upgrade to a new feature update, the quality updates should be brought up to date first on the current version, especially if you are going to install the feature update via Windows update. Since the new security patches are already out, would in not be more prudent to wait until you give the green  light on them before trying to install 21H1?

        Though you wrote this article the day before Patch Tuesday, I think you should have addressed this issue in the article. Perhaps you should address this point on askwoody.com

      • #2377895
        Scotttv66
        AskWoody Lounger
      • #2377938
        Alex5723
        AskWoody Plus

        Installed KB5004237, Servicing Stack 10.0.19041.1081 and KB890830 using WUmgr on Windows 10 21H1.
        Winver 19043.1110.

        No problems.

      • #2378290
        CBA
        AskWoody Plus

        …hours later Edge WebView2 Runtime was also silently installed. A big chunk of software which I didn’t ask for, so I uninstalled it right away.

        Update: the install was triggered by an update of ProtonVPN.  After checking with their team, not required for my desktop version (which works great regardless).

    Viewing 24 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, no politics or religion.

    Reply To: July 2021 security updates are out

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.