|
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
March 2019 Patch Tuesday patches
Posted on Comment on the AskWoody Lounge- This topic has 125 replies, 36 voices, and was last updated 1 year, 6 months ago.
Viewing 39 reply threads-
-
Win 8.1 x 64 updated – no problems found.
XPmode updated (14 updates) – no problem found.1 user thanked author for this post.
-
Group B Security-only patches have been updated on AKB2000003 on Mar 12, 2019.
UPDATE:
Win7 Users will also need the Servicing Stack KB4490628 – Download 32-bit or 64-bit
Please install it FIRST and wait 10-15 minutes to give the installation time to complete. Then reboot the computer before installing anything else.These are direct download links from the Microsoft Catalog.
-
Just patched home system (1809 Pro) with no obvious issues. Patch application speed was improved from previous months.
If they’d be bothered to transition that performance enhancement to Server 2016, I’d be a happier camper.
1 user thanked author for this post.
-
-
hi woody.
The KB4489899 cumulative update for Windows 10 version 1809 has two known issues listed:
https://support.microsoft.com/en-us/help/4489899/windows-10-update-kb4489899Those using Win10 v1809 should definitely wait for the next update in late March rather than install KB4489899
-
-
To be fair, the folks who might be affected by the first issue need some remedial education.
They got it:
ADV190010 | Best Practices Regarding Sharing of a Single User Account Across Multiple Users
-
-
-
Microsoft will pester Windows 7 users to upgrade to Windows 10 with pop-up notifications
“This is a courtesy reminder that you can expect to see a handful of times in 2019. By starting the reminders now, our hope is that you have time to plan and prepare for this transition. These notifications are designed to help provide information only and if you would prefer not to receive them again, you’ll be able to select an option for “do not notify me again”, and we will not send you any further reminders. Just as software has changed over the years, so has hardware. To learn more about the latest line-up of modern PCs and information for moving from Windows 7 to Windows 10, just click on the “learn more” button on the notification.”
1 user thanked author for this post.
-
-
-
-
Wait until the MS-DEFCON level hits 3 or 4 or 5.
At that point I’ll have full instructions. But the short answer is you don’t need to check or uncheck anything: the installer will put things together in the proper order.
At least, it has in the past.
1 user thanked author for this post.
-
-
-
-
Luckily, KB4490628 is not exclusive, that’s why it’s offered normally with other updates
i don’t know if Windows Update will handle the installation logic correctly, but just to be safe, uncheck all updates and only check/install KB4490628 alone
then you can proceed to other updates including the Rollup1 user thanked author for this post.
-
-
I actually did not had Win7 machine to check 🙂
i was talking based on analyzing KB4490628 msu/cab file and update.mum precisely, it does not have any “exclusive” attribute like KB3177467so it can be integrated offline normally (tested that)
it also should be show on WU normally with other updates, unless they manipulated the metadatai will check that soon
1 user thanked author for this post.
-
-
-
-
-
-
-
-
Checked updates and the Feb rollup update was no longer there.
Of course not. It was superceded by the March update (that contained it) that you installed.
1 user thanked author for this post.
-
-
-
-
According to the MS support pages, neither the SHA-2 update KB4474419 nor the new SSU update KB4490628 has any prerequisites. Therefore, installing KB4474419 followed by KB4490628 followed by the March updates appears to be the intended order.
Windows 7 x64 Home Premium, Group A
1 user thanked author for this post.
-
-
-
It would probably be better to install the SSU KB4490628 first and give it time to finish the installation (10-15 minutes) before installing the other patches,
I meant FIRST.
The SSU has to be installed EXCLUSIVELY – that means BY ITSELF.
It is the update for the Windows Updating system.
It cannot be installed with other updates.
In fact, it may not show up in the WU Important queue until there are no other pending updates.
Which means, you may have to temporarily HIDE all the other pending updates to be offered the SSU.See #340687 above.
The SHA-2 patch is not mandatory until July.
-
-
-
-
Desktop – Routine Definition Updates for Windows Defender plus KB2538243 – Security Update for Microsoft Visual C++ 2008 Service Pack 1 Package NAS – Routine Definition Updates for Windows Defender plus (with restart) KB4486553 – Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for x64 KB4482887 – Cumulative Update for Windows 10 Version 1809 for x64-based Systems Latitude E5420 – Routine Definition Updates for Windows Defender, nothing further.
Second round, Desktop:
KB4489899 – Cumulative Update for Windows 10 Version 1809 for x64-based Systems
KB4489907 – Security Update for Adobe Flash Player for Windows 10 Version 1809 for x64-based Systems
KB4482887 – Cumulative Update for Windows 10 Version 1809 for x64-based SystemsSecond round, NAS:
KB4489899 – Cumulative Update for Windows 10 Version 1809 for x64-based Systems
KB4489907 – Security Update for Adobe Flash Player for Windows 10 Version 1809 for x64-based SystemsSecond round, Latitude E5420
KB4489899 – Cumulative Update for Windows 10 Version 1809 for x64-based Systems
KB4489907 – Security Update for Adobe Flash Player for Windows 10 Version 1809 for x64-based Systems
KB4018363 – Update for Microsoft Access 2010 64-Bit Edition
KB4461626 – Update for Microsoft Office 2010 64-Bit Edition
KB4462229 – Update for Microsoft Outlook 2010 64-Bit Edition
KB2589339 – Update for Microsoft Office 2010 64-Bit Edition
KB4462226 – Update for Microsoft Office 2010 64-Bit Edition
KB4486553 – Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for x64Create a fresh drive image before making system changes/Windows updates, in case you need to start over!"When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns"Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware1 user thanked author for this post.
-
I updated a Win 10 1809 test laptop today without any apparent issue. However, reading the release notes for KB4489899 I wondered:
a) why release an update if you already know there’s 2 issues with it?
b) why are you using the phrase ‘Windows Linux’?
It’s ‘Windows Subsystem for Linux’ (WSL)… stop trying to subsume, Borg!
1 user thanked author for this post.
-
However, reading the release notes for KB4489899 I wondered:
a) why release an update if you already know there’s 2 issues with it?
You think they shouldn’t fix 36 issues, some critical, because of two obscure issues affecting a tiny percentage of users which were already known in previous updates? Microsoft should not release any update until it was capable of fixing every outstanding issue? I hope that never happens.
1 user thanked author for this post.
-
-
OK, here’s my experience with the Servicing Stack KB4490628 for Win7:.
It acts like any other Servicing Stack.
It does not show up in the Windows Important Update queue unless there are no other pending updates in the Important Update queue.To install it FIRST, by itself. this is what you should do:
Hide all the other pending (checked and unchecked) updates in the Important Updates.
Check for updates.
Install Servicing Stack KB4490628
Wait 10-15 minutes to give the install time to complete. Then reboot.
Unhide any of the updates you want to install and install them.-
-
-
The servicing stack is KB4490628, and according to the MS support page for the March Win 7 Rollup and also for the Security Only, is required before either is installed.
KB4474419 is the SHA-2 update, and is the one required by July (although my notes say its required by August, but I could be wrong).
4 users thanked author for this post.
-
-
-
Yes I know that PK, as I said I’m not contradicting the advice given, merely saying it doesn’t match what MS are offering.
I appreciate your assistance as always, but users not committed to Group B aren’t going to go searching for information on updates that need to be installed but which aren’t being offered, nor are they likely to download an update from the catalogue. They’ll install the offered updates first, and if KBKB4490628 is then offered they’ll install that one too. Do we know of any way in which their system will be compromised by following this sequence as set by MS? Why are MS saying KBKB4490628 needs to be installed first while only offering it later? What is the practical issue that will arise if we simply follow the sequence in which the updates are offered?
These are the sort of questions I’m hoping there are clear answers to before Woody has to put his recommended practice together when raising the Defcon rating. They’re critical to the advice he will give at that time.
1 user thanked author for this post.
-
I can’t tell you why MS does what it does. But I do know it can cause a problem – it did the last time MS released the v2 of the last Servicing Stack KB3177467 (does that sound familiar, that was last Oct?) it was the same issue. At one point, the SSU becomes a prerequisite but it isn’t offered until last. All I can say is – crazy!
-
I’m running win7 pro 64bit and before applying march 2019 updates i was fully patched to feb 2019. I use WU (most of the time) and set “Check for updates but let me choose…..”. I’ve only used the MS Catalogue previously when there have been issues with some updates and i have wanted to install specific updates in a particular sequence.
For march 2019 WU offered me same as @Seff stated –
Windows Malicious Software Removal Tool x64 – March 2019 (KB890830)
2019-03 Security Update for Windows 7 for x64-based Systems (KB4474419)
2019-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4489878)
I installed these 3 updates successfully and WU then offered –
2019-03 Servicing Stack Update for Windows 7 for x64-based Systems (KB4490628) which I installed successfully.
I have done a quick check running the apps I typically use and all ok.
However I recommend applying MS patches according to Askwoody Defcon rating irrespective of the update method used.
1 user thanked author for this post.
-
There might be other good reasons for installing Silverlight, but the one I know for sure is that, if one has IE11 and Windows 7, the only way to watch videos from, for example, Netflix, using the Win 7 version of IE 11 that, unlike the Win 8.1 version, does not have an HTML5 converter, is with Silverlight installed and, preferably, kept up to date. But the need to use IE11 for that purpose is undermined, these days, by the availability of other browsers compatible with Win 7 and that come with HTML5 converters (Chrome, FF — finally, after at FF much resisting it, because of their opposition to DRM — Waterfox, etc.)
Windows 7 Professional, SP1, x64 Group W (ex B) & macOS Mojave + Linux (Mint)
1 user thanked author for this post.
-
No, I don’t watch videos on IE11! but I seem to remember someone said if you’ve got Silverlight, keep it updated and I didn’t want to unistall it just in case. It’s not hurting anything, whilst updated. By the way, I’m reading with interest about your adventures with Linux, because if you get on all right with it I may well go for a Linux OS myself before the end of the year. Got to jump in some direction!
1 user thanked author for this post.
-
-
note that the KB4490628 servicing stack update supersedes/replaces the KB3177467 servicing stack update (all versions of that) as Microsoft said so in MS KB article 4490628:
Update replacement information
This update replaces the previously released update 3177467.
-
-
-
-
-
The KB2952664 functionality was integrated into the Rollup Preview in Sept 2018 and has since been a part of the Monthly Rollup. That may be why it it is not being offered to you through Windows Update, it would be redundant. And since you are using Security-only updates, you would not use it anyway.
1 user thanked author for this post.
-
-
-
-
-
-
-
-
-
-
I use Intel’s own tools or visit their site and enter my specific PC make and model to determine which drivers need to be updated. I NEVER update Intel drivers on a per-component basis. Go to the manufacturer of your whole device and get new drivers from there if any are available. NEVER let Microsoft Update download or install ANY drivers!
If a driver is ever changed during an update or Feature Update, roll it back to the previously working OEM or installed driver. You do back up the System32 DriverStore FileRepository folder before each monthly round of updates, don’t you? That’s your local source for a driver restoration in Windows 10 if anything makes any unwanted changes. Check for any changes and roll back as needed after any Feature Update.
-- rc primak
1 user thanked author for this post.
-
-
-
So, aside from the big batch, were some of these just late? Because I see there’s a kb4480730 for Windows 10 up to 1803, “Reliability improvement to Windows 10 update components” … appears to touch Cuassistant.dll and Culauncher.exe with tuesday’s date.
1 user thanked author for this post.
-
-
KB 4489873 is available through AKB2000003 (unless MS pulls it).
1 user thanked author for this post.
-
-
-
Yes, there were Feb .NET Security Rollups and .NET Security-only Rollups
1 user thanked author for this post.
-
-
-
-
-
-
Just checked and found that 3 security updates were installed on my Win 7 SP1 PC on March 4th. Not by me, last time I checked and installed anything was on Feb 26th. These were all Security updates that Microcrud took the liberty of installing themselves – KB4491113, KB4486474 and KB4486564. I haven’t had any major problems with my PC since then but have been experiencing some small things. It really irritates me that they would take the liberty of doing that and makes me want more and more to just hang up the PC forever and switch to Mac. I need to switch to something that works with Ancestry, but that should be no problem.
1 user thanked author for this post.
-
Hello @deanwmn-
Have you checked the Windows Update settings lately? Woody suggests setting to Never Update.
KB4486564 is a Security Only Update, which would have required manually downloading and installing. It would not show up in Windows Update, no matter what the update setting was.
Non-techy Win 10 Pro and Linux Mint experimenter
1 user thanked author for this post.
-
KB4486474 is the IE11 Cumulative Update and KB4491113 is a out-of-band fix for IE11. None of those updates were released through Windows Update. All three are manual download and manual install. Someone did what we call a Group B update to your computer.
1 user thanked author for this post.
-
-
-
-
Perhaps a new program or malware might reset the Windows Updates settings. A new program would be likely to reset to automatic updating. Malware would be likely to block updating, so that it could continue to function and avoid detection. But neither is likely to install Group B (Security Only) updates, which need to be manually downloaded and executed.
Why would someone who has gone to the trouble to install remote access use it to do Group B updating rather than cause other malicious trouble? It just isn’t how someone or something with malignant intentions hides what they are doing…
I’m pretty much a hands on expert on having a chronic foggy brain and getting unexpected or unremembered results, and trying to walk back what it was I did to get there… and remembering or recording a wrong date is only one way I have messed things up. Combine that with a history of domestic violence, and stalking… well, I have to really check things out to avoid personal crazy-making. Mistakes happen to regular people… and/or it isn’t unknown that a friend or family member might want to ‘help’ by updating. It is much easier to rule out those sorts of things than doing a deep dive into malware scans, researching services and processes and monitoring internet connectivity through a firewall… It would need a separate topic to detail ways to insure your computer is remaining your computer, but again, the fact that Group B updating (which is manual) is involved, makes it unlikely @deanwmn has a need for that at this time.
Non-techy Win 10 Pro and Linux Mint experimenter
-
-
@deanwmn-
It is always disturbing to find unexpected changes with one’s computer. At this point, you should be confident that the particular patches you mentioned would have to be manually downloaded and installed.
I’m curious as to what patches you installed on February 28th. Are you following Group A or B patching, or have been going it alone?
Just to consider- It was March 4th that Woody recommended installing the February updates.
Also, whether you use IE 11, or not, it is part of Windows 7, and some of its components are used by other programs. It is best practice to keep it updated due to its integration within the OS, even for those of us who never use it.
Those patches are easy to uninstall, if you really don’t want them… but they would be appropriate for bringing Group B patching current.
If you come to the conclusion that someone else must have installed the patches, it may be time to review your security- who has physical access, what accounts (and what permissions they have) are on your computer, and changing passwords.
Non-techy Win 10 Pro and Linux Mint experimenter
1 user thanked author for this post.
-
-
Microsoft is going to start changing the build numbers of Windows Server 2008 with each update now. They started with this month’s preview rollup.
1 user thanked author for this post.
-
-
In Group Policy:
Administrative Templates>Windows Components>Windows Update
Configure Automatic Updates = Enabled, set value to 2 (notify download/install)Taht way, they won’t download without your clicking on “Download.”
1 user thanked author for this post.
-
-
-
Didn’t see any too much mention of KB4489881. My mother contacted me yesterday complaining that her Win 8 Dell laptop was spontaneously rebooting. Took a look and it was Windows trying to repair itself and failing. Dug around a bit and found this:
Sure enough, removed 4489881 and it’s been running fine.
1 user thanked author for this post.
Viewing 39 reply threads
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Recent Replies
Paul T on So I opened up an HP and where’s the hard drive?
22 minutes agoCarl D on So I opened up an HP and where’s the hard drive?
25 minutes agoGoneToPlaid on Hard Drive at 100% usage
28 minutes agoanonymous on Accessing Old Laptop HD
37 minutes ago- 38 minutes ago
- 40 minutes ago
Michael Austin on Which version of MS Office should we buy and where can we get it?
1 hour, 5 minutes ago- 1 hour, 13 minutes ago
techweenie on So I opened up an HP and where’s the hard drive?
1 hour, 36 minutes ago- 1 hour, 38 minutes ago
- 2 hours, 7 minutes ago
Drcard:)) on Why won’t Task Scheduler launch Office product
2 hours, 15 minutes agodmitriy1980 on Hard Drive at 100% usage
2 hours, 23 minutes agoTom on So I opened up an HP and where’s the hard drive?
3 hours, 2 minutes agoSusan Bradley on Accessing Old Laptop HD
3 hours, 5 minutes ago- 3 hours, 6 minutes ago
Bob99 on Hard Drive at 100% usage
3 hours, 9 minutes ago- 3 hours, 11 minutes ago
- 3 hours, 14 minutes ago
- 3 hours, 15 minutes ago
- 3 hours, 34 minutes ago
Bundaburra on Which version of MS Office should we buy and where can we get it?
3 hours, 36 minutes ago- 3 hours, 39 minutes ago
geekdom on Which version of MS Office should we buy and where can we get it?
5 hours, 8 minutes agoabbodi86 on Tasks for the weekend – January 9, 2021
5 hours, 52 minutes ago- 6 hours, 3 minutes ago
johnf on Laptop with home and work networks
6 hours, 25 minutes agoRoger on Which version of MS Office should we buy and where can we get it?
6 hours, 26 minutes agoSFB on Find the cable modem that’s just right for your ISP
6 hours, 27 minutes ago- 6 hours, 37 minutes ago