March Madness patching begins

Topic

New Reply

While over at Apple they are having a livestream event, Microsoft is releasing their updates. Will Apple release updates today as well? Windows 11 get
[See the full post at: March Madness patching begins]

Susan Bradley Patch Lady

3 users thanked author for this post.

Fred, abbodi86, Alex5723

Reply | Quote

Replies

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Mar 8, 2022.

There is a Security-only Update
There was a Mar. IE11 CU  KB5011486  for those with Win7 ESU subscriptions and for Win8.1.

March Rollup KB5011552 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a March 2022 Servicing Stack KB5011649 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it. You will need a year-3 ESU license.

There were no .NET updates listed for Win7. See #2430179.

7 users thanked author for this post.

jburk07, rick41, Sueska, SueW, Pim, Fred, abbodi86

Reply | Quote

Microsoft Windows Security Updates March 2022 overview

1 user thanked author for this post.

DrBonzo

Reply | Quote

Why the heck don’t Microsoft just build in Start Menu / UI customisation? Then everyone’s happy.
Clearly it can be done as Classic Shell etc has done it just fine. Why can’t Microsoft?

But noooo they have to have this “we know best and it’s OUR computer, not YOUR personal computer” mentality. Brand above all else.

8 users thanked author for this post.

wavy, Charlie, oldfry, David F, Pim, Save_Us_from_MS, Fred, PerthMike

Reply | Quote

FAO askwoody Linux homeusers CVE-2022-0847 ‘Dirty Pipe’ is being addressed:
(Debian) https://security-tracker.debian.org/tracker/CVE-2022-0847
(Ubuntu) https://ubuntu.com/security/cve-2022-0847
Expect a kernel update, if you haven’t recently had one…

IoT and Android devices which no longer receive updates, are on their own..ouch!

Keeping IT Lean, Clean and Mean!

1 user thanked author for this post.

deuxbits

Reply | Quote

BobT wrote:

“we know best and it’s OUR computer, not YOUR personal computer”

No. It is OUR OS and you have agreed to any changes we make.

2 users thanked author for this post.

oldfry, bbearren

Reply | Quote

Windows 11 Pro 22000.556

2022-03 Cumulative Update for Windows 11 for x64-based Systems (KB5011493)

2022-03 .NET 6.0.3 Security Update for x64 Client (KB5012417)

2022-03 .NET 5.0.15 Security Update for x64 Client (KB5012416)

2022-03 .NET Core 3.1.23 Security Update for x64 Client (KB5012418)

All installed without incident.

--Joe

3 users thanked author for this post.

CAS, bbearren, Alex5723

Reply | Quote

And today:

Windows Malicious Software Removal Tool x64 – v5.99 (KB890830)

2022-03 Update for Windows 11 for x64-based Systems (KB4023057)

--Joe

1 user thanked author for this post.

WCHS

Reply | Quote

Kinda right but totally wrong. Microsoft own the operating system. You only lease it. Unfortunately users  get a lot less rights than if we lease a property. The owners of property need to request permission to enter and carry out work.

On the bright side, unlike property we don’t pay cash for our Windows lease.  We do pay. We just don’t pay cash. All it costs is bit of personal data and a lot of the bandwidth we pay for to cover their Telemetry and delivery of OS ‘improvements’.

 

 

Reply | Quote

I’m a little “confused” in relation to the HEVC update. I have disabled automatic updates of the Windows Store apps, so I loaded the Windows Store and went looking for an update for HEVC Video Extension and found none listed among the available updates.

If I search the store with “HEVC” as keyword I get just a bunch of clearly non-relevant results.

I’ve also run the following command with Powershell as administrator

Get-AppXPackage -AllUsers -Name Microsoft.HEVC*

and got nothing.

At this point I’m under the impression that the HEVC Video Extension is not installed on this machine and assume that I don’t need to update. Can anyone please confirm this is correct?

Reply | Quote

Microfix wrote:

FAO askwoody Linux homeusers CVE-2022-0847 ‘Dirty Pipe’ is being addressed:
(Debian) https://security-tracker.debian.org/tracker/CVE-2022-0847
(Ubuntu) https://ubuntu.com/security/cve-2022-0847
Expect a kernel update, if you haven’t recently had one…

IoT and Android devices which no longer receive updates, are on their own..ouch!

This CVE only applies to very recent Linux kernels. Old, unpatched Android ‘phones, IoT devices etc. will not be affected by this CVE.

Reply | Quote

How recent does the Linux kernel have to be in order to be concerned about this?  My WSL under Windows 10 (Ubuntu 20.04.4 LTS) says that the kernel version is 5.10.60.1, so do I have to worry about that?  Doing a wsl –update from within PowerShell is saying that no updates are available.

Reply | Quote

A quick serach says that 5.10 is fixed from 5.10.102 onwards, so, unless Microsoft have retrofitted the patch to their WSL kernel, it would seem so.

Reply | Quote

Berserker79 wrote:

I’m a little “confused” in relation to the HEVC update. I have disabled automatic updates of the Windows Store apps, so I loaded the Windows Store and went looking for an update for HEVC Video Extension and found none listed among the available updates.

If I search the store with “HEVC” as keyword I get just a bunch of clearly non-relevant results.

I’ve also run the following command with Powershell as administrator

Get-AppXPackage -AllUsers -Name Microsoft.HEVC*

and got nothing.

At this point I’m under the impression that the HEVC Video Extension is not installed on this machine and assume that I don’t need to update. Can anyone please confirm this is correct?

Only you can confirm if it is installed. From W10/W11 Start goto Settings, Apps and scroll down towards “H”.

Reply | Quote

https://www.howtogeek.com/680690/how-to-install-free-hevc-codecs-on-windows-10-for-h.265-video/

1 user thanked author for this post.

Berserker79

Reply | Quote

I see HEIF Image Extension from Microsoft and HEVC Video Extensions from the Device Manufacturer. Nothing updated yet.

 

Chris

Reply | Quote

Not a single app when I scroll down to “H”, so I suppose this further confirms I don’t have the HEVC codecs installed. I mean, I’m sure that I never installed those codecs of my own initiative, but I was not sure they were somehow included in Windows 10 or installed as part of some other application. Well, guess this is one less update to worry about.

Reply | Quote

Susan Bradley wrote:

As always, pop that popcorn, sit on the sidelines as we weed through the releases and see what side effects will occur.

Nah, I’ll just rely on my last Sunday drive images tucked away in duplicate on offline HDD’s and see what’s up.

Windows 11 Pro version 21H2 (OS Build 22000.556)

KB5011493 Cumulative Update for Windows 11 x64-based Systems
KB4023057 Update for Windows 11 for x64-based Systems
and the Malicious Software Removal Tool x64

No hiccups.  I’m running StartAllBack, so I’m not concerned about Start Menu/Taskbar/File Explorer changes.

On the other side of my dual boot:

Windows 10 Pro Version 21H2 (OS Build 19044.1586)

KB5011487 Cumultive Update for Windows 10 Version 21H2 for x64-based Systems
KB4023057 Update for Windows 10 Version 21H2 for x64-based Systems
and the Malicious Software Removal Tool

No hiccups there, either.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We were all once "Average Users". We all have our own reasons for doing the things that we do to our systems, we don't need anyone's approval, and we don't all have to do the same things.

Computer Specs

2 users thanked author for this post.

RetiredGeek, CAS

Reply | Quote

I forgot to pause updates and they downloaded pending restart which based on my active hours won’t be till 8pm. I created restore points. Any other defensive measures? Early updating feels like being exposed to someone with Covid..uncertainty.

Reply | Quote

Not sure whether there is anything else you can at this stage: hopefully you have a recent backup of your system from before those updates installed and that you can use for restoring your system if the March updates create trouble. Other than that, I’m afraid that for this month you will be doing some “beta testing” for us all (at least it should not be as bad as getting Covid…).

Reply | Quote

I already installed them at home, no issues. Consider yourself a tester this month.

Susan Bradley Patch Lady

2 users thanked author for this post.

deuxbits, MrToad28

Reply | Quote

Beta tester report: I installed March updates on 2 Win10’s & one Win11 without apparent adverse impact..I could have delayed but am a bit more concerned about Russki hackers than Microsoft risk after Susan’s reassurance.

One other Win10 PC update had not downloaded so I paused updates to see if any adversities arise from other updates.

Could have deleted the downloaded, but not yet installed, updates using this method:

Actually, the downloaded updates are stored in the C:\Windows\SoftwareDistribution\Download folder and they can be deleted without needing to stop any of those services.
Deleted all the contents of the downloads folder “except” for the SharedFileCache folder.
Then delete the contents of the SharedFileCache folder.
As noted above, when you restart Windows, it’ll automatically restore any info required in those folders for the installed updates. Pause updates after doing this.

https://www.askwoody.com/forums/topic/february-2022-patch-tuesday-early-reports/#post-2424291

Reply | Quote

I did take the 2 updates (after imaging ssd) but I do not see the supposed new weather icon. Also, lockscreen / windows spotlight no longer works – just gives the picture I last used in picture and no way to change it. No problem since I was using slide show anyway to get away from the edge ads.
11 Pro 21H2 current.

- Thinkpad P15s Gen1 20T4-002KUS, i7-10510U, UEFI/GPT, 16GB, Sammy 500GB M.2.
others...
- Mint Cinnamon 21 current, Win 10 22H2. WuMgr. HP laserjets M254dw & P1606dn, Epson 2480 scanner.

1 user thanked author for this post.

MrToad28

Reply | Quote

I first Only got the BK5011487 CU — but when I saw bbearen post — KB4023057 Update for Windows 11 for x64-based Systems and the Malicious Software Removal Tool x64 — I used WUMgr again and there they were for Win 10.

FYI should your experience mirror mine for only CU at first.

W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / HP Envy Desk-Ethernet - SSD-HDD/ i5(8th Gen) 12GB / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU=0

2 users thanked author for this post.

jburk07, MrToad28

Reply | Quote

That happened to me, too. Only the KB5011487 CU on March 8 and then on March 9 the other two — Malicious Software Removal Tool x64 and the once-every-two-months KB4023057 (which I will keep hidden). It happened on both of my laptop — seems to be a common pattern.

1 user thanked author for this post.

jburk07

Reply | Quote

3/9/22 – So far I have updated with no problems:
x2 Win7 (1 Home, 1 Pro) 64-bit using W7ESUI – March Rollup + SSU +MSRT
x2 Win8.1 64-bit – March Rollup + MSRT
x4 Win10 Pro 64-bit 21H2 to Build 19044.1589
x1 Win11 on ARM Insider Beta to Build 22000.556
Hid KB4023057 wherever it showed up.

Remaining to do 1 Win8.1 and 1 Win10 21H2

4 users thanked author for this post.

jburk07, SueW, MrToad28, Fred

Reply | Quote

Why did you hide KB4023057? I just installed it on 2x Win 10 boxes and may be on a win 11 so wondering if I’m in for problems.

Reply | Quote

Read for yourself what KB4023057 does. That’s why I hid it.

1 user thanked author for this post.

MrToad28

Reply | Quote

Susan: “Will Apple release updates today as well?”

It’s already the day after Susan’s question, and late in the day, at that, and no, no updates from Apple, at least not for Macs.

Anyone here knows otherwise?

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

Hibernate was added/turned on!!!!!!!!!!!!!!!!!!!!!!
hyberfill.sys was added to C:

I noticed this because when I told it to Shut Down, it did so, and then the power button light flashed 7 times.

NOT NICE!!!!!!! I am not pleased!

I turned it off again with
powercfg.exe -h off

- Thinkpad P15s Gen1 20T4-002KUS, i7-10510U, UEFI/GPT, 16GB, Sammy 500GB M.2.
others...
- Mint Cinnamon 21 current, Win 10 22H2. WuMgr. HP laserjets M254dw & P1606dn, Epson 2480 scanner.

Reply | Quote

This was stated in error – I added software support for my old APC UPS called PowerChute. It reminded me this morning that hibernate was off, so it probably turned it on when I installed it yesterday. Sorry.

- Thinkpad P15s Gen1 20T4-002KUS, i7-10510U, UEFI/GPT, 16GB, Sammy 500GB M.2.
others...
- Mint Cinnamon 21 current, Win 10 22H2. WuMgr. HP laserjets M254dw & P1606dn, Epson 2480 scanner.

Reply | Quote

FYI:

Installed Windows March update on Windows 10 Pro 21H2 (home built tower).
I haven’t seen any problems.

Reply | Quote

OscarCP wrote:

“Will Apple release updates today as well?”

Apple has released on Tuesday iOS 15.4 RC, iPadOS 15.4 RC, watchOS 8.5 RC, tvOS 15.4 RC, HomePod 15.4 RC and MacOS 12.3 RC .

Finals on next Tuesday.

Reply | Quote

Just signing in to relate the issues I had after installing the latest updates.  I lost a Sabrent Gen4 NVME meaning that it disappeared from Windows.  It was present in the bios, and 3 out of 4 boots it was not there, just not there and on the 4th it was a local disk that was RAW and “inaccessible”.  I spent 8 hours troubleshooting, with changing the NVME from Gen 4 to gen 3 in the bios, updated my MB bios, disabled any overclocking in the bios, I bought a new NVME (Samsung 980 Pro) and cloned  the drive partitions of the Sabrent using my Acronis backups.   Installed the Samsung NVME and it was seen in BIOS but also not in windows 3 out of 4 times.  (same as Sabrent behavior.)  Diskpart didn’t see it,  device manager didn’t see it, disk management didn’t see it.  All this started the morning after installing the last batch of updates.   Finally, I used a windows backup from late February and I’m back to “normal”. New Samsung is seen, manageable, everything broken just works.  Is there is a way to report this to MS, I’ll do it as I’ve blocked updated for 3 weeks just to avoid getting messed up by accident.

For the record, Asus X570 Tuf Gaming wifi MB, 3700x cpu, 32G ram, Win11 Pro.

Reply | Quote

Is that drive formatted with ReFS?

Susan Bradley Patch Lady

Reply | Quote

No, used an external NVME adapter to attach the Samsung 980 Pro to the PC and used disk manager to create the partitions and format it as NTFS.   Then used Acronis to put the files on it.

Reply | Quote

I have had problems with sabrent sata adapters. My NVME adapter is an SSK. For sata I now use Unitek (amazon).

- Thinkpad P15s Gen1 20T4-002KUS, i7-10510U, UEFI/GPT, 16GB, Sammy 500GB M.2.
others...
- Mint Cinnamon 21 current, Win 10 22H2. WuMgr. HP laserjets M254dw & P1606dn, Epson 2480 scanner.

Reply | Quote

Windows 10 Pro 21H2 March updated using WUmgr.

.NET 5.0.15 KB5012416
MSRT KB890830
CU KB5011487
(critical update) KB4023057

Winver 19044.1586

All is well.

2 users thanked author for this post.

jburk07, MrToad28

Reply | Quote

Win 10 Pro 21H1 64 bit.  Used WUMgr to download and update March CU KB5011487, updated OK and stable for two days.

2 users thanked author for this post.

jburk07, MrToad28

Reply | Quote

March 2022 update:
Win7 Pro ESUb – SSU kb5011649 and SMQR kb5011552 – no problems after 4 days
3 x Win8.1 Pro x64 – SMQR kb5011564 – no problems after 4 days
Post patching, No errors in event viewer, SFC all good and pixma printer works fine on Win8.1
DISM purged componentstore/winsxs after 2 days..all good and slick here.

Keeping IT Lean, Clean and Mean!

4 users thanked author for this post.

jburk07, EricW, SueW, DrBonzo

Reply | Quote

I use Win 10 Pro v21H2 and haven’t noticed any problems since Windows Update installed the following March 2022 Patch Tuesday updates:

• KB5011487: 2022-03 Cumulative Update for Win 10 v21H2 (OS Build 19044.1586)
• KB890830 : Windows Malicious Software Removal Tool x64 – v5.99
• KB4023057: Windows Update Service Components (a.k.a Microsoft Update Health Tools v3.66.0.0)

———–
Dell Inspiron 5584 * 64-bit Win 10 Pro v21H2 build 19044.1586 * Firefox v98.0.0 * Microsoft Defender v4.18.2201.10-1.1.18900.3 * Malwarebytes Premium v4.5.5.175-1.0.1621

1 user thanked author for this post.

jburk07

Reply | Quote

I am Win/Pro 21H2. I am on 19044.1526

There appeared today in my WU queue for download (I have GP set to 2=notify download/install) this update: 2022-03 .NET 5.0.15 Security Update for x64 Client (KB5012416).

I do not see it in the Master Patch List so I don’t know whether to install it now or not. For the time being, I have hidden it with WUSHOWHIDE.

I have not yet installed the March updates released on March Patch Tuesday–planning to do that this weekend: KB501147, the SSU that goes with it, and the March MSRT are on the docket. But, what about KB5012416?

Reply | Quote

WCHS wrote:

2022-03 .NET 5.0.15 Security Update for x64 Client (KB5012416).

I have installed 2022-03 .NET 5.0.15 Security Update for x64 Client (KB5012416).
No problems (I have also updated .NET 6.0.3

Reply | Quote