Microsoft releases out-of-band fixes for Win7 and Win8.1 on 6/20

Topic

New Reply

Microsoft has released out-of-band updates for Windows 7, and Windows 8.1, and IE11 to fix errors introduced by Patch Tuesday patches. Update for 7 SP
[See the full post at: Microsoft releases out-of-band fixes for Win7 and Win8.1 on 6/20]

5 users thanked author for this post.

jburk07, sldc88, Chessie, woody, honx

Reply | Quote

Replies

[PKCano]

AKB2000003 has been updated 6.21/2019 for Group B (and anyone else who needs the patches) to reflect these out-of-band updates.

These are direct download links to the MS Catalog.

NOTE: The font is a pale gray in AKB2000003. It is caused by the formatting after the merger and site software update.
You will need to squint! BUT THE LINKS STILL WORK.

Edit: see @satrow ‘s post below to aid viewing.

• This reply was modified 3 years, 9 months ago by PKCano.

4 users thanked author for this post.

MyAussie, abbodi86, woody, SueW

Reply | Quote

Whoa, could somebody please improve the contrast on the AKB2000003 page:

This is not unrelated to the topic, as from a practical standpoint the poor contrast between text and background makes the page really hard to use.

Maybe there’s something I can do on my browser to improve matters?

 

Keep Running Windows 7 Safely for Years to Come  
Make Windows 10 look and work like Windows 7

4 users thanked author for this post.

Bill C., OscarCP, honx, italiangm

Reply | Quote

Try a temporary switch to No Style in your browser:

3 users thanked author for this post.

Elly, Lars220, PKCano

Reply | Quote

we’re still on defcon 2, right?
so i wait for defcon level change before i install anything…

one question already: do these out of band updates replace the first ones?
so, win 7: does 4508772 replace kb4503269?
ie: install kb4508646 instead of kb4503259?
win 8.1: install kb4508773 instead of kb4503290?
or do we have to still install both in all cases?

sorry, but i’d rather ask before doing something wrong.

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

1 user thanked author for this post.

Chessie

Reply | Quote

honx wrote:

one question already: do these out of band updates replace the first ones?

Please read the first quoted sentence under KB4508772 (Win7) and KB4508773 (Win8.1). Microsoft explains the relation of the out-of-band patches to the June Security-only Updates KB4503269 (Win7) and KB4503290 (Win8.1)
The IE11 updates are cumulative.

2 users thanked author for this post.

Chessie, honx

Reply | Quote

PKCano wrote:

honx wrote:

one question already: do these out of band updates replace the first ones?

Please read the first quoted sentence under KB4508772 (Win7) and KB4508773 (Win8.1). Microsoft explains the relation of the out-of-band patches to the June Security-only Updates KB4503269 (Win7) and KB4503290 (Win8.1)
The IE11 updates are cumulative.

ah, i read over “includes…”… 😀 so i need only the new ones, thx!

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

That’s exactly right.

If you avoided this month’s patches – waiting to see what broke – well, now you know what broke!

There’s still no pressing reason to install the June patches. You need the May patches to protect against an anticipated mass attack. But June’s just too early at this point.

8 users thanked author for this post.

Elly, SueW, walker, twbartender, Myst, honx, sldc88, Chessie

Reply | Quote

woody wrote:

That’s exactly right.

If you avoided this month’s patches – waiting to see what broke – well, now you know what broke!

There’s still no pressing reason to install the June patches. You need the May patches to protect against an anticipated mass attack. But June’s just too early at this point.

thanks, i’m already on may patchlevel (bluekeep) since defcon 4 for may.
and as i’m following your defcon system, i still installed none june patches.

PC: Windows 7 Ultimate, 64bit, Group B
Notebook: Windows 8.1, 64bit, Group B

Reply | Quote

There also appears to be an out of band update, KB4503277, to the Rollup for win 7 (KB4503292).

And also for Win 8.1 – out of band is KB4503283 for the Rollup (KB4503276)

Reply | Quote

Those patches, KB4503277 for Win7 and KB4503283 for Win8.1, are listed as Previews and are thus not out-of-band. Previews are usually released on C or D week.

3 users thanked author for this post.

Elly, rontpxz81, woody

Reply | Quote

Windows 7 64 bit SP1- nothing in Windows Update today Friday June 21, 2019.  ???

Reply | Quote

My updates are always a day late. Check again tomorrow morning.

Edition Windows 11 Pro
Version 22H2
Installed on ‎10/‎19/‎2022
OS build 22621.1105

Reply | Quote

These patches are not released through Windows Update. Like the Monthly Security-only Updates and the separate IE11 CUs, they are Catalog download only.

2 users thanked author for this post.

Elly, Charlie

Reply | Quote

I wouldn’t have minded if MS had released fixes for 1903 too. I guess us suckers who foolhardily installed Microsoft’s ‘latest and greatest’ can wait ’till end of month (or even next month), as it was before with 1809. Can’t really figure the release timing logic of these ‘patches for patches’. Though I don’t know if there is any.

Reply | Quote

Thanks PK!

So what do you recommend for us on Group B? Install them now is safe enough or do we wait a little bit more?

Will these fixes be included in the July Security Only updates or we do need to install these anyway?

Once again, thanks.

Reply | Quote

We are still on DEFCON-2.
If you haven’t installed the June updates, you shouldn’t have the problems.
If you are not experiencing the specific problems, which are not security issues, you can wait to install.
If you are in Group B, you can install them when the DEFCON number is 3 or above.
The fixes will be included in the July Rollups if you are in Group A.

9 users thanked author for this post.

Elly, walker, Chessie, abbodi86, sldc88, SueW, Charlie, Lars220, Myst

Reply | Quote

This only fixes an issue where the event viewer crashes if you make custom views.  If you don’t do that, you won’t need the fix.

Susan Bradley Patch Lady

5 users thanked author for this post.

Myst, Chessie, SueW, OscarCP, PKCano

Reply | Quote

Will these fixes be carried over to the following July security only windows 7 updates. I’m not conformable using any update that’s not labeled security only so I’m unsure  if I need to patch what may or may not be not be affected security wise. KB4508772 is supposed to fix the snap-in custom view issue in the event viewer but it’s not labeled as security only even though its supposed to fix issues in KB4503269. And I wish I had waited one more day to patch all of my laptops.

And for IE 11 that’s cumulative anyways so that will show up in the July update.

KB4503269 causes Windows Security Essentials(WSE) to not start up in the reboot sequence following this patch’s installation, so the application/services for WSE has to be restarted and I just reboot again for my 3 older laptops Sandy Bridge and one earlier generation core i3 series laptop. My newest laptop is using third party security software so has no issues after restart.

If its not security related I tend to wait for the next months IE 11 cumulative update but the security only patches are they inclusive or will I have to just install KB4508772.

Reply | Quote

anonymous wrote:

Will these fixes be carried over to the following July security only windows 7 updates.

The Security-only updates are NOT cumulative, so the fixes will probably NOT be in the July patches. That is most likely the reason MS issued the out-of-band updates to deal with the problems created by the June patches. But if you are not experiencing any problems, there is no rush to install the patches yet. You can wait for DEFCON-3 or greater.

The IE11 updates ARE cumulative, and the fixes will be included in the July IE11 CUs.

2 users thanked author for this post.

Chessie, abbodi86

Reply | Quote

I installed the 2 KB patches to fix the patch issues in the earlier June 2019 KBs(Win 7 sec only, IE11 update) for windows 7 64 bit . But really the MS’s KB help site that describes just what these new KBs are supposed to fix is hanging IE 11(On Windows 7) up with long running scripts and other issues that force IE 11 to have to be restarted.  So my newest Laptop is the test subject while the 3 older laptops can wait a while longer just in case more issues arise.

Maybe MS needs to look into this IE 11 hanging up issue as well because the Windows Update Catalog entry for the new KBs has some information links to the MS KB Help site entry that describe the issues resolved  and following that link is to the KB help site is really hanging up IE 11(on Windows 7) something awful, restarts required and long running scripts for IE 11 at that KB Help site.

I really consider IE 11 to have become rather unstable for everyday use and have installed Firefox for everyday use, so maybe in a few months time Edge/Chromium will be past its preview/vetting stage and available for  download for windows 7 as stable.

Maybe in Jan 2020 windows 7 will get a final end of life roll-up(Service Pack Like) that’s cumulative and can be downloaded after the end user re-installs windows 7 from the laptop’s/PC’s original  recovery media. I’m  thinking that sort of thing may be needed after looking at all of my 4 laptops’ event logs and the registry leaks(handles) and other Service not found, application does not exist, and other log entry errors, warnings, and information entries showing up in the event logs. The older laptops are probably pre windows 7 service pack 1, but the Laptop’s needed drivers are on those DVDs. Then I have windows 7 Pro upgrade licenses for most of the laptops to re-enable except for the newest laptop that came with a Windows Pro license.

1 user thanked author for this post.

Chessie

Reply | Quote

? says:

humm, glad for woody and the defcon better-safe-than-sorry-wait-and-see system. don’t have to mumble “well, here’s another nice mess you’ve gotten me into!” at least for now…

3 users thanked author for this post.

Chessie, Charlie, Myst

Reply | Quote

This is for Cybertooth and the “senior” readers, like myself, who need dark print.

When I have trouble on a page because the text is close to unreadable, I move my mouse cursor over the print as if I am going to select it. I then have a blue box with the printing in white which I can read well.

Got coffee?

Reply | Quote

I cringe at the use of “out of band”.  Given that they are not fixing any new security issues, given that they are not being pushed and are catalog only, it’s clear that Microsoft considers this an Enterprise only bug and is not pushing this out to us lowly normal folks.

Susan Bradley Patch Lady

2 users thanked author for this post.

Elly, PKCano

Reply | Quote

I used “out-of-band” here because, although Microsoft (usually) issues “C,” “D,” or even “E” week Previews for the Rollups, it doesn’t normally issue other-than-Patch-Tuesday  patches for issues in Security-only Updates and IE11 CUs.

Granted that the Security-only Updates and the separate IE11 CUs are not distributed through Windows Update, are not pushed out to normal folks, are aimed at Enterprise, and are catalog only,  we nevertheless have many Group B people here who use them.

And, if I recall correctly,  it was one of our “normal folk” who first reported the problem with Event Viewer.

1 user thanked author for this post.

Myst

Reply | Quote

The fixes are already pushed with June’s Preview Rollups

so those separate updates are indeed for Enterprises (or Security-Only followers generally)

Reply | Quote

W7 home user.  I never take the previews.

Reply | Quote

Important: The improvements in this update are not included in the Monthly Rollups released June 11, 2019

Will these patches ever be integrated into a future cumulative patch?

Reply | Quote

The fixes in these patches will be rolled into the July Security Quality Monthly Rollup.

1 user thanked author for this post.

kwerboom

Reply | Quote

This makes me wonder how many other out-of-band (OOB) patches I have missed. I’m running Windows 7 SP1 Pro 64-bit on an HP Compaq 6005 Pro SFF, 4GB RAM with an AMD Athlon II X2 B24 Processor at 3.00 GHz. Is there a list of OOB patches anywhere?

Reply | Quote

If you are updating your computer through Windows Update, you don’t need to worry about these patches. The fixes in out-of-band patches get rolled into the following month’s Security Quality Monthly Rollup and distributed through WU.

It’s only if you are updating your computer through MS Catalog download and manual install of the Security-only Updates and IE11 CUs that you need to be concerned with this.

4 users thanked author for this post.

Elly, walker, Myst, sldc88

Reply | Quote

I’m in Group B for Windows 7 and needed to install the June Security only (KB4503269) and IE Cumulative (KB4503259) updates early. After reading this post checked and discovered that yes, I was affected by the event log crashing issue. Downloaded from the catalog both “out of band” fixes. Installed the IE KB4508646 patch first. Attempted to install KB4508772 immediately afterward, but after running the update, it took over 5 minutes (maybe over 10 minutes) to determine if this patch was needed for my PC. Decided to restart and try again. This time KB4503259 immediately installed without a lengthy determination if was needed. Restarted and checked the Event viewer to find the issue still existed. Regrettably I did not take a screenshot. In the upper left column of the Event Viewer the “Event Viewer (local)” link had a red circle with a red diagonal line through it (aka the “No symbol”). Restarted one more time. Retested and found the event log was working fine now and no more red circles with red diagonal lines. This Windows 7 is a home PC  and I frequently use the Event Viewer especially the custom views. Thank you for the article PKCano.

Reply | Quote

I’m about to replace my aging main PC – an HP 6005 Pro SFF (with failing, non-serviceable  PSU fan) – with a refurbished HP SFF model running Win 10.

Just for the halibut (heck of it) I decided to install the latest Windows Updates… and now neither GMail nor my favourite screenshot program (Screenshot Captor) will open.

Gah! Looks like I’ll be replacing the very old (but previously supremely reliable) sooner rather than later. 🙁

Reply | Quote