News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • November 2019 Patch Tuesday arrives

    Home Forums AskWoody blog November 2019 Patch Tuesday arrives

    This topic contains 124 replies, has 46 voices, and was last updated by  PKCano 13 hours, 27 minutes ago.

    • Author
      Posts
    • #2004151 Reply

      woody
      Da Boss

      Flash: Yes, we’re getting Win10 version 1909 today. See this Windows Insider Blog post from Athima Chansanchai: Along with Tuesday’s release of the Wi
      [See the full post at: November 2019 Patch Tuesday arrives]

      5 users thanked author for this post.
    • #2004152 Reply

      Susan Bradley
      AskWoody MVP

      https://twitter.com/WindowsUpdate/status/1194315194983317504

      Susan Bradley Patch Lady

      2 users thanked author for this post.
    • #2004158 Reply

      EP
      AskWoody_MVP

      It looks like the 1909 version is out now.
      Getting 1909 thru Windows Update will be issued KB4524570 (build 18363.476) but the 1909 ISOs & ESDs will have build 18363.418

      Exactly four years ago on Nov. 12, 2015, the 1511 version of Windows 10 (then called the November Update) was released.

    • #2004178 Reply

      PKCano
      Da Boss

      Group B Security-only Updates and the IE11 Cumulative Update have been updated for November on AKB2000003.

      UPDATE NOTE: According to @abbodi86, the November SOs are telemetry free.

      There are new SSUs for Win7 KB4523206 and Win8.1 KB4524445.

      • This reply was modified 3 weeks, 2 days ago by  PKCano.
      9 users thanked author for this post.
      • #2004758 Reply

        anonymous

        Assuming the hashes listed on the SSU page are wrong again? Because what I’m seeing has nothing to do with what’s written…

    • #2004256 Reply

      AJNorth
      AskWoody Plus

      Martin Brinkmann now has his excellent overview posted for the November 2019 updates:

      https://www.ghacks.net/2019/11/12/microsoft-windows-security-updates-november-2019-overview/

      1 user thanked author for this post.
    • #2004193 Reply

      anonymous

      First bug: receive MSRT update repeatedly.

      2 users thanked author for this post.
      • #2004300 Reply

        AJNorth
        AskWoody Plus

        You might try manually downloading, then running, the latest MSRT (v. 5.77):

        https://www.microsoft.com/en-us/download/details.aspx?id=9905

        (a minute or so after it has completed, you can safely delete the executable).

      • #2004351 Reply

        COBKA
        AskWoody Lounger

        Also getting repeated Malicious Software Updates in Win 10. On Win 7 machines the WU of the Malicious Software Update fails error code 800B0109. Downloaded the file from Microsoft Catalogue and run it which should remove it from updates but it doesn’t, so have hidden it from Win 7 WU.

        1 user thanked author for this post.
        • #2004709 Reply

          Jan-E
          AskWoody Lounger

          Also getting repeated Malicious Software Updates in Win 10. On Win 7 machines the WU of the Malicious Software Update fails error code 800B0109. Downloaded the file from Microsoft Catalogue and run it which should remove it from updates but it doesn’t, so have hidden it from Win 7 WU.

          I ran the delta update from the Update Catalog and then started the search for new updates once again. That solved the failing MRST update on Win 7 (3 machines) and Win 2008 R2 (2 machines): the November update did not re-appear anymore.

      • #2004378 Reply

        howardagoldberg
        AskWoody Plus

        Same here … ‘Windows Malicious Software Removal Tool x64 – November 2019 (KB890830)’ fails to install.

        When I go to the details page for the WU (https://support.microsoft.com/en-us/help/890830/remove-specific-prevalent-malware-with-windows-malicious-software-remo), and click the manual download link for x64:

        http://www.microsoft.com/downloads/en/details.aspx?familyid=585d2bde-367f-495e-94e7-6349f4effc74

        I get the following message in the browser window instead of a download:

        Server Error

        404 – File or directory not found.
        The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.

        So something is amiss for certain …

         

        1 user thanked author for this post.
        • #2004390 Reply

          howardagoldberg
          AskWoody Plus

          UPDATE:

          Downloaded and ran the Win7 x64 November delta for the MSRT from https://www.catalog.update.microsoft.com/Search.aspx?q=KB890830

          and ran the update manually.

          Then, I re-ran WU, which picked and installed the ‘Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: November 12, 2019.’

          Ran WU again, no pending updates.

          Interestingly, the three actual Windows/Office security updates for November installed with no issue without the new SSU.

          At any rate, it looks like the issue is with WU trying to install the November MSRT before installing the SSU, and MSRT needed SSU to be installed first.

          Definitely a MS issue …

           

          2 users thanked author for this post.
          • #2004426 Reply

            COBKA
            AskWoody Lounger

            Yes confirm that works for me. Interestingly when I tried this originally I ran the bigger file from the Microsoft Catalogue, not the delta, and maybe its the delta file that needs executing to clear this from WU.

            • #2004561 Reply

              iudith.m
              AskWoody Lounger

              Hi All,
              I encountered the same problem with the MSRT .

              I downloaded both files from the catalog and executed successfully the big file,
              but the “delta” file seems to do nothing when executing it, no error and no feedback at all.

              Does anybody know whether running the tool manually is supposed to remove the update
              from appearing again ?

              Thanks & Best Regards,
              Iudith

          • #2004564 Reply

            iudith.m
            AskWoody Lounger

            The MSRT installation fails even AFTER installing the SSU, so I am not sure that the problem is related to SSU.

            • #2004567 Reply

              abbodi86
              AskWoody_MVP

              MSRT is an executable tool, not a real update, SSU has nothing to do with it

              1 user thanked author for this post.
        • #2004395 Reply

          anonymous

          After repeated reboots and 6 installs, now Windows update no longer reinstalls MSRT and everything looks OK.

    • #2004264 Reply

      anonymous

      Can someone please explain why there are so many service stack updates lately?
      From what I can gather, not etirely sure, it’s to do with SHA2 and changes to Windows Update? confirmation required, in not too technical format please, thank you old codger homeuser here.
      rant/ Bugs and an SSU please for xmas. /rant

      1 user thanked author for this post.
      • #2004289 Reply

        PKCano
        Da Boss

        The SSU is the update for the Windows Update mechanism itself. It is installed exclusively (by itself) for Win7/8.1, so it will appear in the Windows Update Important updates. For Win10, the installation is handled through Windows Update but it is not listed separately from the Cumulative Update.

        1 user thanked author for this post.
    • #2004279 Reply

      AJNorth
      AskWoody Plus

      The SANS ISC threat chart for November 2019 Microsoft Patch Tuesday has been posted:

      https://isc.sans.edu/forums/diary/November+2019+Microsoft+Patch+Tuesday/25516/

      1 user thanked author for this post.
    • #2004287 Reply

      anonymous

      Addresses an issue in the Keyboard Lockdown Subsystem that might not filter key input correctly.

      Fingers crossed that this is finally gonna close the lid on my intermittent software Windows key sticking. Considering the only workaround I can find to get input back to normal after it happens is loading a UAC prompt, I’m sure it must have something to do with this “Keyboard Lockdown Subsystem.”

      • #2004466 Reply

        warrenrumak
        AskWoody Plus

        I hope it does fix your problem, but it’s not likely.  The “Keyboard Lockdown Subsystem” is part of an optional feature of Windows 10 Enterprise / Education only, that allows administrators to configure certain keys or combinations of keys to be disabled, such as ALT+F4 or CTRL+ALT+DEL.  Useful for kiosks or screens intended for use by children.  (Before Windows 10, you usually had to use third-party software to do this sort of thing.)

        The fix (which is considered a security fix) actually shipped with every version of Windows 10 older than 1903 last month… not sure why they waited until the November updates to ship it for 1903.

         

    • #2004295 Reply

      cyberSAR
      AskWoody Plus

      Figured what the heck and upgraded my 1903 to 1909 through Windows Update. Took all of 4 minutes to update, reboot and log in to desktop. All of my settings appear to have stayed intact.

      • #2004352 Reply

        COBKA
        AskWoody Lounger

        About the same time for me. No problems that I can detect thus far.

      • #2004670 Reply

        Bauer
        AskWoody Plus

        Yes, this seems to be the work of KB 4517245:

        “Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. Therefore, the new features in Windows 10, version 1909 were included in the latest monthly quality update for Windows 10, version 1903 (released October 8, 2019), but are in an inactive and dormant state. These new features will remain dormant until they are turned on through the “enablement package,” a small, quick-to-install “master switch” that activates the Windows 10, version 1909 features”

        I found this on our WSUS, availabe for the few test computers that already run 1903…

    • #2004314 Reply

      galileo
      AskWoody Plus

      Smooth update process to 1090 with no issues/problems obvious at this time…

      • This reply was modified 3 weeks, 3 days ago by  galileo.
    • #2004326 Reply

      sheldon
      AskWoody Plus

      Does the latest update to 1903 as well as 1909 have the fix for “disappearing deferral dialog” bug?

      • #2004331 Reply

        PKCano
        Da Boss

        The November CU should have the fix for the deferral pulldowns in the GUI

        1 user thanked author for this post.
        • #2004333 Reply

          sheldon
          AskWoody Plus

          “should” – has anyone confirmed it?

          • #2004334 Reply

            PKCano
            Da Boss

            It was corrected in KB4522355. Win10 updates are CUMULATIE.

            3 users thanked author for this post.
          • #2004729 Reply

            woody
            Da Boss

            I can confirm it.

            1 user thanked author for this post.
    • #2004327 Reply

      IndyPilot80
      AskWoody Lounger

      Has anyone had an issue with the Malicious Software Removal Tool (KB890830)? I’ve released it from WSUS to a test group, manually when into Windows update to install it, it sits at “Installing: 0%” for a couple minutes then goes away. When I hit “Check for Updates” it shows up again and does the same thing.

    • #2004329 Reply

      trparky
      AskWoody Lounger

      I can’t help but ask a really dumb question… Is it safe to install version 1909 or should I wait and stay on version 1903? And while we’re at it, is it safe to install the latest cumulative update for 1903?

      • #2004332 Reply

        PKCano
        Da Boss

        We are on DEFCON-2 which means WAIT to install the November patches.

        The Nov updates have not been out long enough (only 2 hours) for anyone to declare them “SAFE” to install yet. (Unless you want to be a Beta-testing Guinea Pig!! 🙂 )

        2 users thanked author for this post.
        • #2004772 Reply

          trparky
          AskWoody Lounger

          I decided to throw caution to the wind and not only install the cumulative update but I also installed 1909, I’m happy to report that my computer didn’t light on fire, explode, and/or otherwise break in any way. All is good.

    • #2004338 Reply

      sheldon
      AskWoody Plus

      One question for people whose machines are at pre-1903.  Update to 1903 or go directly to 1909  (of course after Woody gives the OK)?  The difference between the two doesn’t seem very large.

      1 user thanked author for this post.
      • #2004405 Reply

        woody
        Da Boss

        For now, don’t update anything.

        I’ll be watching things closely. When it’s time to update – to either 1903 cumulative update, or to 1909 – I’ll yell loud and clear.

        2 users thanked author for this post.
    • #2004375 Reply

      jomargon
      AskWoody Lounger

      Installed Update “Malicious Software Removal Tool” from November kb890830 and still appears to install in Windows Update MiniTool.Captura-de-pantalla-16

      Attachments:
    • #2004382 Reply

      bbearren
      AskWoody MVP

      Seeker/cannon fodder report:

      Window 10 Version 1909 (OS Build 18363.476)

      KB4522742 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64
      KB4524101 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64
      KB4516115 Security Update for Adobe Flash Player for Windows 10 Version 1909 for x64-based Systems
      KB4516115 Cumulative Update for Windows 10 Version 1909 for x64-based Systems

      Also got the malicious software removal tool downloaded and installed without issue.

      All systems nominal.

      Create a fresh drive image before making system changes (Windows updates are system changes), in case you need to start over!
      "The problem is not the problem. The problem is your attitude about the problem. Savvy?"—Jack Sparrow
      "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
      "Experience is what you get when you're looking for something else."—Sir Thomas Robert Dew

      3 users thanked author for this post.
    • #2004384 Reply

      Barry
      AskWoody Plus

      I am not sure if this is normal but i did have to install the 1903 CU before it offered me 1909.

      As other posters have noticed it was incredibly fast. I would say about a quarter of the time it took to install the 1903 CU.

      No apparent problems other than i also am seeing MSRT repeatedly wanting to install.

      Last where in the heck do you go to change your signature? I have done it before but cant find it anywhere.

      Barry (Seeker)
      Windows 10 Home V 1909

      • #2004387 Reply

        PKCano
        Da Boss

        Change your signature in your Profile.
        Click on your username below you Avatar, then click on Edit.

        1 user thanked author for this post.
    • #2004385 Reply

      CraigS26
      AskWoody Plus

      Upgrade from 1903 to 1909 was as smooth & quick as any monthly CU, although I’m just an ethernet HP desktop.

      The Nirsoft WU History App shows – (2) – 1909 Installs 17 min apart (I did see/run a 2-stage Update w/2 MSRT’s — BUT the Control Panel WU history shows just One. SSU shows on the Con Panel History Only as usual.

      Surely it matters that my flawless experience with W10 is via a new Feb ’19 desktop shipped with 1709 W10 (smooth 1803-1809-1903 upgrades) VS having to Upgrade from W7 or older. I’ll never look back.

      W10-64 1909 Home / Hm-Stdnt Ofce '16 C2R / HP Envy i5-8400/ 12 GB / 256G SSD + 1 TB HDD / InSpectre #8 = GREEN

    • #2004396 Reply

      anonymous

      For me, 1909 seems to break network discovery similar to 1803. Can’t see other 1903 PCs from 1909 and vice versa. Using IP address either way works fine.

      1 user thanked author for this post.
      • #2004408 Reply

        cyberSAR
        AskWoody Plus

        Not seeing that here on a mix of 1809, 1903 and now 1909. All machines can browse and see networked machines.

        • #2004429 Reply

          anonymous

          Thanks. Had to reboot the 1903 that was on prior to a 1909 update and now all OK. Whew! Had the worst case of deja vu for a few minutes there.

          1 user thanked author for this post.
      • #2004484 Reply

        RetiredGeek
        AskWoody MVP

        Make sure your network is still private on the 1909 machine. If that ok try enabling SMBv1 on both machines. HTH 😎

        May the Forces of good computing be with you!

        RG

        PowerShell & VBA Rule!
        Computer Specs

        • #2004517 Reply

          anonymous

          RetiredGeek wrote:
          If that ok try enabling SMBv1 on both machines.

          Yes, you could do that, but maybe you shouldn’t. With respect, SMB1 is old and insecure and most systems are probably better off not running it.

          https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Stop-using-SMB1/ba-p/425858

          Hope this helps.

          1 user thanked author for this post.
          b
          • #2004731 Reply

            woody
            Da Boss

            Agreed completely. But as RG notes, sometimes it’s the only way you can get the dern things to talk to each other….

            • #2004737 Reply

              jabeattyauditor
              AskWoody Lounger

              Agreed completely. But as RG notes, sometimes it’s the only way you can get the dern things to talk to each other….

              Since most Microsoft products use DNS to resolve this sort of thing (and the OP stated that access via IP is still working), I wonder if fixed IP addresses and a quick entry or two in the hosts file wouldn’t be the better way to do this on the typical cheap home network?

              (I’m assuming they have inadequate local DNS services.)

    • #2004427 Reply

      TheOwner
      AskWoody Lounger

      I am also unable to install  November 2019 Malicious Software Removal Tool  trough Windows Update with error 800B0109 on Win 7 64bit. It not download and in my download folder is nothing about this. (I know  it has code name)

      • This reply was modified 3 weeks, 3 days ago by  TheOwner.
      1 user thanked author for this post.
      • #2004771 Reply

        rontpxz81
        AskWoody Lounger

        November 2019 Malicious Software Removal Tool did not appear in the WU today- only the monthly security roll up.

    • #2004441 Reply

      abbodi86
      AskWoody_MVP

      Guidance for disabling Intel® Transactional Synchronization Extensions (Intel® TSX) capability

      is this related to CPU vulnerabilities mess?

      1 user thanked author for this post.
    • #2004464 Reply

      bbearren
      AskWoody MVP

      For me, 1909 seems to break network discovery similar to 1803. Can’t see other 1903 PCs from 1909 and vice versa. Using IP address either way works fine.

      Networking is working normally for me.  Only one PC on 1909, but it and all the others can look both ways.

      One minor annoyance is that 1909 re-installed those useless (for me) Libraries and Special Folders again.  I had to import my reg files into the registry for each user to get rid of them one more time.

      Create a fresh drive image before making system changes (Windows updates are system changes), in case you need to start over!
      "The problem is not the problem. The problem is your attitude about the problem. Savvy?"—Jack Sparrow
      "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
      "Experience is what you get when you're looking for something else."—Sir Thomas Robert Dew

      • #2004469 Reply

        cyberSAR
        AskWoody Plus

        One minor annoyance is that 1909 re-installed those useless (for me) Libraries and Special Folders again. I had to import my reg files into the registry for each user to get rid of them one more time.

        I didn’t have that issue on this machine. Weird.

      • #2004489 Reply

        RetiredGeek
        AskWoody MVP

        Bbearen,   could you please post the reg file? 😁

        May the Forces of good computing be with you!

        RG

        PowerShell & VBA Rule!
        Computer Specs

        1 user thanked author for this post.
      • #2004519 Reply

        Carl D
        AskWoody Lounger

        The upgrade from 1903 to 1909 set the default app for Pictures to Paint 3D for me.

        I’ve had the ‘awful’ Photos app removed with the Tools option of CCleaner for a while now and ‘restored’ Windows Photo Viewer with a reg file.

        The upgrade to 1909 obviously removed the registry change and tried to restore the default app to Photos but because Photos wasn’t there it chose Paint 3D instead.

        After running my reg file again the default app is back to Windows Photo Viewer.

        Can’t see any other default app changes so far from the upgrade to 1909, I’ll be keeping an eye out though.

    • #2004465 Reply

      abbodi86
      AskWoody_MVP

      https://docs.microsoft.com/en-us/windows/release-information/windows-message-center#366

      Timing of Windows 10 optional update releases (November/December 2019)

      There will be no more optional “C” or “D” releases for the balance of this calendar year. Note There will be a December Security Update Tuesday release, as usual.

      2 users thanked author for this post.
    • #2004507 Reply

      Carl D
      AskWoody Lounger

      Well, I decided to be an adventurous soul and used the new Media Creation Tool to download 1909 and create an ISO file.

      Brought my 1903 Pro installation up to date (I wasn’t offered 1909 via Windows Update) then used the ISO file to upgrade to 1909 – disconnected from the Internet, as always.

      Bit of an ‘anti climax’ – everything looks exactly the same as 1903.

      A few things I’ve noticed:

      Cortana was re-enabled (I had it disabled with O&O’s ShutUp10).

      Several other items were re-enabled according to ShutUp10 – particularly telemetry.

      Meltdown/Spectre protection was re-enabled (I had it disabled with InSpectre). Disabled it again.

      OneDrive icon was re-added to the Start Menu (I have OneDrive and most of the other unwanted apps ‘removed’ with the Tools option of CCleaner). The icon was easily removed but I had to do it from the file location, couldn’t delete it directly from the Start Menu.

      Took me a while to figure out (had to Google) how to delete the huge windows.old folder from the root of the C drive – was protected by “TrustedInstaller”. Meh!

      Checked Windows Update again and installed the November updates for 1909. I’m now on 1909 (OS Build 18363.476).

      Everything is running smoothly so far. Of course, I do have Macrium images to go back to if things go wrong.

      1 user thanked author for this post.
      • #2004508 Reply

        anonymous

        Thanks, a very helpful, detailed post of useful info.

      • #2004865 Reply

        anonymous

        Does 1909 come with a full version or is it just an CU update.  Sounds like you installed the full version of 1909.

        • #2004925 Reply

          PKCano
          Da Boss

          It depends.
          If you are on 1809 or anything before, you will get a full version.
          If you are on 1903 with the latest CU installed (KB4524570 Build 18362.476) you will only get a small Enablement package that will turn on the 1909 features which are already installed.
          1903 and 1909 have the same core. The difference is the Enablement package.

          1 user thanked author for this post.
          • #2005183 Reply

            anonymous

            Can I get the full version of 1909 if I want to do a clean install

            • #2005185 Reply

              PKCano
              Da Boss

              Yes, you can download the Media Creation Tool from Microsoft (US English) to any Windows PC. Specify that you want to create the installer for another PC, and it will create an ISO that you can burn onto a DVD or bootable USB drive.

              If you boot from the created install media, it will do a clean install. If you access setup.exe on the install media from a running Windows installation, it will do an in-place upgrade.

            • #2005213 Reply

              b
              AskWoody Plus

              If you boot from the created install media, it will do a clean install. If you access setup.exe on the install media from a running Windows installation, it will do an in-place upgrade.

              Whether you boot from USB/DVD or run setup from a mounted ISO, you can select to keep files, settings and apps or to delete everything.

              Windows 10 Version 1909 (Group ASAP)

    • #2004518 Reply

      anonymous

      Key question: does the 1909 feature update also appear with 365 days of feature deferral configured? If so, I foresee troubles ahead. If only because you’ll never know when a ‘click here to download’ unwantedly changes to ‘downloaded, click to reboot’ 🙁

      • #2004556 Reply

        deadite9
        AskWoody Plus

        For me, it did not appear with a 365-day deferral (set via gpedit) on a secondary PC. I decided to give the 1909 update a spin on that machine (which was already running 1903) since it’s configured almost exactly like my primary, just to see how it went. The upgrade link didn’t appear, even after installing this month’s 1903 CU, so I set the deferral back to zero to see if that would make it magically appear. It still didn’t, but the 1909 Feature Update did show up in the list when I ran wushowhide. Checking for updates found and installed the 1909 update, the same as it’s been for previous releases (i.e., no prompts to update— just an immediate download and install). Maybe if I’d left it sitting for a while, I would’ve gotten the advertised link to download/install at my leisure.

        • This reply was modified 3 weeks, 2 days ago by  deadite9.
        • This reply was modified 3 weeks, 2 days ago by  deadite9.
        1 user thanked author for this post.
    • #2004553 Reply

      anonymous

      Isn’t CVE-2019-1419 (OpenType Font Parsing Remote Code Execution Vulnerability) pretty bad?

      “A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts….

      There are multiple ways an attacker could exploit the vulnerability, such as by either convincing a user to open a specially crafted document, or by convincing a user to visit a webpage that contains specially crafted embedded OpenType fonts.”

      Since it’s the Type Manager Library, that makes it sound like any browser that reads the embedded font will trigger the vulnerability. CVE-2019-1441 seems similar but instead through the Windows font library.

      Moderator note: Please provide source for quoted material.

      • #2004562 Reply

        AJNorth
        AskWoody Plus

        Isn’t CVE-2019-1419 (OpenType Font Parsing Remote Code Execution Vulnerability) pretty bad?

        It is rated “critical”; however, it remains unexploited — and is considered as “less likely” to be exploited.

        Please see: https://isc.sans.edu/forums/diary/November+2019+Microsoft+Patch+Tuesday/25516/

      • #2005200 Reply

        anonymous

        Can confirm that, no 1909 for me indeed! On one laptop here we got some weird error in the logs AFTER updating and the first login. WindowsWcpOtherfailure3 type 5 in the logs, with an error report send to MS, regarding Windows Modules Installer worker. Plus an error that the service Delivery Optimation wasn’t correctly shut down. But all is fine, no failed updates or anything. And after a reboot just to be sure no weird other effects. So guess we’ll leave that as it is, impossible to find the cause of such cryptic one-shot fun anyway. Oh and of course I am talking about NOT the updgrade to 1909, but the regular monthly patch round for 1903 😉

    • #2004563 Reply

      AJNorth
      AskWoody Plus

      For those who may be interested, Brian Krebs (Krebs on Security) has posted his overview of this month’s updates: Patch Tuesday, November 2019 Editionhttps://krebsonsecurity.com/2019/11/patch-tuesday-november-2019-edition/.

       

      1 user thanked author for this post.
    • #2004658 Reply

      GreatAndPowerfulTech
      AskWoody Plus

      Any one that uses an SD card for File History, or other backups, should remove the card before updating v.1909. I, again, experienced corruption of my SD card, which happened  before when a feature update also changed the drive letter. I’ll need to let my shops customers know that there is a risk of data corruption, again, with an SD card in a Realtek reader, and to remove the card before updating,

      GreatAndPowerfulTech

    • #2004669 Reply

      AJNorth
      AskWoody Plus

      Adobe Flash Player has been updated to version 32.0.0.293; as their Security Bulletins and Advisories site has not yet been updated, it is not known whether this is security related (https://helpx.adobe.com/security.html).

    • #2004671 Reply

      E Pericoloso Sporgersi
      AskWoody Plus

      Cannon Fodder Volunteer Unscathed

      First I let Windows Update install KB4524570 and got it succesfully installed on 13 Nov 2019.
      Then I let it download and install Feature Update v.1909, which I also got succesfully installed on 13 Nov 2019.

      So now I have Windows 10 Home x64 v.1909 build 18363.476.
      Though PC Settings/System/About still says “Installed on 4 July 2019”.


      (My avatar is Winston, Croft Manor's majordomo in TR Legend.)

      • #2004732 Reply

        UKBrianC
        AskWoody Plus

        Presumably because, via Windows Update, the 1909 feature upgrade from 1903 was delivered via a CU, it advanced the build numbers (so all the various ways you can check show 1909 18363.476) but the system installation date stays at whenever 1903 was installed and there is no windows.old folder created. That means there is no restore previous version available (in Settings- Update & Security- Recovery) where you have been running your existing version for more than a few weeks.

        So the new version 1909 would just be “reversed” via Uninstall Updates? (Seems odd to reverse a “version upgrade” that way! – not really c’mon MS – 1909 is just a name before big changes next year isn’t it)

        Did anyone who has gone from an earlier version than 1903 to 1909 get a windows.old folder created for 1903 on the way through to 1909? What did other upgrade methods do?

        • #2004751 Reply

          PKCano
          Da Boss

          You should not get a Windows.old folder between 1903 and 1909 because both have the same system core. You are not installing a new altered OS.
          If you have 1903, the difference is a “Master Switch” that turns on the 1909 features that are already there. I’m guessing that going back to 1903 (if possible) is simply turning the feature switch back off.

          1 user thanked author for this post.
          • #2004763 Reply

            Carl D
            AskWoody Lounger

            Thanks, PKCano.

            Actually, what I’ve just done is go back to 1903 (with a Macrium image) and then tried Windows Update again… I didn’t realize that I had ‘Activate deferring of upgrades’ turned on in O&O’s ShutUp10.

            After turning that off I was then offered the upgrade to 1909 (after the regular monthly updates) which took only a couple of minutes to install. No change of settings or app defaults and no ‘windows.old’ folder this time.

        • #2004762 Reply

          abbodi86
          AskWoody_MVP

          No, the transition between 1903 and 1909 is delivered via small update KB4517245

          to return to 1903, go to Installed Updates and uninstall it
          “Feature Update to Windows 10 Version 1909 via Enablement Package (KB4517245)”

          warning, running any disk cleanup after installing KB4517245 may make it permanent
          i.e. the only way to remove is via restore point, if possible

          2 users thanked author for this post.
    • #2004672 Reply

      lightbulb
      AskWoody Plus

      Hello all,

      Is there any sign of the Compatabilty Appraiser in this month’s Security Only update for Windows 7? There seems to have been a pattern since July with each alternate month including it…

       

    • #2004696 Reply

      gborn
      AskWoody_MVP

      FYI: Tthat the latest security updates for Office are causing Access database access error 3340 ‘Query is corrupted’

      Office November 2019 Updates are causing Access Error 3340

      Microsoft Windows Insider MVP, Microsoft Answers Community Moderator, Blogger, Book author

      https://www.borncity.com/win/

      1 user thanked author for this post.
    • #2004706 Reply

      Alex5723
      AskWoody Plus

      Hello all,

      Is there any sign of the Compatabilty Appraiser in this month’s Security Only update for Windows 7? There seems to have been a pattern since July with each alternate month including it…

       

      Word of warning said on November 12, 2019 at 10:53 pm

      I noticed that “Microsoft Compatibility Appraiser” scheduler was re-enabled after this update

      https://www.ghacks.net/2019/11/12/microsoft-windows-security-updates-november-2019-overview/

      • #2004952 Reply

        PKCano
        Da Boss

        You are referring to having installed the Monthly Rollup, of course.
        The Security-only Update for November is telemetry-free.

    • #2004747 Reply

      AussieBoy
      AskWoody Plus

      Still learning my way around here – had to click ‘reply’ to this post as I could not find anywhere an icon for a NEW post to be made. probably just ol’ fella’s disease 🙂 Anyway, I’m posting to ask about November Win7 patch KB4525235 (311mb) as it is the sole patch showing up in MS Updates for Nov for me. It is described as a ‘Quality Rollup’ x64 patch. I searched absolutely everywhere on Woody’s Forums and every link on the page but nothing – only about some other Win7 patch number (KB4523206) which isn’t showing up for me. What does SSU stand for BTW? Anyone know why there’s nothing written or reported on this patch here? Thanks all!

      • This reply was modified 3 weeks, 2 days ago by  AussieBoy.
      1 user thanked author for this post.
      • #2004754 Reply

        PKCano
        Da Boss

        KB4525235 is the Monthly Rollup Update for Win7. It is the cumulative Security Update for November.

        KB4523206 Is the Servicing Stack Update (SSU). It is the update for the Windows Update mechanism itself. It has to be installed exclusively (by itself) and will not show up in the Windows Update Important update list until there are no other pending updates (checked or unchecked) in the queue. So, after you have installed (or hidden) all the other updates, go back and check for updates again and KB4523206 should show up. Install it.

        You can create a new post in the box at the bottom of the thread, and then “Submit.”
        If you want to reply to a post, click the “Reply” button at the top of the post you want to reply to. Then in the entry box at the bottom, type your message. That will nest your reply under the original post.

        2 users thanked author for this post.
        • #2004755 Reply

          AussieBoy
          AskWoody Plus

          Thank you very, very much PKCano. That is a very impressive reply – seriously – it covers all the points I was asking about perfectly, succinctly. Much appreciated! Bonus: perfectly punctuated as well – a rarity on the web these days. Yes, so thank you for your prompt response, all is clear to me now and I know what to do with our ‘wonderful’ patches from our MSgods. I also now know how to post new posts 🙂 Cheers from Australia!

          • This reply was modified 3 weeks, 2 days ago by  AussieBoy.
          • This reply was modified 3 weeks, 2 days ago by  AussieBoy.
          1 user thanked author for this post.
    • #2004750 Reply

      mn–
      AskWoody Lounger

      Okay, one W10 1809 (Pro 64) box installing KB4523204 and KB4523205 without being told to. As in policy-managed, not approved.

      … BUT apparently another third-party tool that can trigger updates WAS run today.

      Sheesh, herding cats and all…

      At least nothing seems to have broken yet.

    • #2004770 Reply

      bsfinkel
      AskWoody Lounger

      I have some questions and comments about the Windows 7  MSRT patch.  I, too, could not get it to install on my 32-bit system. – 800B0109.  I went to the MS Catalog, as per a reply above, and I saw two files I could download.  One had “delta” in its name, and the other did not.  What is the difference between the two?  I downloaded and ran the non-delta executable.  It ran without problems.  A number of years ago I ran mrt.exe manually, but it had an error; one site I visited said, essentially, do not worry about it.

      As for these 8-hexadecimal digit error codes – Are the codes common across the MS software platforms? Does this code from WU have the same reason as the same code produced by another piece of MS code?  A search for that error code pointed to one article about a patch not signed properly, but another pointed to a “fix Windows Update” URL.  When I started with IBM mainframes in 1967, IBM had a manual “Messages and Codes” which explained all of the error codes produced by the mainframe operating system.  Instead of a WU “Get help for this error” hyperlink, why can’t MS produce a web page that has all of these error codes with a detailed explanation?

      • #2004900 Reply

        b
        AskWoody Plus

        Instead of a WU “Get help for this error” hyperlink, why can’t MS produce a web page that has all of these error codes with a detailed explanation?

        MS does have some:

        Windows Update error codes by component

        Windows Update common errors and mitigation

        Get help with Windows 10 upgrade and installation errors

        Windows 10 Version 1909 (Group ASAP)

        1 user thanked author for this post.
        • #2013671 Reply

          bsfinkel
          AskWoody Lounger

          I looked at the first two Windows Update error codes hyperlinks, and NEITHER has the 800B0109 code that I received.  The third hyperlink pertains to Windows 10, which I am not yet running.

          • #2013675 Reply

            abbodi86
            AskWoody_MVP

            0x800B0109 = A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider

            do you have sha2 support patches installed?
            and i remember MSRT had issue and got rereleased later

            • #2015038 Reply

              bsfinkel
              AskWoody Lounger

              My complaint was that the hexadecimal error codes were NOT documented.  You proved my point by pointing me to two Windows Update URLs, and neither contains the Windows Update error code that I received.  I rest my case.

              I have to assume that these error codes are chosen “out of the blue” at random by the code developers,  I think that there must be a central MS error code repository, and the contents of that repository need to be placed on a web site.

               

    • #2004906 Reply

      fernlady
      AskWoody Lounger

      Update kb4525235 came in and I hid it, checked again for updates and kb4523206 came in and it was hidden. Didn’t receive the MRST. Will wait for the dust to settle before installing the SSU first.

      Windows 7 Home Premium x64 AMD Group A Realtek PCLe GBE Family Controller

    • #2004922 Reply

      lightbulb
      AskWoody Plus

      I’m confused:

      Group B Security-only Updates and the IE11 Cumulative Update have been updated for November on AKB2000003.

      UPDATE NOTE: According to @abbodi86, the November SOs are telemetry free.

      But:

      Word of warning said on November 12, 2019 at 10:53 pm

      I noticed that “Microsoft Compatibility Appraiser” scheduler was re-enabled after this update

      So does that mean it’s safe to install this month’s SO (from the avoiding telemetry point-of-view)?

      • #2004928 Reply

        PKCano
        Da Boss

        We are on DEFCON-2. It is not time to install any Nov. update. WAIT.

        But when the DEFCON go-ahead is given, it’s @abbodi86 ‘s information you want to listen to. The Nov. SO is telemetry-free.

    • #2004946 Reply

      bbearren
      AskWoody MVP

      Bbearen, could you please post the reg file? 😁

      Actually, it’s not a reg file, it’s a bunch.  I have them assembled into the particular Libraries/Special Folders, so you can leave whatever you want to use intact.  Use right-click-Edit to see what’s inside each one.

      Important Note: Before importing the “Remove Quick Access” reg file, go to Control Panel > File Explorer Options and make sure “Open File Explorer to:” is set for This PC.  If “Open File Explorer” is set for Quick Access, it won’t open after the reg file is imported.

      Also, some of the registry keys/values are owned by TrustedInstaller.  To get around that I use Process Hacker and the plugin “Run as trusted installer” to open regedit.exe, then it’s just File > Import, one at a time.

      And here’s a zip file with all of them:

      Completely-Remove

      Create a fresh drive image before making system changes (Windows updates are system changes), in case you need to start over!
      "The problem is not the problem. The problem is your attitude about the problem. Savvy?"—Jack Sparrow
      "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
      "Experience is what you get when you're looking for something else."—Sir Thomas Robert Dew

      Attachments:
    • #2004957 Reply

      dportenlanger
      AskWoody Lounger

      I am confused.  I added a couple of 1903 machines to my domain last month for testing.  In WSUS, I only have Windows 10 checked in Products and Classifications, not every specific version.  When the sync would run, it would get the updates required for every version of Windows through 1809

      Last month, none of the 1903 updates were listed.  I thought that was odd, so I checked Windows 1903 in WSUS and Windows 10 in Products and Classifications.  No other versions were checked.  WSUS listed all the updates for every version including 1903.  Then I went and unchecked the specific 1903 option.

      This morning I checked what updates were synchronized.  Again, every version of Windows except 1903 is listed in updates.

      Do we now have to explicitly check 1903 in Products and Classifications to get the 1903 updates?  Is this a requirement I missed?

      Thank you in advance.

    • #2004990 Reply

      bbearren
      AskWoody MVP

      Networking is working normally for me. Only one PC on 1909, but it and all the others can look both ways. One minor annoyance is that 1909 re-installed those useless (for me) Libraries and Special Folders again. I had to import my reg files into the registry for each user to get rid of them one more time.

      Yesterday I used a mounted ISO to run the in-place upgrade to 1909.  That’s where the Special Folders came in.  Today I restored my OS drive image from 11/11 (took all of 3:05) and then ran through Windows Update.  I was offered to download and install 1909 on the second round.  No Special Folders this time.

      Networking is still normal.  When I open File Explorer, there is about a five second delay before the Network folder populates, but that is normal behavior, so no real changes.

      My NAS and my laptop were both offered to download and install 1909 today, and that went very quickly and smoothly.

      All systems are nominal.

      Create a fresh drive image before making system changes (Windows updates are system changes), in case you need to start over!
      "The problem is not the problem. The problem is your attitude about the problem. Savvy?"—Jack Sparrow
      "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
      "Experience is what you get when you're looking for something else."—Sir Thomas Robert Dew

    • #2005118 Reply

      Geo
      AskWoody Plus

      Group A,  Win7X64,  Home Premium,  AMD.   KB4525235  roll up,   KB4523206 service stack,  so far no MSRT received .  No problems.

      1 user thanked author for this post.
      • #2005145 Reply

        ashfan212
        AskWoody Lounger

        Windows 7 x64 Home Premium Group A

        I also was able to install the monthly rollup KB4525235 yesterday. At that time I was offered the MSRT update KB890830 which failed to install. Accordingly, I had hid the MSRT update.

        Today, however, when WU checked for updates, I noticed that the hidden MSRT update was removed. Therefore, it appears that Microsoft has pulled the MSRT update and I would imagine that it will be offered again once Microsoft has fixed it.

        1 user thanked author for this post.
    • #2005230 Reply

      EP
      AskWoody_MVP

      there’s a new cumulative update for 1703 this November – KB4525245

      however, since 1703 was already EOL’ed on PCs, this new update is for 1703 on Surface Hub devices only

      Current status of Windows 10, version 1703

      Windows 10, version 1703 has reached end of service for all editions. To continue receiving security and quality updates, Microsoft recommends updating to the latest version of Windows 10.

      Surface Hub devices remain in support. Starting on November 12, 2019, updates for Windows 10, version 1703 will be available only for Surface Hub devices. Update information and Surface Hub known issues will be listed on this page.

    • #2005396 Reply

      anonymous

      I got the Tuesday updates for 1903 Home on Tuesday with no problems, and no recurring MSRT update. On Wednesday, I decided to install the 1909 update. It shows it installed twice in the update history, but other than that, no issues or problems thus far.

      For some reason, the last couple of cumulative updates have installed twice, but they don’t show as installed twice in the update history. Only the 1909 Feature update is shown as installing twice. Anyone experiencing the same or know why that is the case?

    • #2005403 Reply

      Mr. Natural
      AskWoody Plus

      I was happy to see that Microsoft released an “enablement package” for 1909 in WSUS so that our 1903 people can be upgraded (when approved) without another major install occurring. More like a service pack from the old days which I think Woody already mentioned.

      A step in the right direction and my thanks to Microsoft for the way this upgrade was handled. Especially for making this available in WSUS.

      Red Ruffnsore reporting from the front lines.

    • #2005581 Reply

      Sportsman
      AskWoody Lounger

      For some reason, the last couple of cumulative updates have installed twice, but they don’t show as installed twice in the update history. Only the 1909 Feature update is shown as installing twice. Anyone experiencing the same or know why that is the case?

      Until I updated to 1903, every cumulative update was installing twice (first time “failed” and second time “successful”). So far I haven’t seen that with the pair of .NET updates that I installed on 1903.

      Windows 10 Home 64-bit

    • #2008063 Reply

      EP
      AskWoody_MVP

      woody

      new preview Rollups for November 2019 released Tue. 11/19:

      KB4525251 for Windows 7
      KB4525252 for Windows 8.1

      edit: no new “C” or non-security updates for older Win10 versions today, maybe either later this week or next Tuesday Nov. 26

      • This reply was modified 2 weeks, 3 days ago by  EP.
      1 user thanked author for this post.
    • #2012462 Reply

      EP
      AskWoody_MVP

      Happy Thanksgiving to all!

      it seems MS will skip releasing the optional, non-security or “C” / “D” patches for Windows 10 as the month of November is nearly over

    • #2013869 Reply

      anonymous

      Is it safe to install kb4525243, kb4525252, and kb4524743 in a Windows 8.1 format?

      • #2013880 Reply

        PKCano
        Da Boss

        We are still on DEFCON-2 (see top of page) which means the Nov. Rollup has not been approved by Woody yet. When the DEFCON number is 3 or greater, Woody will publish instructions for safe patching.

        We do not recommend installing the Preview patches as they are UNCHECKED Optionals.

        1 user thanked author for this post.
    • #2015288 Reply

      bsfinkel
      AskWoody Lounger

      I installed Win 7 November patch KB4525235 this morning.  After the reboot, EventVwr no longer works because the MMC plug-in crashes.  I do not know anything about the internals of the Event Viewer, so I have no idea why the MMC plug-in is required nor do I know what it does.  It appears that the Event Viewer will not work without the MMC plug-in.  I have no proof, but I have to assume that something in the November patch broke the MMC.  I have a list of changed files that were backed up during my incremental backup, but I do not know the filename(s) associated with the Event Viewer.

      • #2015290 Reply

        jabeattyauditor
        AskWoody Lounger

        I have no proof, but I have to assume that something in the November patch broke the MMC.

        I have no proof, but I believe it’s far more likely that your ongoing issues are attributable to your hard drive’s need for a chkdsk after every reboot.

      • #2015378 Reply

        PKCano
        Da Boss

        Did you install the Nov. Servicing Stack Update KB4523206?

    • #2015410 Reply

      bsfinkel
      AskWoody Lounger

      The patch KB4523206  was never offered via Windows Update, and I almost never go searching for patches.  Also, I have no idea if that patch was included in a subsequent cumulative patch.

      • #2015428 Reply

        PKCano
        Da Boss

        KB4523206 is the Servicing Stack Update (SSU). It was/is offered by Windows Update.

        BUT
        SSUs have to be installed exclusively (by themself). They will not show up in the Windows Update Important queue unless/until there are NO OTHER PENDING UPDATES (checked or unchecked) in the Important list. SO, you have to install or hide anything in the Important list, then check for updates – until there is nothing left (except the SSU, which will then show up).
        After installing the SSU, you can unhide anything you have hidden that you want to restore.

        1 user thanked author for this post.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: November 2019 Patch Tuesday arrives

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.

    Cancel