News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Patch Alert: Where we stand with the August 2019 patches

    Home Forums AskWoody blog Patch Alert: Where we stand with the August 2019 patches

    This topic contains 64 replies, has 25 voices, and was last updated by  PKCano 3 days, 10 hours ago.

    • Author
      Posts
    • #1926165 Reply

      woody
      Da Boss

      Overview in Computerworld Woody on Windows.
      [See the full post at: Patch Alert: Where we stand with the August 2019 patches]

      5 users thanked author for this post.
    • #1926180 Reply

      EP
      AskWoody_MVP

      woody

      now 1903 users get the non-security update KB4512941 – just shown up today Aug. 30 after 10am pacific time on MS Update Catalog

      http://www.catalog.update.microsoft.com/Search.aspx?q=4512941

      Edit: only the 32bit/x86 version of the KB4512941 update is currently available in the Update Catalog; 64bit versions coming a little later

      3 users thanked author for this post.
      • #1926233 Reply

        woody
        Da Boss

        Just in time for my Computerworld article – which takes MS to task for its laggardly ways.

    • #1926190 Reply

      krzemien
      AskWoody Lounger

      64-bit is now there as well just turned up. Embrace yourselves!

      1 user thanked author for this post.
    • #1926221 Reply

      abbodi86
      AskWoody_MVP

      Black Friday at last

      3 users thanked author for this post.
      • #1926231 Reply

        Microfix
        Da Boss

        you’ve been waiting for this all week 😉
        https://support.microsoft.com/en-us/help/4512941/windows-10-update-kb4512941

        ********** Win7 x64/x86 | Win8.1 x64 | Linux Hybrids x64 **********

        • #1926239 Reply

          Alex5723
          AskWoody Plus

          you’ve been waiting for this all week 😉
          https://support.microsoft.com/en-us/help/4512941/windows-10-update-kb4512941

          And here is something unusual :

          Known issues in this update

          Microsoft is not currently aware of any issues with this update.

          Finally a bug free Windows 10 version. /s

          • This reply was modified 3 weeks, 3 days ago by  Alex5723.
          • #1926346 Reply

            anonymous

            Don’t count on it. I installed the update, then had to restore from a backup because it would cause Cortana to eat up 20% of the CPU and the search function no longer worked.

            1 user thanked author for this post.
            • #1926471 Reply

              anonymous

              Another anonymous here, confirming a problem with a Cortana process that sucks up an entire core and doesn’t finish, with search not working (the box pops up, you can type into it, but then nothing).  Uninstalling KB4512941 seems to have fixed things.  Aside:  that’s a download-and-install-now patch, but wushowhide.diagcab didn’t see it.

            • #1926562 Reply

              anonymous

              First anonymous. I’m glad to know I wasn’t the only one having this problem. Does nobody at Microsoft test these updates before shipping them out? You’re lucky that you were able to uninstall it. It would not let me uninstall it no matter what I did. I had to restore my system from a backup. If not for that, then I would have had to reinstall the entire OS.

            • #1926661 Reply

              anonymous

              Yet another anonymous.

              Of course they test them. Just not with every possible brand of PC or combination of components and software. In times when complexity increases, I suspect cost-cutting reduces levels of testing compared to 5 years ago, 10 years ago, 20 years ago, etc.

            • #1926928 Reply

              Chronocidal Guy
              AskWoody Lounger

              Honestly.. this is the mess they deserve for forcing the hardware to adhere to the OS development cycle.

              In the “old” way of doing things, the OS had a relatively static set of minimum requirements for some number of years that OEM vendors could test against. New hardware came out, and could be tested against that baseline to make sure it ran properly.

              Now the OS is in the driver seat, and the hardware requirements are a moving target that no one can actually test to, because the software is moving too fast to properly design for. They’ve thrown the cart so far ahead of the horse, the cart is careening down a mountain toward a cliff, and the poor horse is just tumbling behind it on four broken legs.

            • #1927513 Reply

              Alex5723
              AskWoody Plus

              Yet another anonymous.

              Of course they test them. Just not with every possible brand of PC or combination of components and software. In times when complexity increases, I suspect cost-cutting reduces levels of testing compared to 5 years ago, 10 years ago, 20 years ago, etc.

              This bug has nothing to do with hardware or 3rd party software. Cortana and search are build-in functions of Windows OS.

            • #1942380 Reply

              HappyElderNerd
              AskWoody Plus

              You must realize…YOU are Microsoft’s tester…their own either don’t exist, have learned nothing since highschool!

            • #1927076 Reply

              woody
              Da Boss

              Yo, anonymous! (You guys really should sign up for an account.)

              Günter Born has a workaround.

              The problem is caused by a corrupt cache in

              c:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\cache\
              

              The solution is to replace that folder with an old, correctly functioning version. Born has links.

              2 users thanked author for this post.
            • #1927508 Reply

              anonymous

              Got this from tenforums and it worked for me:

              HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
              “BingSearchEnabled“=dword:00000001

            • #1927977 Reply

              anonymous

              However, that registry entry enables Bing search, which a great many of folks around here don’t care for or don’t care to use., especially when they’re just looking around their PC, not out on the Web, and don’t even want search results from the Web.

              1 user thanked author for this post.
    • #1926232 Reply

      juzuo
      AskWoody Lounger

      KB4512941 for 1903 just dropped.

      Once again,  Microsoft’s “latest and greatest” Windows 10 gets to be the last one. And since we’re in for next month’s updates in just ten days, I gotta wonder, is there a point for this kind release cycle? Most users who are on 1903 and just go with default automatic update settings have been scratching their heads over two weeks, wondering why their VB apps stopped working.

      Microsoft seriously works hard to make being on their latest Windows 10 unrewarding for users.

      3 users thanked author for this post.
    • #1926238 Reply

      AJNorth
      AskWoody Plus

      Woody’s Computerworld article is now available:

      https://www.computerworld.com/article/3216425/microsoft-patch-alert-full-of-sound-and-fury-signifying-nothing.html

      1 user thanked author for this post.
    • #1926281 Reply

      OscarCP
      AskWoody Plus

      Woody, as well as those commenting here: Thanks for the heads up!

      Now, about this, from the “Computerworld” article:

      Microsoft somehow managed to mess up Visual Basic (an old custom programming language)”

      I know of some groups within a big aerospace organization in Europe that are still using DOS scripts, because these still work for them. Maybe those people are not the only ones? I would guess probably not.

      Windows 7 Professional, SP1, x64 Group B & macOS + Linux (Mint) => Win7 Group W + Mac&Lx

    • #1926324 Reply

      Karlston
      AskWoody Plus

      @woody Sorry, there’s a typo in your CW article.

      There’s an entry “1” in the first dotted list. MS patching integers now? 😉

      Hanlon's Razor: Never attribute to malice that which can be adequately explained by stupidity.

      1 user thanked author for this post.
      • #1926872 Reply

        woody
        Da Boss

        HA! Yep, Windows 1….

        Actually, it should’ve been 8.1.

        1 user thanked author for this post.
    • #1926328 Reply

      zero2dash
      AskWoody Lounger

      Folks running applications in any of those languages would, on occasion, receive “invalid procedure call error” messages when using apps that had been working for decades.

      “On occasion” makes this precisely correct.
      I’ve had no issues with 1903 and its August patches. No warranty implied, YMMV.
      Even /r isn’t screaming [blue] murder about 1903 and August patches, and that’s typically one of the first places that will do so.

    • #1926352 Reply

      Charlie
      AskWoody Plus

      For those of us still interested in the wonderful Windows 7:

      According to AW Topic 2000003, the Aug 2019 KB 4517297 Security Only update (Released 8/16) fixes VB6, VBA,VBScript for Win 7.  Still so?  Didn’t see any mention of it in Woody’s CW article.

      Win 7 Home Premium, x64, Intel i3-2120 3.3GHz, Groups B & L

      • #1926354 Reply

        PKCano
        Da Boss

        Still so.

        • #1926366 Reply

          anonymous

          ? says:

          don’t forget the KB3133977 (hurt) bit-locker patch? and KB4474419-v2 plus KB4490628 plus pciclearstalecache plus the August SO plus the August IE and…

          ps thank you for helping thefamilyitguy, made for some very interesting reading and you didn’t even break a sweat!

          2 users thanked author for this post.
      • #1926376 Reply

        DrBonzo
        AskWoody Plus

        Here’s a data point for the Wonderful World of Windows 7.
        Win 7 Starter 32 bit (guinnea pig machine)

        Installed KB4474419 (latest SHA-2 patch), 4512486 (Security Only), 4517297 (VB fix), and 4511872 (IE 11), in that order, with a restart after each. Before any of these, made sure 3133977 was installed.

        No problems, all went in smoothly and relatively quickly. The only unusual things were a double shutdown/restart (that happened automatically) for the SO patch, and Windows Media Player was not broken (!! Snark, Snark, because it usually does break and requires a reset).

        Based on that I might move on to a few 64 bit machines over the long weekend (or maybe not)

        4 users thanked author for this post.
        • #1928139 Reply

          Charlie
          AskWoody Plus

          What is 3133977?

          Win 7 Home Premium, x64, Intel i3-2120 3.3GHz, Groups B & L

          • #1928153 Reply

            PKCano
            Da Boss

            Here is the MS information page about KB3133977.

            1 user thanked author for this post.
            • #1929302 Reply

              Charlie
              AskWoody Plus

              So it looks like KB3133977 is required in all cases before doing the Group B Security Only Win 7 August updates?  As DrBonzo stated: “Before any of these, made sure 3133977 was installed”.  This would seem to indicate that KB3133977 is the starting point before doing anything else.  Am I understanding this correctly?

              Win 7 Home Premium, x64, Intel i3-2120 3.3GHz, Groups B & L

            • #1929343 Reply

              DrBonzo
              AskWoody Plus

              I, for one, can’t say with absolute uncertainty that 3133977 MUST be installed, but it seems very likely from reading the MS support pages that if it isn’t installed AND your machine does an EFI boot, then you likely will have issues.

              In my case, every WIN 7 machine I’ve patched already had 3133977 installed, and everything worked out fine.

              3 users thanked author for this post.
        • #1928652 Reply

          DrBonzo
          AskWoody Plus

          I did a couple more Win 7 machines last night, both x64, Pro SP1. Same scenario, procedure, and results as above with a Win 7 Starter machine.

          With all the hoopla this month, I was expecting a rough ride, but so far the patch installs have been almost boring. For a variety of reasons – none of which are technical – I’m updating before Woody moves to DEFCON 3, so this is testament to Woody’s sage advice of waiting a while before patching.

          3 users thanked author for this post.
    • #1926365 Reply

      plodr
      AskWoody Plus

      KB4517297 is listed by MS as just an Update, not a Security update.

      https://support.microsoft.com/en-us/help/4517297/windows-7-update-kb4517297

      and   https://www.catalog.update.microsoft.com/Search.aspx?q=KB4517297

      but it is noted that if you install this, you don’t need to install the Security Only update for August.

      I’ve updated four Windows 7 computers with this and the IE Security only Cumulative update, 4511872. I updated on Monday, 26th, and have had no issues with any of the computers.

      Got coffee?

      2 users thanked author for this post.
    • #1926451 Reply

      CraigS26
      AskWoody Plus

      yup along with the new KB4515530 servicing stack update for v1903
      http://www.catalog.update.microsoft.com/Search.aspx?q=4515530

      Nothing in Check for Updates yet.

      I’m 95.46% sure that the June 27 Service Stack was installed Automatically WITH the Cumulative Update. Is THAT a correct assumption OR are we supposed to Install this one manually B4 the new Updates? Thanks!

      W10 1903-18362.329 Home / Hm-Stdnt Ofce '16 C2R / i5-8400/ 12 GB / 256 SSD + 1 TB HDD / InSpectre #8 = GREEN

      • This reply was modified 3 weeks, 2 days ago by  CraigS26.
      • #1926464 Reply

        PKCano
        Da Boss

        If you use Windows Update to install the CU, the corresponding Servicing Stack should be applied automatically with the CU.

        If you install the CU manually, that’s another story. You would need to install the Servicing Stack manually first.

        1 user thanked author for this post.
    • #1926454 Reply

      geekdom
      AskWoody Plus

      The next “Patch Tuesday” is September 10, 2019. What happens if August Microsoft patches are insufficiently robust to warrant MS-DEFCON 3 by the time September Patch Tuesday arrives?

      Group G{ot backup} TestBeta
      Win7Pro · x64 · SP1 · i3-3220 · RAM 8GB · Firefox: uBlock Origin - NoScript · HDD · Canon Printer · Microsoft Security Essentials · Windows: Backup - System Image - Rescue Disk - Firewall
      • #1926467 Reply

        Seff
        AskWoody Plus

        Past precedent is that we would, in those circumstances, be advised to give all or some of the August updates a miss with a view to seeing if the problems were resolved in the September updates.

        3 users thanked author for this post.
        • #1926597 Reply

          geekdom
          AskWoody Plus

          BlueKeep is at the gate. Any early installation of this month’s patches required additional patches to correct errors in the first patches.

          If September looks like August, patching is unlikely.

          Group G{ot backup} TestBeta
          Win7Pro · x64 · SP1 · i3-3220 · RAM 8GB · Firefox: uBlock Origin - NoScript · HDD · Canon Printer · Microsoft Security Essentials · Windows: Backup - System Image - Rescue Disk - Firewall
          • This reply was modified 3 weeks, 2 days ago by  geekdom.
    • #1926486 Reply

      CraigS26
      AskWoody Plus

      If you use Windows Update to install the CU, the corresponding Servicing Stack should be applied automatically with the CU.

      If you install the CU manually, that’s another story. You would need to install the Servicing Stack manually first.

      Thanks & Understood – and KB 4515530 Svc Stack DID Install automatically again. It Appears in Control Panel Update History — BUT NOT in Settings Update History, although the June Svc Stack Update DID Appear via Settings. W10 now 18362.329.

      W10 1903-18362.329 Home / Hm-Stdnt Ofce '16 C2R / i5-8400/ 12 GB / 256 SSD + 1 TB HDD / InSpectre #8 = GREEN

      • This reply was modified 3 weeks, 2 days ago by  CraigS26.
    • #1927785 Reply

      anonymous

      Turned on my WIN7 x64 machine this morning and Windows Update stated:

      Most recent check for updates: NEVER

      Updates were installed: NEVER

      So I checked for updates and it returned (10) Important. Of those, 4 are current [August] and I’ve been holding off installing until we get the all-clear from Susan. Now the other 6 are OLD patches. Why are they being pushed out (again?)?

      KB3068708 6/9/2015
      KB3138612 3/8/2016
      KB3150513 5/11/2016
      KB3161102 9/13/2016
      KB3170735 7/12/2016
      KB3172605 9/13/2016

      Anybody know what’s going on with the Softies?

       

      • #1927851 Reply

        PKCano
        Da Boss

        Hide KB3068708 and KB3150513  – they are related to telemetry.

        The other four are OK to let install. They are probably there due to metadata/supercedence changes. If you let them install, Windows Update will handle them correctly. They will do nothing if not needed/superceded, but it will satisfy Windows Update so they won’t be offered again.

        • #1928586 Reply

          anonymous

          Thank Boss, for doing the heavy lifting. You never fail!

      • #1927877 Reply

        plodr
        AskWoody Plus

        Your list has patches from before bundling occurred, Oct. 2016. My guess is that you had them hidden if you read Woody’s on what to avoid.

        3068708 is telemetry; you probably don’t want to install it.

        3138612 supercedes 3135445 from the previous month; I had 3135445 hidden (probably because I read problems with it)  but I did install 3138612

        KB3150513 has something to do with enabling upgrade to Windows 10

        https://www.computerworld.com/article/3065380/mystery-solved-kb-3150513-is-another-windows-10-update-enabling-patch.html

        *KB3161102 the date you have is not correct. It was issued in July, not September https://www.askwoody.com/2016/windows-journal-enters-the-last-lap-with-kb-3161102/

        KB3170735 also has to do with Windows Journal; from what I read, it alerts you to future developments in Windows Journal. I was not offered this

        KB3172605 replaces a buggy patch; might be optional. I only have one computer with bluetooth and I don’t install optional patches so it is not in my notes for installed patches.

        Got coffee?

        • #1928201 Reply

          anonymous

          Thanks plodr, you are correct. They were hidden. For some reason Update decided to reveal them to confuse me. Have a cup of Peete’s on me.

    • #1928218 Reply

      anonymous

      “We found out that the August Security-only Win7 patch does NOT contain the telemetry subsystem so evident in the July Security-only patch.”

      So I have already installed the Windows 7 Security Only Aug 2019 update and the IE 11 cumulative update for Aug as well on my laptops. But I will forever skip the and July Security only Win 7 updates and maybe just maybe some later month’s patching may just overwrite the same DLLs/Kernel code that where patched in the July 2019 security only update. And at the rate that MS has to fix things that DLL turnover to newer re-compiled versions is probably rapid enough that some July 2019 issues may get fixed by pure happenstance later on. MS’s build libraries for Windows 7/other OSs probably have seen plenty of DLL/other component turnover over the years and things having to get refactored so often.

      I hope that MS keeps the Update servers turned on for Windows 7 for a good while after Jan 2020 because I plan on re-imaging my Windows 7 laptops from their recovery DVDs and getting a good clean fresh install going forward. And that’s with one Windows 7 Pro laptop, that actually came with a Windows 8 Pro license, getting Windows 8 installed and upgraded to 8.1 with all the security updates as well.

      But Windows 10 is still a Beta train-wreck in progress and MS is probably not supprised why so many still want to avoid Windows 10 as long as possible.

      I hope that they vetted that KB4517297 patch that fixes the VBA scripting issue in KB4512486 for spyware as well and they probably have. I’ve only installed KB4517297 as that contains all the the earlier Aug 2019 patch fixes plus the VBA Issues as well for Windows 7.

    • #1930225 Reply

      anonymous

      Ok, Win 7 Ultimate 32-bit Group B, hadn’t installed the July patch, now installed that too, so it was the new version of 4474419 from Windows Update, reboot, then 4507456 (July SO), 4511872 (August IE), 4517297 (patched August SO), so without the initial buggy August SO, since it says just the patched one is needed, rebooting again after installing all 3 one after the other from Catalog.

      Double reboot after installing the 3 patches, which was expected, also expected was to have that compatibility appraiser task show up, and the upload info one get modified and enabled, after reboot, so deleted both. But another thing I noticed since then is “WinHTTP Web Proxy Auto-Discovery Service” start every 30 min, and stop after 16-17 min, so actually running the majority of the time. Disabled it, since I’m not behind a proxy, but what’s that about?

      — Cavalary

      • #1930259 Reply

        PKCano
        Da Boss

        I would invite you to take a look at AKB2000012 about neutralizing telemetry introduced by the July SO.

        • #1930319 Reply

          anonymous

          Did, but not seeing anything about that Web Proxy service there.

    • #1931062 Reply

      bobcat5536
      AskWoody Plus

      Just for the heck of it, I installed the Aug. updates on Windows 10 1809 this morning. I also went ahead just to see what would happen, and installed KB 4486153  .Net 4.8. My Brother MFC-9130CW printer /scanner would no longer scan without bring up an error. I checked and my hardware and software  was up to date. I uninstalled the .Net 4.8 and it’s working just fine. The advice not to install the .Net update was good advice. If you do install it, check your devices to see if they still work. If you do have problems, uninstalling will fix them. I also did my Windows 7 and all went well there also. ( Did not install the optional .Net update ) I imaged both PC’s before doing this experiment.

      1 user thanked author for this post.
    • #1932783 Reply

      HappyElderNerd
      AskWoody Plus

      All these (bug-ridden) updates…and Microsoft is claiming that “Windows 10” is nearly ready for production deployment?  This is insane!

      Is there ANYONE AT MICROSOFT who will start telling us the TRUTH about these bugs buried within bug fixes, and establish the STABILITY CRITERIA that Windows 10 must demonstrate before we can TRUST Windows 10 enough to actually start DEPLOYING IT IN CRITICAL ENVIRONMENTS (Hospitals, Safety Services, Revenue-production…)?  Or, will they just repeat their prior trick and start telling us that “WINDOWS 11” is imminent, and we should wait????

      I have nearly ZERO confidence at this time that Microsoft is any longer capable of shipping a reliable, bug-free operating system that we can safely adopt, without dedicating our lives to endless patches that patch prior patched editions!  When does it END?

    • #1934430 Reply

      bassmanzam
      AskWoody Plus

      Win 7 x64, Office 2010 x64, Group A

      Hi PKCano,

      Although I am Group A I prefer to install patches individually. Can you let me know the proper order to install the following patches…

      3133977 – found in hidden updates. Is it needed?

      4474419 v2 – SHA-2

      4512506 – August rollup

      Office 2010 patches

      One last question….4517297 – Do I need it since I have Office 2010?  Looks like it’s a defer in Master Patch List.

      Thank you!

      • #1934437 Reply

        PKCano
        Da Boss

        3133977 – found in hidden updates. It is ineeded
        4474419 v2 – SHA-2
        4512506 – August rollup

        Deal with the Office patches per Susan Bradley’s advice.

        Reminder – we’re still on DEFCON 2

        1 user thanked author for this post.
        • #1934456 Reply

          bassmanzam
          AskWoody Plus

          Thanks PKCano!

          What about 4517297 VB fix?

          • #1934460 Reply

            PKCano
            Da Boss

            If you have a VB problem after adding 4512506 August rollup, adding the SO 4517297 should provide a fix. But if you don NOT have a program that needs the VB fix, you could wait for the Sept updates, as the fix will be included.

            1 user thanked author for this post.
      • #1942050 Reply

        PKCano
        Da Boss

        UPDATE: Please see these posts concerning KB3133977

        post #1941971 and this blog post.

        • #1943631 Reply

          bassmanzam
          AskWoody Plus

          Hi PKCano, thanks for the update.

          I started my updates yesterday around 12pm EST.  I installed 3133977 followed by 4474419 with a reboot for each and waiting 15 to 30 min. I decided to wait until today to do the rest.

          I did not find out about the ASUS motherboard issue until 10pm EST. I have an old 2012 Dell Inspiron. Can I assume since I have booted up 3 times that I won’t get hit by the ASUS bug?

          Am I safe to install the August monthly rollup 4512506 and the Office 2010 patches?

          Thanks again PKCano for all that you do. You go above and beyond!

          • #1943639 Reply

            PKCano
            Da Boss

            Dell usually has Intel or AMD chips, and I don’t think they fudged Safe Boot.

            1 user thanked author for this post.
            • #1943641 Reply

              bassmanzam
              AskWoody Plus

              Am I good to go with the rollup and Office patches?

            • #1943665 Reply

              PKCano
              Da Boss

              Go for it! If the update is slow, give it time to finish.

              1 user thanked author for this post.
            • #1943781 Reply

              bassmanzam
              AskWoody Plus

              Win 7 x64, Office 2010 x64, Group A

              Finished installing the Aug Monthly Rollup, 4512506 followed by all the Office 2010 patches.
              Rebooted after each install and waited 15 to 30 min for the hd light to go out.

              I want to thank PKCano for all the help in dealing with the August Group A patches!

              Also, a shout out to Woody and all the MVPs for keeping us on track on this rollercoaster ride to Win 7 EOL !!

              2 users thanked author for this post.
    • #1958320 Reply

      Linda2019
      AskWoody Plus

      Any changes regarding .NET 4.8 updates?  On my Windows 7 computer it came from WU unchecked.  Was wondering if it is safe to install.

      • #1958363 Reply

        joep517
        AskWoody MVP

        Do you already have 4.8 installed?

        --Joe

      • #1958529 Reply

        PKCano
        Da Boss

        I would not recommend installing .NET 4.8 on Win7 (KB4503548) or Win8.1  (KB4486105) unless you are running programs that absolutely need .NET 4.8

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Patch Alert: Where we stand with the August 2019 patches

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.