• Patch Alert: Where we stand with this month’s mess

    Home » Forums » Newsletter and Homepage topics » Patch Alert: Where we stand with this month’s mess

    Author
    Topic
    #148140

    This month’s “security” patches bring forced upgrades, broken Epson printers, a vanishing patch, yanked .NET patches that underscore confusion inside
    [See the full post at: Patch Alert: Where we stand with this month’s mess]

    5 users thanked author for this post.
    Viewing 13 reply threads
    Author
    Replies
    • #148186

      I did the smart thing and am leaving Windows.  Chromebook, Mac, and Linux are so much better that it is genuinely hilarious.

      Fortran, C++, R, Python, Java, Matlab, HTML, CSS, etc.... coding is fun!
      A weatherman that can code

      4 users thanked author for this post.
      • #148199

        The Old Yeller solution: Windows has lived so long it’s painful. Take it out behind the barn and put it out of its misery.

        7 users thanked author for this post.
        • #148304

          Woody, I sometimes wonder if Microsoft will simply put Windows out of its misery buy self abuse?

        • #148557

          Well, Old Yeller had to be put down not because of his age, but because he became rabid and aggressive, and tried to attack his owner.

          The metaphor, unfortunately, still holds.

          Just as Old Yeller would have been fine even at his age had he not contracted rabies, Windows would be fine too if it had not become aggressive and attacked its customers.  GWX was an attack; the forced upgrades were attacks; the lack of control over updates, the always-on telemetry, the ridiculous update schedule, the lack of beta testing and poor quality of releases (collectively known as “WaaS”) are all attacks.

          I hope this comes through as me, Ascaris; it isn’t showing me the thanks or quote options, but when I try to sign in, it tells me I already am.

          Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon 6.2
          XPG Xenia 15, i7-9750H/32GB & GTX1660ti, Kubuntu 24.04
          Acer Swift Go 14, i5-1335U/16GB, Kubuntu 24.04 (and Win 11)

          3 users thanked author for this post.
          • #148703

            Ascaris wrote:
            “Well, Old Yeller had to be put down not because of his age, but because he became rabid and aggressive, and tried to attack his owner.”
            “The metaphor, unfortunately, still holds.”

            ^ +1 (ROTFL! Hilarious – and yet so true it saddens me as it amuses me…)

            2 users thanked author for this post.
      • #148302

        I’ve all but given up on Microsoft and Windows myself. Their vision that my Windows device is managed solely by Microsoft is completely opposite of what Windows has always been.

        1 user thanked author for this post.
    • #148211
      2 users thanked author for this post.
      • #148219

        From https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882: “11/28/2017  To comprehensively address CVE-2017-11882 Microsoft is releasing security updates 4011604 for affected editions of Microsoft Office 2007 and 4011618 for affected editions of Microsoft Office 2010. Microsoft recommends that customers running these versions of Office install the updates to be protected from this vulnerability. Customers who have already installed the previously-released updates (4011276 or 2553204) do not need to take any further action.”

        Note: This is only for MSI-based deployments of Office, not Click-to-Run deployments. Background info: Click-to-Run is an Office deployment technology, not a version of Office.

        3 users thanked author for this post.
        • #148225

          I wonder what the difference is between the “comprehensively address” patches and the plain old patches…

          There’s something they aren’t saying.

          2 users thanked author for this post.
          • #148470

            @abbodi86 has clarified, in a different forum, that the original patches were only for English and Chinese. These new patches cover all languages.

            3 users thanked author for this post.
      • #148280

        KB4011618 appears twice in my list with important updates, even after letting Windows search for updates again. WTH?

    • #148295

      Nice comprehensive article/blog for each month Woody, evidence, albeit disappointing reading.
      On a side note: nice to see the Recent Topics & Replies are back! 🙂

      Windows - commercial by definition and now function...
    • #148299

      I’ve mostly used Windows since my first PC with Windows 3.11, and don’t think I have ever seen such a cobbled together process for Windows as recently. Its as if the Windows team is running around in crisis mode these days. I wonder how many of them feel the update process is simply a trial and error one and that the only way to see if they work is to just put them out there?  I am completely dismayed by a lack of proper vetting of these updates anymore. Are they just juggling too much stuff to be effective at addressing issues properly?

      1 user thanked author for this post.
    • #148307

      If I was the head of the update dept., right about now, based on my performance over the last 90 days, I’d be seriously concerned about still having a job come Christmas.

      1 user thanked author for this post.
      • #148560

        If I was the head of the update dept., right about now, based on my performance over the last 90 days, I’d be seriously concerned about still having a job come Christmas.

        Or maybe he’d be rubbing his hands over the big bonus he’s going to be getting for going above and beyond the call of duty.

        Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon 6.2
        XPG Xenia 15, i7-9750H/32GB & GTX1660ti, Kubuntu 24.04
        Acer Swift Go 14, i5-1335U/16GB, Kubuntu 24.04 (and Win 11)

        1 user thanked author for this post.
    • #148343

      i also got same office 2007 patch twice but in this case it was kb4011604

    • #148466

      MrBrian,

      Based on the information I found in your message regarding the new windows update KB4011618, which is repeated in the Security TechCenter Security Vulnerability link: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882: , “Customers who have already installed the previously-released updates (4011276 or 2553204) do not need to take any further action.”

      On 11/23 I installed this months Office Updates on my Window7 X64 machine, and KB2553204 is shown as installed on that date. The thing is, the support page for KB4011618 https://support.microsoft.com/en-gb/help/4011618/description-of-the-security-update-for-office-2010-november-28-2017 indicates the following: “This security update replaces KB2553204.” Also, KB4011618 is being offered to me in Windows Update as an important checked update.

      So the question is, why am I being offered KB4011618 in Windows Update if the information in article CVE-2017-11882 indicates that there’s no need to take any further action if the previously-released update KB2553204 was installed, which it was.

      It seems that the information found in CVE-2017-11882 is a direct contradiction to what the support page for KB4011618 indicates with regards to it replacing KB2553204.

    • #148585

      Our Outlook CRM add-ons got broken. It seems there is security feature in new patch – https://support.microsoft.com/fi-fi/help/4049314/microsoft-dynamics-365-for-outlook-is-unable-to-render-webpages-after

      2 users thanked author for this post.
    • #148629

      November 7, 2017, update for Office 2016 (KB4011224) has been yanked by Microsoft: “Characters in Korean Skype for Business are unidentifiable after this update is installed. To fix this issue, you may uninstall the update following the instructions below. This update is no longer available for download.”

      1 user thanked author for this post.
      • #148635

        It’s been a rocky month.

        Wonder if this is the way it’s going to be in the future, with MS supporting 14 different versions of Windows and about that many different versions of Office….

        2 users thanked author for this post.
    • #148705
      2 users thanked author for this post.
    • #148886

      thanks for this helpful info, great to rely on !!

      * _ ... _ *
    • #149115
    • #149394

      It just wanted to install this update, just before finally getting some sleep after long work. I was treated on a blue screen, not functioning Kaspersky and evenly not functioning network card. I have extreme enough of this Windows 10. Ordered and iMac and counting down the days before it arrives. Yes I know no OS or system is perfect. But Windows 10 really is going down the drain. I want my precious free time back, now I lose it on repairing 🙁 right now putting back yet another image, then this stupid update will be pushed again etc. No sleep for me tonight once again. Thanks Microsoft, thanks for slowly killing my brain.

    • #149479

      Hello, I beg your pardon for my low english level (I’m helped by a translator).  I work in an a little travel business with six computers, all of them with Windows 10 1511 Enterprise. As much as I know, three of them were updated to Windows 10 1709 with the Update Assistant tool by Microsoft because we thought that the support had become EOL. Our first surprise arrived when Microsoft decided to extend support for 1511 for six months more. Our second surprise arrived when all the 1709 computers started to fail with erratic issues within our network. Our third surprise arrived when we wanted to install Net Framework 4.7.1 on the three 1511 computers and we can’t because there is no Net Framework 4.7/4.7.1 for 1511 (anyway, I have NetFram. 4.7.1 installed on my old Windows 7 to work with recent travel packages. We tried with success to install Net Framework 4.6.2 but the KB4054057 update for the 4.6.2 is unable to install, it stops with an error with no description at all. This is absurd. This is nonsense. This is absolute madness out of control. Two versions per year? So what for, people? 1507, 1511, 1607, 1703, 1709, expected 1803 in five months… One thousand version for one thousand fails! After all this problems the manager decided to return all 1709 versions to 1511 and we have starting to migrate to Linux when this six months of extended support finished. This is my/our history with this Windows [****] 10. Thank your very much for your attention.

    Viewing 13 reply threads
    Reply To: Patch Alert: Where we stand with this month’s mess

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: