Patch Tuesday patches are here

Topic

New Reply

As usual, Martin Brinkmann has the first full list: Microsoft released security updates for all client and server versions of Windows. No critical vul
[See the full post at: Patch Tuesday patches are here]

6 users thanked author for this post.

Elly, abbodi86, PhotM, geekdom, Microfix, ch100

Reply | Quote

Replies

Group B Security-only Updates and the IE11 Cumulative Update have been updated on AKB2000003 as of 1/8/2019.

11 users thanked author for this post.

Lori, lanceboil, Pepsiboy, Elly, abbodi86, wdburt1, SueW, geekdom, David F, Microfix, woody

Reply | Quote

Strange that the patch KB4480961 for W10 v1607 doesn’t contain the ‘Windows Storage and Filesystems’ fix, whereas every other OS does including W7-Windows Server 2008 R2 SP1 and W8-Windows Server 2012 R2..

No problem can be solved from the same level of consciousness that created IT- AE

1 user thanked author for this post.

woody

Reply | Quote

Installed on my 1809 machine. No apparent problems other than it messed up the HDMI scaling but that seems to happen with every update.

Barry

 

Barry
Windows 11 v22H2

Reply | Quote

Installed on 1809:

No drama.

Windows 11 Pro version 22H2 build 22621.2361 + Microsoft 365 + Edge

2 users thanked author for this post.

woody, BobbyB

Reply | Quote

Beta Test
Reporting on Windows 7 x64 updates

Backups made first

– Windows Malicious Software Removal Tool x64 (KB890830)
– January Security Monthly Quality Rollup Windows7 x64 (KB4480970)
– Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4481480)

All installed without error and the system rebooted without error.
Please note that GWX Control Panel is used to prohibit Windows 10 upgrade.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

Reply | Quote

I have a plain-vanilla operating system with few peripherals and carefully selected useful-to-me software. From reading other threads and posts on Windows 7 updates, it appears that if you have anything beyond plain-vanilla operating system, there may be difficulties. My hypothesis is that Microsoft testing is probably done in an ideal environment on a minimal operating system with no peripherals, connections, or other vendor software rather than a real environment. With inadequate Microsoft testing, it comes as a small surprise that there are update problems in a real-world environment.

On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender

1 user thanked author for this post.

Steve

Reply | Quote

UPDATE: It looks like the Win10 version 1803 patch, KB 4480966, may be something you need to install quickly. So far there are no known exploits, and no proof of concept code. But Microsoft is saying it’s bad.

Woody, where are your comments coming from?  I dont see anything  alarming from Brinkmann or the MS site?

Are you going to give a early Defcon 3 for Win 10 – 1803?

Reply | Quote

As per link in main blog:
https://www.thezdi.com/blog/2019/1/8/the-january-2019-security-update-review
and also from MS:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0547
To be fair any exploit is alarming and a potentially gateway for miscreants so, I’d say it’s not exactly comforting either.

No problem can be solved from the same level of consciousness that created IT- AE

1 user thanked author for this post.

woody

Reply | Quote

Microfix, thanks for the additional info.

So now we have the classic issue:  Windows 7 has an issue that needs a wait and see resolution, while Windows 10 v1803  patch “may be something you need to install quickly”.

And the Defcon ratings are …………….?

Reply | Quote

..at the top of the page 🙂

No problem can be solved from the same level of consciousness that created IT- AE

1 user thanked author for this post.

SueW

Reply | Quote

Win 8.1 x64 updates installed – no problems noticed.
Win XP x32, updates installed – no problems noticed.

Reply | Quote

Work machine (out of my hands) upgraded from 1803 to 1809 this afternoon. Doesn’t seem to be any ill affects but I’m not recommending the upgrade to 1809 yet still. I think we’re probably at least 4-5 months before it’s safe on that.

Another troublesome/scary patch Tuesday makes me happy that I’ve switched to Ubuntu host machines running Win7 guest VM’s. The only reason I have to run the VM’s is because there is no Roblox client for Linux and I have kids. 😀

Reply | Quote

Barry wrote:

Installed on my 1809 machine. No apparent problems other than it messed up the HDMI scaling but that seems to happen with every update. Barry

I’ve seen this on Windows 8.1, and if you look around a bit, you can see people having issues with it on Linux, too.  Usually with AMD cards.  It’s a problem with the interaction between the driver and display.  Make sure you’re using the latest manufacturer drivers.

2 users thanked author for this post.

ch100, Barry

Reply | Quote

 

“No critical vulnerabilities in Windows 8.1 and 7” … “Which means most of you aren’t in the crosshairs.”

Good news, I think. And also think that I am one of the “most of you” that do not need to worry about dangerous vulnerabilities in need of immediate patching, so can wait to install updates till everything has settled and become clearer and even until the out-of-band updates, if any, that might come out later, have had enough time to show up already. Waiting a few weeks is something I do every month, when nothing in urgent need of attention has been reported, anyway.

Group B – Windows 7 Pro, SP1,x64, I-7 “sandy bridge.”

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

2 users thanked author for this post.

Demeter, wdburt1

Reply | Quote

woody wrote:

These Updates are for the .msi versions of Office, not Office 365 or C2R.

Updates for Office 365 were also made available today for all release channels (Semi-Annual, Semi-Annual (Targeted), Monthly, Monthly (Targeted), but not Office Insider Fast as far as I can tell):

Update history for Office 365 ProPlus (listed by date)

Windows 11 Pro version 22H2 build 22621.2361 + Microsoft 365 + Edge

Reply | Quote

Windows 7 SP1 /Server 2008 R2 SP2: Updates kb4480970 and kb4480960 are causing serious sharing issues. See my blog post:

Network issues with updates KB4480970 and KB4480960

Ex Microsoft Windows (Insider) MVP, Microsoft Answers Community Moderator, Blogger, Book author

https://www.borncity.com/win/

2 users thanked author for this post.

SueW, Microfix

Reply | Quote

The same known issue that has been there for a year, about the network interface controller stopping working, is included with KB4480970. And the pciclear .exe is still bundled with the Rollup.

It appears MS has a persistent underlying network problem with Win7.

1 user thanked author for this post.

Microfix

Reply | Quote

“Most of you” don’t need to worry about patching with a DHCP vuln in 1803 and an Exchange bug that allows you to take over a server by sending it an email?

Excuse me, but what?

1 user thanked author for this post.

b

Reply | Quote

That would actually be literally correct if people who have either a Windows 10 1803 installation with DHCP turned on, or an Exchange server, (or both) to look after … are in the minority.

Which may or may not be the case.

I for one do have to worry about some number of systems currently running 1803, but …

 

Do we have confirmation that the DHCP vulnerability is 1803 ONLY and not, say, 1709 or early builds of 1809 too? Because, well, we seem to have some cases of expensive USB-connected instrumentation not working if the control computer is updated beyond about last June’s builds…

Reply | Quote

W10 Pro, 1803, just got the updates 1- KB4480966 cum., 2- KB4480979 Flash, 3- MSRT

All seems well so far 🙂

Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

Although we were hoping that the breakneck speed that MS is putting out feature updates would slow down, that might not be the case. Build 1903, according to ZDNet is just around the corner and with some new storage requirements.

https://www.zdnet.com/article/microsoft-windows-10-to-grab-7gb-of-your-storage-so-big-updates-dont-fail/

Reply | Quote

There seems to be little to no problems reported with the critical Window 10 ver 1803 update KB4480966.
OK to install?

Reply | Quote

We are at MS-DEFCON 2 and you are not obliged to follow any path but your own.
If MS patches botch your PC, come back for instructions for a fix giving all the relevant details of the device and patches concerned in a new support topic.

No problem can be solved from the same level of consciousness that created IT- AE

1 user thanked author for this post.

PKCano

Reply | Quote

As one data point, I decided to install it a couple of days ago and it didn’t cause any problems (Dell E6430 laptop, Win10 Pro).

Reply | Quote

Our “Select updates to install” list doesnt show KB4481480 as x64, only as “2019-01 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 ”
We are W7, SP1, x32.
Should we update with KB4481480 ?
Thank you !

geekdom wrote:

Beta Test Reporting on Windows 7 x64 updates Backups made first – Windows Malicious Software Removal Tool x64 (KB890830) – January Security Monthly Quality Rollup Windows7 x64 (KB4480970) – Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 7 and Server 2008 R2 for x64 (KB4481480) All installed without error and the system rebooted without error. 

Thanks again for your help, akm (Dell Inspiron 15 (forced from W7 to W10), Ofc2003. FireFox, Privatefirewall 7, Avast, SuperAntiSpyware, MBAM)!

1 user thanked author for this post.

Chessie

Reply | Quote

If you are using Windows Update, WU will deliver the right bitedness to your computer.

If you are doing a download from the Catalog, you will not only have to choose 32-bit yourself, but you will have to choose the individual update from the Rollup bundle that matches the version(s) of .NET you have installed.

1 user thanked author for this post.

akm

Reply | Quote

After installing the update, Windows 8.1 is still smooth sailing. The DEFCON ratings need to be split so that Windows 7 is DEFCON 2, Windows 8.1 is DEFCON 4 or 5, and Windows 10 is DEFCON 2 or 3 depending on the version.

I am no longer an active member of the forums.

Reply | Quote

The patches have only been out for three days at this point. It is far too early to raise the DEFCON number for any collection of patches. You many not have had problems, but that doesn’t mean the rest of the Users out there are immune.

2 users thanked author for this post.

SueW, geekdom

Reply | Quote

But what about Woody’s earlier comments?  Do 1803 users have the luxury of waiting?

UPDATE: It looks like the Win10 version 1803 patch, KB 4480966, may be something you need to install quickly. So far there are no known exploits, and no proof of concept code. But Microsoft is saying it’s bad.

Reply | Quote

I’m holding off a while longer on the v1803s I manage.

But you are under no obligation to follow any other path but your own. AskWoody is not responsible for your computer. You are.

Reply | Quote

Windows 10 1709 64 bit.  After Macrium Reflect clone, enabled WU service and tried January 2019 delta update, it did not install.   Installed January 2019 cumulative, then ran WUShowHide and blocked 1809 upgrade, KB4023814 Update Asst, KB4090007 Intel microcode udpates, updated MS Office.  Machine stable for 3 days.

Reply | Quote

New updates for Windows 10 v1703, v1709 & v1803 (released January 15):

KB4480959 for Win10 v1703

KB4480967 for Win10 v1709

KB4480976 for Win10 v1803

Reply | Quote

I’m kinda late on this but Microsoft issued revised Intel Microcode Updates again on 1/8/2019:

KB4100347 V4 for Windows 10 v1803 (1/8/2019)

KB4090007 V6 for Windows 10 v1709 (1/8/2019)

KB4091663 V6 for Windows 10 v1703 (1/8/2019)

KB4091664 V6 for Windows 10 v1607 (1/8/2019)

KB4091666 V5 for Windows 10 v1507 RTM LTSB (1/8/2019)

these newly revised Intel Microcode updates for Win10 cover Lynnfield, Nehalem EP, Nehalem WS, WestmereEP, WS, Arrandale/Clarkdale (1st gen Intel core i3/i5/i7) CPUs

3 users thanked author for this post.

CyGuy, MikeM, columbia2011

Reply | Quote

And in a sneaky move that completely fooled me, they did not put the word “Microcode” anywhere in the name or description this time, so instead of quarantining them and testing more carefully I rushed them through testing to get them out asap.

I may have to start googling every kb that they release to make sure that the description hasn’t changed between releases.  I’ll attach a screensnip of what KB4091664 looked like in BigFix, for instance.  The top one is the Jan release, the bottom two are the previous releases from Sept I think.

Luckily, they don’t seem to have caused any issues.

 

Reply | Quote