Patch Watch: Most of the March patches look clean at this point

Topic

New Reply

Susan Bradley’s back with her long-anticipated look at all of the patches that piled up last month. Although Win10 1809 still hasn’t been patched, the
[See the full post at: Patch Watch: Most of the March patches look clean at this point]

4 users thanked author for this post.

PhotM, Elly, Myst, abbodi86

Reply | Quote

Replies

So should we wait or is it safe’ta install???

Reply | Quote

Wait until the DEFCON nimber at the top of the site is 3 or above. At that time, Woody will publish instructions on ComputerWorld for safe patching.

2 users thanked author for this post.

OscarCP, Atty Ben

Reply | Quote

Right now, there are differences between the “Master Patch List” here and Susan’s column in “Ask Woody + Windows Secrets”.

Does Susan need to patch her “Master Patch List”?   (Harharhar.)

Reply | Quote

Susan writes as respect Window 7:

What to do: After installing the March A or B series updates, be sure to follow up with KB 4490628.

Many others at Woody’s advise to first hide all updates to make KB4490628 appear, install it by itself, reboot, wait 10-15 minutes, unhide the hidden updates, and install them.

So which method or either should we follow?

Windows 11 Pro v24H2 and Windows 10 Pro x64 v22H2

1 user thanked author for this post.

jburk07

Reply | Quote

Either method is perfectly acceptable.

2 users thanked author for this post.

jburk07, OscarCP

Reply | Quote

So does Group A Rollup and or Group B Security only include the SHA-2 KB4474419. When is KB4490628 installed? HELP!!!!

Reply | Quote

The SHA-2 patch KB4474419 is not included in either the Rollup or the Security-only update. It is a separate patch delivered through Windows Update. SHA-2 will not be mandatory until July, so you have until then to install it.

2 users thanked author for this post.

jburk07, OscarCP

Reply | Quote

So its KB4474419 then KB4490628 after installing the March A or B series  updates for Windows 7?? Or according to Susan Bradly you’ll stop getting updates for Windows 7 this coming June?? Susan’s most recent article also mentions installing KB4490628 after installing the March A or B series updates; dosen’t mention installing KB4474419 after installing the March updates??? Thanks for your help!!!

Reply | Quote

The Servicing Stack won’t show up in the Windows Update Important updates queue unless there are no other pending updates (checked of unchecked) in the Important updates queue. So….

You can either HIDE the other updates until the queue is empty and it shows up, install it, wait 10 minutes then reboot, unhide the other updates and install them..
OR
You can hide UNCHECKED updates and install everything CHECKED that is in the queue. reboot, check for updates. If there are any other updates, repeat the process. The Servicing Stack should show up and install it.

3 users thanked author for this post.

jburk07, Cayennejim, OscarCP

Reply | Quote

Gotta go at the moment. I’m still confused. I’ll come back little latter. Thanks.

Reply | Quote

I am Grp. A and have not installed the March patches yet (on W7) since we are at Defcon 2, so I went to the MS catalog and got KB 4490628 (the SSU) and installed it before we get the go-ahead for March patches. Hopefully I am ahead of the game that way.

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

Reply | Quote

My Reasoning:

March 12, 2019—KB4489878 (Monthly Rollup)

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest Rollup. SSUs improve the reliability of the update process to mitigate potential issues while installing the Rollup and applying Microsoft security fixes.

If you are using Windows Update, the latest SSU (KB4490628) will be offered to you automatically. To get the standalone package for the latest SSU, go to the Microsoft Update Catalog.

Don't take yourself so seriously, no one else does
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).

1 user thanked author for this post.

jburk07

Reply | Quote

I’m using Windows 7 x86 Home. In looking at Susans April patch list, she mentions the importance of the SHA-2 Servicing Stack update KB4490628 but nowhere does she mention KB4474419, the SHA-2 update that shows up in my WU.  KB4490628 does not show up my March updates, only KB4474419. Does that mean that I must also install 4490628 through Windows Catalog or am I fine with only installing  KB4474419? Thanks for any advise.

Reply | Quote

It looks to me that PKCano, in her several entries here, has already answered your questions. And have another look at GoneToPlaid’s.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote

See PKCano’s post #347641 above for how to get servicing stack updates to show up in Windows Update.

Woody will post full step by step updating instructions for everyone when the DEFCON level changes.

Non-techy Win 10 Pro and Linux Mint experimenter

Reply | Quote

Woody will post full step by step updating instructions for everyone when the DEFCON level changes.

Hope so cause right now as respects installing KB4490628, we have PK Cano advising to install it before the other March updates, three others including GoneToPlaid who supports installing it last, and one vote for either first or last is fine.

There is however agreement that it needs to be installed by itself.

Windows 11 Pro v24H2 and Windows 10 Pro x64 v22H2

Reply | Quote

Tex265 wrote:

There is however agreement that it needs to be installed by itself.

That is the important part… what is necessary to have it show up. GTP and PKCano achieve it in a slightly different sequence.

What you may not have noticed, is that with both Group A and Group B updating, there are steps to install and/or hide updates and re-running check for updates, until no more updates appear. This allows for any servicing stack updates to show up in Windows Update, and to be installed by themselves. Servicing Stack updates are important, do not contain telemetry, and usually do not cause any problems.

Many people see DEFCON changes, and install the monthly rollup or security update and think they are done. They will not ‘see’ the servicing stack updates in Windows Update… BUT…if you follow the links in the associated Computer World article, where Woody gives step by step instructions, you will reveal any servicing stack updates needed for your computer, and install them by themselves… and you won’t have to worry about what may appear as conflicting advice… or be missing any needed updates.

@MrBrian did extensive testing regarding servicing stack updates, which led to changing Woody’s recommendations for Group A and B, to include checking for them, every month… making it part of the monthly routine, rather than something exceptional.

 

Non-techy Win 10 Pro and Linux Mint experimenter

1 user thanked author for this post.

jburk07

Reply | Quote

The unanswered question is whether the March updates “require” this Servicing Stack to install them properly.

If yes, then it needs to be done by itself first.

If no, it can be done before or after the others by itself because it is for future updates, not the March updates.

So is it or is it not necessay for proper installation of the March updates?

Windows 11 Pro v24H2 and Windows 10 Pro x64 v22H2

Reply | Quote

To answer your question: who knows? But the MS support pages for the win 7 rollup and security only strongly recommends installing the latest servicing stack before installing the latest updates (rollups or SOs). Take that for what it’s worth to you.

3 users thanked author for this post.

Lori, jburk07, Elly

Reply | Quote

Hi everyone,

I deleted my reply from yesterday. I had manually downloaded and installed the March Win7 updates (group B), and I forgot that the servicing stack update does not show up in Windows Update until all other non-hidden updates have been installed.

For those Win7 users who use Windows Update to install updates, the procedure is simple — install the March updates and reboot when asked. After rebooting, Windows Update should then present the servicing stack update, KB4490628. Install it and reboot if asked. Once you are done installing the March updates, double-check that KB4474419 (SHA-2 code signing update) was installed.

In June, Windows Update won’t work unless you have both the latest servicing stack update and the SHA-2 update installed.

2 users thanked author for this post.

Lori, jburk07

Reply | Quote