![]() |
MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it.
|
-
There they are… Second April patches are out and they look lame
Home › Forums › AskWoody blog › There they are… Second April patches are out and they look lame
Tagged: KB 4493437, KB 4493440, KB 4493443, KB 4493453
- This topic has 51 replies, 14 voices, and was last updated 1 year, 8 months ago.
Viewing 21 reply threads-
AuthorPosts
-
-
April 25, 2019 at 5:56 pm #968093
woody
ManagerWe waited an extra week and a half for this? Around 2:30 pm on Thursday, Microsoft released a small bunch of patches: Win10 1803 patch KB 4493437 has
[See the full post at: There they are… Second April patches are out and they look lame]5 users thanked author for this post.
-
April 25, 2019 at 8:55 pm #972356
-
April 25, 2019 at 10:12 pm #975122
-
April 25, 2019 at 11:48 pm #977603
-
April 26, 2019 at 1:59 am #981121
-
April 26, 2019 at 4:35 am #980365
-
April 26, 2019 at 4:36 am #985260
-
April 26, 2019 at 1:15 pm #998169
warrenrumak
AskWoody Lounger
-
-
April 26, 2019 at 7:06 am #989027
Seff
AskWoody Plus-
April 26, 2019 at 10:47 am #994448
-
-
April 26, 2019 at 9:50 am #993056
b
AskWoody PlusMost disconcerting, at least to me, is that there appears to be no resolution to the âdirty sixâ Win 7 and 8.1 patches released earlier this month that bluescreened PCs running various antivirus programs.
Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?
-
April 26, 2019 at 9:55 am #993170
PKCano
Manager-
April 26, 2019 at 10:06 am #993442
-
-
April 26, 2019 at 10:17 am #993704
woody
ManagerI’m not saying that MS has to change its patches. Apparently, that isn’t in the cards. But (as @PKCano says) it’d be nice if we could get some resolution to the problems.
So, for example, instead of saying:
Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.
MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”
-
April 26, 2019 at 10:38 am #994230
b
AskWoody PlusSo, for example, instead of saying:
Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.
MS could say âMS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.â
… which is immediately followed by:
Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article
… which fully documents their temporary fix (done) and permanent fix (doing), as well as the coordinated temporary block of April MS updates and when that will be removed.
Resolution by the few antivirus vendors is in progress and fully documented.
-
-
-
April 26, 2019 at 11:16 am #994776
bryandam
AskWoody LoungerFull Disclosure: What follows is second hand from someone who I was working on with this issue who in turn was working with MS on the Japanese new Era stuff.
The release delay was _most_ likely related to that. The new era starts on May 1st and tomorrow a week-long national holiday begins. So there’s a time-crunch on resolving these issues.
According to the person I was working with the updates released on the 25th do not actually resolve the issue fully. Further, these aren’t distributed to WSUS yet for enterprise customers as of the time of writing.
To resolve the issue and have Office show correct dates they had to:
- Uninstall April’s cumulative OS updates and revert to March’s CU.
- Install April’s CUs for Office
- Manually configure the Japanese Era Registry*
Again, this is second hand but if you are operating in Japan or have Japanese language packs in play you will want to test this carefully.
2 users thanked author for this post.
-
April 26, 2019 at 11:25 am #995385
-
April 26, 2019 at 11:51 am #994536
anonymous
GuestHas anyone noticed the sneaky extra release for 1607??
https://support.microsoft.com/en-us/help/4499418/windows-10-update-kb4499418
versus:
https://support.microsoft.com/en-us/help/4493473/windows-10-update-kb4493473
1 user thanked author for this post.
-
April 27, 2019 at 9:46 pm #1048289
RTEsysadmin
AskWoody PlusKB4499418 is a replacement for KB4493470. 9418 contains everything in 3470 plus an update for SMB. It also has all of the same bugs. KB4493473 contains a slew of entirely new updates, and it claims to be cumulative, so it should contain the SMB update that’s in KB4499418. As a result, we get these build numbers:
KB4493473 (2019/04/25) Build 14393.2941
KB4499418 (2019/04/25) Build 14393.2908
KB4493470 (2019/04/09) Build 14393.2906
So, basically, I have no idea why 9418 was published on the same day as 3473.
But who knows? Maybe we’ll get lucky and an asteroid will hit before we figure out that Microsoft doesn’t know what it’s doing.
Group K(ill me now)
-
-
April 26, 2019 at 12:34 pm #997148
Charlie
AskWoody PlusSo – the consensus of opinion is that – if your Antivirus program maker doesn’t fix MS’s Update problem with Antivirus programs, you simply don’t update!
This is easy to say but for Group B’ers, if a fix doesn’t come from somewhere soon, we’re faced with a partial EOS for Win 7 and Win 8.1.
That’s the way it looks to me, someone please tell me I’m wrong, and I’ll feel much better.
-
April 26, 2019 at 12:34 pm #997151
Alex5723
AskWoody Plus -
April 26, 2019 at 12:49 pm #997519
EP
AskWoody_MVPwoody
there IS something for 1903 – KB4497093 released FRI 4/26 which updates the build to 18362.86.
https://www.deskmodder.de/blog/2019/04/26/kb4497093-windows-10-1903-18362-86-manueller-download/nothing for 1809 so far, maybe until next Tuesday April 30
though I’m getting the “opposite” effect with the KB4493472 rollup update on some of my Win7 machines, woody. instead of KB4493472 causing slowdowns, it actually causes shorter boot times, which seems to make some of the Win7 PCs boot up faster, I’m not sure why.
3 users thanked author for this post.
-
April 26, 2019 at 1:29 pm #998516
woody
Manager-
April 26, 2019 at 1:36 pm #998658
abbodi86
AskWoody_MVPAre you insider?
UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently on the Windows 10 May 2019 Update. This Cumulative Update includes the following fixes:
This Cumulative Update includes the fix for Windows Insiders in the Fast ring who were unable to update to the latest 20H1 build from Build 18362.53.
We have made general improvements for users in Japan or use the OS in Japanese including fixes for the Japanese IME and fixes for date and time issues.
We fixed an issue where UWP VPN plugin apps might not be able to properly send packets through an established VPN tunnel on an IPv6 only network.
We fixed the issue causing updating to Build 18362 to fail to install with an 0x80242016 error.1 user thanked author for this post.
-
April 26, 2019 at 1:53 pm #999102
b
AskWoody PlusThat page may have been updated (again) within the last hour:
UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently in the Fast ring only and on Build 18362.53. Weâll roll this out to the Slow and Release Preview rings in a bit.
1 user thanked author for this post.
-
April 26, 2019 at 2:09 pm #999489
-
-
-
-
April 26, 2019 at 1:47 pm #998940
-
April 26, 2019 at 3:55 pm #1002287
b
AskWoody Plus-
April 27, 2019 at 1:05 pm #1035120
Charlie
AskWoody Plus-
April 27, 2019 at 1:43 pm #1036110
b
AskWoody PlusAvast has released emergency updates to address this issue. For more information and AV update schedule, see the Avast support KB article.
Avira: Why does my system run very slow?
Guidance for McAfee customers can be found in the following McAfee support articles:
McAfee Security (ENS) Threat Prevention 10.x
McAfee Host Intrusion Prevention (Host IPS) 8.0
McAfee VirusScan Enterprise (VSE) 8.8Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article.
https://support.microsoft.com/en-us/help/4493472/windows-7-update-kb4493472
1 user thanked author for this post.
-
April 28, 2019 at 7:07 am #1061116
anonymous
GuestThere still seem to exist incompatibilities between the latest Avira update and Win 7.
PC 1: Updated with KB 4493448 and KB 4493435 (IE) on April 9. Initially for 10 min very slow, but then ok. After 3 days (with more Avira updates) Avira would never finish to initialize. Suspecting the AV to be ineffective, I reset that PC to March 2019 (using a restore point). Avira is fully updated.
The Avira interface can be started, but only with the (limited rights) user account, that happened to get the update to the newly designed interface, the top right elements (x=close, _=minimize, ?=Help) show and can be clicked. The admin and other user account can only close via Alt-F4, clicking into the area where x should show has apparently no effect whatsoever.PC 2: Had been off the internet since April 8. on April 27 it got the Avira update, this time planned and from its admin account. Result: unending initializing. I wondered if the update might be adapted to Microsoft’s April patches being installed, and installed KB 4493448 and KB 4493435. Same situation: Initializing for some 15 minutes with umbrella taskbar sign open (= indicating protection), after the time-out the sign just goes away.
The Avira interface can not be opened at all.PC 3: Only Avira updated, MS updates never tried. Like PC 1: Avira interface has the top right window elements only with the account that got the update.
PC 1 and 3 are self-assembled, both Win 7 Ultimate (several language packs installed), from 2008 and 2010. PC 2 is a Lenovo Thinkpad E130 from 2014 with Win 7 Pro.
All three have Aero disabled (Windows classic).1 user thanked author for this post.
-
April 28, 2019 at 8:12 am #1062987
-
-
-
-
-
April 27, 2019 at 12:27 am #1015627
Microfix
AskWoody MVPCanary in the coal mine reporting in:
Just received notification via WU, and installed it.
Cumulative Security Update for IE11 x64 windows 8.1 systems KB3185319
That patch has only just appeared..Note: This W8.1 system (group A) was/ is completely up-to-date with all April patches installed. Noticed no ill effects as not using a 3rd party AV.
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/3 users thanked author for this post.
-
April 27, 2019 at 1:04 am #1016604
Alex5723
AskWoody PlusStill not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.
It seems Microsoft (nor Woody, hence still MS-DEFCON 2) doesn’t believe in the AV vendors. AV issues are still marked as such by Microsoft.
-
April 28, 2019 at 1:09 pm #1069742
-
April 29, 2019 at 12:58 am #1087574
Alex5723
AskWoody Plus-
April 29, 2019 at 2:21 am #1089611
Microfix
AskWoody MVPWhat is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?
interpretation and understanding of the askwoody ms-defcon-system ? dunno..
If you prefer, there is the Master Patch List or just patch regardless.
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/1 user thanked author for this post.
-
April 29, 2019 at 8:10 am #1098079
woody
ManagerYep. The MS-DEFCON system is one, single, red-light/green-light system for all versions of Windows and Office.
For those concerned about individual versions of Windows, or Office, or folks with specific patching needs, Susan’s Patch List is the one to follow.
For “normal” Windows users who don’t want to be bothered with all the details, MS-DEFCON is a good way to stay safe. I don’t know of any pressing security threats for “normal” Windows customers that require any of the April updates. Better to wait and see what happens.
-
-
-
April 29, 2019 at 5:22 am #1094024
Alex5723
AskWoody PlusWhat is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?
interpretation and understanding of the askwoody ms-defcon-system ? dunno..
If you prefer, there is the Master Patch List or just patch regardless.interpretation and understanding of the askwoody ms-defcon doesn’t help me this month with Windows 10 updates as there are no stop-blocks that I can see. The situation is different with Windows 7, 8.1.
-
April 29, 2019 at 5:32 am #1094246
PKCano
ManagerThe DEFCON system is about patching, not versions of Windows. As it is now, it applies to ALL versions of Windows.
But there is nothing forcing to abide by any system but your own. So if you feel like taking the risk, go for it.
It has saved my bacon many times.-
April 29, 2019 at 5:44 am #1094543
Alex5723
AskWoody Plusit applies to ALL versions of Windows
I think that MS-DEFCON rating should be given according to Windows main versions : Windows 7, 8.1, 10.
-
April 29, 2019 at 8:12 am #1098133
woody
ManagerI’m going to head in that direction, but it ain’t that simple!
If you break out Win7, 8.1 and 10, why wouldn’t you also break out, say, versions 1803 and 1809 (and 1903) to have their own ratings? And what about MSI versions of Office vs C2R?
The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.
1 user thanked author for this post.
-
-
-
-
April 29, 2019 at 12:57 pm #1104497
Alex5723
AskWoody PlusThe MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.
@woody You are right. How times has changed. I see the 7, 8.1, 10 as a compromise between all Windows OS versions as one and full versions break down.In 8 months there will be only 2 left, 8.1 and 10.
-
May 12, 2019 at 6:03 am #1570981
-
-
May 12, 2019 at 3:58 am #1566302
anonymous
Guest– I had a problem after I installed the “Roll Up Update Preview” for Windows 7 Pro. When I wanted to open a link I received in an email, then something in my Internet Explorer 11 browser caused a problem. I wasn’t able to open that link.
The problem was solved by removing the Preview Update.-
May 12, 2019 at 5:21 am #1570040
Microfix
AskWoody MVPInstalling ‘optional’ monthly previews is not recommended here on askwoody.
Consider them as pre-patch Tuesday betas and that may help đ
However, there may be a rare occasion where a preview fixes something that is applicable to your OS that one NEEDS fixing asap, that would undoubtedly be discussed in-depth here on askwoody.
Problems controlling W!N10 updates:
https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/
-
-
-
AuthorPosts
Viewing 21 reply threads -
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Search The Lounge
Recent Replies
Alex5723 on Ongoing List of Mac Apps Updated for Universal/Apple Silicon Support
16 minutes agoMoonshine on Image Backup / Portable Hard Drive
55 minutes agoAlex5723 on The MacBook Pro pre-2016 is back
1 hour, 3 minutes agoDrcard:)) on How to put a picture ("Avatar") on your replies
1 hour, 13 minutes agoMikeyD215 on Using Windows 10 Backup Option
1 hour, 32 minutes agoAlex5723 on Image Backup / Portable Hard Drive
1 hour, 36 minutes agoAlex5723 on Windows 10X and its purpose
1 hour, 43 minutes agoAlex5723 on PNY Flash Drive Problem
1 hour, 50 minutes agoPaul T on OOMA vs MagicJack
1 hour, 58 minutes agoPaul T on Windows 10 internet connection freezes
2 hours, Just nowPaul T on Can’t kill $Txf
2 hours, 16 minutes agoPaul T on Why won’t Task Scheduler launch Office product
2 hours, 30 minutes agodoriel on Using Windows 10 Backup Option
2 hours, 35 minutes agoPaul T on Windows Defender In Win 10 Concern
2 hours, 35 minutes agoMikeyD215 on Using Windows 10 Backup Option
2 hours, 42 minutes agoPaul T on Image Backup / Portable Hard Drive
3 hours, Just nowTom on Find the cable modem that’s just right for your ISP
3 hours, 6 minutes agoTom on Find the cable modem that’s just right for your ISP
3 hours, 10 minutes agoPaul T on Doesn’t like external FAT32 HDD
3 hours, 12 minutes agodoriel on Windows 10X and its purpose
3 hours, 14 minutes agodoriel on Windows 10X and its purpose
3 hours, 19 minutes agoAlex5723 on Apple to block sideloading iOS apps on M1
3 hours, 25 minutes agoAlex5723 on Ongoing List of Mac Apps Updated for Universal/Apple Silicon Support
3 hours, 43 minutes agoKirsty on Need a Great Rules Add-in for Outlook 2019
6 hours, 29 minutes agoKirsty on Extra USB Sound driver?
6 hours, 47 minutes agoNuyorker on Mouse settings NOT preserved after reboot
7 hours, 36 minutes agocybercrone on What Linux is and why it has persisted
7 hours, 54 minutes agoanonymous on Adobe Flash Not working for School test
8 hours, 8 minutes agoOscarCP on What Linux is and why it has persisted
8 hours, 17 minutes agoWSArthurR on What Linux is and why it has persisted
8 hours, 39 minutes ago
Recent Topics
-
Extra USB Sound driver?
6 hours, 48 minutes ago
-
PNY Flash Drive Problem
1 hour, 51 minutes ago
-
Windows 10 bug crashes your PC when you access this location
17 hours, 4 minutes ago
-
Doesn’t like external FAT32 HDD
3 hours, 13 minutes ago
-
Why won’t Task Scheduler launch Office product
2 hours, 31 minutes ago
-
Susan recommending version 2004
10 hours, 44 minutes ago
-
Replace Images for Text in Word
19 hours, 6 minutes ago
-
Windows 10 internet connection freezes
2 hours ago
-
Windows Defender In Win 10 Concern
2 hours, 35 minutes ago
-
Laptop with home and work networks
19 hours, 49 minutes ago
-
Top 40+ iOS 14 Tips and Tricks
1 day ago
-
What Linux is and why it has persisted
7 hours, 55 minutes ago
-
Find the cable modem that’s just right for your ISP
3 hours, 6 minutes ago
-
Four GB of RAM vanishes … but then reappears
17 hours, 2 minutes ago
-
Wow! Even more Office updates!
15 hours, 4 minutes ago
-
Hard Drive at 100% usage
9 hours, 35 minutes ago
-
Checking e-mail attachments with VirusTotal
1 day, 14 hours ago
-
Giving you the choice
10 hours, 47 minutes ago
-
outlook 365 emails not queueing
21 hours, 24 minutes ago
-
Need a Great Rules Add-in for Outlook 2019
6 hours, 29 minutes ago
-
Mouse settings NOT preserved after reboot
7 hours, 36 minutes ago
-
Apple News Wrap Up: January 17, 2021
1 day, 18 hours ago
-
Tasks for the weekend â January 16, 2021
2 days ago
-
Use Word to Create Awesome Signs
2 days, 9 hours ago
-
Zero day Windows 10 bug
1 day, 12 hours ago
-
KB4598242 fails to install, in rollback loop 2021-01 cum upate
1 day, 14 hours ago
-
Updates paused but not?
1 day, 16 hours ago
-
Security update for Secure Boot DBX can be skipped (KB4535680)
1 day, 19 hours ago
-
Copying Folder Names Into Excel
1 day, 13 hours ago
-
The iPhone Companion
3 days ago
Search for Topics
Recent blog posts
- What Linux is and why it has persisted
- Find the cable modem that’s just right for your ISP
- Four GB of RAM vanishes … but then reappears
- Wow! Even more Office updates!
- Giving you the choice
- Tasks for the weekend â January 16, 2021
- Zero day Windows 10 bug
- Security update for Secure Boot DBX can be skipped (KB4535680)
Key Links
Copyright © 2004 – 2021 AskWoody Tech LLC. All rights reserved.