News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • There they are… Second April patches are out and they look lame

    Home Forums AskWoody blog There they are… Second April patches are out and they look lame

    Viewing 21 reply threads
    • Author
      Posts
      • #968093 Reply
        woody
        Da Boss

        We waited an extra week and a half for this? Around 2:30 pm on Thursday, Microsoft released a small bunch of patches: Win10 1803 patch KB 4493437 has
        [See the full post at: There they are… Second April patches are out and they look lame]

        5 users thanked author for this post.
      • #972356 Reply
        anonymous
        Guest

        Is that three months of Japanese calendar updates. This time they are right🙄

      • #975122 Reply
        OscarCP
        AskWoody Plus

        Are there re-released Security Only and IE11 updates for Windows 7, etc., as well?

        Windows 7 Professional, SP1, x64 Group W (ex B) & macOS + Linux (Mint)

        1 user thanked author for this post.
      • #977603 Reply
        abbodi86
        AskWoody_MVP

        Lame indeed

        there are also standalone Japanese Era updates for 7 & 8.1, ment for Security-Only updates users

        3 users thanked author for this post.
      • #981121 Reply
        Alex5723
        AskWoody Plus

        Updates to 1507, 1607, 1703, 1709 as well.

        1 user thanked author for this post.
      • #980365 Reply
        anonymous
        Guest

        Does this fix the issue with anti virus?

        • #985260 Reply
          PKCano
          Da Boss

          The MS pages still show an issue with the AVs

          2 users thanked author for this post.
        • #998169 Reply
          warrenrumak
          AskWoody Plus

          The fixes need to come from the AV vendors.  Some of them have already done this.

      • #989027 Reply
        Seff
        AskWoody Plus

        It would seem that the big scare over the loss of updates for Windows 7 users next year boils down to concern that we won’t be kept up-to-date with our Japanese calendars!

        2 users thanked author for this post.
        • #994448 Reply
          abbodi86
          AskWoody_MVP

          Japan is a large Business market for Microsoft, i presume

          1 user thanked author for this post.
      • #993056 Reply
        b
        AskWoody Plus

        Most disconcerting, at least to me, is that there appears to be no resolution to the “dirty six” Win 7 and 8.1 patches released earlier this month that bluescreened PCs running various antivirus programs.

        Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?

        • #993170 Reply
          PKCano
          Da Boss

          The MS pages for those Previews still show the AVs as a known issue.
          Do you not believe Microsoft’s documentation?

          • #993442 Reply
            b
            AskWoody Plus

            I do; but that appears to have zero relevance to my question.

        • #993704 Reply
          woody
          Da Boss

          I’m not saying that MS has to change its patches. Apparently, that isn’t in the cards. But (as @PKCano says) it’d be nice if we could get some resolution to the problems.

          So, for example, instead of saying:

          Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.

          MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”

          • #994230 Reply
            b
            AskWoody Plus

            So, for example, instead of saying:

            Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.

            MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”

            … which is immediately followed by:

            Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article

            … which fully documents their temporary fix (done) and permanent fix (doing), as well as the coordinated temporary block of April MS updates and when that will be removed.

            Resolution by the few antivirus vendors is in progress and fully documented.

      • #994776 Reply
        bryandam
        AskWoody Lounger

        Full Disclosure: What follows is second hand from someone who I was working on with this issue who in turn was working with MS on the Japanese new Era stuff.

        The release delay was _most_ likely related to that.  The new era starts on May 1st and tomorrow a week-long national holiday begins.  So there’s a time-crunch on resolving these issues.

        According to the person I was working with the updates released on the 25th do not actually resolve the issue fully.  Further, these aren’t distributed to WSUS yet for enterprise customers as of the time of writing.

        To resolve the issue and have Office show correct dates they had to:

        • Uninstall April’s cumulative OS updates and revert to March’s CU.
        • Install April’s CUs for Office
        • Manually configure the Japanese Era Registry*

        Again, this is second hand but if you are operating in Japan or have Japanese language packs in play you will want to test this carefully.

        *(https://blogs.msdn.microsoft.com/shawnste/2018/08/07/using-the-registry-to-test-the-new-japanese-era-on-windows/)

        2 users thanked author for this post.
        • #995385 Reply
          woody
          Da Boss

          Appreciate the first-hand report!

      • #994536 Reply
        anonymous
        Guest
        • #1048289 Reply
          RTEsysadmin
          AskWoody Lounger

          KB4499418 is a replacement for KB4493470. 9418 contains everything in 3470 plus an update for SMB. It also has all of the same bugs. KB4493473 contains a slew of entirely new updates, and it claims to be cumulative, so it should contain the SMB update that’s in KB4499418. As a result, we get these build numbers:

          KB4493473 (2019/04/25) Build 14393.2941

          KB4499418 (2019/04/25) Build 14393.2908

          KB4493470 (2019/04/09) Build 14393.2906

          So, basically, I have no idea why 9418 was published on the same day as 3473.

          But who knows? Maybe we’ll get lucky and an asteroid will hit before we figure out that Microsoft doesn’t know what it’s doing.

          Group K(ill me now)
      • #997148 Reply
        Charlie
        AskWoody Plus

        So – the consensus of opinion is that – if your Antivirus program maker doesn’t fix MS’s Update problem with Antivirus programs, you simply don’t update!

        This is easy to say but for Group B’ers, if a fix doesn’t come from somewhere soon, we’re faced with a partial EOS for Win 7 and Win 8.1.

        That’s the way it looks to me, someone please tell me I’m wrong, and I’ll feel much better.

        Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

        • #997263 Reply
          PKCano
          Da Boss

          Check with the maker of the AV. They should have a prominent message on their website with information.

          1 user thanked author for this post.
          • #1034795 Reply
            Charlie
            AskWoody Plus

            I checked the websites of AVG, Avast, and also did a Google search.  The MS Update problem is mentioned on Google, but no fixes are mentioned anywhere.  I checked yesterday and again today; same thing, no change, or prominent messages.

            Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

      • #997151 Reply
        Alex5723
        AskWoody Plus

        @b
        I love your “Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?”

        These handful of = hundreds-of-million PCs both in home and bossiness.

        3 users thanked author for this post.
        • #997534 Reply
          b
          AskWoody Plus

          Do you not understand the difference between a handful of vendors and a handful of users?

          Less than 15% of antivirus vendors were affected.

          • #998400 Reply
            woody
            Da Boss

            … as were less than 15% of OS vendors… 🙂

            1 user thanked author for this post.
            • #998503 Reply
              b
              AskWoody Plus

              … inasmuch as zero is less than 15%; because OS vendors weren’t affected at all. 🤔

      • #997519 Reply
        EP
        AskWoody_MVP

        woody

        there IS something for 1903 – KB4497093 released FRI 4/26 which updates the build to 18362.86.
        https://www.deskmodder.de/blog/2019/04/26/kb4497093-windows-10-1903-18362-86-manueller-download/

        nothing for 1809 so far, maybe until next Tuesday April 30

        though I’m getting the “opposite” effect with the KB4493472 rollup update on some of my Win7 machines, woody. instead of KB4493472 causing slowdowns, it actually causes shorter boot times, which seems to make some of the Win7 PCs boot up faster, I’m not sure why.

        3 users thanked author for this post.
        • #998516 Reply
          woody
          Da Boss

          Interesting. I see references to KB4497093 here and there, but it isn’t showing up on my machine. Appears to be manual download only. 18362.86 – I still have .53.

          • #998658 Reply
            abbodi86
            AskWoody_MVP

            Are you insider?

            UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently on the Windows 10 May 2019 Update. This Cumulative Update includes the following fixes:

            This Cumulative Update includes the fix for Windows Insiders in the Fast ring who were unable to update to the latest 20H1 build from Build 18362.53.
            We have made general improvements for users in Japan or use the OS in Japanese including fixes for the Japanese IME and fixes for date and time issues.
            We fixed an issue where UWP VPN plugin apps might not be able to properly send packets through an established VPN tunnel on an IPv6 only network.
            We fixed the issue causing updating to Build 18362 to fail to install with an 0x80242016 error.

            1 user thanked author for this post.
            • #999102 Reply
              b
              AskWoody Plus

              That page may have been updated (again) within the last hour:

              UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently in the Fast ring only and on Build 18362.53. We’ll roll this out to the Slow and Release Preview rings in a bit.

              Announcing Windows 10 Insider Preview Build 18362

              1 user thanked author for this post.
            • #999489 Reply
              woody
              Da Boss

              No. I installed from an ISO and did not set my main test machine up to the Insider program.

      • #998940 Reply
        Alex5723
        AskWoody Plus

        … inasmuch as zero is less than 15%; because OS vendors weren’t affected at all. 🙂

        I OS vendor was deeply affected. It was Windows OS that crashed not the AV apps.

        3 users thanked author for this post.
      • #1002287 Reply
        b
        AskWoody Plus

        Still not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.

        • #1035120 Reply
          Charlie
          AskWoody Plus

          Really?  Care to provide a link to where you found this info. for AVG or Avast?  See my post #1034795.  I use AVG Free and was told it was affected.

          Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

          • #1036110 Reply
            b
            AskWoody Plus

            Avast has released emergency updates to address this issue. For more information and AV update schedule, see the Avast support KB article.

            Avira: Why does my system run very slow?

            Guidance for McAfee customers can be found in the following McAfee support articles:
            McAfee Security (ENS) Threat Prevention 10.x
            McAfee Host Intrusion Prevention (Host IPS) 8.0
            McAfee VirusScan Enterprise (VSE) 8.8

            Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article.

            https://support.microsoft.com/en-us/help/4493472/windows-7-update-kb4493472

             

            1 user thanked author for this post.
            • #1061116 Reply
              anonymous
              Guest

              There still seem to exist incompatibilities between the latest Avira update and Win 7.

              PC 1: Updated with KB 4493448 and KB 4493435 (IE) on April 9. Initially for 10 min very slow, but then ok. After 3 days (with more Avira updates) Avira would never finish to initialize. Suspecting the AV to be ineffective, I reset that PC to March 2019 (using a restore point). Avira is fully updated.
              The Avira interface can be started, but only with the (limited rights) user account, that happened to get the update to the newly designed interface, the top right elements (x=close, _=minimize, ?=Help) show and can be clicked. The admin and other user account can only close via Alt-F4, clicking into the area where x should show has apparently no effect whatsoever.

              PC 2: Had been off the internet since April 8. on April 27 it got the Avira update, this time planned and from its admin account. Result: unending initializing. I wondered if the update might be adapted to Microsoft’s April patches being installed, and installed KB 4493448 and KB 4493435. Same situation: Initializing for some 15 minutes with umbrella taskbar sign open (= indicating protection), after the time-out the sign just goes away.
              The Avira interface can not be opened at all.

              PC 3: Only Avira updated, MS updates never tried. Like PC 1: Avira interface has the top right window elements only with the account that got the update.

              PC 1 and 3 are self-assembled, both Win 7 Ultimate (several language packs installed), from 2008 and 2010. PC 2 is a Lenovo Thinkpad E130 from 2014 with Win 7 Pro.
              All three have Aero disabled (Windows classic).

              1 user thanked author for this post.
              • #1062987 Reply
                woody
                Da Boss

                I elevated this to a blog post. I’m still hearing lots of problems with Avira. Let’s see if a company spokesperson responds.

      • #1015627 Reply
        Microfix
        AskWoody MVP

        Canary in the coal mine reporting in:
        Just received notification via WU, and installed it.
        Cumulative Security Update for IE11 x64 windows 8.1 systems KB3185319
        That patch has only just appeared..

        Note: This W8.1 system (group A) was/ is completely up-to-date with all April patches installed. Noticed no ill effects as not using a 3rd party AV.

        | Win8.1 Pro x64 | Linux Hybrids x86/x64 | Win7 Pro x86/x64 Offline |
        3 users thanked author for this post.
      • #1016604 Reply
        Alex5723
        AskWoody Plus

        Still not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.

        It seems Microsoft (nor Woody, hence still MS-DEFCON 2) doesn’t believe in the AV vendors. AV issues are still marked as such by Microsoft.

        2 users thanked author for this post.
      • #1069742 Reply
        Charlie
        AskWoody Plus

        The Master Patch List has the IE-11 patch for Win 7 described as having problems with AV programs. I’ve only seen references to the Roll-Up and Security Only Updates for Win 7.  Just checking to be sure.

        Win 7, Sandy Bridge 3.3GHz, Linux Mint 19.1, Klaatu barada nikto

      • #1087574 Reply
        Alex5723
        AskWoody Plus

        What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

        • #1089611 Reply
          Microfix
          AskWoody MVP

          What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

          interpretation and understanding of the askwoody ms-defcon-system ? dunno..
          If you prefer, there is the Master Patch List or just patch regardless.

          | Win8.1 Pro x64 | Linux Hybrids x86/x64 | Win7 Pro x86/x64 Offline |
          1 user thanked author for this post.
          • #1098079 Reply
            woody
            Da Boss

            Yep. The MS-DEFCON system is one, single, red-light/green-light system for all versions of Windows and Office.

            For those concerned about individual versions of Windows, or Office, or folks with specific patching needs, Susan’s Patch List is the one to follow.

            For “normal” Windows users who don’t want to be bothered with all the details, MS-DEFCON is a good way to stay safe. I don’t know of any pressing security threats for “normal” Windows customers that require any of the April updates. Better to wait and see what happens.

            2 users thanked author for this post.
      • #1094024 Reply
        Alex5723
        AskWoody Plus

        What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

        interpretation and understanding of the askwoody ms-defcon-system ? dunno..
        If you prefer, there is the Master Patch List or just patch regardless.

        interpretation and understanding of the askwoody ms-defcon doesn’t help me this month with Windows 10 updates as there are no stop-blocks that I can see. The situation is different with Windows 7, 8.1.

        • #1094246 Reply
          PKCano
          Da Boss

          The DEFCON system is about patching, not versions of Windows. As it is now, it applies to ALL versions of Windows.
          But there is nothing forcing to abide by any system but your own. So if you feel like taking the risk, go for it.
          It has saved my bacon many times.

          2 users thanked author for this post.
          • #1094543 Reply
            Alex5723
            AskWoody Plus

            it applies to ALL versions of Windows

            I think that MS-DEFCON rating should be given according to Windows main versions : Windows 7, 8.1, 10.

            2 users thanked author for this post.
            • #1098133 Reply
              woody
              Da Boss

              I’m going to head in that direction, but it ain’t that simple!

              If you break out Win7, 8.1 and 10, why wouldn’t you also break out, say, versions 1803 and 1809 (and 1903) to have their own ratings? And what about MSI versions of Office vs C2R?

              The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.

              1 user thanked author for this post.
      • #1104497 Reply
        Alex5723
        AskWoody Plus

        The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.

        @woody You are right. How times has changed. I see the 7, 8.1, 10 as a compromise between all Windows OS versions as one and full versions break down.

        In 8 months there will be only 2 left, 8.1 and 10.

        • #1570981 Reply
          woody
          Da Boss

          In 8 months there will be 8.1, 1803, 1809, 1903 and 1909. (Not to mention the LTSC branches, which I rarely consider.)

          Each Win10 version is a different kettle of fish!

      • #1566302 Reply
        anonymous
        Guest

        – I had a problem after I installed the “Roll Up Update Preview” for Windows 7 Pro. When I wanted to open a link I received in an email, then something in my Internet Explorer 11 browser caused a problem. I wasn’t able to open that link.
        The problem was solved by removing the Preview Update.

        • #1570040 Reply
          Microfix
          AskWoody MVP

          Installing ‘optional’ monthly previews is not recommended here on askwoody.
          Consider them as pre-patch Tuesday betas and that may help 😉
          However, there may be a rare occasion where a preview fixes something that is applicable to your OS that one NEEDS fixing asap, that would undoubtedly be discussed in-depth here on askwoody.

          | Win8.1 Pro x64 | Linux Hybrids x86/x64 | Win7 Pro x86/x64 Offline |
          2 users thanked author for this post.
    Viewing 21 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: There they are… Second April patches are out and they look lame

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.