News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • There they are… Second April patches are out and they look lame

    Home Forums AskWoody blog There they are… Second April patches are out and they look lame

    This topic contains 51 replies, has 14 voices, and was last updated by

     woody 2 months, 1 week ago.

    • Author
      Posts
    • #968093 Reply

      woody
      Da Boss

      We waited an extra week and a half for this? Around 2:30 pm on Thursday, Microsoft released a small bunch of patches: Win10 1803 patch KB 4493437 has
      [See the full post at: There they are… Second April patches are out and they look lame]

      5 users thanked author for this post.
    • #972356 Reply

      anonymous

      Is that three months of Japanese calendar updates. This time they are right🙄

    • #975122 Reply

      OscarCP
      AskWoody Plus

      Are there re-released Security Only and IE11 updates for Windows 7, etc., as well?

      1 user thanked author for this post.
    • #977603 Reply

      abbodi86
      AskWoody_MVP

      Lame indeed

      there are also standalone Japanese Era updates for 7 & 8.1, ment for Security-Only updates users

      3 users thanked author for this post.
    • #981121 Reply

      Alex5723
      AskWoody Plus

      Updates to 1507, 1607, 1703, 1709 as well.

      1 user thanked author for this post.
    • #980365 Reply

      anonymous

      Does this fix the issue with anti virus?

      • #985260 Reply

        PKCano
        Da Boss

        The MS pages still show an issue with the AVs

        2 users thanked author for this post.
      • #998169 Reply

        warrenrumak
        AskWoody Plus

        The fixes need to come from the AV vendors.  Some of them have already done this.

    • #989027 Reply

      Seff
      AskWoody Plus

      It would seem that the big scare over the loss of updates for Windows 7 users next year boils down to concern that we won’t be kept up-to-date with our Japanese calendars!

      2 users thanked author for this post.
      • #994448 Reply

        abbodi86
        AskWoody_MVP

        Japan is a large Business market for Microsoft, i presume

        1 user thanked author for this post.
    • #993056 Reply

      b
      AskWoody Plus

      Most disconcerting, at least to me, is that there appears to be no resolution to the “dirty six” Win 7 and 8.1 patches released earlier this month that bluescreened PCs running various antivirus programs.

      Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?

      Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

      • #993170 Reply

        PKCano
        Da Boss

        The MS pages for those Previews still show the AVs as a known issue.
        Do you not believe Microsoft’s documentation?

        • #993442 Reply

          b
          AskWoody Plus

          I do; but that appears to have zero relevance to my question.

          Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

      • #993704 Reply

        woody
        Da Boss

        I’m not saying that MS has to change its patches. Apparently, that isn’t in the cards. But (as @pkcano says) it’d be nice if we could get some resolution to the problems.

        So, for example, instead of saying:

        Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.

        MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”

        • #994230 Reply

          b
          AskWoody Plus

          So, for example, instead of saying:

          Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.

          MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”

          … which is immediately followed by:

          Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article

          … which fully documents their temporary fix (done) and permanent fix (doing), as well as the coordinated temporary block of April MS updates and when that will be removed.

          Resolution by the few antivirus vendors is in progress and fully documented.

          Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

    • #994776 Reply

      bryandam
      AskWoody Lounger

      Full Disclosure: What follows is second hand from someone who I was working on with this issue who in turn was working with MS on the Japanese new Era stuff.

      The release delay was _most_ likely related to that.  The new era starts on May 1st and tomorrow a week-long national holiday begins.  So there’s a time-crunch on resolving these issues.

      According to the person I was working with the updates released on the 25th do not actually resolve the issue fully.  Further, these aren’t distributed to WSUS yet for enterprise customers as of the time of writing.

      To resolve the issue and have Office show correct dates they had to:

      • Uninstall April’s cumulative OS updates and revert to March’s CU.
      • Install April’s CUs for Office
      • Manually configure the Japanese Era Registry*

      Again, this is second hand but if you are operating in Japan or have Japanese language packs in play you will want to test this carefully.

      *(https://blogs.msdn.microsoft.com/shawnste/2018/08/07/using-the-registry-to-test-the-new-japanese-era-on-windows/)

      2 users thanked author for this post.
      • #995385 Reply

        woody
        Da Boss

        Appreciate the first-hand report!

    • #994536 Reply

      anonymous
      • #1048289 Reply

        RTEsysadmin
        AskWoody Lounger

        KB4499418 is a replacement for KB4493470. 9418 contains everything in 3470 plus an update for SMB. It also has all of the same bugs. KB4493473 contains a slew of entirely new updates, and it claims to be cumulative, so it should contain the SMB update that’s in KB4499418. As a result, we get these build numbers:

        KB4493473 (2019/04/25) Build 14393.2941

        KB4499418 (2019/04/25) Build 14393.2908

        KB4493470 (2019/04/09) Build 14393.2906

        So, basically, I have no idea why 9418 was published on the same day as 3473.

        But who knows? Maybe we’ll get lucky and an asteroid will hit before we figure out that Microsoft doesn’t know what it’s doing.

        Group K(ill me now)
    • #997148 Reply

      Charlie
      AskWoody Plus

      So – the consensus of opinion is that – if your Antivirus program maker doesn’t fix MS’s Update problem with Antivirus programs, you simply don’t update!

      This is easy to say but for Group B’ers, if a fix doesn’t come from somewhere soon, we’re faced with a partial EOS for Win 7 and Win 8.1.

      That’s the way it looks to me, someone please tell me I’m wrong, and I’ll feel much better.

      Win 7 Home Premium, x64, Intel i3-2120 3.3GHz, Groups B & L

      • #997263 Reply

        PKCano
        Da Boss

        Check with the maker of the AV. They should have a prominent message on their website with information.

        1 user thanked author for this post.
        • #1034795 Reply

          Charlie
          AskWoody Plus

          I checked the websites of AVG, Avast, and also did a Google search.  The MS Update problem is mentioned on Google, but no fixes are mentioned anywhere.  I checked yesterday and again today; same thing, no change, or prominent messages.

          Win 7 Home Premium, x64, Intel i3-2120 3.3GHz, Groups B & L

          • #1037740 Reply

            b
            AskWoody Plus

            See #1036110

            Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

    • #997151 Reply

      Alex5723
      AskWoody Plus

      @b
      I love your “Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?”

      These handful of = hundreds-of-million PCs both in home and bossiness.

      3 users thanked author for this post.
      • #997534 Reply

        b
        AskWoody Plus

        Do you not understand the difference between a handful of vendors and a handful of users?

        Less than 15% of antivirus vendors were affected.

        Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

        • #998400 Reply

          woody
          Da Boss

          … as were less than 15% of OS vendors… 🙂

          1 user thanked author for this post.
          • #998503 Reply

            b
            AskWoody Plus

            … inasmuch as zero is less than 15%; because OS vendors weren’t affected at all. 🤔

            Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

    • #997519 Reply

      EP
      AskWoody_MVP

      woody

      there IS something for 1903 – KB4497093 released FRI 4/26 which updates the build to 18362.86.
      https://www.deskmodder.de/blog/2019/04/26/kb4497093-windows-10-1903-18362-86-manueller-download/

      nothing for 1809 so far, maybe until next Tuesday April 30

      though I’m getting the “opposite” effect with the KB4493472 rollup update on some of my Win7 machines, woody. instead of KB4493472 causing slowdowns, it actually causes shorter boot times, which seems to make some of the Win7 PCs boot up faster, I’m not sure why.

      3 users thanked author for this post.
      • #998516 Reply

        woody
        Da Boss

        Interesting. I see references to KB4497093 here and there, but it isn’t showing up on my machine. Appears to be manual download only. 18362.86 – I still have .53.

        • #998658 Reply

          abbodi86
          AskWoody_MVP

          Are you insider?

          UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently on the Windows 10 May 2019 Update. This Cumulative Update includes the following fixes:

          This Cumulative Update includes the fix for Windows Insiders in the Fast ring who were unable to update to the latest 20H1 build from Build 18362.53.
          We have made general improvements for users in Japan or use the OS in Japanese including fixes for the Japanese IME and fixes for date and time issues.
          We fixed an issue where UWP VPN plugin apps might not be able to properly send packets through an established VPN tunnel on an IPv6 only network.
          We fixed the issue causing updating to Build 18362 to fail to install with an 0x80242016 error.

          1 user thanked author for this post.
          • #999102 Reply

            b
            AskWoody Plus

            That page may have been updated (again) within the last hour:

            UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently in the Fast ring only and on Build 18362.53. We’ll roll this out to the Slow and Release Preview rings in a bit.

            Announcing Windows 10 Insider Preview Build 18362

            Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

            1 user thanked author for this post.
          • #999489 Reply

            woody
            Da Boss

            No. I installed from an ISO and did not set my main test machine up to the Insider program.

    • #998940 Reply

      Alex5723
      AskWoody Plus

      … inasmuch as zero is less than 15%; because OS vendors weren’t affected at all. 🙂

      I OS vendor was deeply affected. It was Windows OS that crashed not the AV apps.

      3 users thanked author for this post.
    • #1002287 Reply

      b
      AskWoody Plus

      Still not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.

      Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

      • #1035120 Reply

        Charlie
        AskWoody Plus

        Really?  Care to provide a link to where you found this info. for AVG or Avast?  See my post #1034795.  I use AVG Free and was told it was affected.

        Win 7 Home Premium, x64, Intel i3-2120 3.3GHz, Groups B & L

        • #1036110 Reply

          b
          AskWoody Plus

          Avast has released emergency updates to address this issue. For more information and AV update schedule, see the Avast support KB article.

          Avira: Why does my system run very slow?

          Guidance for McAfee customers can be found in the following McAfee support articles:
          McAfee Security (ENS) Threat Prevention 10.x
          McAfee Host Intrusion Prevention (Host IPS) 8.0
          McAfee VirusScan Enterprise (VSE) 8.8

          Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article.

          https://support.microsoft.com/en-us/help/4493472/windows-7-update-kb4493472

           

          Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1903

          1 user thanked author for this post.
          • #1061116 Reply

            anonymous

            There still seem to exist incompatibilities between the latest Avira update and Win 7.

            PC 1: Updated with KB 4493448 and KB 4493435 (IE) on April 9. Initially for 10 min very slow, but then ok. After 3 days (with more Avira updates) Avira would never finish to initialize. Suspecting the AV to be ineffective, I reset that PC to March 2019 (using a restore point). Avira is fully updated.
            The Avira interface can be started, but only with the (limited rights) user account, that happened to get the update to the newly designed interface, the top right elements (x=close, _=minimize, ?=Help) show and can be clicked. The admin and other user account can only close via Alt-F4, clicking into the area where x should show has apparently no effect whatsoever.

            PC 2: Had been off the internet since April 8. on April 27 it got the Avira update, this time planned and from its admin account. Result: unending initializing. I wondered if the update might be adapted to Microsoft’s April patches being installed, and installed KB 4493448 and KB 4493435. Same situation: Initializing for some 15 minutes with umbrella taskbar sign open (= indicating protection), after the time-out the sign just goes away.
            The Avira interface can not be opened at all.

            PC 3: Only Avira updated, MS updates never tried. Like PC 1: Avira interface has the top right window elements only with the account that got the update.

            PC 1 and 3 are self-assembled, both Win 7 Ultimate (several language packs installed), from 2008 and 2010. PC 2 is a Lenovo Thinkpad E130 from 2014 with Win 7 Pro.
            All three have Aero disabled (Windows classic).

            1 user thanked author for this post.
            • #1062987 Reply

              woody
              Da Boss

              I elevated this to a blog post. I’m still hearing lots of problems with Avira. Let’s see if a company spokesperson responds.

    • #1015627 Reply

      Microfix
      Da Boss

      Canary in the coal mine reporting in:
      Just received notification via WU, and installed it.
      Cumulative Security Update for IE11 x64 windows 8.1 systems KB3185319
      That patch has only just appeared..

      Note: This W8.1 system (group A) was/ is completely up-to-date with all April patches installed. Noticed no ill effects as not using a 3rd party AV.

      ********** Win7 x64/x86 | Win8.1 x64 | Linux Hybrids x64 **********

      3 users thanked author for this post.
    • #1016604 Reply

      Alex5723
      AskWoody Plus

      Still not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.

      It seems Microsoft (nor Woody, hence still MS-DEFCON 2) doesn’t believe in the AV vendors. AV issues are still marked as such by Microsoft.

      2 users thanked author for this post.
    • #1069742 Reply

      Charlie
      AskWoody Plus

      The Master Patch List has the IE-11 patch for Win 7 described as having problems with AV programs. I’ve only seen references to the Roll-Up and Security Only Updates for Win 7.  Just checking to be sure.

      Win 7 Home Premium, x64, Intel i3-2120 3.3GHz, Groups B & L

    • #1087574 Reply

      Alex5723
      AskWoody Plus

      What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

      • #1089611 Reply

        Microfix
        Da Boss

        What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

        interpretation and understanding of the askwoody ms-defcon-system ? dunno..
        If you prefer, there is the Master Patch List or just patch regardless.

        ********** Win7 x64/x86 | Win8.1 x64 | Linux Hybrids x64 **********

        1 user thanked author for this post.
        • #1098079 Reply

          woody
          Da Boss

          Yep. The MS-DEFCON system is one, single, red-light/green-light system for all versions of Windows and Office.

          For those concerned about individual versions of Windows, or Office, or folks with specific patching needs, Susan’s Patch List is the one to follow.

          For “normal” Windows users who don’t want to be bothered with all the details, MS-DEFCON is a good way to stay safe. I don’t know of any pressing security threats for “normal” Windows customers that require any of the April updates. Better to wait and see what happens.

          2 users thanked author for this post.
    • #1094024 Reply

      Alex5723
      AskWoody Plus

      What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

      interpretation and understanding of the askwoody ms-defcon-system ? dunno..
      If you prefer, there is the Master Patch List or just patch regardless.

      interpretation and understanding of the askwoody ms-defcon doesn’t help me this month with Windows 10 updates as there are no stop-blocks that I can see. The situation is different with Windows 7, 8.1.

      • #1094246 Reply

        PKCano
        Da Boss

        The DEFCON system is about patching, not versions of Windows. As it is now, it applies to ALL versions of Windows.
        But there is nothing forcing to abide by any system but your own. So if you feel like taking the risk, go for it.
        It has saved my bacon many times.

        2 users thanked author for this post.
        • #1094543 Reply

          Alex5723
          AskWoody Plus

          it applies to ALL versions of Windows

          I think that MS-DEFCON rating should be given according to Windows main versions : Windows 7, 8.1, 10.

          2 users thanked author for this post.
          • #1098133 Reply

            woody
            Da Boss

            I’m going to head in that direction, but it ain’t that simple!

            If you break out Win7, 8.1 and 10, why wouldn’t you also break out, say, versions 1803 and 1809 (and 1903) to have their own ratings? And what about MSI versions of Office vs C2R?

            The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.

            1 user thanked author for this post.
    • #1104497 Reply

      Alex5723
      AskWoody Plus

      The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.

      @woody You are right. How times has changed. I see the 7, 8.1, 10 as a compromise between all Windows OS versions as one and full versions break down.

      In 8 months there will be only 2 left, 8.1 and 10.

      • #1570981 Reply

        woody
        Da Boss

        In 8 months there will be 8.1, 1803, 1809, 1903 and 1909. (Not to mention the LTSC branches, which I rarely consider.)

        Each Win10 version is a different kettle of fish!

    • #1566302 Reply

      anonymous

      – I had a problem after I installed the “Roll Up Update Preview” for Windows 7 Pro. When I wanted to open a link I received in an email, then something in my Internet Explorer 11 browser caused a problem. I wasn’t able to open that link.
      The problem was solved by removing the Preview Update.

      • #1570040 Reply

        Microfix
        Da Boss

        Installing ‘optional’ monthly previews is not recommended here on askwoody.
        Consider them as pre-patch Tuesday betas and that may help 😉
        However, there may be a rare occasion where a preview fixes something that is applicable to your OS that one NEEDS fixing asap, that would undoubtedly be discussed in-depth here on askwoody.

        ********** Win7 x64/x86 | Win8.1 x64 | Linux Hybrids x64 **********

        2 users thanked author for this post.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: There they are… Second April patches are out and they look lame

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.