![]() |
MS-DEFCON 3:
Patch reliability is unclear, but widespread attacks make patching prudent. Go ahead and patch, but watch out for potential problems.
|
-
There they are… Second April patches are out and they look lame
Home › Forums › AskWoody blog › There they are… Second April patches are out and they look lame
Tagged: KB 4493437, KB 4493440, KB 4493443, KB 4493453
- This topic has 51 replies, 14 voices, and was last updated 1 year, 11 months ago.
Viewing 21 reply threads-
AuthorPosts
-
-
April 25, 2019 at 5:56 pm #968093
woody
ManagerWe waited an extra week and a half for this? Around 2:30 pm on Thursday, Microsoft released a small bunch of patches: Win10 1803 patch KB 4493437 has
[See the full post at: There they are… Second April patches are out and they look lame]5 users thanked author for this post.
-
April 25, 2019 at 8:55 pm #972356
-
April 25, 2019 at 10:12 pm #975122
-
April 25, 2019 at 11:48 pm #977603
-
April 26, 2019 at 1:59 am #981121
-
April 26, 2019 at 4:35 am #980365
-
April 26, 2019 at 4:36 am #985260
-
April 26, 2019 at 1:15 pm #998169
warrenrumak
AskWoody Lounger
-
-
April 26, 2019 at 7:06 am #989027
Seff
AskWoody Plus-
April 26, 2019 at 10:47 am #994448
-
-
April 26, 2019 at 9:50 am #993056
b
AskWoody MVPMost disconcerting, at least to me, is that there appears to be no resolution to the âdirty sixâ Win 7 and 8.1 patches released earlier this month that bluescreened PCs running various antivirus programs.
Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?
-
April 26, 2019 at 9:55 am #993170
PKCano
Manager-
April 26, 2019 at 10:06 am #993442
-
-
April 26, 2019 at 10:17 am #993704
woody
ManagerI’m not saying that MS has to change its patches. Apparently, that isn’t in the cards. But (as @PKCano says) it’d be nice if we could get some resolution to the problems.
So, for example, instead of saying:
Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.
MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”
-
April 26, 2019 at 10:38 am #994230
b
AskWoody MVPSo, for example, instead of saying:
Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.
MS could say âMS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.â
… which is immediately followed by:
Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article
… which fully documents their temporary fix (done) and permanent fix (doing), as well as the coordinated temporary block of April MS updates and when that will be removed.
Resolution by the few antivirus vendors is in progress and fully documented.
-
-
-
April 26, 2019 at 11:16 am #994776
bryandam
AskWoody LoungerFull Disclosure: What follows is second hand from someone who I was working on with this issue who in turn was working with MS on the Japanese new Era stuff.
The release delay was _most_ likely related to that. The new era starts on May 1st and tomorrow a week-long national holiday begins. So there’s a time-crunch on resolving these issues.
According to the person I was working with the updates released on the 25th do not actually resolve the issue fully. Further, these aren’t distributed to WSUS yet for enterprise customers as of the time of writing.
To resolve the issue and have Office show correct dates they had to:
- Uninstall April’s cumulative OS updates and revert to March’s CU.
- Install April’s CUs for Office
- Manually configure the Japanese Era Registry*
Again, this is second hand but if you are operating in Japan or have Japanese language packs in play you will want to test this carefully.
2 users thanked author for this post.
-
April 26, 2019 at 11:25 am #995385
-
April 26, 2019 at 11:51 am #994536
anonymous
GuestHas anyone noticed the sneaky extra release for 1607??
https://support.microsoft.com/en-us/help/4499418/windows-10-update-kb4499418
versus:
https://support.microsoft.com/en-us/help/4493473/windows-10-update-kb4493473
1 user thanked author for this post.
-
April 27, 2019 at 9:46 pm #1048289
RTEsysadmin
AskWoody PlusKB4499418 is a replacement for KB4493470. 9418 contains everything in 3470 plus an update for SMB. It also has all of the same bugs. KB4493473 contains a slew of entirely new updates, and it claims to be cumulative, so it should contain the SMB update that’s in KB4499418. As a result, we get these build numbers:
KB4493473 (2019/04/25) Build 14393.2941
KB4499418 (2019/04/25) Build 14393.2908
KB4493470 (2019/04/09) Build 14393.2906
So, basically, I have no idea why 9418 was published on the same day as 3473.
But who knows? Maybe we’ll get lucky and an asteroid will hit before we figure out that Microsoft doesn’t know what it’s doing.
Group K(ill me now)
-
-
April 26, 2019 at 12:34 pm #997148
Charlie
AskWoody PlusSo – the consensus of opinion is that – if your Antivirus program maker doesn’t fix MS’s Update problem with Antivirus programs, you simply don’t update!
This is easy to say but for Group B’ers, if a fix doesn’t come from somewhere soon, we’re faced with a partial EOS for Win 7 and Win 8.1.
That’s the way it looks to me, someone please tell me I’m wrong, and I’ll feel much better.
-
April 26, 2019 at 12:34 pm #997151
Alex5723
AskWoody Plus -
April 26, 2019 at 12:49 pm #997519
EP
AskWoody_MVPwoody
there IS something for 1903 – KB4497093 released FRI 4/26 which updates the build to 18362.86.
https://www.deskmodder.de/blog/2019/04/26/kb4497093-windows-10-1903-18362-86-manueller-download/nothing for 1809 so far, maybe until next Tuesday April 30
though I’m getting the “opposite” effect with the KB4493472 rollup update on some of my Win7 machines, woody. instead of KB4493472 causing slowdowns, it actually causes shorter boot times, which seems to make some of the Win7 PCs boot up faster, I’m not sure why.
3 users thanked author for this post.
-
April 26, 2019 at 1:29 pm #998516
woody
Manager-
April 26, 2019 at 1:36 pm #998658
abbodi86
AskWoody_MVPAre you insider?
UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently on the Windows 10 May 2019 Update. This Cumulative Update includes the following fixes:
This Cumulative Update includes the fix for Windows Insiders in the Fast ring who were unable to update to the latest 20H1 build from Build 18362.53.
We have made general improvements for users in Japan or use the OS in Japanese including fixes for the Japanese IME and fixes for date and time issues.
We fixed an issue where UWP VPN plugin apps might not be able to properly send packets through an established VPN tunnel on an IPv6 only network.
We fixed the issue causing updating to Build 18362 to fail to install with an 0x80242016 error.1 user thanked author for this post.
-
April 26, 2019 at 1:53 pm #999102
b
AskWoody MVPThat page may have been updated (again) within the last hour:
UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently in the Fast ring only and on Build 18362.53. Weâll roll this out to the Slow and Release Preview rings in a bit.
1 user thanked author for this post.
-
April 26, 2019 at 2:09 pm #999489
-
-
-
-
April 26, 2019 at 1:47 pm #998940
-
April 26, 2019 at 3:55 pm #1002287
b
AskWoody MVP-
April 27, 2019 at 1:05 pm #1035120
Charlie
AskWoody Plus-
April 27, 2019 at 1:43 pm #1036110
b
AskWoody MVPAvast has released emergency updates to address this issue. For more information and AV update schedule, see the Avast support KB article.
Avira: Why does my system run very slow?
Guidance for McAfee customers can be found in the following McAfee support articles:
McAfee Security (ENS) Threat Prevention 10.x
McAfee Host Intrusion Prevention (Host IPS) 8.0
McAfee VirusScan Enterprise (VSE) 8.8Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article.
https://support.microsoft.com/en-us/help/4493472/windows-7-update-kb4493472
1 user thanked author for this post.
-
April 28, 2019 at 7:07 am #1061116
anonymous
GuestThere still seem to exist incompatibilities between the latest Avira update and Win 7.
PC 1: Updated with KB 4493448 and KB 4493435 (IE) on April 9. Initially for 10 min very slow, but then ok. After 3 days (with more Avira updates) Avira would never finish to initialize. Suspecting the AV to be ineffective, I reset that PC to March 2019 (using a restore point). Avira is fully updated.
The Avira interface can be started, but only with the (limited rights) user account, that happened to get the update to the newly designed interface, the top right elements (x=close, _=minimize, ?=Help) show and can be clicked. The admin and other user account can only close via Alt-F4, clicking into the area where x should show has apparently no effect whatsoever.PC 2: Had been off the internet since April 8. on April 27 it got the Avira update, this time planned and from its admin account. Result: unending initializing. I wondered if the update might be adapted to Microsoft’s April patches being installed, and installed KB 4493448 and KB 4493435. Same situation: Initializing for some 15 minutes with umbrella taskbar sign open (= indicating protection), after the time-out the sign just goes away.
The Avira interface can not be opened at all.PC 3: Only Avira updated, MS updates never tried. Like PC 1: Avira interface has the top right window elements only with the account that got the update.
PC 1 and 3 are self-assembled, both Win 7 Ultimate (several language packs installed), from 2008 and 2010. PC 2 is a Lenovo Thinkpad E130 from 2014 with Win 7 Pro.
All three have Aero disabled (Windows classic).1 user thanked author for this post.
-
April 28, 2019 at 8:12 am #1062987
-
-
-
-
-
April 27, 2019 at 12:27 am #1015627
Microfix
AskWoody MVPCanary in the coal mine reporting in:
Just received notification via WU, and installed it.
Cumulative Security Update for IE11 x64 windows 8.1 systems KB3185319
That patch has only just appeared..Note: This W8.1 system (group A) was/ is completely up-to-date with all April patches installed. Noticed no ill effects as not using a 3rd party AV.
3 users thanked author for this post.
-
April 27, 2019 at 1:04 am #1016604
Alex5723
AskWoody PlusStill not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.
It seems Microsoft (nor Woody, hence still MS-DEFCON 2) doesn’t believe in the AV vendors. AV issues are still marked as such by Microsoft.
-
April 28, 2019 at 1:09 pm #1069742
-
April 29, 2019 at 12:58 am #1087574
Alex5723
AskWoody Plus-
April 29, 2019 at 2:21 am #1089611
Microfix
AskWoody MVPWhat is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?
interpretation and understanding of the askwoody ms-defcon-system ? dunno..
If you prefer, there is the Master Patch List or just patch regardless.1 user thanked author for this post.
-
April 29, 2019 at 8:10 am #1098079
woody
ManagerYep. The MS-DEFCON system is one, single, red-light/green-light system for all versions of Windows and Office.
For those concerned about individual versions of Windows, or Office, or folks with specific patching needs, Susan’s Patch List is the one to follow.
For “normal” Windows users who don’t want to be bothered with all the details, MS-DEFCON is a good way to stay safe. I don’t know of any pressing security threats for “normal” Windows customers that require any of the April updates. Better to wait and see what happens.
-
-
-
April 29, 2019 at 5:22 am #1094024
Alex5723
AskWoody PlusWhat is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?
interpretation and understanding of the askwoody ms-defcon-system ? dunno..
If you prefer, there is the Master Patch List or just patch regardless.interpretation and understanding of the askwoody ms-defcon doesn’t help me this month with Windows 10 updates as there are no stop-blocks that I can see. The situation is different with Windows 7, 8.1.
-
April 29, 2019 at 5:32 am #1094246
PKCano
ManagerThe DEFCON system is about patching, not versions of Windows. As it is now, it applies to ALL versions of Windows.
But there is nothing forcing to abide by any system but your own. So if you feel like taking the risk, go for it.
It has saved my bacon many times.-
April 29, 2019 at 5:44 am #1094543
Alex5723
AskWoody Plusit applies to ALL versions of Windows
I think that MS-DEFCON rating should be given according to Windows main versions : Windows 7, 8.1, 10.
-
April 29, 2019 at 8:12 am #1098133
woody
ManagerI’m going to head in that direction, but it ain’t that simple!
If you break out Win7, 8.1 and 10, why wouldn’t you also break out, say, versions 1803 and 1809 (and 1903) to have their own ratings? And what about MSI versions of Office vs C2R?
The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.
1 user thanked author for this post.
-
-
-
-
April 29, 2019 at 12:57 pm #1104497
Alex5723
AskWoody PlusThe MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.
@woody You are right. How times has changed. I see the 7, 8.1, 10 as a compromise between all Windows OS versions as one and full versions break down.In 8 months there will be only 2 left, 8.1 and 10.
-
May 12, 2019 at 6:03 am #1570981
-
-
May 12, 2019 at 3:58 am #1566302
anonymous
Guest– I had a problem after I installed the “Roll Up Update Preview” for Windows 7 Pro. When I wanted to open a link I received in an email, then something in my Internet Explorer 11 browser caused a problem. I wasn’t able to open that link.
The problem was solved by removing the Preview Update.-
May 12, 2019 at 5:21 am #1570040
Microfix
AskWoody MVPInstalling ‘optional’ monthly previews is not recommended here on askwoody.
Consider them as pre-patch Tuesday betas and that may help đ
However, there may be a rare occasion where a preview fixes something that is applicable to your OS that one NEEDS fixing asap, that would undoubtedly be discussed in-depth here on askwoody.
-
-
-
AuthorPosts
Viewing 21 reply threads -
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.
Search Newsletters
Search Forums
Recent Replies
WCHS on 20H2 and Adobe Flash Player
7 minutes agoAscaris on How much RAM does your computer have?
44 minutes agoanonymous on Are you a Consultant or IT Pro?
59 minutes agoLarry B on Chrome messed up my “run browser sandboxed” link
1 hour, 2 minutes agoanonymous on It’s time for 20H2
1 hour, 11 minutes agoSeff on How much RAM does your computer have?
1 hour, 20 minutes agoMoonshine on Editing a PDF in Mint
1 hour, 33 minutes agoagoldhammer on How much RAM does your computer have?
2 hours, 32 minutes agoSeff on How much RAM does your computer have?
2 hours, 36 minutes agoOscarCP on Good animated movies and shows for ages ten to one hundred and ten.
4 hours, 43 minutes agoPKCano on 20H2 and and OOB optional March 18 printer problem update
4 hours, 45 minutes agoPKCano on 20H2 and Adobe Flash Player
4 hours, 59 minutes agoPKCano on 2000013: How to clear the Windows Update queue in Win10
5 hours, 3 minutes agodmt_3904 on We’re sorry, but Outlook has run into a problem…
5 hours, 14 minutes agoAlex5723 on Good animated movies and shows for ages ten to one hundred and ten.
5 hours, 25 minutes agoMoonshine on How can I locate Bitlocker key in OEM refurb HP laptop?
5 hours, 32 minutes agoAlex5723 on Initial Apple M1 SoC Support Aims For Linux 5.13 Kernel
6 hours, 8 minutes agomacropod on Find & Replace
6 hours, 26 minutes agoPaul T on 20H2 and Adobe Flash Player
6 hours, 28 minutes agoPaul T on How to determine data type?
6 hours, 29 minutes agoPaul T on It’s time for 20H2
6 hours, 34 minutes agoPaul T on Question about allowing/stopping laptop from turning off USB device
6 hours, 40 minutes agoPaul T on Help requested for a botched 2004 install
6 hours, 48 minutes agoPaul T on Brother printer “driver unavailable” suddenly
6 hours, 55 minutes agoPaul T on Are you a Consultant or IT Pro?
7 hours, 12 minutes agoBrerBear on It’s time for 20H2
7 hours, 19 minutes agoSky on Good animated movies and shows for ages ten to one hundred and ten.
7 hours, 49 minutes agoPaul T on How can I locate Bitlocker key in OEM refurb HP laptop?
7 hours, 52 minutes agoOscarCP on Initial Apple M1 SoC Support Aims For Linux 5.13 Kernel
7 hours, 54 minutes agoPaul T on 2000013: How to clear the Windows Update queue in Win10
8 hours, Just now
Recent Topics
-
Hackers hacked Swarmshop stolen credit cards database
6 hours, 43 minutes ago
-
DuckDuckGo updates its plugin to block Googleâs creepy FLoC
7 hours, 53 minutes ago
-
Initial Apple M1 SoC Support Aims For Linux 5.13 Kernel
6 hours, 9 minutes ago
-
How much RAM does your computer have?
45 minutes ago
-
odd optional update
13 hours, 35 minutes ago
-
Editing a PDF in Mint
1 hour, 34 minutes ago
-
20H2 and and OOB optional March 18 printer problem update
4 hours, 46 minutes ago
-
20H2 and 2020-02 CU for .NET
12 hours, 3 minutes ago
-
20H2 and Adobe Flash Player
8 minutes ago
-
How to set MLB homepage in Edge Chromium
20 hours, 39 minutes ago
-
Scraped data of 500 million LinkedIn users being sold online
21 hours, 38 minutes ago
-
Question about allowing/stopping laptop from turning off USB device
6 hours, 40 minutes ago
-
Office 2010 Installer “Wanted”
17 hours, 16 minutes ago
-
Subscribed topics
8 hours, 9 minutes ago
-
New age olympics – hacking contest
16 hours, 30 minutes ago
-
Questions about installing Brave on Linux Mint
14 hours, 15 minutes ago
-
Testing if I could post a thread
1 day, 9 hours ago
-
File Explorer shortcut 30 – 45 seconds to open a window
16 hours, 53 minutes ago
-
Basic Asset Management Software
1 day ago
-
My first OEM Linux PC (laptop)!
17 hours, 40 minutes ago
-
Are you a Consultant or IT Pro?
1 hour ago
-
Removal of Chromium Edge in 20H2?
1 day, 14 hours ago
-
How determine what Seach Engine is being used?
2 days, 9 hours ago
-
Outlook cannot read the calendar
21 hours, 57 minutes ago
-
Windows 10 Insider Preview build 21354 released to DEV Channel
2 days, 19 hours ago
-
Printer Offline After Every Reboot
8 hours, 6 minutes ago
-
Soviet TV version of Lord of the Rings rediscovered after 30 years
19 hours, 53 minutes ago
-
Chrome messed up my “run browser sandboxed” link
1 hour, 2 minutes ago
-
Extra updates in wushowhide?
3 days, 5 hours ago
-
Windows Update for Business isn’t just
2 days, 14 hours ago
Search for Topics
Recent blog posts
- How much RAM does your computer have?
- Are you a Consultant or IT Pro?
- Windows Update for Business isn’t just
- April 2021 Office non-Security Updates are now available
- Touchscreen misregisters point-and-clicks
- AskWoody Improvements
- The best laptop docking stations and hubs for 2021
- The problem with copyright: fair use
Key Links
Copyright © 2004 – 2021 AskWoody Tech LLC. All rights reserved.