There they are… Second April patches are out and they look lame

Topic

New Reply

We waited an extra week and a half for this? Around 2:30 pm on Thursday, Microsoft released a small bunch of patches: Win10 1803 patch KB 4493437 has
[See the full post at: There they are… Second April patches are out and they look lame]

5 users thanked author for this post.

GreatAndPowerfulTech, Fred, abbodi86, PhotM, Elly

Reply | Quote

Replies

Is that three months of Japanese calendar updates. This time they are right🙄

Reply | Quote

Are there re-released Security Only and IE11 updates for Windows 7, etc., as well?

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

1 user thanked author for this post.

Charlie

Reply | Quote

Lame indeed

there are also standalone Japanese Era updates for 7 & 8.1, ment for Security-Only updates users

3 users thanked author for this post.

woody, Microfix, OscarCP

Reply | Quote

Updates to 1507, 1607, 1703, 1709 as well.

1 user thanked author for this post.

woody

Reply | Quote

Does this fix the issue with anti virus?

Reply | Quote

The MS pages still show an issue with the AVs

2 users thanked author for this post.

walker, woody

Reply | Quote

The fixes need to come from the AV vendors.  Some of them have already done this.

Reply | Quote

It would seem that the big scare over the loss of updates for Windows 7 users next year boils down to concern that we won’t be kept up-to-date with our Japanese calendars!

2 users thanked author for this post.

lanceboil, RockE

Reply | Quote

Japan is a large Business market for Microsoft, i presume

1 user thanked author for this post.

woody

Reply | Quote

woody wrote:

Most disconcerting, at least to me, is that there appears to be no resolution to the “dirty six” Win 7 and 8.1 patches released earlier this month that bluescreened PCs running various antivirus programs.

Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?

Reply | Quote

The MS pages for those Previews still show the AVs as a known issue.
Do you not believe Microsoft’s documentation?

Reply | Quote

I do; but that appears to have zero relevance to my question.

Reply | Quote

I’m not saying that MS has to change its patches. Apparently, that isn’t in the cards. But (as @PKCano says) it’d be nice if we could get some resolution to the problems.

So, for example, instead of saying:

Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.

MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”

Reply | Quote

woody wrote:

So, for example, instead of saying:

Microsoft has temporarily blocked devices from receiving this update if the Sophos Endpoint is installed until a solution is available.

MS could say “MS has blocked devices from receiving this update with Sophos Endpoint version such-and-so and earlier.”

… which is immediately followed by:

Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article

… which fully documents their temporary fix (done) and permanent fix (doing), as well as the coordinated temporary block of April MS updates and when that will be removed.

Resolution by the few antivirus vendors is in progress and fully documented.

Reply | Quote

Full Disclosure: What follows is second hand from someone who I was working on with this issue who in turn was working with MS on the Japanese new Era stuff.

The release delay was _most_ likely related to that.  The new era starts on May 1st and tomorrow a week-long national holiday begins.  So there’s a time-crunch on resolving these issues.

According to the person I was working with the updates released on the 25th do not actually resolve the issue fully.  Further, these aren’t distributed to WSUS yet for enterprise customers as of the time of writing.

To resolve the issue and have Office show correct dates they had to:

• Uninstall April’s cumulative OS updates and revert to March’s CU.
• Install April’s CUs for Office
• Manually configure the Japanese Era Registry*

Again, this is second hand but if you are operating in Japan or have Japanese language packs in play you will want to test this carefully.

*(https://blogs.msdn.microsoft.com/shawnste/2018/08/07/using-the-registry-to-test-the-new-japanese-era-on-windows/)

2 users thanked author for this post.

RTEsysadmin, woody

Reply | Quote

Appreciate the first-hand report!

Reply | Quote

Has anyone noticed the sneaky extra release for 1607??

https://support.microsoft.com/en-us/help/4499418/windows-10-update-kb4499418

versus:

https://support.microsoft.com/en-us/help/4493473/windows-10-update-kb4493473

1 user thanked author for this post.

RTEsysadmin

Reply | Quote

KB4499418 is a replacement for KB4493470. 9418 contains everything in 3470 plus an update for SMB. It also has all of the same bugs. KB4493473 contains a slew of entirely new updates, and it claims to be cumulative, so it should contain the SMB update that’s in KB4499418. As a result, we get these build numbers:

KB4493473 (2019/04/25) Build 14393.2941

KB4499418 (2019/04/25) Build 14393.2908

KB4493470 (2019/04/09) Build 14393.2906

So, basically, I have no idea why 9418 was published on the same day as 3473.

But who knows? Maybe we’ll get lucky and an asteroid will hit before we figure out that Microsoft doesn’t know what it’s doing.

Group K(ill me now)

Reply | Quote

So – the consensus of opinion is that – if your Antivirus program maker doesn’t fix MS’s Update problem with Antivirus programs, you simply don’t update!

This is easy to say but for Group B’ers, if a fix doesn’t come from somewhere soon, we’re faced with a partial EOS for Win 7 and Win 8.1.

That’s the way it looks to me, someone please tell me I’m wrong, and I’ll feel much better.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

Check with the maker of the AV. They should have a prominent message on their website with information.

1 user thanked author for this post.

Charlie

Reply | Quote

I checked the websites of AVG, Avast, and also did a Google search.  The MS Update problem is mentioned on Google, but no fixes are mentioned anywhere.  I checked yesterday and again today; same thing, no change, or prominent messages.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

See #1036110

Reply | Quote

@b
I love your “Are fixes for this likely to flow from Microsoft, when it only affected a handful of antivirus vendors most of whom have already issued fixes?”

These handful of = hundreds-of-million PCs both in home and bossiness.

2 users thanked author for this post.

phaolo, PKCano

Reply | Quote

Do you not understand the difference between a handful of vendors and a handful of users?

Less than 15% of antivirus vendors were affected.

Reply | Quote

… as were less than 15% of OS vendors… 🙂

1 user thanked author for this post.

RTEsysadmin

Reply | Quote

… inasmuch as zero is less than 15%; because OS vendors weren’t affected at all. 🤔

Reply | Quote

woody

there IS something for 1903 – KB4497093 released FRI 4/26 which updates the build to 18362.86.
https://www.deskmodder.de/blog/2019/04/26/kb4497093-windows-10-1903-18362-86-manueller-download/

nothing for 1809 so far, maybe until next Tuesday April 30

though I’m getting the “opposite” effect with the KB4493472 rollup update on some of my Win7 machines, woody. instead of KB4493472 causing slowdowns, it actually causes shorter boot times, which seems to make some of the Win7 PCs boot up faster, I’m not sure why.

3 users thanked author for this post.

RTEsysadmin, abbodi86, woody

Reply | Quote

Interesting. I see references to KB4497093 here and there, but it isn’t showing up on my machine. Appears to be manual download only. 18362.86 – I still have .53.

Reply | Quote

Are you insider?

UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently on the Windows 10 May 2019 Update. This Cumulative Update includes the following fixes:

This Cumulative Update includes the fix for Windows Insiders in the Fast ring who were unable to update to the latest 20H1 build from Build 18362.53.
We have made general improvements for users in Japan or use the OS in Japanese including fixes for the Japanese IME and fixes for date and time issues.
We fixed an issue where UWP VPN plugin apps might not be able to properly send packets through an established VPN tunnel on an IPv6 only network.
We fixed the issue causing updating to Build 18362 to fail to install with an 0x80242016 error.

1 user thanked author for this post.

woody

Reply | Quote

That page may have been updated (again) within the last hour:

UPDATE 4/26: We have released Build 18362.86 (KB4497093) for Windows Insiders who are currently in the Fast ring only and on Build 18362.53. We’ll roll this out to the Slow and Release Preview rings in a bit.

https://blogs.windows.com/windowsexperience/2019/03/20/announcing-windows-10-insider-preview-build-18362/

1 user thanked author for this post.

woody

Reply | Quote

No. I installed from an ISO and did not set my main test machine up to the Insider program.

Reply | Quote

b wrote:

… inasmuch as zero is less than 15%; because OS vendors weren’t affected at all. 🙂

I OS vendor was deeply affected. It was Windows OS that crashed not the AV apps.

3 users thanked author for this post.

phaolo, RTEsysadmin, Charlie

Reply | Quote

Still not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.

Reply | Quote

Really?  Care to provide a link to where you found this info. for AVG or Avast?  See my post #1034795.  I use AVG Free and was told it was affected.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

Avast has released emergency updates to address this issue. For more information and AV update schedule, see the Avast support KB article.

Avira: Why does my system run very slow?

Guidance for McAfee customers can be found in the following McAfee support articles:
McAfee Security (ENS) Threat Prevention 10.x
McAfee Host Intrusion Prevention (Host IPS) 8.0
McAfee VirusScan Enterprise (VSE) 8.8

Guidance for Sophos Endpoint and Sophos Enterprise Console customers can be found in the Sophos support article.

https://support.microsoft.com/en-us/help/4493472/windows-7-update-kb4493472

 

1 user thanked author for this post.

Charlie

Reply | Quote

There still seem to exist incompatibilities between the latest Avira update and Win 7.

PC 1: Updated with KB 4493448 and KB 4493435 (IE) on April 9. Initially for 10 min very slow, but then ok. After 3 days (with more Avira updates) Avira would never finish to initialize. Suspecting the AV to be ineffective, I reset that PC to March 2019 (using a restore point). Avira is fully updated.
The Avira interface can be started, but only with the (limited rights) user account, that happened to get the update to the newly designed interface, the top right elements (x=close, _=minimize, ?=Help) show and can be clicked. The admin and other user account can only close via Alt-F4, clicking into the area where x should show has apparently no effect whatsoever.

PC 2: Had been off the internet since April 8. on April 27 it got the Avira update, this time planned and from its admin account. Result: unending initializing. I wondered if the update might be adapted to Microsoft’s April patches being installed, and installed KB 4493448 and KB 4493435. Same situation: Initializing for some 15 minutes with umbrella taskbar sign open (= indicating protection), after the time-out the sign just goes away.
The Avira interface can not be opened at all.

PC 3: Only Avira updated, MS updates never tried. Like PC 1: Avira interface has the top right window elements only with the account that got the update.

PC 1 and 3 are self-assembled, both Win 7 Ultimate (several language packs installed), from 2008 and 2010. PC 2 is a Lenovo Thinkpad E130 from 2014 with Win 7 Pro.
All three have Aero disabled (Windows classic).

1 user thanked author for this post.

woody

Reply | Quote

I elevated this to a blog post. I’m still hearing lots of problems with Avira. Let’s see if a company spokesperson responds.

Reply | Quote

Canary in the coal mine reporting in:
Just received notification via WU, and installed it.
Cumulative Security Update for IE11 x64 windows 8.1 systems KB3185319
That patch has only just appeared..

Note: This W8.1 system (group A) was/ is completely up-to-date with all April patches installed. Noticed no ill effects as not using a 3rd party AV.

Windows - commercial by definition and now function...

3 users thanked author for this post.

RTEsysadmin, Myst, woody

Reply | Quote

b wrote:

Still not sure why Woody finds the current situation disconcerting, when all (four) of the affected antivirus vendors issued fixes days or weeks ago.

It seems Microsoft (nor Woody, hence still MS-DEFCON 2) doesn’t believe in the AV vendors. AV issues are still marked as such by Microsoft.

2 users thanked author for this post.

Charlie, woody

Reply | Quote

The Master Patch List has the IE-11 patch for Win 7 described as having problems with AV programs. I’ve only seen references to the Roll-Up and Security Only Updates for Win 7.  Just checking to be sure.

Being 20 something in the 70's was so much better than being 70 something in the insane 20's

Reply | Quote

What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

Reply | Quote

Alex5723 wrote:

What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

interpretation and understanding of the askwoody ms-defcon-system ? dunno..
If you prefer, there is the Master Patch List or just patch regardless.

Windows - commercial by definition and now function...

1 user thanked author for this post.

woody

Reply | Quote

Yep. The MS-DEFCON system is one, single, red-light/green-light system for all versions of Windows and Office.

For those concerned about individual versions of Windows, or Office, or folks with specific patching needs, Susan’s Patch List is the one to follow.

For “normal” Windows users who don’t want to be bothered with all the details, MS-DEFCON is a good way to stay safe. I don’t know of any pressing security threats for “normal” Windows customers that require any of the April updates. Better to wait and see what happens.

2 users thanked author for this post.

walker, Elly

Reply | Quote

Microfix wrote:

Alex5723 wrote:

What is still blocking Windows 10 (1803, 1809) from getting MS-DEFCON 3-4 with April 2019 updates ?

interpretation and understanding of the askwoody ms-defcon-system ? dunno..
If you prefer, there is the Master Patch List or just patch regardless.

interpretation and understanding of the askwoody ms-defcon doesn’t help me this month with Windows 10 updates as there are no stop-blocks that I can see. The situation is different with Windows 7, 8.1.

Reply | Quote

The DEFCON system is about patching, not versions of Windows. As it is now, it applies to ALL versions of Windows.
But there is nothing forcing to abide by any system but your own. So if you feel like taking the risk, go for it.
It has saved my bacon many times.

2 users thanked author for this post.

Elly, woody

Reply | Quote

PKCano wrote:

it applies to ALL versions of Windows

I think that MS-DEFCON rating should be given according to Windows main versions : Windows 7, 8.1, 10.

2 users thanked author for this post.

walker, woody

Reply | Quote

I’m going to head in that direction, but it ain’t that simple!

If you break out Win7, 8.1 and 10, why wouldn’t you also break out, say, versions 1803 and 1809 (and 1903) to have their own ratings? And what about MSI versions of Office vs C2R?

The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.

1 user thanked author for this post.

Elly

Reply | Quote

woody wrote:

The MS-DEFCON system was created in a kinder, gentler era when we had one or two versions of Windows and one or two versions of Office to consider.

@woody You are right. How times has changed. I see the 7, 8.1, 10 as a compromise between all Windows OS versions as one and full versions break down.

In 8 months there will be only 2 left, 8.1 and 10.

Reply | Quote

In 8 months there will be 8.1, 1803, 1809, 1903 and 1909. (Not to mention the LTSC branches, which I rarely consider.)

Each Win10 version is a different kettle of fish!

Reply | Quote

– I had a problem after I installed the “Roll Up Update Preview” for Windows 7 Pro. When I wanted to open a link I received in an email, then something in my Internet Explorer 11 browser caused a problem. I wasn’t able to open that link.
The problem was solved by removing the Preview Update.

Reply | Quote

Installing ‘optional’ monthly previews is not recommended here on askwoody.
Consider them as pre-patch Tuesday betas and that may help 😉
However, there may be a rare occasion where a preview fixes something that is applicable to your OS that one NEEDS fixing asap, that would undoubtedly be discussed in-depth here on askwoody.

Windows - commercial by definition and now function...

2 users thanked author for this post.

woody, PKCano

Reply | Quote