Patch Lady – B patchers need a pre patch

Business patchers:  Right now you should still be in “test” mode in installing patches, not production roll out mode.  For those that install the Windows security only updates for Server 2008 R2 and Windows 7 – your April update is  KB4093108.  Make sure you  install KB4099950 FIRST to prevent the issue where static IP address settings were lost in the network interface card.  If you are wondering how to do this in WSUS, set a deadline in WSUS in the past which will kick an immediate install.  It does not kick a reboot.  Then schedule the April update after that.

I’m still trying to get definitive information as to whether the 2008 R2/Windows 7 April update rollup KB4093118 does or does not include this fix.  There are indications from the Patchmanagement.org list that it does include the fix in KB4099950 and thus you don’t need to install that proactively, but I can’t find it documented anywhere to be 100% certain.

For standalone computers that use the B patching process of applying security only updates- again you should be in wait and see mode right now.  If you have a spare computer and want to live on the edge, install now.  Otherwise get the popcorn out and wait to see what happens.

P.S. you have to manually import KB4099950 into WSUS to get it up there.  It’s not in the WSUS patches.  To import follow this blog.

Update:  The KB4093118 now states this confirming it does NOT include it and implies that KB4093108 does include the networking fix so if you are a Security only B patcher you don’t have to worry about it.  It also includes a workaround for the memory leak issue and I’ll address that in another blog post:

After installing KB4056897 or any other recent monthly updates, SMB servers may experience a memory leak for some scenarios. This occurs when the requested path traverses a symbolic link, mount point, or directory junction and the registry key is set to 1: 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanManServer\Parameters\EnableEcp

Microsoft is working on a resolution and will provide an update in an upcoming release.

***

A stop error occurs on computers that don’t support Streaming Single Instructions Multiple Data (SIMD) Extensions 2 (SSE2).

Microsoft is working on a resolution and will provide an update in an upcoming release.

***

A new Ethernet Network Interface Card (NIC) that has default settings may replace the previously existing NIC, causing network issues after you apply this update. Any custom settings on the previous NIC persist in the registry, but are unused.

Microsoft is working on a resolution and will provide an update in an upcoming release.

In the meantime, please apply KB4093108 (Security-only update) to stay secure, or use the Catalog release of KB4093118 to stage the update for WU or WSUS. 

***

Static IP address settings are lost after you apply this update.

Microsoft is working on a resolution and will provide an update in an upcoming release.

In the meantime, please apply KB4093108 (Security-only update) to stay secure, or use the Catalog release of KB4093118 to stage the update for WU or WSUS.