A live blog of what’s coming out today…
[See the full post at: Initial impressions of Patch Tuesday, March 2020]
|
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
-
Initial impressions of Patch Tuesday, March 2020
- This topic has 72 replies, 25 voices, and was last updated 4 years, 11 months ago by
.
AuthorViewing 33 reply threadsAuthor-
AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on Mar. 10, 2020.
There are Security-only and IE11 Cumulative Updates for those with Win7 ESU subscriptions.
There is also a new Servicing Stack KB4550735. Download 32-bit or 64-bit for those with Win7 ESU subscriptions.There is a servicing Stack for Win8.1. KB4540725. Download 32-bit or 64-bit
NOTE: According to @abbodi86 March Security Only Update for Win 7 and 8.1 contain the DiagTrack service component (AKA Unified Telemetry Client)
-
“No indication that Win10 version 2004 will ship today.”
read this ZDNet article about v2004 from Ed Bott, woody
ending his article with this statement:
“Based on Microsoft’s previous release schedules, version 2004 should be officially available to the public beginning sometime in May, with a staged rollout via Windows Update over the next six months.”
And there are new Win7 security updates like KB4540688 & KB4541500 that require more recent win7 servicing stack updates such as KB4537829 & the newly released KB4550735
1 user thanked author for this post.
No known fix for KB 4532693 nor for KB 4524244 or KB 4535996.
https://support.microsoft.com/en-us/help/4540673/windows-10-update-kb4540673
1 user thanked author for this post.
-
Decoder ring:
KB 4532693 = Win10 1903 and 1909 February cumulative update
KB 4535996 = Win10 1903 and 1909 “optional, non-security C/D Week” patch for February
KB 4524244 = the really bad UEFI patch that Microsoft yanked. We only have manual uninstall instructions.
1 user thanked author for this post.
Kb4540673 installed and so far seen no problems like usual on 1903
1 user thanked author for this post.
It seems to be fine on my 1909 tower. Asus motherboard.
1 user thanked author for this post.
Seeker/cannon fodder report:
KB890830 Windows Malicious Software Removal Tool x64 – March 2020
KB4540673 Cumulative Update for Windows 10 Version 1909 for x64-based SystemsNow listed as Version 1909 (OS Build 18363.719).
Everything is working as usual.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".4 users thanked author for this post.
-
Seeker/cannon fodder report:
KB890830 Windows Malicious Software Removal Tool x64 – March 2020
KB4540673 Cumulative Update for Windows 10 Version 1909 for x64-based SystemsNow listed as Version 1909 (OS Build 18363.719).
Everything is working as usual.
Those buggy kb…693 and kb…996 are not included.
1 user thanked author for this post.
-
Those buggy kb…693 and kb…996 are not included.
That’s old news, covered in much earlier posts back in February.
And, everything is still running just fine.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".1 user thanked author for this post.
-
KB890830 Windows Malicious Software Removal Tool x64 – March 2020 KB4540673 Cumulative Update for Windows 10 Version 1909 for x64-based Systems
My DIY NAS got the push from Microsoft near midnight last night. Updated the B side of my dual boot desktop this morning, the A side of my Dell Latitude E5420 this afternoon.
No hiccups, nothing to report.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".1 user thanked author for this post.
KB4541509 – Security Monthly for 2012R2 is listed twice in WSUS and if checking online for updates. Not sure if it will try to install twice, will be waiting.
1 user thanked author for this post.
I think folks should take a moment to enjoy the irony of Microsoft discovering and fixing an “information disclosure vulnerability” in the Windows 10 telemetry system.
18 users thanked author for this post.
Over the weekend, Windows update offered my Dell XPS, bought in Sept 2019, a total of 33 patches for various drivers and firmware for the components of my system. Dell Support offered none of them, which is not really surprising since those that sported a date were all very old going back to 2017, and often predated the shipping of my PC. Needless to say, I did not install any of them.
Today, when Windows Update checked, they were all gone.
Now, if I had been a good boy and let Microsoft install them all immediately over my more current drivers, as Microsoft’s default settings would have had me do, wouldn’t I have been a happy bunny!
Chris
Win 10 Pro x64 Group A1 user thanked author for this post.
-
-
Windows 10 everyone is Group A by default.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender1 user thanked author for this post.
-
-
If you have installed the March Cumulative Update, KB4535996, the Feb non-security CU will no longer show up because it has been superseded by the March Updates. It is contained in the March update.
1 user thanked author for this post.
-
oh dear…Windows 8.1
/facepalmIf debian is good enough for NASA...5 users thanked author for this post.
-
-
Two of the same patch is a good reason to delay updating.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender2 users thanked author for this post.
-
Heads up to those running 1903 with 120 day feature update deferrals…
You should be offered 1909 tomorrow 3/11, as it was released 11/12/19, 120 days ago as of tomorrow 3/11.
If you’re ok with this, do nothing.
If you want to keep 1903 for a bit longer, be sure to change your deferrals to a value greater than 120 days.Windows 1909 Test Beta
March 10, 2020- kb4540673
https://support.microsoft.com/en-us/help/4540673/windows-10-update-kb4540673 - kb890830
Installed both updates from Windows Update and then rebooted without error.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender2 users thanked author for this post.
Windows 10 everyone is Group A by default.
Group A implies that there is a group B, when there is none.
-
The SSUs are bundled with the CUs, but do not show up by their KB numbers in Windows Update. Nor will you see them in the Update History. I believe they may present themselves with the CU’s KB number, which is why you may see the CU seem to install twice.
If you look in the “Installed Updates” however, you will find the CU only installed once, and the SSU installed with a separate KB number.
Who knows? It’s Microsoft! 🙂
-
-
You can HIDE the updates you don’t want to install. Then, after you install the ones you WANT to install, the SSU will appear in Windows Update b/c you have emptied the queue.
1 user thanked author for this post.
-
-
MS says these updates are offered thru WU automatically, yet they never appear as listed in the available updates or in the update history. Are they bundled in with the security or cumulative updates?
They show up in Control Panel>Programs & Features>View Installed Updates.
Here is the SSU for Feb.
Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).-
-
They are bundled with whichever CU requires them.
Yup, that’s true. I was just pointing out where the OP could see them listed.
Don't take yourself so seriously, no one else does 🙂
All W10 Pro at 22H2,(2 Desktops, 1 Laptop).1 user thanked author for this post.
-
There’s a new wormable, critical smbv3 server vulnerability out, but not included in today’s patches.
Kind of sad that we’re getting so many minor patches but not the important stuff. Can’t imagine why anyone would want to use Windows Server for anything but active directory.
Yet there are still some Windows servers out there with smb exposed to the internet (smbv3 is designed to be safe without a vpn). Scary.
1 user thanked author for this post.
-
There is no way to tell how long Microsoft has known of this. See Details about new SMB wormable bug leak in Microsoft Patch Tuesday snafu for more information.
It appears that a patch was thought to be in March’s patch Tuesday release but was not included for some reason. I doubt Microsoft wants to release a patch that does not address the issue or has known problems. They get beat up enough for releasing patches that have unknown issues.
--Joe
1 user thanked author for this post.
-
That ZDNet article now has a note at the bottom:
Updated to add that instructions on how to safely/correctly disable SMBv3 compression have been published in a Microsoft security advisory that went live after this article’s publication.
ADV200005 | Microsoft Guidance for Disabling SMBv3 Compression provides a workaround for servers.
1 user thanked author for this post.
-
That’s how I read the tea leaves.
1 user thanked author for this post.
-
…and through all the fuss, the tears, the howls, the fears, the broken nerves, the upchucked hors d’oevures, we still hear this screech from all parts of the web, including a lot of genuinely otherwise useful security sites,
“Users should install these security updates as soon as possible to protect Windows from known security risks.”
<SFX: Head ramming wall repeatedly>
Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -ScottyAs of 9:42 PM CDT, only one Win8.1 Security Monthly Quality Rollup (KB4545109) is present now. Plus, the 2020-02 Preview of Quality Rollup for .NET Framework (KB4538158) is still hanging around on the Optional tab.
Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...Winaero tweaker and O&O Shutup10 both include a button to choose the disable drivers option. If you were on 10 pro, group policy would give you the option to see updates including drivers but not have them forced https://www.askwoody.com/forums/topic/2000016-guide-for-windows-update-settings-for-windows-10/ Also for 10 pro, group policy can block driver updates while doing windows updates.
If on 10 home, the registry can be edited https://www.windowscentral.com/how-disable-automatic-driver-updates-windows-10 On windows 10 home, if you are using pause anyway to delay updates, during the pause try using wushowhide to hide unwanted driver updates. https://support.microsoft.com/en-us/help/4026726/windows-10-hide-updates-or-driver-updates
I have installed March 2020 cumulative quality update kb4540673 on Windows 10 1909 bringing version to 18363.719 on an about 10 year old laptop with no noticed problems.
1 user thanked author for this post.
Hm, after installing this update all sync data and back-ups of my i-devices are lost. They’re all detected as new without any back-up history. However, somehow in the user profile-folder -where iTunes stores this data – folders are there with previous backups. So not 100% sure if this is an iTunes-problem or a Windows update problem. However before all worked fine. Looks like somehow iTunes can’t read stuff from its user folders anymore 🙁 Also when I make new backups, the files are stored but not detected in iTunes.
-
Hm, after installing this update all sync data and back-ups of my i-devices are lost.
Which update did you apply?
What is your operating system?
Were there any other errors?
Were there any error messages?
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender
Microsoft Forum now provides an update report pinned to the top of Windows topics. The latest is here:
These update reports contain many “it-didn’t-work” replies, but there is also useful information should you wish wider viewpoints.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender1 user thanked author for this post.
v2004 finally got a new update Fri 3/13 after 10am pacific local time – KB4541738 build 19041.153 in the Slow ring
Am being offered:
2020-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4540688)
Windows Malicious Software Removal Tool x64 – March 2020 (KB890830)
******************
(Didn’t see 4540688 on Susan’s latest excel spreadsheet…too soon or my old eyes are really giving out.)
As far as SSU’s go, I don’t seem to have either KB4537829 or KB4537829.
Last month, the SSU’s were offered after the February Rollup was installed.
- Does the order matter?
- Has MSFT gone SSU mad? (I’m sure I have!)
You need the previous month’s Win7 SSU installed to get the current month’s patches offered. If you don’t see the current month offered [and you have ESU], then download and install the previous [or current?] momth’s SSU. So yes, every month Win has a SSU now.
1 user thanked author for this post.
-
-
-
All Windows versions got SSUs this month, so it’s not related to ESU this time 😀
but it would be helpful if they summerize what they “enhance” in SSUs each time
2 users thanked author for this post.
-
-
-
I have had no problems with W8.1 64 bit Group B style security only updates in 2 PCs as I reported at https://www.askwoody.com/forums/topic/patch-tuesday-update-disappearing-smbv3-patch-non-security-office-patches-and-a-so-far-mild-patch-tuesday/#post-2190955 (although the update installation process did take a long time on the 1st PC), but the contributor “magic” (a few posts above mine) reported a colleague’s “other half” being unable to boot after attempting to install.
BTW: I always make a system partition image before a windows update, just in case …
HTH. Garbo.
1 user thanked author for this post.
Viewing 33 reply threads - This topic has 72 replies, 25 voices, and was last updated 4 years, 11 months ago by
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Recent Topics
-
Latest Firefox requires Password on start up
by 40 minutes ago
-
Resolved : AutoCAD 2022 might not open after updating to 24H2
by 3 hours, 54 minutes ago
-
Missing api-ms-win-core-libraryloader-11-2-1.dll
by 1 hour, 39 minutes ago
-
How Much Daylight have YOU Saved?
by 28 minutes ago
-
A brief history of Windows Settings
by 2 hours, 22 minutes ago
-
Thunderbolt is not just for monitors
by 33 minutes ago
-
Password Generators — Your first line of defense
by 6 minutes ago
-
AskWoody at the computer museum
by 6 minutes ago
-
Planning for the unexpected
by 1 hour, 4 minutes ago
-
Which printer type is the better one to buy?
by 5 hours, 39 minutes ago
-
Upgrading the web server
by 4 hours, 4 minutes ago
-
New Windows 11 24H2 Setup – Initial Win Update prevention settings?
by 23 hours, 9 minutes ago
-
Creating a Google account
by 21 hours, 54 minutes ago
-
Undocumented “backdoor” found in Bluetooth chip used by a billion devices
by 1 day, 4 hours ago
-
Microsoft Considering AI Models to Replace OpenAI’s in Copilot
by 1 day, 15 hours ago
-
AI *emergent misalignment*
by 1 day, 16 hours ago
-
Windows 11 Disk Encryption/ Bitlocker/ Recovery Key
by 36 minutes ago
-
Trouble signing out and restarting
by 17 hours, 12 minutes ago
-
Windows 7 MSE Manual Updating
by 2 days ago
-
Problem running LMC 22 flash drive
by 23 hours, 48 minutes ago
-
Outlook Email Problem
by 23 hours, 54 minutes ago
-
“Microsoft 365 Office All-in-One For Dummies, 3rd Edition FREE
by 1 day, 7 hours ago
-
Cant use Office 2013 – Getting error message about Office 2013
by 2 days ago
-
Nearly 1 million Windows devices targeted in advanced “malvertising” spree
by 2 days ago
-
Windows 11 Insider Preview build 27808 released to Canary
by 3 days, 1 hour ago
-
Windows 11 Insider Preview Build 22635.5025 (23H2) released to BETA
by 3 days, 1 hour ago
-
Sysprep issue
by 3 days ago
-
Android Security Bulletin—March 2025
by 3 days, 3 hours ago
-
23h2: PIN TO START randomly available on right-click
by 3 days, 3 hours ago
-
Microsoft Defender
by 3 days, 9 hours ago
