Martin Brinkmann should have a full list on ghacks shortly. In the interim, here’s the full list of downloads in the Microsoft Catalog. Odd that so ma
[See the full post at: July 2018 Security patches are out]
|
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
-
July 2018 Security patches are out
- This topic has 93 replies, 31 voices, and was last updated 6 years, 7 months ago by
.
AuthorViewing 31 reply threadsAuthor-
@microfix thx for that did you catch that in the list?
Evaluates the Windows ecosystem to help ensure application and device compatibility for all updates to Windows (what does that mean?)
Got me stumped as well. Does it mean theyre going to up the “snooping” Telemetry etc as I see kb2976978(Win8.1) + kb2952664(Win7) are making the rounds, yet, again. Then again these seem to be 2-3 times a year reissue, so possibly I am reading something in to it that’s not there.
-
A new and improved death star on it’s way?
If debian is good enough for NASA...2 users thanked author for this post.
-
Occasionally MS botches their telemetry updates, such that these updates may result in momentary slowdowns of the user’s computer. This is how I caught KB2952664 on one of my computers even though I thought that I had been careful to avoid installing it. The slowdown was so serious that it would intermittently prevent my AV product from being able to send file hashes to the AV cloud in order to verify that the files were safe. My AV product occasionally popped up a message that it had lost Internet connectivity.
My guess is that the botched version of KB2952664 was occasionally exceeding the maximum number of allowable HTTP connections. This is a really bad thing since most AV products now also use the cloud to check files, in particular when you are using your web browser and when you are downloading emails. A momentary loss of Internet connectivity forces the AV product to rely only on its internal defenses.
-
-
-
-
Group B Security only patches for July 2018 have been posted on AKB2000003.
-
Affirmative, marked as important.
1 user thanked author for this post.
-
KB2952664 is way past its teens. She has become a middle aged woman in terms of the plethora of versions. Happy Birthday to KB2952664! Full sarcasm is implied.
I already have a CMD file which iteratively removes all versions of KB2952664 from a Win7 computer. This weekend and if I have time, I will create a similar CMD file to check for and then, optionally, to uninstall all versions of KB2976978 from a Win8x computer. All of the code will remain identical, except for simply changing the name of the KB which is to be iteratively uninstalled.
I deliberately wrote my CMD files to automatically crash if your computer has issues with updates which failed to properly install, such that installation files for the failed update remain on your computer. In other words, these issues must first be resolved before any of my CMD files will run properly. I also wrote my CMD files to check whether or not the dirty bit has been set for your OS hard drive. The dirty bit gets set when Windows detects that your hard drive has issues and is failing and perhaps already has uncorrectable sectors. My CMD files deliberately exit with a warning about a failing OS hard drive, and without having touched a thing on the failing hard drive. Detecting both of these potential issues is inherently important to do, before I will allow my CMD files to touch your computer’s hard drive when my CMD files either check for installed updates, or when uninstalling any updates. The upshot is that my CMD files first check for these potential issues before my CMD files are permitted to proceed any further.
Note that there are three infamous updates which install telemetry in Win7. A separate iterative removal process must be used for each of these telemetry updates. I decided that it potentially is not wise to try to combine the removal process for all three of these telemetry updates into a single CMD file. So instead, I created individual CMD files which fully uninstall a given telemetry update, since there may be many versions of the specific telemetry update which must be removed. The upshot is that there may be potential issues which might be encountered when iteratively uninstalling more than one KB update. I don’t know if such potential issues might exist, yet I am not willing to experiment in order to find out. Thus, the sensible procedure is to iteratively uninstall only one KB at a time.
The point of all of the above is that it is possible for Group A users to mostly rip their computers to Group B. I don’t write CMD files which would additionally do things such as disabling CEIP, and disabling telemetry related scheduled tasks in Task Scheduler. Why? Because you should learn how check for and then how to make these changes yourself, so that you know how to perform these tasks if you have to reinstall Windows. This is not rocket science. I instead prefer that users to learn how to do this on their own.
Best regards,
–GTP
Peabody here reporting on Windows 7 updates:
- Windows Malicious Software Removal Tool (KB890830)
- Security and Quality Rollup updates for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB4340556)
- Darth Vader Update for Windows 7 (KB2952664)
- July Security Monthly Quality Rollup (KB4338818)
- Microsoft .NET Framework 4.7.2 (KB4054530)
All installed without error and the system rebooted without error.
Please note that I have GWX Control Panel to prohibit Windows 10 upgrade.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender9 users thanked author for this post.
-
-
As near as I can tell, Microsoft never borks that patch. It may be irksome, but it’s also the canary in the coal mine. I figure if it fails, there must be serious difficulties.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender1 user thanked author for this post.
-
MS has borked KB2952664 at least once. See my post about it in this same thread.
1 user thanked author for this post.
-
-
-
-
Peabody was a cartoon character in Peabody and Sherman which was in turn part of Rocky and Bullwinkle suite. Peabody opened with “Peabody here.” Peabody was a dog and Sherman was his boy.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender -
There is a Servicing Stack Update for Win10 v1709 KB 4339420. If you are installing manually, it should be installed prior to the CU KB 4338825.
4 users thanked author for this post.
So is all .NET stuff safe to download?
1 user thanked author for this post.
-
We are at MS-DEFCON 2; wait for MS-DEFCON 3.
Unless you have a specific reason to patch or enjoy beta testing, wait.
Woody’s MS-DEFCON System explanation is here:
https://www.askwoody.com/ms-defcon-system/On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender -
-
-
Noob on Windows 7 here,
I’m guessing .NET isn’t just for programmers, correct?
1 user thanked author for this post.
-
Yes, you are correct.
1 user thanked author for this post.
-
-
-
-
I seem to have versions 1.1 and 4.6.1 installed on my gaming Windows 7 home desktop, and routinely install all important updates covering those, but I do not have 4.7.x installed as that is both unnecessary and reported to be problematic.
When we get the all-clear this month, I will therefore expect to install KB4340556 (Quality Rollup) but not KB4054530 (optional and 4.7.2 based).
The last .Net Framework update I installed was KB4099633 in May 2018.
1 user thanked author for this post.
It would certainly seem that now would be a good time to reinstall GWX Control Panel in the event that you ever trusted Microsoft enough to uninstall it in the first place!
1 user thanked author for this post.
Also 1803 has now officially been released to the Semi Annual Channel (formerly CBB). Confirmed on my PC (set to SAC, without further deferral).
https://www.microsoft.com/en-us/itpro/windows-10/release-information
1 user thanked author for this post.
No need to break it apart. It is always the same thing — gather telemetry about every single running program and process which is running on your computer. The only thing which changes is to hopefully make sure that Microsoft’s telemetry gathering does not interfere with AV programs, and to make sure that Microsoft’s telemetry gathering does not (as a result of bad code) noticeably slow down the user’s computer.
1 user thanked author for this post.
After reading all here, I can only conclude:
1. MS has no intention of fixing the NIC bug for WIN 7
2. MS has no interest in doing _anything_ for WIN 7, period, save for installing snoopware.
Thanks be for this site and group!
—
My, how the mighty at MS have fallen.
“O Tempora! O Mores!”
O, Bananas!
(A sense of humor is all that keeps me from going mad with IT; I’m still dreaming of that little rock out in the Pacific…and no, I’m not telling where it is. 🙂
Win7 Pro SP1 64-bit, Dell Latitude E6330, Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Greenhorn
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty3 users thanked author for this post.
2. MS has no interest in doing _anything_ for WIN 7, period, save for installing snoopware.
That has been obvious for some time now… To be honest, I wouldn’t blame them too much. It’s an old product. I’d blame them for abandoning W8.1 too early and for what W10 looks like.
Fractal Design Pop Air * Thermaltake Toughpower GF3 750W * ASUS TUF GAMING B560M-PLUS * Intel Core i9-11900K * 4 x 8 GB G.Skill Aegis DDR4 3600 MHz CL16 * ASRock RX 6800 XT Phantom Gaming 16GB OC * XPG GAMMIX S70 BLADE 1TB * SanDisk Ultra 3D 1TB * Samsung EVO 840 250GB * DVD RW Lite-ON iHAS 124 * Windows 10 Pro 22H2 64-bit Insider * Windows 11 Pro Beta InsiderWin 7, 32 bit here. As it happens, yesterday I checked the supportpage for KB 2952664 (https://support.microsoft.com/en-us/help/2952664/compatibility-update-for-keeping-windows-up-to-date-in-windows-7). It was then dated April 11th or 18th – anyway, April. The page now has the datestamp of July 11th. It specifically still states:
This update performs diagnostics on the Windows systems that participate in the Windows Customer Experience Improvement Program. The diagnostics evaluate the compatibility status of the Windows ecosystem, and help Microsoft to ensure application and device compatibility for all updates to Windows. There is no GWX or upgrade functionality contained in this update.
But somehow, I don’t trust Microsoft that much anymore …
~ Annemarie
1 user thanked author for this post.
Hi, this .net update (kb4340558) seems to be failing on all my server 2012 r2, i have had a quick look on line and i have found there are other users with this issue, error code 0x80092004
anyone else?
ThanksEdit to remove HTML. Please use the “Text” tab in the entry box when you copy/paste
-
The package seems to be broken (a component hasn’t a hash value). I’ve about 15 confirmations worldwide. I wrote a blog post .Net Framework: Update KB4340558 drops error 0x80092004?
Ex Microsoft Windows (Insider) MVP, Microsoft Answers Community Moderator, Blogger, Book author
https://www.borncity.com/win/
-
I got that error too
it’s caused by .NET 4.x rollup KB4338419, which somehow conflict with the last two rollups KB4229727 & KB4096417the solution was to uninstall KB4229727 & KB4096417
then running to clean the leftovers:
Dism /Online /NoRestart /Cleanup-Image /StartComponentCleanup(you may also run Disk Cleanup > Windows Update Cleanup)
then reboot
afterwards, KB4338419 was installed sucessfully -
-
Just a feedback: I suggested this approach to several people affected in Germany. The feedback from two was, that it unfortunately didn’t help.
Ex Microsoft Windows (Insider) MVP, Microsoft Answers Community Moderator, Blogger, Book author
https://www.borncity.com/win/
1 user thanked author for this post.
-
-
Win 8.1 x64 – Updates installed except for KB2976978, which I hid. KB4340558 is failing with error 80092004. Seeing some discussions, no solutions over at https://answers.microsoft.com/en-us/windows/forum/windows8_1
I guess Win 8.1 was due for a bum update – it has been way too smooth compared to the other OS’s so far. 😬
Updating my 1703 VM today (CU KB4338826, IE11 Flash, MSRT and C++) when I got a popup saying “Your Windows Update is not working properly. You need the Update Facilitation Service. Click OK below.” Oh, no you don’t! I clicked on the “X” and closed the box – it was not then listed in the downloaded updates.
I hope the “X” doesn’t mean “Yes” this time!
3 users thanked author for this post.
Just some new information for anyone using the smaller “Delta” updates:
Beginning February 12, 2019 Microsoft will end its practice of creating delta updates for all versions of Windows 10.
https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-quality-updates-explained-amp-the-end-of-delta/ba-p/214426This will probably not affect too many people I suspect.
KB4338814 pulled from WSUS for Server 2016.
Symptom: After installing this update on a DHCP Failover Server, Enterprise clients may receive an invalid configuration when requesting a new IP address. This may result in loss of connectivity as systems fail to renew their leases.
Workaround: Currently, there is no workaround for this issue. Microsoft is working on a resolution and estimates a solution will be available mid-July.Yet another round of great testing and QA by M$.
1 user thanked author for this post.
-
KB2952664 has been re-released MANY times. Each subsequent release has the same KB number but is considered a “different” patch.
Consider that it has been installed multiple times on the computer. When you uninstall the currently active version, it seems that it was not uninstalled because it seems to reappear in the list of installed updates. But what you are seeing is not the version you uninstalled. What you see is the next last version.
To get rid of it, you have to uninstall ALL the versions that have been installed. You can keep uninstalling until all disappear. Or you can tru @GoneToPlaid ‘s removal method here. Here is some more information on the removal.
From now on, try to hide it before it gets installed because it will be reissued again and again as long as Win7 is supported.
-
-
KB2952664 is a Compatibility patch that performs diagnosis on your computer and sends the information to Microsoft – a “snooping” patch.
Silverlight is a browser add-on (like Flash Player or Java). It has nothing to do with an upgrade to Win10. However, it is rarely used by programmers and mostly useless.
3 users thanked author for this post.
-
When Silverlight is uninstalled on a system, multiple Silverlight updates will sequentially appear and each of those updates must be hidden. To date, there are 16 Silverlight updates that are hidden.
On permanent hiatus {with backup and coffee}
offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
online▸ Win11Pro 22H2.22621.1992 x64 i5-9400 RAM16GB HDD Firefox116.0b3 MicrosoftDefender -
-
Microsoft has published a KB article “0x80092004” error occurs and July 2018 .NET Security and Quality Rollup update KB4340557 or KB4340558 does not install after you apply June update KB4291497 or KB4291495 with two workarounds. Hope it helps.
Ex Microsoft Windows (Insider) MVP, Microsoft Answers Community Moderator, Blogger, Book author
https://www.borncity.com/win/
-
-
And fairly quickly too. That is rather remarkable, given how long it usually takes Microsoft to admit that there are issues with their updates. Essentially, Microsoft is admitting that they add ingredients to their recipes for each month’s Security and Quality Rollups and then toss the bread into the oven, without first checking whether or not they have used the correct ingredients. The baked bread analogy was the best I could come up with at the moment.
Microsoft also states that they are aware of these issues and that they are working on a solution. Thank goodness that you moved to Defcon 2 as soon as the July updates were released. Windows 7 and Windows 8x users should get updated through June since it is important to implement Microsoft’s latest built-in Meltdown protection via Microsoft’s updates to these operating systems. Yet from my experience with updating my Windows 7 computers, getting updated to June 2018 and especially if users held at December 2017, requires installing the January through June 2018 updates in a special way, as I have previously documented. I am not sure if my documented methods for Windows 7 also applies to Windows 8x, yet it wouldn’t hurt for Windows 8x users to use my methods to get safely updated through June 2018.
1 user thanked author for this post.
-
The server 2008 R2 July updates borked out SharePoint 2007 farm, uninstalled them all and trying to work out which update was the culprit.
1 user thanked author for this post.
A few days after applying all the July updates (not instantly!), the servers started to perform really badly (physical Hyper-V server with several VMs, all on 2012 R2). Uninstalling KB4338815 on the VMs had minimal impact, uninstalling KB4338815 on Hyper-V host (which reverted it to KB4284815) worked wonders! Our users could finally use our ERP and accounting software solutions again without waiting for several minutes for each process that would usually take mere seconds.
Shocked at the poor patch quality! Hoping that Microsoft will release a fix at all (they’re promising mid-July on the KB page, at least for their known issues). I’ll make sure to delay updates for longer in the future!
1 user thanked author for this post.
-
-
KB4338831 running on physical and virtual servers smoothly for 6 days now, apparently fixing the issues from KB4338815. Really pleased with the current performance of the servers, user’s processes within server-based applications are fast again! 🙂
2 users thanked author for this post.
Viewing 31 reply threads - This topic has 93 replies, 31 voices, and was last updated 6 years, 7 months ago by
Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Recent Topics
-
March 2025 updates are out
by 8 minutes ago
-
Windows 11 Insider Preview build 26120.3380 released to DEV and BETA
by 4 hours, 2 minutes ago
-
Update Firefox to prevent add-ons issues from root certificate expiration
by 11 hours, 10 minutes ago
-
Latest Firefox requires Password on start up
by 5 hours, 44 minutes ago
-
Resolved : AutoCAD 2022 might not open after updating to 24H2
by 23 hours, 58 minutes ago
-
Missing api-ms-win-core-libraryloader-11-2-1.dll
by 1 hour, 37 minutes ago
-
How Much Daylight have YOU Saved?
by 1 hour, 44 minutes ago
-
A brief history of Windows Settings
by 15 hours, 42 minutes ago
-
Thunderbolt is not just for monitors
by 4 hours, 31 minutes ago
-
Password Generators — Your first line of defense
by 1 hour, 59 minutes ago
-
AskWoody at the computer museum
by 1 hour, 33 minutes ago
-
Planning for the unexpected
by 25 minutes ago
-
Which printer type is the better one to buy?
by 1 day, 1 hour ago
-
Upgrading the web server
by 1 day ago
-
New Windows 11 24H2 Setup – Initial Win Update prevention settings?
by 1 day, 19 hours ago
-
Creating a Google account
by 1 day, 17 hours ago
-
Undocumented “backdoor” found in Bluetooth chip used by a billion devices
by 2 days ago
-
Microsoft Considering AI Models to Replace OpenAI’s in Copilot
by 2 days, 11 hours ago
-
AI *emergent misalignment*
by 2 days, 12 hours ago
-
Windows 11 Disk Encryption/ Bitlocker/ Recovery Key
by 20 hours, 39 minutes ago
-
Trouble signing out and restarting
by 3 hours, 56 minutes ago
-
Windows 7 MSE Manual Updating
by 2 days, 21 hours ago
-
Problem running LMC 22 flash drive
by 1 day, 19 hours ago
-
Outlook Email Problem
by 1 day, 19 hours ago
-
“Microsoft 365 Office All-in-One For Dummies, 3rd Edition FREE
by 2 days, 3 hours ago
-
Cant use Office 2013 – Getting error message about Office 2013
by 2 days, 20 hours ago
-
Nearly 1 million Windows devices targeted in advanced “malvertising” spree
by 2 days, 20 hours ago
-
Windows 11 Insider Preview build 27808 released to Canary
by 3 days, 21 hours ago
-
Windows 11 Insider Preview Build 22635.5025 (23H2) released to BETA
by 3 days, 21 hours ago
-
Sysprep issue
by 3 days, 20 hours ago
