July 2021 security updates are out

Topic

New Reply

Which means we wait and see how the month fares before dipping our toes into the patching waters. Remember the Print spooler patch that was released e
[See the full post at: July 2021 security updates are out]

Susan Bradley Patch Lady/Prudent patcher

2 users thanked author for this post.

abbodi86, PKCano

Reply | Quote

Replies

comment link broken on this topic; you need a hyphen between july and 2021 in the url

Reply | Quote

Fixed the other way around   Removed the hyphen.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on July 13, 2021.

There is a Security-only Update for those with Win7 ESU subscriptions.
There is a July IE11 CU KB5004233 for Win7. Download 32-2it or 64-bit.

July Rollup KB5004289 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

You must have at least the August 2020 Servicing Stack KB4570673 previously installed to receive these updates).

There is a new July Servicing Stack KB5004378 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are .NET updates listed for Win7. See #2377439.

2 users thanked author for this post.

abbodi86, rick41

Reply | Quote

For my 2 machines that use the Win 7 ESU rollups:  Am I correct in assuming that WU won’t offer the new servicing stack update until after I have installed the new July rollup (KB5004289)?

Reply | Quote

That is correct. THe SSU has to install by itself, and won’t show in WU unless/untill there are no other pending updates.

If you want to install it first, you can hide the other updates, check for updates, install the SSU, then unhide the rest and install.

1 user thanked author for this post.

rick41

Reply | Quote

KB5004237 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems

installed, no hiccups.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

6 users thanked author for this post.

MrToad28, CAS, TechTango, Julia, deafkon, PFC

Reply | Quote

My NAS got the same, plus KB5003537 Cumulative Update for .NET 3.5 and 4.8 for Windows 10 Version 21H1 for x64.

Also without hiccups.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

no hiccups, including no printing problems with the KB5004237 CU, bbearren?

Reply | Quote

Windows 7 – 30 vulnerabilities

Windows 8.1 – 39 vulnerabilities

Windows 10 version 1903 and 1909 – 67 vulnerabilities

Windows 10 version 2004, 20H2 and 21H1 – 68 vulnerabilities

Each new Windows version is “more secure” than previous version.

Windows 11 ?

Reply | Quote

Alex5723 wrote:

Each new Windows version is “more secure” than previous version.

Exactly.

Alex5723 wrote:

Windows 11 ?

Zero.

1 user thanked author for this post.

bbearren

Reply | Quote

You ARE an optimist!!!

1 user thanked author for this post.

b

Reply | Quote

I got potentially 73 in Windows 10 – if you count those HEVC vulns.

CVE-2021-33778

CVE-2021-33777

CVE-2021-33776

CVE-2021-33775

CVE-2021-31947

 

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Alex5723

Reply | Quote

I updated three Win7 machines with the Bypass and my Win10 21H1 normally.

I’ve been testing for about two hours. As far as I can see, everything works.

Let it be said that I’m on a tiny home network. I don’t think I’d be so cavalier if I were responsible for a massive corporate environment.

3 users thanked author for this post.

SueW, GoneToPlaid, deafkon

Reply | Quote

Same here for my primary Win7 computer. No apparent issues with the windows updates, the IE update, and the .NET update for July.  I always create a system restore point before installing updates. I always make sure that I have performed a very recent backup of my OS hard drive before installing updates.

1 user thanked author for this post.

SueW

Reply | Quote

Just a heads-up to Win7 users, there’s been a new 0patch agent (client) launched in the last day or two. If you bring up the console you can install it from there. A blog on their website details the changes.

4 users thanked author for this post.

deuxbits, Alex5723, rick41, LHiggins

Reply | Quote

Fyi…I use 0patch on one of my Win 7 machines.  When I opened the 0patch console, saw the new agent available notice, and clicked to update, 0patch crashed (or maybe it was just the console…I didn’t really check carefully).  At that point I just waited, and less than a minute later the console came back up, and it had updated to the new agent (21.05.05.10500).

Reply | Quote

b wrote:

Alex5723 wrote:

Each new Windows version is “more secure” than previous version.

Exactly.

Alex5723 wrote:

Windows 11 ?

Zero.

See – the power of TPM 2.0 and Intel® 8th (-1) generation and higher chips!

1 user thanked author for this post.

b

Reply | Quote

Installed 2021-07 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5004237):

No apparent issues after restart.

OS build now 19043.1110

Reply | Quote

Wonder why it takes 3-4 days for Belarc Advisor the display missing security updates.

Reply | Quote

So Microsoft ignores GP settings for monthly updates deferrals ?

Got notice today for July CU KB5004945 while quality Updates are deferred to 7 days.

Reply | Quote

KB5004945 was released on July 6th.  A 7 day deferral should be July 13th or 14th

1 user thanked author for this post.

Alex5723

Reply | Quote

two for July

Reply | Quote

Curious if  4945 installs.  It’s a moving roadblock for me, countless downloads, partial installs, then removed.  I finally disabled win updates.

Seems I already have the changes it implements, beside the ones vaguely described, not sure about them.   Why won’t it stop???

Reply | Quote

It’s always been that way with Belarc.

 

Reply | Quote

Good question though. Could it be to keep folk from jumping the gun into a MS update nightmare that they might be associated??
I miss the old Baseline Security Analyzer

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

Installed July CU KB5004237 on my W10 Pro 21H1 x64.  Download and install smooth/swift and so far no hiccups.

Probably not connected, but some hours later Edge WebView2 Runtime was also silently installed.  A big chunk of software which I didn’t ask for, so I uninstalled it right away (I use Office H&S 2010).

 

Reply | Quote

I tried using WuMgr, and for some reason this update (2021-07 Cumulative for 20H2) is not showing up there.

However, Windows attempts to download it if I resume updates.

Just wondering if anyone else sees the same discrepancy.

Reply | Quote

WuMgr and Windows Update use the same Windows Update Service to search for updates. If you have Pause set, neither can search for updates.

1 user thanked author for this post.

Coldheart9020

Reply | Quote

The recent dot Net update installed fine.  Nothing else will except early June updates.  I use the Catalog.  Win Update hit its pause limit and continued to try to install KB5004945.  “We have updates for you that install to 7%, then revert.  We will do this day after day after day until….”

Until I disable windows update.  Now all is again well as it has been since upgrading in April.

Stuck on 19043.928, 21H1 Win 10 Pro, which is fine if MS goes away and stays away.

Reply | Quote

What error messages are you getting?

Have you done an inplace repair over the top?  (note I don’t say to do dism or sfc/scannow as I think those don’t help)

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

sheldon wrote:

KB5004945 was released on July 6th

You are right.
Don’t see the need for KB5004945. Hidden with WUmgr.

Reply | Quote

Alex5723 wrote:

Don’t see the need for KB5004945. Hidden with WUmgr.

did you notice from my second attachment (installed updates) that 4945 is SSU?

Reply | Quote

PFC wrote:

Alex5723 wrote:

Don’t see the need for KB5004945. Hidden with WUmgr.

did you notice from my second attachment (installed updates) that 4945 is SSU?

..945 is a fix for the print nightmare bug. It has been superseded by July 13 KB5004237.

Reply | Quote

Windows Update installed KB5004237 on Windows 10 20H2 on three PCs of differing hardware configurations without any apparent problems.

2 users thanked author for this post.

MrToad28, Coldheart9020

Reply | Quote

can any of you folks who have installed the July 13 updates check to see if your printers (whether connected locally thru a USB cable or connected thru a network either by WiFi or ethernet LAN cable) are working as expected? just asking.

Reply | Quote

Printer that is connected through WiFi network is working as expected.

Reply | Quote

FYI,

After making the necessary Macrium system backup images, “resumed update” via Windows Update for 2 Windows 10 Home v21H1 systems (one x64 laptop and another x86 netbook) and installed the following:

– 2021-07 Cumulative Update for Windows 10 Version 21H1 for x64 (x86)-based Systems (KB5004237)
– 2021-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H1 for x64
(x86)-based Systems (KB5003537)
– Windows Malicious Software Removal Tool for x64 (x86)-based Systems v5.91 (KB890830)
– 2021-06 Update for Windows 10 Version 21H1 for x64-based Systems (KB4023057)

For KB4023057 the Microsoft Update Health Tools version 2.81.0.0 was installed on my x64 laptop but failed on the x86 netbook. It is listed as both a program under Control Panel > All Control Panel Items > Programs And Features and as an app under Settings > Apps & features. The netbook’s Microsoft Update Health Tools remained at version 2.77.0.0 installed back in May 2021.

Paused Windows Update for both systems to furthest date available.

New OS Build : 19043.1110. Both systems are running stable so far.

Both scanning and printing via USB cable to local printer are working (no WIFI network or ethernet LAN to printer though).

Hope this helps.

Reply | Quote

I read your article on Computer World dated Monday, July 12, 2021. Unfortunately, this article appeared in that web site’s newsletter on Wednesday, July 14. In that article you give your approval to upgrade to Windows 10 21H1. However, July 14 was the day after Microsoft’s regular Patch Tuesday.

I believe that in order to upgrade to a new feature update, the quality updates should be brought up to date first on the current version, especially if you are going to install the feature update via Windows update. Since the new security patches are already out, would in not be more prudent to wait until you give the green  light on them before trying to install 21H1?

Though you wrote this article the day before Patch Tuesday, I think you should have addressed this issue in the article. Perhaps you should address this point on askwoody.com

Reply | Quote

https://www.forbes.com/sites/gordonkelly/2021/07/15/microsoft-windows-10-security-warning-critical-important-fixes-windows-hello-free-windows-10-upgrade/?fbclid=IwAR3DVfRSywUNqeObF8MfHqTWAxiwwDBksYnl6LAk9xtUIySaqTHc6aO13_E&sh=747d1dc74eff

Reply | Quote

Installed KB5004237, Servicing Stack 10.0.19041.1081 and KB890830 using WUmgr on Windows 10 21H1.
Winver 19043.1110.

No problems.

Reply | Quote

CBA wrote:

…hours later Edge WebView2 Runtime was also silently installed. A big chunk of software which I didn’t ask for, so I uninstalled it right away.

Update: the install was triggered by an update of ProtonVPN.  After checking with their team, not required for my desktop version (which works great regardless).

Reply | Quote