|
Patch reliability is unclear, but widespread attacks make patching prudent. Go ahead and patch, but watch out for potential problems. |
Microsoft is out with their December releases. The blog post today focuses on something that a LOT of us complained about last month: The lack of in
[See the full post at: MS-Defcon 2 – Here comes December]
Susan Bradley Patch Lady/Prudent patcher
AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on December 8, 2020.
There is a Security-only Update for those with Win7 ESU subscriptions.
There was no December IE11 CU for Win7.
December Rollup KB4592471 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.
You must have at least the August Servicing Stack KB4570673 previously installed to receive these updates)
There is a December Servicing Stack KB4592510 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.
There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.
There were no .NET updates listed for Win7.
Martin Brinkmann over on ghacks has his usual thorough overview.
Note: W10 version 1903 has reached end of servicing today, 8th December 2020
I am looking forward to your recommendations on the Office 2010 patches. Especially since they seem like vulnerabilities and I recently told Windows Update NOT to check for other Microsoft products. I use Office 2010 every day.
I would flip it back to all products. This ensures that anything you have installed will get updates.
Susan Bradley Patch Lady/Prudent patcher
Thanks. I shall.
So hard to figure out what the right thing to do is for any of this…
Installed the december20 updates/patches/repairs “windows10.0-kb4592449-x64_aa193efa8432018464d6173c497ce3de71a581e2[.]msu”
W10Pro64 v.1909 is now up to build:18363.1256
It’s a pitty that Microsoft doen’t give the detailed info of the repairs….. this time it looks better/okay(?) with some graphical hickcups
What security patches were made is a mystery to me; does anyone has a clue?
—besides https://thehackernews.com/2020/12/microsoft-releases-windows-update-dec.html?utm_source=social_share
v1809/v1803 Enterprise/Education editions are still supported until May 2021
i also would not be surprised if v1809 Pro/Home get December updates
it will not be the first time they don’t stick ti EOS date precisely
I see. I just checked and saw that on my v1809 Pro system there were no updates, so it is apparently only for Enterprise/education.
fwwaahahaha – I guess the KB4592440 CU for v1809 only works for Enterprise/Education AND LTSC 2019 editions (using the very latter)
try downloading & installing KB4592440 manually from MS Catalog and check on your 1809 pro system if it works or if it does not (and says “not applicable”) [or perhaps fails with “we couldn’t complete the updates – undoing changes” message]
Since Enterprise/Education editions are based on CBS ProfessionalEdition, i believe you can still install 1809 LCU manually on Pro edition
similar to 1803 Pro, although it EOL was in November 2019, you can still install LCU manually
Thanks for responding EP and abbodi86. I just tried that and it failed. After the reboot I got the message “We couldn’t complete the updates. Undoing changes. Don’t turn off your computer”. I will try one more time, but it would seem it is not possible.
Yeah, i just inspected KB4592440 cab file, and they added “Microsoft-Client-Licensing-SupplementalServicing” component, which will prevent installation on Pro
they added the same component for v1607 and v1703 LCU too, but not v1803
this component restriction can be bypassed in the same concept as Win7 ESU
W10UI update installer script already have that concept, you may give it a try
https://github.com/abbodi1406/WHD/raw/master/scripts/W10UI_8.9.zip
just place KB4592440 msu file next to the script, run as admin and then press zero 0 to start
@abbodi86 I can confirm that I was able to install KB4592440 using your script. Thanks! I can now wait a few more months before upgrading to a newer Windows 10 version.
Does the script also install .NET updates? This month there was no .NET update, so I could not test that.
Thanks again for your help and your script!
that Microsoft-Client-Licensing-SupplementalServicing component might have also been added to the latter 1709 CUs as well.
speaking of 1803, the KB4537795 CU from late Feb. 2020 was the last one to actually install on 1803 home/pro editions. the next CU from Mar. 2020 (KB4540689) would produce a “not applicable” message when attempting to install on 1803 Home/Pro and would only work with enterprise/education editions of 1803
btw, no problems installing KB4592440 CU on my bedroom pc (an old HP desktop computer) running LTSC 2019 (just went right to the desktop after the working on updates 100% message)
edit – maybe ask doriel if he’s still running 1809 lately – last time I checked, he was running 1809 enterprise on at least one of his machines.
I see ONLY the Dec CU in wushowhide “HideBox” but the Auto-Chk for Updates is dragging its feet; Images ready & Never have an issue with CU’s…….
IF you then clk Check for Updates in Settings Do You get only what you see in wushowhide Now, or Might there be drivers, etc. loaded that are Not shown? Oops, just remembered I have in GP a setting Not to Install Drivers, BUT are there any other Uh-Oh’s to expect?
W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / Macrium Pd vX / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU = 0
Oops, just remembered I have in GP a setting Not to Install Drivers,…
Don’t depend on this GP setting to prevent drivers from appearing in a ‘Download/install’ or in a ‘Check for Updates.’ I have this GP setting and a driver sometimes appears anyway, although I am able to head it off at the pass by hiding it since I have GP=2, notify download/install.
This is to say that “Check for updates” is taking a risk.
CraigS26 & WCHS:
use “metered” internet connections (set both WiFi and Ethernet/LAN connections to metered)
I check for updates and I either get no driver updates listed or if they do they don’t get automatically installed, cuz of metered connections
I got
KB4592438 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems
installed after my Active hours (8:00 AM to 2:00AM). I had clicked “Check for updates” in the late evening yesterday, but it hadn’t shown up at that time.
Everything is working normally, nothing to report.
Decided to take the usual early plunge into this month’s updates (making sure I have a Macrium image to revert back to if needed, of course).
I was offered the usual cumulative update and Windows Defender updates but… what’s this? There was also a .NET Preview Update as well????
What is it with these preview updates? Please take the hint MS – I don’t want them, especially on Patch Tuesday!! And, I don’t believe most “normal” users want them either. Isn’t that what the Insider Program is supposed to be for – testing updates before releasing them to the “general masses” on Patch Tuesday?
Anyway… I shut the Windows Update session down before any updates were installed and I’m back to where I was before I checked for updates (thanks to my Macrium image) and I’m going to stay there until these preview updates turn into “regular” ones.
Daily Auto-Chk finally showed the Update. Oddly, for my 1909-64 Only KB4592449 Dec CU installed and I don’t see the SSU in Control Panel History as is usual – or MSRT. I clk’d to Update 2016 Office ’16 C2R.
All went rapidly and without issue.
W10 Pro 22H2 / Hm-Stdnt Ofce '16 C2R / Macrium Pd vX / GP=2 + FtrU=Semi-Annual + Feature Defer = 1 + QU = 0
…I don’t see the SSU…
I don’t believe that there is an SSU this month (December 2020) for the CU. MS Bulletin for KB4592449 lists SSU KB4586863, released Nov 10.
… I don’t see … MSRT.
MSRT is only released in May, August, November, February:
I’m going to stay there until these preview updates turn into “regular” ones.
That will happen on Jan. 2021 patch Tuesday.
Use WUmgr to hide preview updates.
Thanks, Alex.
First time I have ever seen preview updates released at exactly the same time as Patch Tuesday updates. Hope this isn’t the “new normal” from now on.
This whole idea of treating Windows users as unpaid beta testers (especially Windows 10 Professional users) is starting to become a little tiresome after all these years.
First time I have ever seen preview updates released at exactly the same time as Patch Tuesday updates.
I’m still on 1909 and I’ve filtered out these .NET previews by setting the GUI Feature Update deferral to 1 (and not 365, because I have TRV=1909). The GUI is gone in 2004 and 20H2, but to accomplish the same, take a look at using GP following the instructions and screenshots at AKB 2000016 Guide, Section 5, Method 2, Group Policy settings under Windows Update for Business > enabling Select when Preview Builds and Feature Updates are received, etc, (screenshots are at #2275043)
Funny thing is – its actually last month’s .NET preview???
Maybe it’ll disappear in the next day or so?
You clicked on check for updates? Check for updates in Windows 10 is “please install anything including .net preview updates”.
Susan Bradley Patch Lady/Prudent patcher
No problems here so far with SMQR’s: Win8.1 Pro x64/ Win7 Pro ESU x86
no telemetry re-activation with this months patches on either OS,
event viewer logs clean and local canon scanner/ printer working as intended.
The Computer World article is out at https://www.computerworld.com/article/3600669/december-patch-tuesday-round-up-winding-down-for-the-year.html.
That sounds about right.
This month based on how the calendar lands, the all clear will come at the end of the month. See I see the start of the month to be when I make sure I am locked down. The non security Office updates came out on the first Tuesday of the month (12/1) which is why I put the Defcon 2 at that time. Otherwise for those with Office 2016 (non click to run) you might end up with those updates installed if you don’t put the block on it. The old days are still here, I’m just being extra sure that you won’t get ANY updates installed until you want them. It’s all due to how the first Tuesday of the month hit right on the first Office non security patching day.
Susan Bradley Patch Lady/Prudent patcher
Yes, you can wait to start 0patch until MS stops updating Office 2010 for Office 2010 patches.
But don’t forget, 0patch Pro also patches other software as well.
Given the cost of W7ESU I would seriously consider dumping it in favour of 0patch.
cheers, Paul
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Notifications
