Patch Lady post – if you’ve patched…

Topic

New Reply

Susan here, Friday night in the USA, Saturday for those of you on the other side of the globe.  If you have patched your machines and see no issues, k
[See the full post at: Patch Lady post – if you’ve patched…]

Susan Bradley Patch Lady/Prudent patcher

8 users thanked author for this post.

StruldBrug, jburk07, woody, WildBill, Noel Carboni, Fred, Demeter, Elly

Reply | Quote

Replies

Susan Bradley wrote:

All I can tell you is that every Windows patch has a possible known issue posted.

All 129?

Reply | Quote

“…pause updates in Windows 10…” implies Windows 10 patches only.

However a clarification wouldn’t be a bad thing.

Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie

1 user thanked author for this post.

twbartender

Reply | Quote

7 as well, but it’s a heck of a lot easier to stop updates on 7.

Susan Bradley Patch Lady/Prudent patcher

3 users thanked author for this post.

Great Lake Bunyip, WildBill, samak

Reply | Quote

All the base cumulative Windows updates – the main cumulative update for Windows 10 (all versions), Windows 8.1, Windows 7, the Server versions… all of them list that above as a known issue.

Susan Bradley Patch Lady/Prudent patcher

6 users thanked author for this post.

Great Lake Bunyip, jburk07, twbartender, woody, WildBill, samak

Reply | Quote

Good advice, thank you Susan. Also see this:

https://borncity.com/win/2018/07/14/microsofts-july-2018-patch-mess-put-update-install-on-hold/

 

4 users thanked author for this post.

Great Lake Bunyip, gborn, woody, Elly

Reply | Quote

Win 7 32-bit group B, installed 4338823 and 4339093 (IE patch) Thursday, and using Comodo Firewall (but version 8.4, they’re at 11.0 now) so I’d say would count as network monitoring, but no BSOD so far. Here’s to hoping that’ll continue to be the case.

Also still had the files downloaded, hadn’t deleted yet, and downloaded 4338823 again now and even though it’s listed as dated Jul 13 the file seems the exact same one I downloaded the day before. Has the same hash at least.

—– Cavalary

Reply | Quote

Could you check the hash values of the newest (7/17/2018) version of KB4338823 also? It would be important to know if this is an upgraded version of the package or not. Thanks for your help.

Edit to remove HTML

Reply | Quote

The hash value attached to the x64 file name for 7/11 and 7/17 appears to be the same.

2 users thanked author for this post.

StruldBrug, Elly

Reply | Quote

Thanks for the information. I would have one more question. Do we need to install KB4338823 before KB4345459 or is it enough to install only KB4345459 to a Windows 7 64 bit system, that has no 2018 July updates installed on it? With one word: does KB4345459 replace/supersede KB4338823?

According to package details in Microsoft Update Catalog, KB4345459 does not replace KB4338823, but searching on the net I have found other, opposite information as well on these sites:

https://www.reddit.com/r/sysadmin/comments/8y5wev/exchange_server_2010_mail_flow_issues_after/

In a comment, I found this: Microsoft has released an updated patch, KB4345459 as a replacement for KB4338823”

https://www.askwoody.com/patch-list-master/
Next to KB4345459 we can read: Replaces patch from 7/10.

After all these, what is the truth? I think these are reliable sources, that’s why I ask you if you have any specific experiences.

Edit to remove HTML: Use the ‘text’ tab in the post entry box when you copy/paste from an HTML source.

Reply | Quote

anonymous wrote:

After all these, what is the truth? I think these are reliable sources, that’s why I ask you if you have any specific experiences.

The best recommendation I can give you at this time is DON’T PATCH. Updates are in too much of a mess – for ALL versions of Windows. And we are at DEFCON-1 which means WAIT. I do not recommend any of the patches at this time.

3 users thanked author for this post.

Elly, StruldBrug, Microfix

Reply | Quote

I sure wish anyone claiming KB4345459 is a “replacement” for anything would step forward and identify the MS source for this opinion. In fact, MS specifically states “This update does not replace a previously released update” on the MS information page for KB4345459. The KB433823 info page still refers to KB4345459 as a “Workaround” for 3 issues, but nowhere mentions “replacement”. If someone can cite an MS source, which says something different, please share the news.

1 user thanked author for this post.

Elly

Reply | Quote

Read these:
https://www.askwoody.com/forums/topic/microsoft-just-released-27-new-security-patches/#post-204357
https://www.askwoody.com/forums/topic/microsoft-just-released-27-new-security-patches/#post-204507
https://www.askwoody.com/forums/topic/microsoft-just-released-27-new-security-patches/#post-204691
On the third link you will find the MS source from a Microsoft employee.

Reply | Quote

Repeating what I posted when Woody initially warned of buggy July patches. As soon as I see the Defcon lowered to “2”, Update setting is immediately changed to “Never check for updates”; then I sit tight and wait for the techies to shake out the bugs. Sounds like there is a real infestation this month. I’m just a home user who wants my OS to function. Win 7 Pro, x64 i7core Haswell

1 user thanked author for this post.

WildBill

Reply | Quote

Thanks for the heads-up, Susan.

After installing this update, some devices running network monitoring workloads may receive the 0xD1 Stop error because of a race condition.

Sure would be nice to know in a bit more detail what a “network monitoring workload” is.

-Noel

Reply | Quote

“Network Monitoring Workloads”- this is NewSpeak in IT! Possible clarification:

https://virtualizationreview.com/articles/2017/06/12/the-art-and-science-of-workload-monitoring.aspx

But is it caused by the mere presence of the software used to  accomplish same, or does it refer to the act of  using said software? Aaargh. ESL engineering writers who think they’re real IT Tech Writers, or what? My head’s spinning again.

Input:

From here, KB4340556 remains dated July 10, KB4338818 same, except that though “important”, they are now unchecked!

I’m not going to touch this with a 20-foot cattle prod until this all shakes out.

Win7 Pro SP1 64-bit, Dell Latitude E6330 ("The Tank"), Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Newbie
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

1 user thanked author for this post.

Noel Carboni

Reply | Quote

People do what they need to do… but as Woody says, if you don’t want to be an unpaid beta tester, turn off updates. Following MS-DEFCON is a good thing, IMHO.

Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...

1 user thanked author for this post.

columbia2011

Reply | Quote

Susan Bradley wrote:

…how to pause updates… 

Someone on askwoody suggested Windows Update Blocker from Sordum. I’ve been using it ever since. Easy. No issues.

After downloading, run the app, click the dialogue button next to ‘Disable Service’ and ensure ‘Protect Service Settings’ is checked. Close the app.

When ready to update, open the app, click the dialogue button next to ‘Enable Service’. Disable again as soon as you finish updating.

Run WUShowHide immediately you switch on update if you if you need to block an update.

Group A (but Telemetry disabled Tasks and Registry)
1) Dell Inspiron with Win 11 64 Home permanently in dock due to "sorry spares no longer made".
2) Dell Inspiron with Win 11 64 Home (substantial discount with Pro version available only at full price)

2 users thanked author for this post.

Elly, Microfix

Reply | Quote

This looks like a nice wee portable app to have on a USB stick, Thanks, I hadn’t come across this before.

Windows - commercial by definition and now function...

1 user thanked author for this post.

Elly

Reply | Quote

I woke up this morning and my laptop had completely crashed and would not boot. Can’t say it was because of updates a few days ago, or the thunderstorms which only appear to affect this one notebook not the other two desktops or notebook. Reinstalled OS and its working again but alas enduring the updates again may f***** it again, fingers crossed.

1 user thanked author for this post.

Elly

Reply | Quote

W7 Sp1 Home x64 Group B unpaid beta test
KB890830 MSRT no issue
KB4054530 .Net 4.7.2 no issue
KB4340556 .Net Rollup no issue
KB4338823 W7x64 Security Only restart hung shutting down, otherwise no issue
KB4334093 IE11 Rollup no issue

No network monitoring workload or any VMware present. No telemetry or previews installed.

3 users thanked author for this post.

sabaithaime1, cesmart4125, Elly

Reply | Quote

Also installed KB4345459 Workaround for KB4338823 W7x64 Security Only issues … no problem

Reply | Quote

Looks like KB4338815 is causing a BSOD on the one Windows Server 2012R2 test machine I applied it on.

Windows 10 enthusiasts, please continue to sing the praises of laying off the QA people in favor of “telemetry.” Month after month we see the fruits of this idea.

2 users thanked author for this post.

Elly, woody

Reply | Quote

Test patched 6 computers at the office – no BSODs.  Am hearing that CarbonBlack software may be a trigger (third party software that deep scans for malicious-ness is often a factor in issues)

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

I have just come back to my two machines (Win7 Home premium, Office 2010 on one and and Office 2007 on the other) after a week away to find two unexpected points.

Firstly, there is no Win7 update offered on either. Has MS recognised the problems and pulled the patches?

Secondly, and more annoying, on the Office 2010 machine, the Office patches installed automatically. My settings are for notify but do not download. They had been changed to Download but do not install, yet it installed all the same. This is very annoying, because it is a machine that I paid for, with software that I paid for, so it should be mine not Microsoft’s. This is the second time this has happened in the last few months.  The only thing I can think of is that Dell Support might have done something, but it is set not to run.

Has anyone else seen this behaviour?

Chris
Win 10 Pro x64 Group A

Reply | Quote

Chris:

Does Dell have a Dell system monitoring or system health software installed? I found that on my Lenovo laptop the Lenovo system software can initiate Windows Update. However, the Lenovo software can also be set to not check for MS updates only Lenovos software, or to be fully manual.

I would also set Windows Update to “Do Not Check (not recommended)” and do all checks (except MSE) manually.

To me whether you follow Woody’s Group B or Group A is not as big an issue (I am Group B), as waiting until the issues and problems of the month’s updates shake out and the DefCon system goes to 3 or more. You can still be Group A (or B), but manually initiate the check, and then let it do its thing.

For Windows 7 the Second Tuesday is the day most patches are issued, so it is better to learn from others where the perils are located. I do not trust letting the WU system do anything behind my back these days.

For the Office patches, are you using an installed version of Office 2010 and have no other Office versions on the drive?

I know an installed version of Office 2013 on a friends machine that used WU is now a Click to Run version and updates itself, but I suspect he did something to it, especially since he was using the MS online programs at one time.

Reply | Quote

Bill

Yes I do have Dell Support installed, but it is set to run only once a month, and that was not when the symptom appeared. However, given there have been no other replies to my post, I suspect Dell Support is somehow responsible and have put it on probation.

I am aware of the Patch Tuesday cycle, and have been following Susan Bradley for many years now. That is why I was so annoyed when MS installed patches without permission.

Office is on an installed version of Office 2010 – I would not touch click-to-run with a barge pole!

Chris

Chris
Win 10 Pro x64 Group A

1 user thanked author for this post.

Bill C.

Reply | Quote

What AV are you using. Some of the Suites are now taking over all sorts of maintenance functions including getting Windows Updates for you, I refer to Avast even the free version) in particular, but some of the others do too unless you turn off the functions.

Reply | Quote

Kaspersky. I doubt they are responsible, because the other machine, which did not display these symtoms, also rins the same version of Kaspersky.

Chris
Win 10 Pro x64 Group A

Reply | Quote

BSOD after uninstalling KB4284833 confirmed on multiple Windows 2016 Server computers and VMs.
Resolved with dism.exe /image:C:\ /cleanup-image /revertpendingactions from the Recovery Prompt.
https://blogs.technet.microsoft.com/joscon/2009/07/14/the-coolest-new-dism-command-to-me-at-least/

EDIT: Corrected KB number

2 users thanked author for this post.

Elly, Noel Carboni

Reply | Quote

For all those who have not patched yet, you just do not know what you are missing out on. Now be quick and hurry, because Microsoft has a new, must have feature that you absolutely need yesterday, if not sooner.  Upgrade Now !

https://news.softpedia.com/news/microsoft-releases-a-windows-10-exclusive-astro-cat-emoji-521955.shtml

1 user thanked author for this post.

columbia2011

Reply | Quote

I understand that the general recommendation is to hold off on patching, but does this also apply to Windows 10 Adobe Flash Security Updates and monthly Windows Malicious Software Removal Tools? I don’t see either mentioned on the Master Patch List.

Reply | Quote

No.

Reply | Quote