Playing catch-up with Windows and Office patches

Topic

New Reply

Patch Tuesday is just around the corner, and many of you are confused about which patches to install, which to avoid. Here’s a simple list: If you hav
[See the full post at: Playing catch-up with Windows and Office patches]

Reply | Quote

Replies

The list of Critical (Security) updates today for Office 2010, 2013 and 2016 is very large.  I’m reading the notes now at https://portal.msrc.microsoft.com/en-us/security-guidance and these look like they might be worth considering due to the severity of the exploits they patch.

Guess I’ll be a test rat – we’re going to approve via WSUS the new Office patches tonight across our client base (but we’re holding off on the OS patches until at least Friday, if not longer.)

Will let you know how things go tonight.

~ Group "Weekend" ~

Reply | Quote

Some unsupported operating systems are getting new patches today. See https://www.theverge.com/2017/6/13/15790030/microsoft-windows-xp-vista-security-updates-june-2017 for details.

Reply | Quote

From June 2017 security update release:

“Microsoft releases additional updates for older platforms to protect against potential nation-state activity

Today, as part of our regular Update Tuesday schedule, we have taken action to provide additional critical security updates to address vulnerabilities that are at heighted risk of exploitation due to past nation-state activity and disclosures. Some of the releases today are new, and some are for older platforms under custom support agreements, that we are making publicly available today. “

3 users thanked author for this post.

ch100, Elly, NetDef

Reply | Quote

In the body of the servicing stack update support page KB4023834 Microsoft only displays ‘VSO 11332770’. It may not be a secret code about Voluntary Service Overseas or Vancouver’s Symphony Orchestra; If it is a secret code where do I get the special decoding ring or paper pad?

Reply | Quote

The support page is here KB 4023834

And the update can be downloaded from MS Update Catalog

Reply | Quote

I did search for that number up in the update catalog, so they must have changed that page to explain it.

Should I wait on this patch like the update rollups or install the servicing stack update now?

Reply | Quote

That is the servicing stack for Win10 1607. Normally servicing stack updates are stand alone patches. That means they have to be installed by themselves and may not show up in Windows Update until all other updates are installed.

You should wait receive the Win10 patch through Windows update instead of manual installation.

Reply | Quote

Yes, thanks you. What I meant was, Should I wait on installation until and if other people report any problems with the servicing stack update?

Reply | Quote

Yes, you should wait. We are at DEFCON2, the patches just came out. It is not time to install any June patch yet.

Reply | Quote

Thank you.

Reply | Quote

Please will someone confirm or deny my experience with super-slow downloads from the MS update servers. I’m trying to determine if it’s a global or local problem.

GaryK

Reply | Quote

A side benefit of the MSDefCon2 status is to avoid the crush of a billion users wanting to be first in line.

When the Ice Cream Man comes down the street, everyone wants to be first before it melts or he runs out of Rocket Pops. But these updates don’t go stale.

MS-DEFCON 2:
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don’t do it.

Another smaller surge happens on Friday End of Business in each timezone, when IT departments large or singular get the OK from the Important People to do work that might have interrupted service earlier in week.

edit to note: defcon status was current at time of post.

Reply | Quote

Hi Gary,

For the first 1-2 hours after the patches were released, my WSUS systems also experienced very slow downloads from the MS mothership. Looks like the speed has picked back up now, so I may actually get to install some patches on my test VMs later today.

Reply | Quote

AKB2000003, The Ongoing list of “Group B” monthly updates for Win7 and 8.1 has been updated 6/13/2017. Win7/8.1 Security-only patches and Cumulative Update for IE11.
It is not time to install them yet. WAIT. We are still at DEFCON2. They will still be there when Woody raises the DEFCON number to 3-5.

AKB2000003

Reply | Quote

Is it ok to install these security only patches from May now?

May 2017 KB 4019263 – Download 32-bit or 64-bit
May 2017 (IE11) KB 4018271 – Download 32-bit or 64-bit

Reply | Quote

Yes, May 2017 security only patches (and any before that date) are safe to install

Reply | Quote

Thanks PK.

Reply | Quote

Can someone please shed some light here? I use Office 2003 on Windows 7 pro x64, and today, after months (years, I would say) without new patches for Office 2003 on Windows Update, I see KB3203484 on the list. According to Microsoft, it’s an update for Word Viewer:

https://support.microsoft.com/en-us/help/3203484/descriptionofthesecurityupdateforwordviewerjune13,2017

If I’m using the full Office suite and not a standalone viewer, should I be offered a patch for a viewer?

Thanks in advance for any answer.

César

Reply | Quote

The Word Viewer (and some of the other “viewers” for MS products) allow those with older versions of Office to view (and convert) .docx, .xlsx. and .pptx files. They actually run a cut-down version of the later programs, and as such, need the patches for them. That’s why you have the patch.

1 user thanked author for this post.

Cesar

Reply | Quote

Thanks, PKCano. Still, it’s strange. The only things I’ve installed for Office are the Proofing Tools to add support for other languages, the File Validation Add-In (from Windows Update) and the Compatibility Pack for 2007 Office System to add support for Office 2007 newer formats. I’m regularly offered updates for Office 2007 to address issues with the Compatibility Pack -in fact, this month I have four patches for Office 2007: KB3191828, KB3203436, KB3127894 and KB3203438-, but support for Office 2003 ended a long time ago and I’ve added no 2003 viewer, as I have the full Office suite to view the files. That’s why I’m intrigued.

https://1drv.ms/i/s!Asz1BwBNTHWWhDFFnVtaiaMwXD4l

César

Reply | Quote

You might not have noticed, but the Word Viewer 2003 patch was a regular monthly update for the last about 3 years. This product is the only one with updates released for Office 2003 since it went out of support.
Nothing unusual there.

1 user thanked author for this post.

Cesar

Reply | Quote

Thanks ch100. If there were monthly updates for Word Viewer 2003, I haven’t received them recently via Windows Update. It’s been months without a single patch offered for Office 2003 on Windows Update. At least, for my system. That was what caught my attention.

César

Reply | Quote

Cesar wrote:

I use Office 2003 on Windows 7 pro x64

I meant “Ultimate”, not “pro”. Sorry for the confusion. :$

César

Reply | Quote

Installed all patches no problems. Win 7 64 bit. I installed also net framework 4.7, but  May preview rollup for net framework 4.6.x still offered by WU. So strange.

Reply | Quote