{"id":12079,"date":"2018-04-20T06:30:08","date_gmt":"2018-04-20T14:30:08","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/04\/20\/news-5848\/"},"modified":"2018-04-20T06:30:08","modified_gmt":"2018-04-20T14:30:08","slug":"news-5848","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/04\/20\/news-5848\/","title":{"rendered":"You won\u2019t believe why the Win7 Monthly Rollup, KB 4093118, keeps installing itself"},"content":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Fri, 20 Apr 2018 06:14:00 -0700<\/strong><\/p>\n

Yesterday, I <\/span>talked about<\/span><\/a> the weird bug that makes April\u2019s Win7 Monthly Rollup, KB 4093118, re-install itself over and over, even when Windows Update says that it\u2019s been installed successfully. Windows sleuth abbodi86 has discovered the source of the problem, and it should give you patching pause.<\/span><\/p>\n

To understand how we got into this mess, you need to understand the bugs that Microsoft introduced in the March Win7 patches and their kludgey patches. Installing either the March Monthly Rollup (<\/span>KB 4088875<\/span><\/a>) or the March Security-only patch (<\/span>KB 4088878<\/span><\/a>) may knock your machine off the network. As Microsoft says:<\/span><\/p>\n

To shore up the problem, Microsoft released the <\/span>now-infamous KB 4099950,\u00a0<\/span><\/a>which fixes the NIC and static IP bugs \u2014 but only if you run KB 4099950 <\/span>before <\/strong>you install the March patches. I call it the Carnak the Magnificent patch. <\/span><\/p>\n

(KB 4099950 isn\u2019t part of the normal patching regimen. It\u2019s so convoluted, modified and poorly documented that patching pros are still <\/span>trying to figure out<\/span><\/a> how to use it.)<\/span><\/p>\n

Dutifully, Microsoft\u2019s April Monthly Rollup, KB 4093118, inherited the wayward ways of the March Monthly Rollup.<\/span><\/p>\n

Microsoft suddenly realized that most Win7 patchers aren\u2019t prescient, so they <\/span>re-released the April Monthly Rollup, KB 4093118, last week<\/span><\/a>, tacking the KB 4099950 shtick on the front of the Rollup. That way, anyone who installs the April Monthly Rollup automatically runs a routine called PCIClearStaleCache.exe, which clears the path for a non-buggy installation of the April Monthly Rollup.<\/span><\/p>\n

To summarize, the latest version of the April Monthly Rollup starts by running PCIClearStaleCache.exe, so the Rollup itself won\u2019t clobber NICs and static IP addresses. Got that?<\/span><\/p>\n

All was suitably confused and barely functional (the re-release of KB 4099950 didn\u2019t help), and then Microsoft released its <\/span>Monthly Rollup Preview<\/span><\/a>, KB 4093113. That\u2019s the \u201cpreview\u201d of non-security patches that are scheduled to appear next month. <\/span><\/p>\n

Those of you who have witnessed this melodrama before know that you should boo and hiss when you see a Preview. They aren\u2019t for normal people. You should never, ever install them unless you\u2019re adept at bomb disposal.<\/span><\/p>\n

But, of course, since Microsoft releases the Previews the same way it releases any other kind of patch \u2014 all it takes is a wayward click on a box to install a Preview \u2014 lots of people went ahead and installed this month\u2019s Monthly Rollup Preview, KB 4093113, anyway.<\/span><\/p>\n

Which is all well and good, unless you install the Monthly Rollup Preview, KB 4093113, <\/span>before <\/strong>you install this month\u2019s Monthly Rollup, KB 4093118.<\/span><\/p>\n

Here\u2019s what abbodi86 <\/span>discovered<\/span><\/a>:<\/span><\/p>\n

If you install the Preview Monthly Rollup, KB 4093113, all previous (lower) rollups get marked in Windows Update as \u201csuperseded.\u201d But the bundled PCIClearStaleCache.exe with this month\u2019s Monthly Rollup, KB 4093118, does not know or recognize that it has been superseded. It will demand that KB 4093118 gets installed and activated. <\/span><\/p>\n

Life will out, eh?<\/span><\/p>\n

Abbodi86 has a gloomy prognosis:<\/span><\/p>\n

So you will get a loop of KB4093118 re-installations until PCIClearStaleCache.exe realizes it isn\u2019t need any more, or you hide KB 4093118. [Realize that] KB 4093113 is not borked or have anything to do with the issue. The problem lies with how Windows Update works with updates\u2019 metadata.<\/span><\/p>\n

Will Microsoft break the chain? Or will some Win7 users get stuck in a never-ending re-patch loop? <\/span><\/p>\n

Ya gotta wonder who tests this stuff. <\/span><\/p>\n

Thx abbodi86, PKCano, and geekdom.<\/span><\/i><\/p>\n

Help us rearrange the deck chairs on the <\/span><\/i>AskWoody Lounge<\/span><\/i><\/a>.<\/span><\/i><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Fri, 20 Apr 2018 06:14:00 -0700<\/strong><\/p>\n

\n
\n

Yesterday, I <\/span>talked about<\/span><\/a> the weird bug that makes April\u2019s Win7 Monthly Rollup, KB 4093118, re-install itself over and over, even when Windows Update says that it\u2019s been installed successfully. Windows sleuth abbodi86 has discovered the source of the problem, and it should give you patching pause.<\/span><\/p>\n

To understand how we got into this mess, you need to understand the bugs that Microsoft introduced in the March Win7 patches and their kludgey patches. Installing either the March Monthly Rollup (<\/span>KB 4088875<\/span><\/a>) or the March Security-only patch (<\/span>KB 4088878<\/span><\/a>) may knock your machine off the network. As Microsoft says:<\/span><\/p>\n

To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10525],"class_list":["post-12079","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12079","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12079"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12079\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12079"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12079"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12079"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}