{"id":15105,"date":"2019-04-16T08:30:13","date_gmt":"2019-04-16T16:30:13","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2019\/04\/16\/news-8854\/"},"modified":"2019-04-16T08:30:13","modified_gmt":"2019-04-16T16:30:13","slug":"news-8854","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/04\/16\/news-8854\/","title":{"rendered":"Win7\/8.1\/Server patch conflicts abated, somewhat, but it\u2019s still too early to install the April crop"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security12-100734741-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Tue, 16 Apr 2019 08:02:00 -0700<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">A week ago, Microsoft released six patches that brought many machines to their knees. As I <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3388643\/this-month-s-windows-patching-debacle-gradually-comes-into-focus.html\" rel=\"noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">explained last Friday<\/span><\/a><span style=\"font-weight: 400;\">, when the dust cleared, it was apparent that all six of these April patches:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">would trigger blue screens on reboot on most systems running Sophos antivirus products, and many systems running AV products from Avast and Avira.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We now have updates from two of the three AV companies:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Microsoft says that it\u2019s still blocking the six bad actors from installing on computers with Sophos Endpoint installed. There\u2019s no similar advice for Avast.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Oddly, the <\/span><a href=\"https:\/\/www.avira.com\/en\/support-for-home-knowledgebase-detail\/kbid\/1976?x-c-channel=AW&amp;awc=5659_1555414507_1ce1186d073d808ae87772fef86c9986\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">advisory page for Avira<\/span><\/a><span style=\"font-weight: 400;\"> now comes up with a \u201cpage not found.\u201d Yet Microsoft continues to contend, \u201cMicrosoft and Avira have identified an issue on devices with Avira antivirus software installed that may cause the system to become unresponsive upon restart after installing this update.\u201d<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You may recall that Avira, alone among the three, also claimed that installing this month\u2019s first cumulative update for Win10 version 1809, KB 4493509, slowed machines down to the point they\u2019re unusable. No official word on that claim at this point.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Speaking of slowdowns, a small Polish AV company called ArcaBit has seen the error of its ways. Microsoft has modified its KB articles for the Win7 and 8.1 Monthly Rollups, and for the Win10 1809 first April cumulative update to say:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Microsoft and ArcaBit have identified an issue on devices with ArcaBit antivirus software installed that may cause the system to become unresponsive upon restart after installing this update. ArcaBit has released an update to address this issue.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Although the<\/span><a href=\"https:\/\/www.arcabit.pl\/wsparcie-techniczne.html\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\"> linked ArcaBit article<\/span><\/a><span style=\"font-weight: 400;\"> has been pulled. Oddly (there\u2019s that word again), there\u2019s no analogous warning for the Win7 or 8.1 Security-only patches, or for the Server patches.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Where does that leave us, a week later? <\/span><\/p>\n<p><span style=\"font-weight: 400;\">I\u2019m still astounded by the indifference. Any way you slice it, whoever made the decision to release this month\u2019s six Win7, 8.1, and Server patches either:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I have a hard time deciding which is worse.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">I continue to recommend that you <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3387524\/patch-tuesdays-coming-so-lock-down-automatic-updates.html\" rel=\"noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">hold off<\/span><\/a><span style=\"font-weight: 400;\"> on the April patches.<\/span><\/p>\n<p><i><span style=\"font-weight: 400;\">We\u2019re following the situation intently <\/span><\/i><a href=\"https:\/\/www.askwoody.com\/2019\/ms-defcon-2-patching-conflicts-with-sophos-and-avast-are-getting-better-but-aviras-a-no-show-dont-patch\/\" rel=\"nofollow noopener\" target=\"_blank\"><i><span style=\"font-weight: 400;\">on AskWoody<\/span><\/i><\/a><i><span style=\"font-weight: 400;\">.<\/span><\/i><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3389696\/win7-8-1-server-patch-conflicts-abated-somewhat-but-it-s-still-too-early-to-install-the-april-crop.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security12-100734741-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Tue, 16 Apr 2019 08:02:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p><span style=\"font-weight: 400;\">A week ago, Microsoft released six patches that brought many machines to their knees. As I <\/span><a href=\"https:\/\/www.computerworld.com\/article\/3388643\/this-month-s-windows-patching-debacle-gradually-comes-into-focus.html\" rel=\"noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">explained last Friday<\/span><\/a><span style=\"font-weight: 400;\">, when the dust cleared, it was apparent that all six of these April patches:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Win7 and Server 2008 R2 Monthly Rollup (KB 4493472) and Security-only (KB 4493448) patches<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Win8.1 and Server 2012 R2 Monthly Rollup (KB 4493446) and Security-only (KB 4493467) patches<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Server 2012 Monthly Rollup (KB 4493451) and Security-only (KB 4493450 ) patches<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">would trigger blue screens on reboot on most systems running Sophos antivirus products, and many systems running AV products from Avast and Avira.<\/span><\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3389696\/win7-8-1-server-patch-conflicts-abated-somewhat-but-it-s-still-too-early-to-install-the-april-crop.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10516,714,10525],"class_list":["post-15105","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-microsoft","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15105","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=15105"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15105\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=15105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=15105"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=15105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}