{"id":15211,"date":"2019-04-29T10:30:10","date_gmt":"2019-04-29T18:30:10","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2019\/04\/29\/news-8960\/"},"modified":"2019-04-29T10:30:10","modified_gmt":"2019-04-29T18:30:10","slug":"news-8960","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/04\/29\/news-8960\/","title":{"rendered":"Microsoft Patch Alert: April patches have sharp edges, with several missing, others reappearing"},"content":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Mon, 29 Apr 2019 09:32:00 -0700<\/strong><\/p>\n

You have to wonder who\u2019s testing this stuff.<\/p>\n

Admins, in particular, have had a tough month. April brought widespread breakdowns \u2013 bluescreens, hangs, very sluggish behavior \u2013 to hundreds of thousands of Win7 and 8.1 machines. This wasn\u2019t a \u201csmall percentage\u201d kind of event. For some companies, rebooting overnight on Tuesday brought seas of blue screens on Wednesday morning.<\/p>\n

The first round of cumulative updates and Monthly Rollups arrived on Patch Tuesday, but the now-ubiquitous second round didn\u2019t show up until late Thursday afternoon, two and a half weeks later. Talk about admins taking a beating.<\/p>\n

We still have one Tuesday left this month \u2013 the mythical \u201cE week\u201d that Microsoft never talks about \u2013 so the month may yet end with both a bang and whimper.<\/p>\n

Here\u2019s how things look as early Monday morning.<\/p>\n

It took a while, but the second round of April patches finally arrived<\/a>. The one exception is for Windows 10 version 1809, which still hasn\u2019t seen an \u201coptional non-security\u201d patch. (They\u2019re \u201coptional\u201d because you have to be a seeker \u2013 click Check for updates \u2013 in order to get hit with the patch.)<\/p>\n

We have a reliable report<\/a> that the second patches this month were held up because of continuing problems with the Japanese new era date bugs. That same report also says that even the latest patches have bugs. I find it all amazing \u2013 Microsoft\u2019s been working on this problem for at least a year, and the patches-of-patches have been stumbling all over themselves.<\/p>\n

Even Win10 1903 \u2013 the version still in beta testing \u2013 got a new patch, KB 4497093<\/a>, bringing the build number up to 18362.86. It\u2019s for \u201cInsiders who are currently in the Fast ring only and on Build 18362.53. We\u2019ll roll this out to the Slow and Release Preview rings in a bit.\u201d<\/p>\n

April\u2019s Patch Tuesday brought immediate complaints of Win7 bluescreens. Within a couple of days<\/a> we found out that six patches \u2013 for Win 7, 8.1, Server 2008 R2, 2012 and 2012 R2 \u2013 had conflicts with five different companies\u2019 antivirus products. The current tally:<\/p>\n

Sophos\u00a0<\/strong>\u2013 The company now says<\/a> it\u2019s figured out the source of the problem:<\/p>\n

\u201cWe have identified a permanent fix and are now automatically rolling out the fix to customers starting 25th April 2019. This will take place over a two- to three-week period.\u201d<\/p>\n

Microsoft continues to block the six dirty patches on systems running Sophos Endpoint.<\/p>\n

Avira\u00a0<\/strong>\u2013 The folks at Avira have been remarkably quiet. Our latest report from UAz<\/a> says they may have finally hit upon a solution \u2013 verified in the very early hours of Monday morning. Earlier attempts at an Avira solution failed, sometimes spectacularly. Microsoft has not changed its terse announcement:<\/p>\n

\u201cMicrosoft has temporarily blocked devices from receiving this update if Avira antivirus software is installed. We are presently investigating this issue with Avira and will provide an update when available.\u201d<\/p>\n

Arcabit\u00a0<\/strong>\u2013 The small Polish-language AV supplier has released an update that solves the problem, according to Microsoft, although the Microsoft link to Arcabit\u2019s support article points to a Technical Assistance phone number, and no discussion.<\/p>\n

Avast\/AVG\u00a0<\/strong>\u2013 The company has issued hotfixes<\/a> to avoid the bluescreens. (Avast owns AVG.) Oddly, though, the way to install the hotfixes isn\u2019t what you might expect:<\/p>\n

That, to me at least, is a very distressing way<\/a> to apply a hotfix.<\/p>\n

Microsoft no longer blocks the six dirty patches on machines running Avast or AVG.<\/p>\n

McAfee\u00a0<\/strong>\u2013 Late to the game, McAfee has acknowledged<\/a> that installing the dirty six patches may lead to slow boot up times or slow performance. The only solution to the problem, at present \u2013 aside from uninstalling the dirty six \u2013 is to disable any user-defined (non-default) Access Protection rules.<\/p>\n

Microsoft says it is \u201cpresently investigating this issue with McAfee,\u201d but they\u2019ve been saying that for a week.<\/p>\n

I\u2019m seeing scattered reports<\/a> that Win7 users are being offered KB 3185319 \u2014 an update from Sept. 13, 2016 \u2014 as a checked Important update to Win7. It\u2019s part of the MS16-104 bundle. I wrote about bugs in this patch back in October 2016<\/a>. This isn\u2019t the first time we\u2019ve seen KB 3185319 appear out of the blue.<\/p>\n

There are also reports of locked Server 2008 machines<\/a>\u00a0after installing this month\u2019s Monthly Rollup, KB 4493471.<\/p>\n

Keep up with the latest on the <\/em>AskWoody Lounge<\/em><\/a>.<\/em><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Mon, 29 Apr 2019 09:32:00 -0700<\/strong><\/p>\n

\n
\n

You have to wonder who\u2019s testing this stuff.<\/p>\n

Admins, in particular, have had a tough month. April brought widespread breakdowns \u2013 bluescreens, hangs, very sluggish behavior \u2013 to hundreds of thousands of Win7 and 8.1 machines. This wasn\u2019t a \u201csmall percentage\u201d kind of event. For some companies, rebooting overnight on Tuesday brought seas of blue screens on Wednesday morning.<\/p>\n

The first round of cumulative updates and Monthly Rollups arrived on Patch Tuesday, but the now-ubiquitous second round didn\u2019t show up until late Thursday afternoon, two and a half weeks later. Talk about admins taking a beating.<\/p>\n

We still have one Tuesday left this month \u2013 the mythical \u201cE week\u201d that Microsoft never talks about \u2013 so the month may yet end with both a bang and whimper.<\/p>\n

To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10516,10909,13764,714,10525],"class_list":["post-15211","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-microsoft","tag-microsoft-office","tag-pcs","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=15211"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15211\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=15211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=15211"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=15211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}