{"id":9446,"date":"2017-09-21T10:30:22","date_gmt":"2017-09-21T18:30:22","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/09\/21\/news-3219\/"},"modified":"2017-09-21T10:30:22","modified_gmt":"2017-09-21T18:30:22","slug":"news-3219","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/09\/21\/news-3219\/","title":{"rendered":"Where we stand with messy September Windows and .NET patches"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security12-100734741-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Thu, 21 Sep 2017 10:54:00 -0700<\/strong><\/p>\n<p>This month\u2019s Windows and .Net patches hold all sorts of nasty surprises \u2014\u00a0some acknowledged, some not, some easy to skirt, some waiting to swallow the unwary whole. Here\u2019s a quick overview of what\u2019s going on with this month\u2019s missives.<\/p>\n<p>Most important: If you can\u2019t keep yourself (or your clients) from clicking \u201cEnable Editing\u201d in Word, <a href=\"https:\/\/www.computerworld.com\/article\/3224870\/microsoft-windows\/if-you-cant-avoid-words-enable-editing-patch-windows-right-now.html\">you must install<\/a> a broad range of .NET patches (if you\u2019re running Windows 7 or 8.1) or cumulative updates (if you\u2019re running Windows 10), like, NOW.<\/p>\n<p>Cumulative Update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4038788\" rel=\"nofollow\">KB 4038788<\/a>, which brings the build number up to 15063.608, has two acknowledged (but not fixed) bugs:<\/p>\n<p>I\u2019m hearing reports that 4038788 brings out all sorts of problems with Edge \u2014 it\u2019s not just on first launch, and re-starting Edge doesn\u2019t solve the problems.<\/p>\n<p>There\u2019s an additional bug in 4038788, which has been fixed: <em>On some OEM systems (read: HP), Windows logon has registry keys that conflict with the app readiness service. After 5-10 minutes of black screen, users regain use of their device. This issue is triggered every time that Windows is restarted.<\/em> Microsoft fixed the problem with <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4043292\/black-screen-when-windows-10-restarts-after-a-windows-update-on-some-o\" rel=\"nofollow\">KB 4043292<\/a>, which must be downloaded and installed manually.<\/p>\n<p><em>When you run the Get-PhysicalDisk cmdlet, some disks may display an operational status of &#8220;In Maintenance Mode.&#8221; The Get-VirtualDisk cmdlet may also display the operational status of the virtual disk as &#8220;Degraded.&#8221;<\/em> There\u2019s a manual workaround described in <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4043361\/disks-in-maintenance-mode-status-after-september-cumulative-update-kb\" rel=\"nofollow\">KB 4043361<\/a>.<\/p>\n<p><em>On Windows Server 2016, when you try to download updates by using Windows Update (stand-alone or WSUS), the process hangs at 0 percent completion.<\/em> Microsoft has a description of the problem and two manual overrides in <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4039473\/windows-update-stuck-at-0-percent-on-windows-server-2016\" rel=\"nofollow\">KB 4039473<\/a>.<\/p>\n<p>There was a <a href=\"https:\/\/blogs.msdn.microsoft.com\/dotnet\/2017\/09\/12\/net-framework-september-2017-security-and-quality-rollup\/\" rel=\"nofollow\">rollup for all versions<\/a> that covers a remote code execution vulnerability known as <a href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2017-8759\" rel=\"nofollow\">CVE-2017-8759<\/a> in addition to a handful of non-security bug fixes. For unknown reasons, Windows 10 Creators Update got the security patch but didn\u2019t get the bug fixes.<\/p>\n<p>The .NET 4.5.2 rollup installer in some versions includes some bizarre non-English prompts, like the one in the screenshot below. Microsoft assures that it\u2019s only a glitch in the installer and not harmful.<\/p>\n<p>The .NET Security and Quality Rollups make certain custom images turn black. As Microsoft puts it: \u201cAfter you install the September 12, 2017, .NET Security and Quality Rollups that apply to the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7, you experience rendering issues in Windows Presentation Foundation (WPF) applications that use WPF types in a Windows service.\u201d<\/p>\n<p>There\u2019s a description of the problem on <a href=\"https:\/\/social.msdn.microsoft.com\/Forums\/vstudio\/en-US\/0f14f14c-5cd3-4505-9168-2ef9dc1f7031\/kb-4041083-kb-4040973-has-broken-wpf-rendering-in-services?forum=wpf\" rel=\"nofollow\">the Visual Studio forum<\/a>\u00a0and a workaround in <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4043601\/rendering-issues-after-the-september-12-2017-net-security-and-quality\" rel=\"nofollow\">KB 4043601<\/a>. The workaround suggests that you uninstall the Security and Quality Rollup and install the Security-only patch.<\/p>\n<p>There\u2019s a <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/technical-problems\/#post-133020\" rel=\"nofollow\">well-publicized problem<\/a> with Internet Explorer 11 suddenly sprouting a search box on the address bar after installing KB 4038777 (the Windows 7 Monthly Rollup) or KB 4036586 (the September Internet Explorer Security-only patch). For a detailed look at what\u2019s happening, with screenshots, see <a href=\"https:\/\/answers.microsoft.com\/en-us\/windows\/forum\/windows_7-performance\/kb-4038777-breaks-ie-11\/c41cd2c7-fabf-4bb7-acb4-94a8c023f84e\" rel=\"nofollow\">ElderN\u2019s post<\/a> on the Microsoft Answers forum. Ends up the flim-flammery is a result of font sizes changed behind the scenes and a possible undocumented switcheroo in one of the IE settings. See <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/technical-problems\/#post-133020\" rel=\"nofollow\">@PKCano\u2019s post<\/a>.<\/p>\n<p>Poster Richard has also identified a problem with starting IE 11 after this month\u2019s Windows 7 updates \u2014\u00a0and he found a solution. Again, it\u2019s related to undocumented changes in the Tab View settings and in font size. See post 8 on the <a href=\"https:\/\/www.askwoody.com\/2017\/patch-alert-update\/\" rel=\"nofollow\">AskWoody Lounge<\/a>.<\/p>\n<p>On the other hand, it looks like all of the officially acknowledged bugs in the <a href=\"https:\/\/www.computerworld.com\/article\/3221371\/microsoft-windows\/its-time-to-install-august-windows-and-office-patches-carefully.html\">August Windows 7 Monthly Rollup<\/a> have been fixed.<\/p>\n<p><em>Thanks to @MrBrian, @PKCano and dozens of additional testers \u2013 and complainers \u2013 on the <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/a-roundup-of-ongoing-problems-with-this-months-windows-and-net-patches\/\" rel=\"nofollow\">AskWoody Lounge<\/a>.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3226779\/microsoft-windows\/where-we-stand-with-messy-september-windows-and-net-patches.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security12-100734741-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Thu, 21 Sep 2017 10:54:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>This month\u2019s Windows and .Net patches hold all sorts of nasty surprises \u2014\u00a0some acknowledged, some not, some easy to skirt, some waiting to swallow the unwary whole. Here\u2019s a quick overview of what\u2019s going on with this month\u2019s missives.<\/p>\n<p>Most important: If you can\u2019t keep yourself (or your clients) from clicking \u201cEnable Editing\u201d in Word, <a href=\"https:\/\/www.computerworld.com\/article\/3224870\/microsoft-windows\/if-you-cant-avoid-words-enable-editing-patch-windows-right-now.html\">you must install<\/a> a broad range of .NET patches (if you\u2019re running Windows 7 or 8.1) or cumulative updates (if you\u2019re running Windows 10), like, NOW.<\/p>\n<h2>Windows 10 Creators Update version 1703<\/h2>\n<p>Cumulative Update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4038788\" rel=\"nofollow\">KB 4038788<\/a>, which brings the build number up to 15063.608, has two acknowledged (but not fixed) bugs:<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3226779\/microsoft-windows\/where-we-stand-with-messy-september-windows-and-net-patches.html#jump\">To read this article in full or to leave a comment, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10525],"class_list":["post-9446","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=9446"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9446\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=9446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=9446"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=9446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}