{"id":10603,"date":"2017-11-27T08:30:31","date_gmt":"2017-11-27T16:30:31","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/11\/27\/news-4375\/"},"modified":"2017-11-27T08:30:31","modified_gmt":"2017-11-27T16:30:31","slug":"news-4375","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/11\/27\/news-4375\/","title":{"rendered":"Microsoft Thanksgiving turkeys: One patch disappears, another yanked"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security9-100734738-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Mon, 27 Nov 2017 06:37:00 -0800<\/strong><\/p>\n<p>For those of us keeping track of Windows patches, the long four-day weekend in the U.S. felt like another instantiation of Mr. Toad\u2019s Wild Ride. Here are the developments, in more or less chronological (which is to say, not logical at all) order.<\/p>\n<p>While many of you were sneaking out the door early on Wednesday, Microsoft released KB 4055038, a fix for bugs that clobbered Epson dot matrix printers, introduced in this month\u2019s Patch Tuesday security patches. I <a href=\"https:\/\/www.computerworld.com\/article\/3237586\/microsoft-windows\/patch-alert-microsoft-acknowledges-printer-bug-forced-1709-upgrades-continue.html\">talked about<\/a> the bug two weeks ago. In short, a bug in all of this month\u2019s Windows security patches caused Epson dot matrix printer drivers to fail. The bug appeared in:<\/p>\n<p>No matter how you slice it, that\u2019s one impressive list of buggy Windows versions. As I explained at the time, the bug isn\u2019t in Epson\u2019s printer drivers. The bug\u2019s in Microsoft\u2019s security patches. All 11 of them.<\/p>\n<p>Microsoft released a fix for the bug just as many of us were off to visit family, friends and others with malfunctioning printers. The fix, called <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4055038\/november-21-2017-kb4055038\" rel=\"nofollow\">KB 4055038<\/a>, only applies to these six products:<\/p>\n<p>Of course, Microsoft didn\u2019t document the rollout on its official <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/894199\/software-update-services-and-windows-server-update-services-changes-in\" rel=\"nofollow\">Windows Update page<\/a>. (Still hasn\u2019t, far as I can tell.) But apparently KB 4055038 went out the Automatic Update chute on or around Nov. 21. Those of you who use Epson dot matrix printers on Win7 or 8.1, and have Automatic Update enabled, would\u2019ve been without a printer for a week.<\/p>\n<p>Raise your hand if you bought a new printer over the weekend because the old one wouldn&#8217;t work.<\/p>\n<p>Microsoft\u2019s fix for older versions of Windows didn\u2019t plug the printer hole in more recent versions of Windows. For that, we had two patches released on Nov. 22.<\/p>\n<p>KB9999786 was accidently published as a test package to WSUS\/Catalog. This package has been removed from WSUS\/Catalog. Customers who downloaded KB9999786 should delete\/remove this package.<\/p>\n<p>So at this point we still don\u2019t have Epson dot matrix printer support for:<\/p>\n<p>Epson has kindly provided <a href=\"https:\/\/epson.com\/Support\/wa00847\" rel=\"nofollow\">a matrix<\/a> listing some of the outstanding problems with Microsoft\u2019s updates. It managed to keep the verbiage civil, possibly because the sudden failure of so many old printers must&#8217;ve contributed to the bottom line. Ka-ching.<\/p>\n<p>As if that weren\u2019t enough to make you choke on your cranberry sauce, we had a second, separate row with .Net updates. G\u00fcnter Born picked it up on his <a href=\"http:\/\/borncity.com\/win\/2017\/11\/24\/net-framework-update-kb4049016-pulled\/\" rel=\"nofollow\">Tech and Windows World blog<\/a>. Microsoft officially released these four .Net updates on Patch Tuesday:<\/p>\n<p>Now, it looks as if all of those have been pulled. Although all of the patches still appear in the official <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/894199\/software-update-services-and-windows-server-update-services-changes-in\" rel=\"nofollow\">Windows Update list<\/a>, none are available in the <a href=\"https:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=KB4049016\" rel=\"nofollow\">Update Catalog<\/a>, and there\u2019s no indication in either the Update list or in the individual KB articles that explain why.<\/p>\n<p>If you want to find out why, you need to unravel a comment <a href=\"https:\/\/blogs.msdn.microsoft.com\/dotnet\/2017\/11\/14\/net-framework-november-2017-security-and-quality-rollup\/\" rel=\"nofollow\">posted by Microsoftie Rich Lander <\/a>on an obscure MSDN Technet entry. Lander describes Microsoft\u2019s quandary on releasing .Net bug fixes (\u201cquality only\u201d updates) and security fixes, and how those fit into the Patch Tuesday model. Abbodi86 asks:<\/p>\n<p>Why didn\u2019t the November Rollup (quality-only) supersede October Rollup (quality-only)? i.e. for Windows 8.1, both November (KB4043767) and October (KB4049017) are requested<\/p>\n<p>To which Lander replied:<\/p>\n<p>Good question. That\u2019s a mistake on our part. We will fix the supercedence so that November supercedes October. Because of the upcoming US holiday, we won\u2019t be able to fix it until later in the month.<\/p>\n<p>The, uh, net result to Windows users: You may or may not see the patch(es). Since it\u2019s a \u201cquality only\u201d patch, it\u2019s just a bug fix. There are no security issues lurking. Go back to sleep, but make sure Automatic Update is turned off.<\/p>\n<p>So over the long weekend we discovered how Microsoft tests and fixes dot matrix printers, and how it stumbles over its own .Net patching regimen. Kinda makes you feel warm and fuzzy, yes?<\/p>\n<p><em>The <a href=\"https:\/\/www.askwoody.com\/2017\/a-real-turkey-of-a-thanksgiving-weekend-disappearing-patches-kb-4049016-and-9999786-new-patches-4055038-405524-and-how-its-all-tied-up-in-knots\/\" rel=\"nofollow\">AskWoody Lounge<\/a> is bobbing up and down as we roll in security patches. Join us if you can.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3238470\/microsoft-windows\/microsoft-thanksgiving-turkeys-one-patch-disappears-another-yanked.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security9-100734738-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Mon, 27 Nov 2017 06:37:00 -0800<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>For those of us keeping track of Windows patches, the long four-day weekend in the U.S. felt like another instantiation of Mr. Toad\u2019s Wild Ride. Here are the developments, in more or less chronological (which is to say, not logical at all) order.<\/p>\n<p>While many of you were sneaking out the door early on Wednesday, Microsoft released KB 4055038, a fix for bugs that clobbered Epson dot matrix printers, introduced in this month\u2019s Patch Tuesday security patches. I <a href=\"https:\/\/www.computerworld.com\/article\/3237586\/microsoft-windows\/patch-alert-microsoft-acknowledges-printer-bug-forced-1709-upgrades-continue.html\">talked about<\/a> the bug two weeks ago. In short, a bug in all of this month\u2019s Windows security patches caused Epson dot matrix printer drivers to fail. The bug appeared in:<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3238470\/microsoft-windows\/microsoft-thanksgiving-turkeys-one-patch-disappears-another-yanked.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10761],"class_list":["post-10603","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows-10"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/10603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=10603"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/10603\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=10603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=10603"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=10603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}