{"id":14731,"date":"2019-03-01T08:30:04","date_gmt":"2019-03-01T16:30:04","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/03\/01\/news-8480\/"},"modified":"2019-03-01T08:30:04","modified_gmt":"2019-03-01T16:30:04","slug":"news-8480","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2019\/03\/01\/news-8480\/","title":{"rendered":"Microsoft Patch Alert: After a serene February, Microsoft plops KB 4023057 into the Update Catalog"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security3-100734732-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Fri, 01 Mar 2019 07:50:00 -0800<\/strong><\/p>\n<p>Microsoft continues to hold Windows 10 version 1809 close to the chest. While all of the other Win10 versions have had their usual twice-a-month cumulative updates, the latest version of the last version of Windows, 1809, still sits in the Windows Insider Release Preview Ring.<\/p>\n<p>For most people, that\u2019s excellent news. It seems that Microsoft is willing to hold off until they get the bugs fixed, at least in the 1809 releases. May I hear a \u201challelujah\u201d from the chorus?<\/p>\n<p>You\u2019ve heard me talk about KB 4023057 many times, most recently <a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-patch-alert-january-patches-include-a-reprisal-of-kb-4023057-and-a-swarm-of-lesser-bugs.html\">in January<\/a>. It\u2019s a mysterious patch that Microsoft calls an \u201cupdate reliability improvement\u201d whose sole reason for existence, as best I can tell, is to blast away any blocks your machine may have to keep the next version of Windows (in this case, Win10 1809) from installing on your machine.<\/p>\n<p>KB 4023057 and its predecessor KB 4022868 have gone through 50 or so versions over the past three-plus years, and it\u2019s always been distributed stealthily \u2013 you get it when you install updates, unless you go to great pains to block it. @PKCano has a <a href=\"https:\/\/www.askwoody.com\/2018\/heres-how-to-hide-kb-4023057-and-any-other-win10-updates-you-dont-want\/\" rel=\"noopener nofollow\" target=\"_blank\">thorough description<\/a> of the tortuous procedure for preventing its installation.<\/p>\n<p>Now comes word <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/another-complaint-about-kb-4023057\/#post-335340\" rel=\"noopener nofollow\" target=\"_blank\">from @abbodi86<\/a> that on Thursday, for the first time, KB 4023057 has appeared in the <a href=\"https:\/\/www.catalog.update.microsoft.com\/Search.aspx?q=KB4023057\" rel=\"noopener nofollow\" target=\"_blank\">Microsoft Update Catalog<\/a>. It\u2019s not clear why the old bete noire has been elevated to Catalog status \u2013 and I doubt Microsoft will ever tell us.<\/p>\n<p>February\u2019s earlier Windows patches wreaked havoc on old Access databases. In January, Access 97 file format databases <a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-patch-alert-january-patches-include-a-reprisal-of-kb-4023057-and-a-swarm-of-lesser-bugs.html\">got clobbered<\/a> by all of the Windows updates. Then Access 95 databases got the shiv. It\u2019s almost as if nobody tests the Win10 cumulative updates against older databases, wouldn\u2019t you say?<\/p>\n<p>As of this writing, all is well (apparently), except for Win10 version 1809, which hasn\u2019t yet received the Access 95 inoculation.<\/p>\n<p>Word to the wise: If you have an older database program that you really need to use, watch out.<\/p>\n<p>There\u2019s a smattering of new bugs introduced by the Patch Tuesday patches, and subsequently fixed by Third Tuesday patches. The most entertaining of the lot is the Internet Explorer backslash bug. Of course, you don\u2019t use IE, but for those who do\u2026<\/p>\n<p>February\u2019s Patch Tuesday patches for Win7 and 8.1 contained this weird, acknowledged, bug:<\/p>\n<p>After installing this update, Internet Explorer may fail to load images with a backslash () in their relative source path.<\/p>\n<p>That bug, and several others, were fixed in the Third Tuesday Monthly Rollup preview patches \u2013 but those aren\u2019t distributed through normal channels. You have to wait until later in March, when the Monthly Rollup Preview patches will (presumably) be added to the March Monthly Rollups. Got that? A bug in the February security update is fixed by a patch in the next month\u2019s (presumably non-security) monthly rollup.<\/p>\n<p>Here\u2019s where things get weird. On Feb. 19, Microsoft released <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4491113\/cumulative-update-for-internet-explorer-february-19-2019\" rel=\"noopener nofollow\" target=\"_blank\">KB 4491113<\/a>, a \u201cCumulative update for Internet Explorer: February 19, 2019,\u201d which is a silver bullet patch with one intent:<\/p>\n<p>This cumulative update includes improvements and fixes for Internet Explorer 11 that is running on Windows 8.1 or Windows 7, and resolves the following issue:<\/p>\n<p>Internet Explorer cannot load images that have a backslash () in their relative sources path.<\/p>\n<p>So we have a cumulative update, KB 4491113, that fixes a bug introduced in this month\u2019s Monthly Rollups, but which is also fixed in this month\u2019s Monthly Rollup previews. The previews fix other bugs as well, but I guess this one was problematic enough to warrant a single silver bullet.<\/p>\n<p>Except\u2026 now comes word (from an <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/new-cumulative-update-kb-4491113-for-ie-in-win7-and-8-1-fixes-the-backslash-bug\/#post-330175\" rel=\"noopener nofollow\" target=\"_blank\">anonymous poster<\/a>) that KB 491113 is causing problems:<\/p>\n<p>FWIW, this \u201csilver bullet\u201d isn\u2019t quite ready to be fired; it caused problems with the game Halo: Spartan Strike by omitting some of the sound and then letting the game hang after a few minutes. It may also have caused some problems with videos on Firefox. Upon uninstalling, the Spartan is again killing Covenanters and Prometheans with full sound.<\/p>\n<p>If you\u2019re using Win10, the bug was fixed in the Third Tuesday patches \u2013 except for Win10 1809, which doesn\u2019t yet have a Third Tuesday patch.<\/p>\n<p>Moral of the story: Internet Explorer isn\u2019t a browser. It\u2019s a decorative appendage.<\/p>\n<p>To further complicate matters, the Win8.1 Monthly Rollup Preview, which fixes this bug, introduces a <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/microsoft-pushes-odd-third-tuesday-cumulative-updates-for-win10-1803-1709-1703-and-1607-but-not-for-1809\/#post-335362\" rel=\"noopener nofollow\" target=\"_blank\">truly bizarre bug<\/a> that enables Location Services and makes a nuisance of itself in the Notification (er, Action) Center.<\/p>\n<p>Microsoft <a href=\"https:\/\/www.computerworld.com\/article\/3340046\/microsoft-dismantles-its-update-naming-scheme-again-leaves-unanswered-questions.html\">changed its terminology<\/a>, again, but it hasn\u2019t yet officially declared that version 1809 is ready for business deployment. You can think of that as CBB, or SAC-not-T, SP1, or VGBS (venerable gray beard status), but whatever hokey name you put to it, the fact remains that Microsoft has not yet come out and said that Win10 version 1809 is suitable for mass consumption.<\/p>\n<p>The official <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/windows-10\/release-information\" rel=\"noopener nofollow\" target=\"_blank\">Windows 10 release information page<\/a> still lists it as \u201cSemi-Annual Channel (Targeted),\u201d which is old terminology but with a judicious nod and wink \u2013 and with a dearth of additional reassurances \u2013 it\u2019s clear that Microsoft isn\u2019t yet recommending that businesses move onto the latest and greatest.<\/p>\n<p>Hard to say when that\u2019ll happen, but there\u2019s lots of pressure to brand Win10 1809 as \u201cready for business\u201d (CBB, SAC, SP1, VGBS, whatever) before Win10 1903 arrives\u2026. which should be in 3\u2026 2\u2026 1\u2026<\/p>\n<p><em>Keep up on the parts of Windows that matter on the <\/em><a href=\"https:\/\/www.askwoody.com\/2019\/where-we-stand-with-the-february-patches\/\" rel=\"noopener nofollow\" target=\"_blank\"><em>AskWoody Lounge<\/em><\/a><em>.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-patch-alert-after-a-serene-february-microsoft-plops-kb-4023057-into-the-update-catalog.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security3-100734732-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Fri, 01 Mar 2019 07:50:00 -0800<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>Microsoft continues to hold Windows 10 version 1809 close to the chest. While all of the other Win10 versions have had their usual twice-a-month cumulative updates, the latest version of the last version of Windows, 1809, still sits in the Windows Insider Release Preview Ring.<\/p>\n<p>For most people, that\u2019s excellent news. It seems that Microsoft is willing to hold off until they get the bugs fixed, at least in the 1809 releases. May I hear a \u201challelujah\u201d from the chorus?<\/p>\n<h2><strong>Mystery update bulldozer KB 4023057 hits the Catalog<\/strong><\/h2>\n<p>You\u2019ve heard me talk about KB 4023057 many times, most recently <a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-patch-alert-january-patches-include-a-reprisal-of-kb-4023057-and-a-swarm-of-lesser-bugs.html\">in January<\/a>. It\u2019s a mysterious patch that Microsoft calls an \u201cupdate reliability improvement\u201d whose sole reason for existence, as best I can tell, is to blast away any blocks your machine may have to keep the next version of Windows (in this case, Win10 1809) from installing on your machine.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3216425\/microsoft-patch-alert-after-a-serene-february-microsoft-plops-kb-4023057-into-the-update-catalog.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10516,10909,13764,714,10525],"class_list":["post-14731","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-microsoft","tag-microsoft-office","tag-pcs","tag-security","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/14731","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=14731"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/14731\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=14731"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=14731"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=14731"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}