Page 1 of 3 123 LastLast
Results 1 to 15 of 32
  1. #1
    iNET Interactive
    Join Date
    Jan 2010
    Location
    Seattle, WA, USA
    Posts
    376
    Thanks
    1
    Thanked 29 Times in 24 Posts

    Cleaning up after massive Patch Tuesday




    PATCH WATCH

    Cleaning up after massive Patch Tuesday

    By Susan Bradley

    While much of the world turns its attention to this week's royal wedding of Will and Kate, I'm still cleaning up the royal mess following the largest Patch Tuesday we've had.

    PowerPoint 2003 finally is fixed, but headaches remain for .Net and other updates.

    The full text of this column is posted at WindowsSecrets.com/2011/04/28/06 (opens in a new window/tab).

    Columnists typically cannot reply to comments here, but do incorporate the best tips into future columns.

  2. #2
    iNET Interactive
    Join Date
    Jan 2010
    Location
    Seattle, WA, USA
    Posts
    376
    Thanks
    1
    Thanked 29 Times in 24 Posts

    Regularly updated problem-patch chart

    This table provides the status of problem patches reported in previous Patch Watch columns. Patches listed below as safe to install will be removed from the next updated table.

    Patch
    Released
    Description
    Status
    2492386
    04-26
    Application compatibility for April
    Hold
    982018
    04-26
    Advanced Format Disk update
    Hold
    2512715
    04-26
    Windows 2008 R2 server core update
    Hold
    2506928
    04-26
    IE 9 and Outlook update
    Hold
    976932
    02-22
    Windows 7 Service Pack 1
    Hold
    2446708
    04-12
    .NET 4 historic patching issues
    Hold
    2446709
    04-12
    .NET 2/3.5 historic patching issues; KB 2446710 for Win7 SP1, KB 2446704 for XP
    Hold
    2509470
    04-12
    Extended Protection for Outlook patch recalled
    Hold
    2467023
    02-08
    Win7 fix; load/unload binaries flaw
    Wait
    2467174
    04-12
    Visual C++ redistributable check LOB impact
    Wait
    2467175
    04-12
    Visual C++ 2005 redistributable check LOB impact
    Wait
    2511250
    04-12
    Printing fix for IE 9 hold back on IE 9 upgrade for now
    Wait
    971029
    02-22
    Flash-drive patch for Windows XP
    Optional
    2387530
    02-22
    Win7 hotfix for configuring Wi-Fi services
    Optional
    2484033
    02-22
    XPS document print patch for Windows 7
    Optional
    2487426
    02-08
    Win7 fix running x32 apps in x64 OS (post-SP1 update)
    Optional
    2505438
    02-22
    Fixes possible performance problems running some apps
    Optional
    947821
    02-22
    Windows System Update Readiness fix for SP1
    Install
    2393802
    02-22
    Kernel patch triggered BSOD; use Symantec solution
    Install
    2464588
    04-12
    PowerPoint 2003 follow up with KB 2543241 if needed
    Install
    2497640
    04-12
    Internet Explorer attacks in the wild
    Install
    2502786
    04-12
    Excel 2003; KB 2466169 for Excel 2002, 2464583 for Excel 2007, 2466146 for Excel 2010
    Install
    2506014
    04-12
    Hardening the system for prevention of rootkits
    Install
    2506223
    04-12
    Windows Kernel wait for further testing
    Install
    2508272
    04-12
    ActiveX kill bit wait for further testing
    Install
    2509503
    04-12
    Office 2003 Excel vulnerability, KB 2509461 for XP, 2509488/2007
    Install
    2509553
    04-12
    DNS unlikely threat for home/small-biz users
    Install
    2511455
    04-12
    SMB client likely to see exploits
    Install

    Status recommendations: Skip patch not needed; Hold do not install until its problems are resolved; Wait hold off temporarily while the patch is tested; Optional not critical, use if wanted; Install OK to apply.

  3. #3
    New Lounger
    Join Date
    Mar 2010
    Location
    Washington, DC
    Posts
    2
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Susan - Your columns are very useful, but a bit complex for non IT professionals to utilize in a practical fashion. I manage six machines at home, for example. Just running Windows update monthly can be a two hour exercise. It would be too much for me to print your list of various categories of updates and then look at each machine to decide which to manually accept -- as opposed to just using "automatic update" on those machines. Is there some way for you to author a simplified version for non IT professionals. Maybe just something that says "take the time and don't do this one because it might crash your system." In short, is there some way for you to communicate what non IT professional absolutely need to know, as opposed to what would be nice to know if we had more time to know the subtleties? Thanks! Jim

  4. #4
    3 Star Lounger
    Join Date
    Jul 2010
    Location
    Raleigh, NC
    Posts
    211
    Thanks
    11
    Thanked 20 Times in 17 Posts

    Question Safe to install KB2522422?

    I don't know if this was a previous "hold" or something new, but it's not on your list. What's your recommendation?

  5. #5
    3 Star Lounger
    Join Date
    Jul 2010
    Location
    Raleigh, NC
    Posts
    211
    Thanks
    11
    Thanked 20 Times in 17 Posts

    Question Safe to install KB2515325?

    Again, I don't know if this was a previous hold/wait or something new.

    Any chance you could, in your column, explicitly list patches that you've changed to an "install" recommendation since your prior column? This would clarify a lot of things, I suspect.

  6. #6
    2 Star Lounger
    Join Date
    Dec 2009
    Location
    Langhorne, PA
    Posts
    106
    Thanks
    53
    Thanked 1 Time in 1 Post

    More info for previous questions by bethel95

    The two updates [KB2515325 & KB2522422] mentioned above were offered to me as for Windows 7 x64-based systems.

    Norman

  7. #7
    Star Lounger
    Join Date
    Nov 2010
    Location
    Largo, MD. USA
    Posts
    58
    Thanks
    4
    Thanked 0 Times in 0 Posts
    As far as the patches went, you were right in regards the .NET updates; they messed with all my XP machines. I found that I could simply use ADD/REMOVE PROGRAMS to remove all the .NETs save for v1.1 and then went onto Windows Update. The first one offered was the 704; it was downloaded and started the install AFTER turning off antimalware/antivirus products (in this case, Threatfire and Avast {these play well with one another} but Threatfire messes with updates the worst). It installed properly, the a couple more times with Windows Update in Custom mode to select the .NET updates only and I'm back in business. An hour to hour and a half on two netbooks, a laptop (an old Sony at least 6 yr old) and two desktops. I went through this before when a .NET kept reinstalling itself. I read the column, went to the .NET removal site, then crossed my fingers and tried the add/remove which indeed worked.

  8. #8
    New Lounger
    Join Date
    Dec 2009
    Location
    Bedford UK
    Posts
    14
    Thanks
    3
    Thanked 0 Times in 0 Posts
    The comments on this topic prompt me to raise an issue regarding Windows7 SP1 update.
    We have a Sony Vaio running Windows7 64bit which insists on downloading microsoft updates and installing them on shutdown WITHOUT permission. This is even though I have the options set to 'download but not install without my permission'?? Why is this, is there some thing I have missed in the settings?
    So, this machine went on to download this W7 SP1 update which quite literally took hours - at least four - I don't know exactly because I went to bed and left it. The following morning it insisted on 'configuring the update' which also took between three and four hours!!
    SInce this episode I have reviewed the update settings and they are as I stated earlier.This evening it again did a download without permission although this time it shut down almost straight away. In doing this I don't know what is being downloaded and I can't select which items to allow or not. ANy ideas ??

  9. #9
    New Lounger
    Join Date
    Apr 2011
    Posts
    5
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Question: In the patch chart, KBs 2506223 and 2508272 say "wait for further testing" in the description but indicate "Install" in the right column. Which is correct - Install or Wait?

    I really appreciate your patch watch column as I always use it before patching our XP's.

  10. #10
    3 Star Lounger midnight's Avatar
    Join Date
    Dec 2010
    Location
    Almost Deep East Texas
    Posts
    352
    Thanks
    42
    Thanked 8 Times in 7 Posts
    Quote Originally Posted by Cannonball View Post
    Susan - Your columns are very useful, but a bit complex for non IT professionals to utilize in a practical fashion. I manage six machines at home, for example. Just running Windows update monthly can be a two hour exercise. It would be too much for me to print your list of various
    Jim, you might try my method of 'automating' Susan's charts. First I copy the chart as shown in Tracey's message #2. Then I paste it into a spread sheet. Adjust the columns to fit one page. Then I do a sort based on the patch numbers. Finally I go through and change the color of any that are labeled Wait or Hold. Then I can eliminate any that don't apply to my OS. Print it out (I do one copy for each computer) and check through the list of what is pending, and install those that are okay, hide those that are to be held. Periodically I check the Installed Updates file and see where I am. Takes longer to write than it does to do.
    BJ

  11. The Following User Says Thank You to midnight For This Useful Post:

    cyberdiva (2011-07-01)

  12. #11
    Star Lounger
    Join Date
    Jun 2001
    Location
    Harpenden, Hertfordshire, England
    Posts
    85
    Thanks
    3
    Thanked 0 Times in 0 Posts
    I have had a different problem with 2464588 (Powerpoint 2003). When installed, it caused Outlook to freeze up when viewing an email. Possibly related to the graphics pulled down from a website. The freeze was a good one - it took many attempts to end the program through Task Manager to kill it.

    I did not install the hotfix 2543241 because that fix relates to a Powerpoint problem. I un-installed 2464588 (and there it will stay) and Outlook recovered.

    My setup is WinXP Home SP3 with Office 2003 Professional SP3.

    Chris

  13. #12
    Lounger
    Join Date
    Apr 2011
    Posts
    41
    Thanks
    2
    Thanked 3 Times in 3 Posts
    Ditto to hsmith's question: Are KB 2506223 and 2508272 OK to install? Is the "wait for testing" a reference to previous instructions and just part of the description or is there more to wait for before installing these updates?

    Also, is it OK to install KB2466156, KB2485663, and KB2464635? KB2466156 and KB2485663 were on the 4/12 list as OK to install, but in her narrative, Susan said to wait to install all the Office updates if we are running Office 2003, so I didn't install any of the updates I was offered that linked to MS11-021, 022, 023 or 033.

    Thanks.

  14. #13
    Lounger
    Join Date
    Apr 2011
    Posts
    41
    Thanks
    2
    Thanked 3 Times in 3 Posts
    Does installation of KB2393802 (Kernel patch that crashed the Intel and AMD graphics) present any problems for computers with NIVIDA graphics cards?

  15. #14
    Super Moderator Deadeye81's Avatar
    Join Date
    Dec 2009
    Location
    North Carolina, USA
    Posts
    2,654
    Thanks
    7
    Thanked 113 Times in 97 Posts
    Quote Originally Posted by MarciaG View Post
    Does installation of KB2393802 (Kernel patch that crashed the Intel and AMD graphics) present any problems for computers with NIVIDA graphics cards?
    I have installed this update on two machines using Nvidia graphics adapters without any negative issues. However, it is prudent to do a fresh image backup before installing updates just in case something goes awry. Check out image backups in several threads in the Security and Backups Forum.
    Deadeye81

    "We make a living by what we get, we make a life by what we give." Sir Winston Churchill

  16. #15
    Super Moderator Deadeye81's Avatar
    Join Date
    Dec 2009
    Location
    North Carolina, USA
    Posts
    2,654
    Thanks
    7
    Thanked 113 Times in 97 Posts
    Quote Originally Posted by MarciaG View Post
    Ditto to hsmith's question: Are KB 2506223 and 2508272 OK to install? Is the "wait for testing" a reference to previous instructions and just part of the description or is there more to wait for before installing these updates?

    Also, is it OK to install KB2466156, KB2485663, and KB2464635? KB2466156 and KB2485663 were on the 4/12 list as OK to install, but in her narrative, Susan said to wait to install all the Office updates if we are running Office 2003, so I didn't install any of the updates I was offered that linked to MS11-021, 022, 023 or 033.

    Thanks.
    I have installed all the above Office 2007 and Office 2003 updates on two Office 2007 machines and two Office 2003 machines without any trouble.

Page 1 of 3 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •