Author Topic: Microsoft Security Updates for December, 2018  (Read 2003 times)

0 Members and 1 Guest are viewing this topic.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19425
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Microsoft Security Updates for December, 2018
« on: December 11, 2018, 05:25:40 PM »
The December security updates have been released and consist of 39 security patches and one advisory in which 9 are listed as Critical and 30 are rated Important in severity. One of these bugs is listed as publicly known at the time of release and one of these is reported as being actively exploited.

The updates address Remote Code Execution, Information Disclosure, Elevation of Privilege, Denial of Service and Spoofing and apply to the following: Adobe Flash Player, Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office and Microsoft Office Services and Web Apps, ChakraCore, .NET Framework, Microsoft Dynamics NAV, Microsoft Exchange Server, Microsoft Visual Studio and Windows Azure Pack (WAP).

See Dustin Childs review and analysis in Zero Day Initiative — The December 2018 Security Update Review

Release Notes
Windows 10 update history



Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline pastywhitegurl

  • Hero Member
  • *****
  • Posts: 1039
  • advanced techno feeb
    • View Profile
Re: Microsoft Security Updates for December, 2018
« Reply #1 on: December 19, 2018, 11:54:43 PM »
I let this install today and the installation failed.

I read on the Windows ten forums that we are supposed to install a Servicing stack update before activating the December updates.  For my win10Pro 64 system, the KB is   KB4470788   The post mentioned that  it should be installed with the update, but on my second attempt (which was successful)  I did not see that KB number anywhere in the history.

Here is the post I referenced:
https://www.tenforums.com/windows-10-news/122945-kb4470788-servicing-stack-update-windows-10-v1809-dec-5-a.html

Since all seems well now, I guess I'm wondering what this is about and why would the KB not show up in my update history.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19425
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Microsoft Security Updates for December, 2018
« Reply #2 on: December 20, 2018, 01:19:12 AM »
The Servicing Pack Update was not part of the December 5, 2018 update (KB4469342) for Build 1809 which is why it wasn't installed.  However, reading the KB article it has the following:

Quote
Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU).


and a link to information about Servicing stack updates.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline pastywhitegurl

  • Hero Member
  • *****
  • Posts: 1039
  • advanced techno feeb
    • View Profile
Re: Microsoft Security Updates for December, 2018
« Reply #3 on: December 20, 2018, 04:10:21 PM »
OK, so  since I successfully installed the December update without the servicing pack, what do you recommend? Should I get it and install it now? Or will there be another one released for the next update that I can wait to do then?  The KB for the successful update to my machine is KB4471332  for build 1809.

And if this is so important, why would I have to go to a forum to find out about it? That's the part that is most confusing.  How many home users haunt the ten forum or any other forum for that matter to get Microsoft news? I do haunt Landzdown, but I don't think I'm the norm.   It just seems strange to me.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19425
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Microsoft Security Updates for December, 2018
« Reply #4 on: December 20, 2018, 04:46:11 PM »
KB4471332 is the December 11, 2018, quality improvement update which you successfully installed.

KB4469342) is the December 5, 2018, quality improvement update, although actually considered a November update  that you originally referenced as not installed.

The KB articles for both KB Articles recommend the installation of the servicing stack update.  So, before KB4469342 is installed, I'd suggest creating a system restore point, install the servicing stack update and then check for updates again.

 


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline pastywhitegurl

  • Hero Member
  • *****
  • Posts: 1039
  • advanced techno feeb
    • View Profile
Re: Microsoft Security Updates for December, 2018
« Reply #5 on: December 20, 2018, 04:49:11 PM »
Thanks Corinne, will do. :)

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19425
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Microsoft Security Updates for December, 2018
« Reply #6 on: December 20, 2018, 05:02:37 PM »
Let us know the results, please.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline pastywhitegurl

  • Hero Member
  • *****
  • Posts: 1039
  • advanced techno feeb
    • View Profile
Re: Microsoft Security Updates for December, 2018
« Reply #7 on: December 20, 2018, 05:03:27 PM »
So good news?

I downloaded the KB installer and when I ran it, got this message:


Quote
Windows Update Standalone Installer
KB4470788  is already installed on this computer.

Its not listed in my update history.

Check for updates showing that I'm up to date.


Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 19425
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Microsoft Security Updates for December, 2018
« Reply #8 on: December 20, 2018, 06:09:47 PM »
I was just returning to add a follow-up.  My laptop hasn't been offered 1809 yet and it occurred to me to check if any of the updates for 1803 include a servicing stack update.  In checking, I found that there was indeed one for 1803.  What I couldn't figure is it had the same type of wording as what I read for 1809 -- strongly recommended but also that with Windows Update it would be offered automatically.  It wasn't listed in history so I checked Installed Updates via Control Panel > Programs > Programs and Features > Installed Updates and there it was. 


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.