Microsoft Security Bulletin(s) for August 9 2016

[NICK ADSL UK]

Microsoft Security Bulletin(s) for August 9 2016

Note: There may be latency issues due to replication, if the page does not display keep refreshing

Today Microsoft released the following Security Bulletin(s).

Note https://technet.microsoft.com/en-us/security/default and https://technet.microsoft.com/en-us/security/dn440717 are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.
Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.

Bulletin Summary:
https://technet.microsoft.com/en-us/library/security/ms16-aug



Critical (5)
Cumulative Security Update for Internet Explorer (3177356)
Microsoft Security Bulletin MS16-095 - Critical

Cumulative Security Update for Microsoft Edge 3177358 }
Microsoft Security Bulletin MS16-096 - Critical


Security Update for Microsoft Graphics Component (3177393)
Microsoft Security Bulletin MS16-097 - Critical


Security Update for Microsoft Office (3177451)
Microsoft Security Bulletin MS16-099 - Critical


Security Update for Microsoft Windows PDF Library (3182248}
Microsoft Security Bulletin MS16-102 - Critical



important(4)
Security Update for Windows Kernel-Mode Drivers (3178466)
Microsoft Security Bulletin MS16-098 - Important

Security Update for Secure Boot (3179577)
Microsoft Security Bulletin MS16-100 - Important

Security Update for Windows Authentication Methods (3178465)
Microsoft Security Bulletin MS16-101 - Important

Security Update for ActiveSyncProvider
(3182332)
Microsoft Security Bulletin MS16-103 - Important


Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact: For home users, no-charge support for security updates (only!) is available by calling 800-MICROSOFT (800-642-7676) in the US or 877-568-2495 in Canada.

 

[fireberd]

I wish I could get updates on my Win 7. Been way over a month since the last updates. I let it sit for almost an hour today but still searching for updates. My Win 10 updated right away.

 

[meebers]

Whats with the optional updates (2) about keyboards? I think it is just the help menu, but using the words keyboard is confusing.

 

[townsbg]

What needs to be installed manually to avoid long Windows update check/install times?

 

[Callender]

What needs to be installed manually to avoid long Windows update check/install times?

There's been a few things over the last 6 months or so. For me windows updates check today took less than two minutes and currently downloading and installing the updates.

Also to fix things it seems to depend upon which versions of WUC still show up as installed updates.

You'd need to report what this finds:

get-hotfix -id KB2990214,KB305026,KB3065987,KB3075851,KB3083324,KB3083710,KB3102810,KB3112343,KB3135445,KB3138612,KB3138615

EDIT: Also check which of these are installed if any:

get-hotfix -id KB3161664,KB3161608,KB3172605

From Elevated Command Prompt type Powershell and wait for the PS prompt to appear then run the above.

Note: For anyone reading this do not assume that all of the above updates need to be installed. Some of them are needed but some are problematic and should be removed.

 

[townsbg]

I asked because it seems that every month there is an update to install manually on Vista to aid with the update check. I've already gotten an alert for updates on 7 however in the past the download was stuck on 0kb of 0kb for hours. I wanted to try and avoid that. It looks like I am missing one from your second set and three from your first. Do I need to install those manually?

PS C:\Users\Administrator> get-hotfix -id KB2990214,KB305026,KB3065987,KB3075851,KB3083324,KB3083710,KB3102810,KB3112343
,KB3135445,KB3138612,KB3138615

Source Description HotFixID InstalledBy InstalledOn
------ ----------- -------- ----------- -----------
VIRTUAL7 Update KB2990214 NT AUTHORITY\SYSTEM 5/6/2015 12:00:00 AM
VIRTUAL7 Update KB3065987 NT AUTHORITY\SYSTEM 7/22/2015 12:00:00 AM
VIRTUAL7 Update KB3075851 NT AUTHORITY\SYSTEM 8/5/2015 12:00:00 AM
VIRTUAL7 Update KB3083710 NT AUTHORITY\SYSTEM 10/17/2015 12:00:00 AM
VIRTUAL7 Update KB3102810 NT AUTHORITY\SYSTEM 11/11/2015 12:00:00 AM
VIRTUAL7 Update KB3112343 NT AUTHORITY\SYSTEM 12/12/2015 12:00:00 AM
VIRTUAL7 Update KB3135445 NT AUTHORITY\SYSTEM 2/12/2016 12:00:00 AM
VIRTUAL7 Update KB3138612 virtual7\Admi... 4/16/2016 12:00:00 AM

PS C:\Users\Administrator> get-hotfix -id KB3161664,KB3161608,KB3172605

Source Description HotFixID InstalledBy InstalledOn
------ ----------- -------- ----------- -----------
VIRTUAL7 Update KB3161608 Ben-virtual7\Admi... 7/15/2016 12:00:00 AM
VIRTUAL7 Security Update KB3161664 Ben-virtual7\Admi... 6/16/2016 12:00:00 AM

 

[ThrashZone]

Hi,
Yep a manual search was pretty quick to see these come up

 

[ThrashZone]

I asked because it seems that every month there is an update to install manually on Vista to aid with the update check. I've already gotten an alert for updates on 7 however in the past the download was stuck on 0kb of 0kb for hours. I wanted to try and avoid that. It looks like I am missing one from your second set and three from your first. Do I need to install those manually?

PS C:\Users\Administrator> get-hotfix -id KB2990214,KB305026,KB3065987,KB3075851,KB3083324,KB3083710,KB3102810,KB3112343
,KB3135445,KB3138612,KB3138615

Source Description HotFixID InstalledBy InstalledOn
------ ----------- -------- ----------- -----------
VIRTUAL7 Update KB2990214 NT AUTHORITY\SYSTEM 5/6/2015 12:00:00 AM
VIRTUAL7 Update KB3065987 NT AUTHORITY\SYSTEM 7/22/2015 12:00:00 AM
VIRTUAL7 Update KB3075851 NT AUTHORITY\SYSTEM 8/5/2015 12:00:00 AM
VIRTUAL7 Update KB3083710 NT AUTHORITY\SYSTEM 10/17/2015 12:00:00 AM
VIRTUAL7 Update KB3102810 NT AUTHORITY\SYSTEM 11/11/2015 12:00:00 AM
VIRTUAL7 Update KB3112343 NT AUTHORITY\SYSTEM 12/12/2015 12:00:00 AM
VIRTUAL7 Update KB3135445 NT AUTHORITY\SYSTEM 2/12/2016 12:00:00 AM
VIRTUAL7 Update KB3138612 virtual7\Admi... 4/16/2016 12:00:00 AM

PS C:\Users\Administrator> get-hotfix -id KB3161664,KB3161608,KB3172605

Source Description HotFixID InstalledBy InstalledOn
------ ----------- -------- ----------- -----------
VIRTUAL7 Update KB3161608 Ben-virtual7\Admi... 7/15/2016 12:00:00 AM
VIRTUAL7 Security Update KB3161664 Ben-virtual7\Admi... 6/16/2016 12:00:00 AM

Hi
Yep pretty weird but the update is usually the Kernel mode driver update to get the rest to show up
Most people are very cautious of kernel mode driver updates they seem to screw up more than they fix
https://support.microsoft.com/en-us/kb/3177725

 

[Callender]

Source Description HotFixID InstalledBy InstalledOn
------ ----------- -------- ----------- -----------
VIRTUAL7 Update KB2990214 NT AUTHORITY\SYSTEM 5/6/2015 12:00:00 AM

You should remove the above update and reboot.

[/QUOTE]

PS C:\Users\Administrator> get-hotfix -id KB3161664,KB3161608,KB3172605

Source Description HotFixID InstalledBy InstalledOn
------ ----------- -------- ----------- -----------
VIRTUAL7 Update KB3161608 Ben-virtual7\Admi... 7/15/2016 12:00:00 AM
VIRTUAL7 Security Update KB3161664 Ben-virtual7\Admi... 6/16/2016 12:00:00 AM

Sorry - forgot to include

https://support.microsoft.com/en-us/kb/3020369

It's a pre-requisite for KB3161608 and KB3172605. You have KB3161608 installed but it's been pulled and replaced by KB3172605. KB3172605 includes the lastest Windows Update Client.

On my machine at home I removed KB3161608 and rebooted before installing KB3172605.

On my machine at work I installed KB3172605 also leaving KB3161608 installed. Both machines still work. However as KB3161608 has been pulled I'd be inclined to remove it.

EDIT: Known problem with Intel Bluetooth drivers if KB3172605 is installed. Avoid if you need Intel Bluetooth

Would suggest:

First download the installers from MS UPdate Catalog using IE and save them into a folder on your desktop.

https://catalog.update.microsoft.com/v7/site/Home.aspx

Uninstall KB2990214 and reboot.
Get KB3020369 (if missing - check first) install it if you don't have it.
Reboot if you installed it.
Uninstall KB3161608
Reboot.
Install KB3172605
Reboot.

Before each reboot set Windows Update Service to disabled. That should allow you to run the standalone installers for updates without problems.

Before the final reboot check Windows Update Service is set to Automatic (Delayed Start)

Then check Task Manager and see if svchost.exe (netsvcs) and Trustedinstaller are running. If so - wait for them to finish before running a manual update check.

 

[Callender]

Yep pretty weird but the update is usually the Kernel mode driver update to get the rest to show up
Most people are very cautious of kernel mode driver updates they seem to screw up more than they fix
https://support.microsoft.com/en-us/kb/3177725

You might just want to try installing this first! For me it showed up straight away in today's list of updates without needing to be pre-installed.

Even so - if it works it looks like you've also got outdated or pulled updates that could be removed.

 

[ThrashZone]

Hi,
For a Vista machine I'd guess this was the one to get the rest to show up
https://technet.microsoft.com/library/security/MS16-098

https://support.microsoft.com/en-us/kb/3178466

 

[FairyLunar]

Hi
Yep pretty weird but the update is usually the Kernel mode driver update to get the rest to show up
Most people are very cautious of kernel mode driver updates they seem to screw up more than they fix
https://support.microsoft.com/en-us/kb/3177725

I was wondering if that is the update I need to install for this month to find updates faster? Last month I had to download/install kb3168965 which did the trick. :')

 

[townsbg]

I searched for that kb (it is the same one on Vista) using google and only came up with the Vista version. Callender why do I need to remove that update? I might not be able to since I did an extended cleanup earlier. On the other hand I do have that VM backed up. Is it important enough to revert to that backup?

 

[Callender]

Callender why do I need to remove that update? I might not be able to since I did an extended cleanup earlier. On the other hand I do have that VM backed up. Is it important enough to revert to that backup?

Which update?

KB2990214 is a very old version of WUC and is known to cause problems even if later WUC's are installed.

KB3161608 pulled and replaced by KB3172605

Up to you if you want to remove KB3161608. You can just install KB3172605 and then KB3161608 should no longer show up in the list of installed updates.

EDIT:

Also check system clock. If it's out of sync it might possibly cause a WU problem. Unlikely the case here but worth a check.

Accurate Time

 

[ThrashZone]

Hi
Yep pretty weird but the update is usually the Kernel mode driver update to get the rest to show up
Most people are very cautious of kernel mode driver updates they seem to screw up more than they fix
https://support.microsoft.com/en-us/kb/3177725

I was wondering if that is the update I need to install for this month to find updates faster? Last month I had to download/install kb3168965 which did the trick. :')

Hi,
Actually installing KB3020369 & KB3172605 was a pretty good fix for most people

Manual search was like greased lightening
Still created system images before installing them because well you know every time I don't the install stalls or....
So now it's automatic to create them before.

 

[townsbg]

Callender I was referring to 3177725. As for that kb you said to remove, do I really need to remove it? The check has already happened but I am trying to do what I can to prevent the downloads from getting stuck. As of late that's my updating issue on 7.

 

[Callender]

Okay updates for me worked without any issues and without installing 3177725. It appeared in the list of updates so I downloaded and installed it but it wasn't needed in order to get things working.

You might consider trying another fix. I will PM you with details if you want to try it.

 

[FairyLunar]

Ahh, okay! Thank you! <3 :'D

 

[ThrashZone]

Hi,
Got a late arrival this morning :/