Microsoft Security Bulletin Summary for November 8th 2016

[Brink]

Release Date: November 08, 2016

Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released.

More information about this month’s security updates and advisories can be found in the Security TechNet Library.

The November security release consists of security updates for the following software:

• Internet Explorer
• Microsoft Edge
• Microsoft Windows
• Microsoft Office and Microsoft Office Services and Web Apps
• SQL Server
• Adobe Flash Player

Please note the following information regarding the security updates:

• Beginning with the October 2016 release, Microsoft is changing the update servicing model for Windows 7, Windows Server 2008 R2, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2. For more information, please see this Microsoft Technet article, Further simplifying servicing models forWindows 7 and Windows 8.1.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• Vulnerabilities addressed in the November 2016 security release might also affect Windows Server 2016 Technical Preview 5. To be protected from these vulnerabilities, Microsoft recommends that customers running this operating system apply the current update, which is available from Windows Update.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features

Source:

• Microsoft Security Bulletin Summary for November 2016
• November 2016 Security Updates
• November 2016 security update release MSRC

 

[Ranger4]

Thanks Brink. I have installed the November monthly Roll up KB 3197868, 130 mb plus Malicious Software Removal tool. All went well & one restart needed.

 

[NoN]

I have hidden that Monthly Security Quality Rollup kb3192403 the time to look at the infos provided on the support page. It has also unhidden the October preview and deleted it.

Edit:
It has deleted October preview kb3192403 to the now kb3197868 that have added the "DataCollection" key in registry that is mentioned in kb3192403 but doesn't appear to be mentioned in the last November Rollup support page. You still have to deal with registry for certain editions. that are using "Upgrade Analytics".

 

[ThrashZone]

Won't install anything until this weekend after a system image is created of course

 

[ignatzatsonic]

https://support.microsoft.com/en-us/kb/3197868

which says:

"The security fixes that are listed in the "Summary" section are included in this this Security Monthly Quality Rollup 3197868 are are also included in the November 2016 Security Only Quality Update 3197867. Installing either update installs the security fixes that are listed here. This Security Monthly Quality Rollup also includes improvements and fixes from previous monthly rollups."

So, for those needing only security updates, get 3197867,

which is here:

https://support.microsoft.com/en-us/kb/3197867

 

[NoN]

https://support.microsoft.com/en-us/kb/3197868

which says:

"The security fixes that are listed in the "Summary" section are included in this this Security Monthly Quality Rollup 3197868 are are also included in the November 2016 Security Only Quality Update 3197867. Installing either update installs the security fixes that are listed here. This Security Monthly Quality Rollup also includes improvements and fixes from previous monthly rollups."

So, for those needing only security updates, get 3197867,

which is here:

https://support.microsoft.com/en-us/kb/3197867

Which kb3197867 says:

Important

• The security fixes that are listed in this Security Only Quality Update 3197867 are also included in the November 2016 Security Monthly Quality Rollup 3197868. Update rollup 3197868 also includes improvements and fixes from October monthly rollup 3185330 that was released on October 11, 2016. Installing either update 3197867 or 3197868 installs the security fixes that are listed here.

• It's just about improvements & telemetry,so...we have to do it back from the first monthly rollup made to have the only security updates and not the improvements & fixes.

It means that the fixes that are not related to telemetry will never get installed too.

 

[Tharwatime]

Brink, thanks for the above, most helpful.

 

[Layback Bear]

Thank you all for giving me a hand!!

What I'm trying to get is Security Updates.
Once again sfc /scannow shows zero problems.
Maybe I have all the Security Updates and don't know it.
The RollUp get to about 95% install and stops.
I could do without the RollUp.

I will try 3197867 as ignatzatsonic has posted.

Jack

 

[ignatzatsonic]

Thank you all for giving me a hand!!

What I'm trying to get is Security Updates.
Once again sfc /scannow shows zero problems.
Maybe I have all the Security Updates and don't know it.
The RollUp get to about 95% install and stops.
I could do without the RollUp.

I will try 3197867 as ignatzatsonic has posted.

Jack

Jack;

You should be able to download an MSU file for 3197867. You'll be shown a list of several of them.

Be sure to pick the correct one for your particular version of Win 7.

Download it to a folder then just poke the MSU file to run the installer. It took maybe 90 seconds to complete on my PC a couple of days ago. No problems.

I have no idea how this will work out over the long term, but as of now all I want are Security Updates and this is the only way I know of to get them and them alone.

It's still convoluted but it's apparently what we are stuck with if we stay with 7.

 

[Layback Bear]

KB3197867 installed with ZERO problems.
Thank you ignatzatsonic!!
Thank you all for coming to my aid!!
Jack

 

[rooscoota]

please correct me i'm wrong but https://support.microsoft.com/en-us/kb/3197868 and https://support.microsoft.com/en-us/kb/3197867 appear identical via the more information page from the update listings

 

[ThrashZone]

Hi,
Yes it's listed but there is no download links for separate versions of windows = 32 or 64 bit
To get those one has to go to the ms catalog for the stand alone installers,
Microsoft Update Catalog

 

[rooscoota]

thanks thrash

i just downloaded and installed the latest update via windows update, set for manual update, and it installed the kb3197868 with malicious tool and defender update with office updates. the kb3197868 corresponded with the correct security only update from Microsoft Update Catalogue.

one restart after update and all is good. hope this assists others.
http://www.catalog.update.microsoft.com/Search.aspx?q=3197867

 

[ThrashZone]

Hi,
No problem

I loaded the 7-8 updates I posted earlier yesterday on my acer and all seems fine so far.
2 more machines to go but no time to do it yet I got an sos from mom yesterday so I'll be busy today :/

 

[MoxieMomma]

Yes, 3197867 is the "security only" update.
3197868 includes both the security patches and the "performance" bits from the Oct 2016 roll-up (3185330).

3197868 installed just fine on my W7 laptop (that already had 3185330).

On a whim, I installed the standalone version of 3197867 on my W7 desktop (that also already had 3185330). It went just fine.
So I was surprised when -- at the next update check -- WU offered me 3197868, even though both 3197867 and 3185330 were installed.
I have since hidden 3197868 on that box, as I'm leery of trying to install it on top of the other two, successfully installed patches, and as I already have the bits that 3197868 supposedly includes.

HTH,

MM

 

[rooscoota]

ok, after installing the aforementioned update, kb3197868, this one has now popped its headup:

Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: September 20, 2016

Update for Windows 7 for x64-based Systems (KB3177467)

Download size: 8.9 MB

You may need to restart your computer for this update to take effect.

Update type: Important

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

More information:
https://support.microsoft.com/en-au/kb/3177467

 

[3Colors]

I have a doubt. This patch roll up includes one for Adobe Flash Player. Is the same patch installed when I update it on the adobe page ?

 

[ThrashZone]

Hi,
Restoring an image back to September on my asus and going just for kb3197867 security only forget these silly rollups I'll manually install the security only for now on

 

[lehnerus2000]

Agreed

Hi,
Restoring an image back to September on my asus and going just for kb3197867 security only forget these silly rollups I'll manually install the security only for now on

I've only been installing the Security Only rollups.
I've been saving them because they may be needed for new installs (just like driver/program installers).

In a couple of weeks I'll re-image my PC using my September image (to get rid of Android Studio and Java).

 

[Anak]

I have a doubt. This patch roll up includes one for Adobe Flash Player. Is the same patch installed when I update it on the adobe page ?

It looks like it does, with a caveat; If there was an out of cycle update by adobe, you would probably get the update quicker if you monitored the flash player page then wait until it came down the pipe from windows updates as an out-of -cycle update. In either case and depending how you have updates set, you'll need to monitor each location. I'm thinking a one to two day delay if coming from windows updates.

Here's one road-map to your information:

• In Shawn's original post click on the top link under Source:: Microsoft Security Bulletin Summary for November 2016

• Scroll down until you see the MS16-141Link in the left panel, click on that.

• Fifth line down from the top you'll see "Executive Summary" there's a link at the bottom of that section: Microsoft Knowledge Base Article 3202790, click on that.

• Scroll down about half way and you'll see a section called "File Information" go to the second sub-section also named File information; That's where the file information for adobe flash starts, under the file version column.

• My version 23.0.0.207 matches whats listed on the KB3202790 page.

If you or anyone else has any shortcuts or knows of a different way, please post.


Related:
https://Adobe - Flash Player - Version Checker | www.adobe.com/
You can also find the latest version on your machine by going to Control Panel/All Items and if you have an Adobe Flash Player icon listed there, open that, and click on the Updates Tab. Clicking on the "Check Now" button takes you to the above link, in my case by way of Internet Explorer even though I'm using Firefox.

This one will only change the settings on your device:
http://Adobe - Flash Player : Settings Manager - Global Storage Settings Panel | www.macromedia.com/

If anyone needs to download the newest version from the adobe downloads center look over the middle "Optional Offers" column to see if you really need what's there.