October 10, 2017 -KB4041678 (Security-only update)
Improvements and fixes
This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:
- Security updates to Microsoft Windows Search Component, Windows kernel-mode drivers, Microsoft Graphics Component, Internet Explorer, Windows kernel, Windows Wireless Networking, Microsoft JET Database Engine, and the Windows SMB Server.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.
Known issues in this update
Microsoft is not currently aware of any issues with this update.
How to get this update
To get the standalone package for this update, go to the Microsoft Update Catalog website.
File information
For a list of the files that are provided in this update, download the file information for update 4041678.
Source: https://support.microsoft.com/en-us/help/4041678
Direct download links for KB4041678 MSU file from Microsoft Update Catalog:
Download KB4041678 MSU for Windows 7 32-bit (x86) - 19.1 MB
Article states: "This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website."
Has Microsoft changed how it's delivering the Security-only updates? Or are they just not checking the info in their own articles?
Haven't seen any Security-only update appear in Windows update, even after hiding the Rollup?
Thanks Shawn. Yeah, I was scratching my head a little when I read that.
I just checked the previous months Security-only article and seems they all say that - never noticed before.
Reported it to MS. They really should change that, as it could get confusing for some users who opt out of the rollups.
I think they just "forgot" to mention that it is surrounded by the monthly roll-up.
Art
Does anyone know if this update includes the patch for the Krack WPA-2 vulnerability? I tried reading the mumbo jumbo from MS on this update but only got a headache.
Someone on another forum (Shh! Don't tell anyone.) pointed me to verification that the Krack patch was included in the latest Security only updates.
All the router manufacturers and OS developers were notified about Krack 90 days before it was made public to give them time to patch it. It's both curious, and commendable, that MS made patches that covered everything of theirs that is still current, unlike anyone else (last I heard, Apple was going to but hadn't yet at the time).
I'm becoming somewhat disenchanted with Netgear since it appears they can't be bothered to patch my router against krack, despite recently issuing an unrelated patch.
Quote
