New
#1
Thanks Brink. :)
March 13, 2018 - KB4088878 (Security-only update)
Applies to: Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1
Improvements and fixes
This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:
- Provides cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
- Security updates to the Microsoft Graphics component, Windows Kernel, Windows Shell, Windows MSXML, Windows Installer, and Windows Hyper-V.
For more information about the resolved security vulnerabilities, see the Security Update Guide.
Prerequisites
Important Please apply KB4099950 before installing this update.
Notes
Important Please apply KB4100480 immediately after applying this update. KB4100480 resolves an elevation of privilege vulnerability in the Windows Kernel for the 64-Bit (x64) version of Windows. This vulnerability is documented in CVE-2018-1038.
Known issues in this update
How to get this update
This update is now available for installation through WSUS. To get the standalone package for this update, go to the Microsoft Update Catalog website.
File information
For a list of the files that are provided in this update, download the file information for update 4088878.
Source: https://support.microsoft.com/en-us/help/4088878
Direct download links for KB4088878 MSU file from Microsoft Update Catalog:
Download KB4088878 MSU for Windows 7 32-bit (x86) - 17.9 MB
Download KB4088878 MSU for Windows 7 64-bit (x64) - 29.7 MB
Hello Brink,
These quotes are from the March cumulative update thread but I should have asked my question in this thread, sorry about that.
Just as a clarification please!
Thinking about this on two levels:
(1) If the January 2018 and February 2018 Security-only-updates were NOT installed, would it now be SAFE to install them along with the March 2018 Security-only-update because the March 2018 Security-only-update includes the fix for the whole Spectre/Meltdown issue?
(2) On a clean install (obviously after KB3020369, KB3125574, KB3172605 & KB3179573 have been installed), would I be correct in saying that ALL the Security-only-updates from October 2016 to March 2018 can now be installed, again, because the March 2018 Security-only-update includes the fix for the whole Spectre/Meltdown issue?
The above is ONLY related to Security-only-updates.
Thanks in advance.
Paul, :)
Q1) It would be fine to install the Jan. and Feb. security-only updates first, then the Mar. security-only update afterwards.
Q2) With a clean install, it would probably be best and easier to install the cumulative updates instead of from 2016 forward.
There will be a lot more to install than that from 2016. I would recommend to install all Windows Updates selected by default, restart when prompted, and repeat until all updates have been installed.
Afterwards, create a system image with say Macrium Reflect. This way you could use this image backup as a starting point to restore next time instead of a full clean install.
Thanks for the reply Brink, it is appreciated.
I realise that, but it is just a quick initial way of getting over the many checks for updates needed, the time needed to download the many updates, the time it takes to install the many updates and the many many restarts needed.
I have KB3020369, KB3125574, KB3172605 & KB3179573 and all the security-only updates (.msu) already downloaded and ready to go (I will probably integrate the updates offline using DISM and create a new ISO using oscdimg anyway).
This will substantially reduce the time needed for completion.
Then after the clean install when I check for updates the list won't be 200+ updates and many hours of work ahead and I can decide what I want to install.
Most definately, I use Aomei which is brilliant.
Out of interest Brink, do you know if Microsoft are going to release anything like a Final Service Pack for those of us that are going to stick with Windows 7. This would undoubtably make clean installs a lot easier and far less tedious?
Thanks again.
Last edited by Paul Black; 15 Mar 2018 at 11:11.
Never going to happen unfortunately. MS isn't interested in sending out Service Packs for what they consider older software, they'd prefer everyone upgrade to Windows 10.
The closest we got to an SP2 was the Convenience Update in 2016, but I didn't install it as it seemed to cause a few issues. Plus, it's outdated now anyway, and included a few updates which some consider unnecessary.
https://support.microsoft.com/en-gb/...server-2008-r2