Windows 7: January 8, 2019 - KB4480960 (Security-only update) Windows 7

Brink · 08 Jan 2019

Quote:

January 8, 2019 - KB4480960 (Security-only update)

Applies to: Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1

Improvements and fixes

This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

Provides protections against an additional subclass of speculative execution side-channel vulnerability known as Speculative Store Bypass(CVE-2018-3639) for AMD-based computers. These protections aren't enabled by default. For Windows client (IT pro) guidance, follow the instructions in KB4073119. For Windows Server guidance, follow the instructions in KB4072698. Use these guidance documents to enable mitigations for Speculative Store Bypass (CVE-2018-3639). Additionally, use the mitigations that have already been released for Spectre Variant 2 (CVE-2017-5715) and Meltdown (CVE-2017-5754).
[UPDATED 1/11] Addresses an issue that affects PowerShell remoting loop back using non-administrator accounts. For more details, see Windows Security change affecting PowerShell.
Security updates to Windows Kernel, Windows Storage and Filesystems, Windows Wireless Networking, and the Microsoft JET Database Engine.

For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update

January 8, 2019 - KB4480960 (Security-only update) Windows 7-kb4480960.jpg

January 8, 2019 - KB4480960 (Security-only update) Windows 7-kb4480960.jpg

How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest Rollup. SSUs improve the reliability of the update process to mitigate potential issues while installing the Rollup and applying Microsoft security fixes.

If you are using Windows Update, the latest SSU (KB3177467) will be offered to you automatically. To get the stand-alone package for the latest SSU, go to the Microsoft Update Catalog.

Install this update

This update is now available for installation through WSUS.

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

File information

For a list of the files that are provided in this update, download the file information for update 4480960.

Source: Access Denied

See also:

Direct download links for KB4480960 MSU file from Microsoft Update Catalog:

Download KB4480960 MSU for Windows 7 32-bit (x86) - 18.9 MB

Download KB4480960 MSU for Windows 7 64-bit (x64) - 28.2 MB

Brds7t7 · 09 Jan 2019

Thanks Shawn, and belated Happy New Year!

Brink · 09 Jan 2019

Thank you Lee. I hope you are having a Happy New Year as well.

erpster4 · 09 Jan 2019

uh-oh Brink.

Installing the KB4480960 security-only update causes problems with network shares using SMBv2:

Patch Tuesday updates for Win7, KB 4480970 and KB 4480960 knock out networking | Computerworld

Network issues with updates KB4480970 and KB4480960 | Born's Tech and Windows World

Windows 7 and Server 2008 R2 updates KB4480970 and KB4480960 causing network issues - gHacks Tech News

Brds7t7 · 09 Jan 2019

Didn't take long for Microsoft's first bork of the year!

This is why I wait at least a week before installing their updates now. Already had an update a few months ago completely knock out my network card. And their supposed "fix" did nothing of the sort!

Installing MS updates day one is just asking for trouble these days.

Thank god Macrium exists.

lehnerus2000 · 09 Jan 2019

Quote: Originally Posted by Brds7t7

Installing MS updates day one is just asking for trouble these days.

Thank god Macrium exists.

Installing W7 updates has been like playing Russian Roulette with 5 bullets in a 6 shot revolver (for the last year).
I haven't installed any since December 2017.

I also read that since October 2018 MS has slipped in "improved Telemetry" code (which I can't confirm or refute).

Quote: Originally Posted by Brds7t7

Thank god Macrium exists.

Agreed.

Brink · 09 Jan 2019

New known issues added to first post.

BlueGuy · 10 Jan 2019

Quote: Originally Posted by lehnerus2000

Installing W7 updates has been like playing Russian Roulette with 5 bullets in a 6 shot revolver (for the last year)

Well, none of my January 9 stuff recorded on this machine and I blame the updates* because for the first time, the AVG intercepted CWhelper.exe and stopped it from doing its job and I've missed season 5 episodes 8-12 of Babylon 5 [quite pertinent, given the similarities between Trump and President Clarke] because for some reason all this crap made the HDHomerun tuners undetectable [which I fixed manually] .
I was busy watching Corrie, then Nature and NOVA in the other room, so I didn't catch the error.
I'm pissed, I knew a cock-up would occur when COMET moved everything from once an evening to mini-marathons, now instead of missing just one ep., I'm missing a bunch from a story arc, I'm really pissed.
Hope I can find S05-E8-12 in the 'scene or maybe break down and get the DVD, if its still affordable...remember, I'm a geek, but a poor one. I use the Cliff Watson EPG Project software for the HDHR4 tuners.

*Because the system had to be rebooted, damn it!

Brink · 10 Jan 2019

Microsoft's killer Windows 7 patch: Breaks networking, bricks legit 'Not genuine' PCs | ZDNet

BlueGuy · 10 Jan 2019

I didn't get the 'Not Genuine" bug, it just disrupted/disconnected the HDHR because it is a network attached unit, as a result the tuners weren't active when the Cliff Watson EPG went to record here for Wednesday. Then for the first time I had to make/give CW_EPG.exe and CwHelper.exe an exception within AVG. So you could say that even the security only patch disrupted network operations, even though I still had connections to the outside world. Even SchedulesDirect.com.

I found alternative sources, and though SD @ 704x404 or 480p still looks better than the off-air .ts results from the local COMET sub-channel.