December 9th 2014 Windows Updates

[Brink]

Today, as part of Update Tuesday, we released seven security updates – three rated Critical and four rated Important in severity, to address 24 unique Common Vulnerabilities and Exposures (CVEs) in Microsoft Windows, Internet Explorer (IE), Office and Exchange.

We encourage you to apply all of these updates. For more information about this month’s security updates, including the detailed view of the Exploit Index (XI) broken down by each CVE, visit the Microsoft Bulletin Summary webpage. If you are not familiar with how we calculate XI, a full description can be found here.

We re-released two Security Bulletins:

• MS14-065 Cumulative Security Update for Internet Explorer
• MS14-066 Vulnerability in Schannel Could Allow Remote Code Execution

One Security Advisory was revised:

• Update for Vulnerabilities in Adobe Flash Player in Internet Explorer (2755801).

For the latest information, you can follow the MSRC team on Twitter at @MSFTSecResponse.

Tracey Pretorius, Director
Response Communications

Source...

 

[robinb9]

well as you know here we go again, has anyone had any problems with these updates? yes or no
thanks

 

[ThrashZone]

Nope Shawn made two of these news threads
http://www.sevenforums.com/news/354...fication-december-9th-2014-a.html#post2955451

 

[Layback Bear]

No problems here on 3 systems.

 

[Monster212]

have installed the updates on two computers no issues at all...

 

[indianacarnie]

Nothing but smoooooooth sailing.

 

[RoasterMen]

Update recently installed. No problems

 

[oscer1]

no problems here on both my systems.

 

[Urthboundmisfit]

No problems but Windows Update cleanup (Deepclean) did not remove KB3003057 (due to "applicability" in CBS/Deepclean.log) which was superseded by KB3008293. Uninstalled 3003057 thru WU interface, rebooted & checked WU, showed up-to-date.

2014-12-09 16:41:58, Info                  CBS    [B]Skipping: Package_for_KB3003057~31bf3856ad364e35~amd64~~11.2.1.0 due to applicability[/B]

 

[NoN]

Uninstalled this morning both of them and only the Kb2992611 showed up. Had to manually install the IE cumulative update kb3003057.

 

[jamis]

Installed all of them last night with no issues. Was afraid they would start the automatic changing of some of the internet options again like the last Patch Tuesday updated did, but haven't seen that yet.

 

[malvoglio]

Is there a rule of thumb for how long to wait before accepting the Windows Updates? I believe that Microsoft sometimes reissues a faulty patch two weeks after it first came out, so would two weeks be a reasonable time to wait?

 

[ThisIsMadness91]

I installed the updates this morning before going out, and ran into a couple of problems when I got back. The magnifier tool wouldn't work and I was being asked for permission to do things I didn't need to before (using System Restore, viewing processes for all users, etc.). I went to uninstall the updates but wasn't sure which Office updates, if any, needed uninstalling and used System Restore instead. I installed the Office updates and malicious software removal tool again, and everything seems to be working as before. I'm going to wait a bit before trying to install the other updates again.

 

[Anak]

Here's my experience,

I started with a Cumulative security update for Internet Explorer 10 (3003057) then when I went back to Windows Updates (WU) I had another Cumulative security update for Internet Explorer 10 (3008923) :shock: This obviously has to do with:

• MS14-065 Cumulative Security Update for Internet Explorer
• MS14-066 Vulnerability in Schannel Could Allow Remote Code Execution

In WU history it shows as Cumulative security update for Internet Explorer 10, but in WU Installed updates it shows as just a Security Update for Microsoft Windows......


Yea, yea, I'll be doin' em both, then the rest.

Is there a rule of thumb for how long to wait before accepting the Windows Updates? I believe that Microsoft sometimes reissues a faulty patch two weeks after it first came out, so would two weeks be a reasonable time to wait?

That's a little bit long, usually after a day or so you can find problems cropping up, Lady Fitzgerald usually waits until Saturday. You have to look around here or on other sites. Do a search for Patch Tuesday and the appropriate date i.e. patch tuesday dec. 2014

 

[pbcopter]

I installed the updates this morning before going out, and ran into a couple of problems when I got back. The magnifier tool wouldn't work and I was being asked for permission to do things I didn't need to before (using System Restore, viewing processes for all users, etc.). I went to uninstall the updates but wasn't sure which Office updates, if any, needed uninstalling and used System Restore instead. I installed the Office updates and malicious software removal tool again, and everything seems to be working as before. I'm going to wait a bit before trying to install the other updates again.

This is caused by update KB3004394. Uninstall it and your system will go back to normal.

Microsoft has pulled this update from Windows update.

 

[Urthboundmisfit]

Off-Topic...

View attachment 342828

That's a keeper.

 

[Lady Fitzgerald]

Is there a rule of thumb for how long to wait before accepting the Windows Updates? I believe that Microsoft sometimes reissues a faulty patch two weeks after it first came out, so would two weeks be a reasonable time to wait?

I normally wait until the Saturday morning after Patch Tuesday to download and install updates (I have Updates set to notify me when there are updates but to let me decide when to download and install them). By then, if there are any problems being reported, they will be posted on forums like this one and, usually, M$ will have pulled the offender.

 

[ThisIsMadness91]

This is caused by update KB3004394. Uninstall it and your system will go back to normal.

Microsoft has pulled this update from Windows update.

Thanks. I saw another thread confirming that was the update responsible.

 

[matts6887]

yep; here we go again is right. I just installed the latest batch of updates as well; but i have not rebooted yet to finish the install. Im waiting for a bit to do that as im sorta in the middle of something right now. But it will happen later and then i will find out whether there are any issues for me or not.

 

[matts6887]

Is there a rule of thumb for how long to wait before accepting the Windows Updates? I believe that Microsoft sometimes reissues a faulty patch two weeks after it first came out, so would two weeks be a reasonable time to wait?

I normally wait until the Saturday morning after Patch Tuesday to download and install updates (I have Updates set to notify me when there are updates but to let me decide when to download and install them). By then, if there are any problems being reported, they will be posted on forums like this one and, usually, M$ will have pulled the offender.

This is definitely a good way to do things i think Lady. I think you have the right idea here. I may have to start doing something like that myself. Right now i just have it set to notify me; but not download anything until i tell it to.