January 3, 2018 - KB4056897 (Security-only update) Windows 7

[Brink]

January 3, 2018—KB4056897 (Security-only update)

Applies to: Windows Server 2008 R2 Service Pack 1, Windows 7 Service Pack 1


Improvements and fixes

This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Security updates to Microsoft Graphics Component, Windows Graphics, Windows Kernel, and Windows SMB Server.

For more information about the resolved security vulnerabilities, see the Security Update Guide.

Known issues in this update

Symptom
Due to an issue with some versions of Anti-Virus software, this fix is only being made applicable to the machines where the Anti virus ISV have updated the ALLOW REGKEY.

Workaround
Contact your Anti-Virus AV to confirm that their software is compatible and have set the following REGKEY on the machine

Key="HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat"

Value Name="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD”

Data="0x00000000”


How to get this update


This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.

Source: https://support.microsoft.com/en-us/help/4056897


See also: Important: Windows security updates released January 3, 2018, and antivirus software


Direct download links for KB4056897 MSU file from Microsoft Update Catalog:

:ar: Download KB4056897 MSU for Windows 7 32-bit (x86) - 36.2 MB

:ar: Download KB4056897 MSU for Windows 7 64-bit (x64) - 66.9 MB

 

[Brds7t7]

Many thanks Shawn!

Going to hang back on installing this one for a few days and see if any issues occur with it. Pretty sure the performance hits that are being reported in the media are most likely exaggerated, but as it's such a big update I'd like to see if it causes any issues first.

 

[lehnerus2000]

Umm?

Thanks Brink.

Questions:

1. Is this supposed to fix the "Meltdown" issue?
2. I'm running AMD, do I need to apply this?

The Security Update Guide isn't very helpful.

MS Support



MS Security Update Guide


​

Going to hang back on installing this one for a few days and see if any issues occur with it. Pretty sure the performance hits that are being reported in the media are most likely exaggerated, but as it's such a big update I'd like to see if it causes any issues first.

Given MS' track record with updates (since early 2015) there's a high likelihood of something breaking.

 

[Brink]

Hey Peter,

That's part of this update, but it wouldn't hurt to install it to be safe as long as the registry key is correct from "Known Issues".

 

[lehnerus2000]

Thanks Brink

Hey Peter,

That's part of this update, but it wouldn't hurt to install it to be safe as long as the registry key is correct from "Known Issues".

Thanks again Brink.

 

[Ranger4]

I decided to check Windows Updates a few minutes ago, see if that Security Update Posted by Brink earlier today (KB4056897) had come through, as it had not done so this morning my time here in Australia.

This check revealed that the Update has now come through as the Jan 2018 Monthly Roll Out & Security Update of about 225MB. There was also a Microsoft Security Essentials Update of 37MB as well, so I have installed the lot. One restart required & no problems so far.

 

[4lan]

Thanks

:ar: Download KB4056897 MSU for Windows 7 64-bit (x64) - 66.9 MB

Hello,

I've just registered to ensure I thank Brink for his updates on the windows updates for windows 7; I've just spent the last two days updating windows and office on my PC based on his extremely helpful forum posts!

I haven't patched since last January because of the bundling and other update concerns.

I'm just about to reboot following the last tranche so I'm hoping for a smooth power cycle

Regards,

Alan

 

[Anak]

I have January 4, 2018—KB4056894 (Security Monthly Rollup) sitting in Updates, the one item I notice is its last digit is a 4 and not a 7 as in the stand-alone update listed in this thread.

The support page above has the QualityCompat known issue and I'm good there as I have the key and it reflects the values listed, so I'm thinking the 231MB update has KB4056897 included and the combined update is listed as KB4056894.
I dislike making assumptions, and I wish microsoft would be more open, but if wishes were horses, beggars would ride.

 

[LevelBest]

I'm puzzled I also the KB have KB4056894 (Security Monthly Rollup) with the last digit being 4 and not 7. What's the difference between the '4' update and the '7' update? Is it safe to install?

 

[Anak]

I had no problems with it LevelBest.

The support page above has the QualityCompat known issue and I'm good there as I have the key and it reflects the values listed, so I'm thinking the 231MB update has KB4056897 included and the combined update is listed as KB4056894.

The stand-alone kb4056897 is only 66MB for 64bit so there's 165MB of other various updates included.
From the link I provided for the "4" version:

Security updates to Windows SMB Server, Windows Kernel, Microsoft Graphics Component, Internet Explorer, and Windows Graphics.

Your download may vary in size, depends on what you have installed and what you need.

~~~ ~~~ ~~~
​

The biggest problem I'm seeing is that QualityCompat registry entry, if you know how to get around the registry with regedit look for:



I would advise to not create the key nor change any values, your AV(s) have to do it. So make sure both your McAfee and M-bam are fully up to date.

You may have problems with McAfee, This list shows M-bam sets the key but McAfee does not. I have heard if you completely shut down the offending AV you can install the KB then re-start the AV, but that's a decision you alone will have to make. Do you have back-ups and have the booting process set to it's medium?

This is all I could find from the McAfee site: Meltdown and Spectre 101: What to Know About the New Exploits You may want to contact McAfee directly to see what's up.

 

[debodun]

Does this mean there will not be a monthly patch update this coming Tuesday?

 

[torchwood]

Hi

Just checked my registry - key not present

then ran an update check
The KB is not installed OR offered, so i suspect that as part of the update process its checking for that registry key.

my conclusion therefor let MS update you
DO NOT install the standalone version.

Roy

 

[Lady Fitzgerald]

Could someone please explain how to check for the registry key?

 

[Anak]

Does this mean there will not be a monthly patch update this coming Tuesday?

Because of the Intel problem microsoft deemed it necessary to issue an out-of-band update and I did see, but don't remember where this update should take the place of what would of been pushed out on Tuesday 01/09/2018.

But, it has been my experience that all things are possible with windows updates, so stay alert this Tuesday.

~~~ ~~~ ~~~

Sage advice Roy. Roy, if you check the list Panda will have an update to set the key on the 9th, you can check the link to the right on the list page for more info.



~~~ ~~~ ~~~

Jeannie, see my attachment in post #10 I was seeing where users were having problems with Avast but it looks like Avast has it fixed. See this list, and you can check the accompanying link to Avast on the far right.

 

[Brds7t7]

Could someone please explain how to check for the registry key?

Hey LF, if you have the key it will be located here:

​

I have that value set (assuming from Avast), but haven't had any updates offered through WU yet. It's possible MS may not issue this one through WU as it's a Security-only update. This could just be offered as part of the usual rollups. I did think MS were going to offer patches like this one considered "out-of-band" through WU.

I've download the standalone ready to install, as I don't install the rollups. I won't be doing so until next week as I want to see if there are any issues first.

 

[iko22]

What if someone were to install KB4056897 AND then uninstall their AV?

 

[torchwood]

Hi Iko,

may fail or corrupt your system

Uninstall the AV FIRST, (completely)
then run the KB.

Roy

 

[Lady Fitzgerald]

Hey LF, if you have the key it will be located here:

View attachment 402354​

I have that value set (assuming from Avast), but haven't had any updates offered through WU yet. It's possible MS may not issue this one through WU as it's a Security-only update. This could just be offered as part of the usual rollups. I did think MS were going to offer patches like this one considered "out-of-band" through WU.

I've download the standalone ready to install, as I don't install the rollups. I won't be doing so until next week as I want to see if there are any issues first.

Ok, where is the registry editor?

 

[Ranger4]

Lady F, type "regedit" in the search slot after clicking the Start Button, without the parenthesis of course.

 

[Lady Fitzgerald]

Lady F, type "regedit" in the search slot after clicking the Start Button, without the parenthesis of course.

Got it! Thank you! I'd rep you if I could!