July 9, 2019 - KB4507456 (Security-only update) for Windows 7

[Brink]

July 9, 2019 - KB4507456 (Security-only update)

Applies to: Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1

---

July 19, 2019 - IMPORTANT: Beginning with the July 2019 updates, Active Directory domain controllers will intentionally block unconstrained delegation across forest, external, and quarantined trusts. Authentication requests for services that use unconstrained delegation over the listed trust types will fail when you request new tickets. Administrators should reconfigure the affected services to use resource-based constrained delegation. For more information, see KB4490425.

Improvements and fixes

This security update includes quality improvements. Key changes include:

• Security updates to Windows Server, Microsoft Graphics Component, Windows Storage and Filesystems, Windows Shell, Windows Input and Composition, and Windows Kernel.

For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update

[ADDED 7/11] KB4512816


How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest Rollup. SSUs improve the reliability of the update process to mitigate potential issues while installing the Rollup and applying Microsoft security fixes.

If you are using Windows Update, the latest SSU (KB4490628) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.

Install this update

Windows Update and Microsoft Update - See the other options below.

Microsoft Update Catalog - To get the standalone package for this update, go to the Microsoft Update Catalog website.

Windows Server Update Services (WSUS) - This update will automatically synchronize with WSUS if you configure Products and Classifications as follows:

Product: Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1
Classification: Security Updates

File information

For a list of the files that are provided in this update, download the file information for update 4507456.

Source: https://support.microsoft.com/en-us/help/4507456

Direct download links for KB4507456 MSU file from Microsoft Update Catalog:

:ar: Download KB4507456 MSU for Windows 7 32-bit (x86) - 50.5 MB

:ar: Download KB4507456 MSU for Windows 7 64-bit (x64) - 79.7 MB

 

[erpster4]

It looks like the KB4507456 security-only update includes some "telemetry" stuff found in the old KB2952664 update and KB4507456 replaces KB2952664.

Microsoft surreptitiously adds telemetry functionality to July 2019 Win7 Security-only patch @ AskWoody

 

[Brds7t7]

Thought we'd got rid of that nonsense once and for all!
I mean what is the point of adding this to an OS which is EOL in 6 months time?? What telemetry do they still need from an OS they consider on life support?

Funnily enough, I was thinking the update looked pretty big at 80mb when I was downloading it from the Update Catalog.

Haven't installed yet, and I don't usually visit that website. So, will wait to see more info about it.

 

[Brink]

Did Microsoft just drop the Telemetry bomb on Windows 7 users without telling anyone? - gHacks Tech News

 

[Brds7t7]

While I've never believed the KB2952664 update was an update for "spying", and nor do I believe MS is dumb enough to force another Windows 10 upgrade on to 7 users again. I still don't get why they need to get this on to an almost EOL OS? I don't get the point of it?

Most people who wanted to upgrade to 10 would have done so by now. What upgrade compatibility telemetry do they need back from 7 users so late in its lifecycle?

If this is an update to fix a security issue in those components then just issue another version of that standalone update.

That update completely killed the performance of my last PC, due to constant hard drive thrashing. That's the reason I've avoided it like the plague. Granted I use SSDs now for my OS drives, but if it's going to affect performance again, it isn't coming anywhere near my PCs for a second time. I'd rather just cut off the updates 6 months early and be done with them!

I should have probably done that months ago, as their updates are garbage now anyway! I was getting unfixable sfc integrity violation errors since the last update and only restoring a system image to before the update fixed them. Plus, knocking out my WiFi network card a few months ago. Again, unfixable without restoring an image! Their quality testing has gone down the cra**er IMO!

Anyway rant over, have a great weekend everyone!

 

[Brink]

UPDATE 7/11:

New known issue added.