May 9, 2017 KB4019263 (Security-only update) Windows 7 SP1

[Brink]

May 9, 2017—KB4019263 (Security-only update)

Improvements and fixes

This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Updated Windows Cryptography API to deprecate SHA-1 for SSL/TLS Server Authentication, including in Microsoft Edge and Internet Explorer 11 . See Advisory 4010323 for more information.
• Security updates to Microsoft Graphics Component, Windows COM, Microsoft ActiveX, Windows Server, Windows kernel, and Microsoft Windows DNS.

For more information about the security vulnerabilities resolved, please refer to the Security Update Guide.

Known issues in this update

Symptom
If the PC uses an AMD Carrizo DDR4 processor, installing this update will block downloading and installing future Windows updates.

Workaround
Microsoft is working on a resolution and will provide an update in an upcoming release.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

• File information
  For a list of the files that are provided in this update, download the file information for cumulative update KB4019263.

More Information

• This Security-Only Quality Update does not include security fixes for Internet Explorer. To obtain the security fixes for Internet Explorer, Cumulative Security Update for Internet Explorer KB4018271 should also be installed. Note that the Security Monthly Quality Rollup does contain security updates for Internet Explorer.
• If you use update management processes other than Windows Update and you automatically approve all security updates classifications for deployment, this May 2017 Security-Only Quality Update KB4019263, the May 2017 Security Monthly Quality Rollup KB4018271, and the Cumulative Security Update for Internet Explorer KB4014661 are deployed. We recommend that you review your update deployment rules to make sure the desired updates are deployed.

Source: https://support.microsoft.com/en-us/help/4019263


Direct download links for KB4019263 from Microsoft Update Catalog:

:ar: Download KB4019263 MSU for Windows 7 32-bit (x86) - 19.2 MB

:ar: Download KB4019263 MSU for Windows 7 64-bit (x64) - 30.6 MB

 

[bawldiggle]

Am I right in assuming this update KB4019263 has been superceded by KB4019264.

Does KB4019264 include updates in KB4019263 ?

 

[Lady Fitzgerald]

Am I right in assuming this update KB4019263 has been superceded by KB4019264.

Does KB4019264 include updates in KB4019263 ?

No and yes. KB4019263 is a security only update. KB4019264 includes the updates in KB4019263 plus updates for other "issues".

Because of MS' track record of trying to slip in undesirable updates in the past year or two, I'm downloading and installing only the Security Only updates and hiding the full Rollup updates since those will contain undesirable updates from earlier months.

 

[Brink]

Hello Russell,

KB4019263 includes only the security update.

KB4019264 is the full update package including KB4019263.

 

[Sky Ranch]

Also, if you use Internet Explorer 11

The Security-Only Quality Update does not include security fixes for Internet Explorer. The Security Monthly Quality Rollup does contain security updates for Internet Explorer.

So, if you use IE11 and deploy the Security-Only Quality update, you'll need to install the Cumulative Security Update for Internet Explorer (KB4018271) separately.

 

[Tpau]

Internet Explorer 11 KB4018271
I've been trying to get this download since it was announced by Microsoft, so, how exactly are we supposed to fix Internet Explorer 11 when the update catalogue keeps throwing a failed Error number: 8DDD0023 message every time I've tried to download it?.
I have never had this update offered through Microsoft update and there's never been any other problems with any other security fixes either, just this one, I'm getting tired of all this incompetence, if they can spend their time fixing things the least they can do is make sure everyone can download the damned thing.

 

[Sky Ranch]

Internet Explorer 11 KB4018271
I've been trying to get this download since it was announced by Microsoft, so, how exactly are we supposed to fix Internet Explorer 11 when the update catalogue keeps throwing a failed Error number: 8DDD0023 message every time I've tried to download it?.
I have never had this update offered through Microsoft update and there's never been any other problems with any other security fixes either, just this one, I'm getting tired of all this incompetence, if they can spend their time fixing things the least they can do is make sure everyone can download the damned thing.

Try to access MUC using another browser like Chrome and save it to your desktop.

 

[Brds7t7]

Internet Explorer 11 KB4018271
I've been trying to get this download since it was announced by Microsoft, so, how exactly are we supposed to fix Internet Explorer 11 when the update catalogue keeps throwing a failed Error number: 8DDD0023 message every time I've tried to download it?.
I have never had this update offered through Microsoft update and there's never been any other problems with any other security fixes either, just this one, I'm getting tired of all this incompetence, if they can spend their time fixing things the least they can do is make sure everyone can download the damned thing.

That's the old site with the ActiveX requirement.

The new site is Microsoft Update Catalog

If it has v7 in the address bar then it's the outdated one. Be sure to bookmark the new site for future use.

 

[Tpau]

Thankyou for that link Brds7t7 it will come in handy, it didn't fix the problem but after a bit of head scratching I hit upon the idea that the windows firewall could be the problem and lo and behold it was.

I disabled it and tried to download the IE fix again which was successful, all I did then was restore the firewall to its default settings and I downloaded the IE fix again just to make sure it worked.

I've never fiddled with firewall settings before so I don't know what caused it to go wrong, I'm the only one who lives in the house so I'm assuming it must have got corrupted or something when I downloaded the latest security fixes, ahhhh well I can say my little problem is now resolved.

 

[ThrashZone]

Hi,
I'm guessing but these 3 seem like the security only ones possibly just the two

If you use update management processes other than Windows Update and you automatically approve all security updates classifications for deployment, this May 2017 Security-Only Quality Update KB4019263, the May 2017 Security Monthly Quality Rollup KB4018271, and the Cumulative Security Update for Internet Explorer KB4014661 are deployed.

 

[MeOnMine]

Excuse my ignorance but as the IE 11 updates are cumulative and you did a fresh install then you would only require the last available, correct ?

 

[Brds7t7]

Excuse my ignorance but as the IE 11 updates are cumulative and you did a fresh install then you would only require the last available, correct ?

That's right, you only need the latest one. It should be around 53mb for 64-Bit, and because it's cumulative contains all past security patches for IE.
Well actually it's just one patch, but you know what I mean.

I wish MS would adopt this method for the Windows security-only updates. It would make them much easier to install instead of having to install every months.
If they can do it with the monthly rollups then why not with the Security-only updates? Maybe it would cause more issues for businesses to deploy?

Being able to install just one update on a fresh install and be up to date security wise would be very handy. Especially with some of the new threats around these days. Not every user wants to install all the extra stuff contained in the rollups.

 

[Lady Fitzgerald]

...I wish MS would adopt this method for the Windows security-only updates. It would make them much easier to install instead of having to install every months.
If they can do it with the monthly rollups then why not with the Security-only updates? Maybe it would cause more issues for businesses to deploy?...

My guess is MS is deliberately making the security-only updates less convenient than the full rollups to encourage people to use them instead of the security only.

 

[michael diemer]

One thing seems clear, after Wanna Cry. Everyone should be installing the monthly security update, along with the IE one if you use that. Also, I don't think Windows Live Mail is safe anymore. Microsoft themselves state this on the page where you used to be able to download it. Or maybe it was on the Live Essentials page. But I just saw it yesterday. I have been using Thunderbird, but recently installed eM Client, to test it out for the woman of the house, as it looks a lot like WLM. She likes it and hopefully will stop using WLM soon. Too bad, I liked WLM myself. But it makes no sense to use it anymore as there many good alternatives that are current and supported.

 

[Barman58]

michael, The issue with Iexplorer is it's so integrated into the OS that I would suggest that you keep it updated security wise, even if you do not use it, the system uses parts of it for it's own purposes so it's better safe than sorry

 

[michael diemer]

Thank You Barman, will do.

 

[Brds7t7]

My guess is MS is deliberately making the security-only updates less convenient than the full rollups to encourage people to use them instead of the security only.

You know if you'd said that to me a few years ago, I'd have found it hard to believe. But, since the Windows 10 upgrade fiasco... I can believe that!

Also, what happened to MS rolling all the past patches into the cumulative rollups? I haven't seen any evidence of this happening yet as the rollups have barely grown in size from month to month. Maybe more work than MS originally thought it would be??

 

[Lady Fitzgerald]

You know if you'd said that to me a few years ago, I'd have found it hard to believe. But, since the Windows 10 upgrade fiasco... I can believe that!...

Heck, I wouldn't have believed it, either.

...Also, what happened to MS rolling all the past patches into the cumulative rollups? I haven't seen any evidence of this happening yet as the rollups have barely grown in size from month to month. Maybe more work than MS originally thought it would be??

Hmmmm... "Curiouser and curiouser," said Alice Jeannie (apologies to Lewis Carroll).

 

[Barman58]

One possible reason for the relatively slow growth of the roll-up updates is just the fact that an OS that is in Extended Support is only receiving Security Updates, (and some 3rd party updates), and not any feature updates

 

[Brds7t7]

I can't even work out why they would want to switch to cumulative updates for Windows 7 anyway. As it's reaching EOL in a couple of years. The individual patches have worked fine for years, so why switch now? Seems like a lot of work for an OS that's in extended support and ending relatively soon.

I can understand them doing it for Windows 8.1 as that has a good few years left.