Microsoft Security Bulletin Summary for October 11th 2016

[Brink]

Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released.

More information about this month’s security updates and advisories can be found in the Security TechNet Library.

MSRC team

Source: October 2016 security update release MSRC

See also: Microsoft Security Bulletin Summary for October 2016

 

[ThrashZone]

Hi,
Yep,
One big one 6 total

 

[LevelBest]

I've just checked and that's not appearing on my updates. It just says there are no updates available for my computer. Seems rather odd. (I haven't changed any settings)

LevelBest

 

[ThrashZone]

Hi,
See if Septembers showed up or installed yet

I post every month what shows up
Microsoft Security Bulletin Summary for September 13th 2016

 

[Anak]

To boldly go where no one has gone before......


Three for me, (nothing office related):



LevelBest, force a check for updates and see if yours show up:


It's been talked about here before that Microsoft has a deployment schedule for updates, I'm not sure how the UK fits in that schedule.

 

[Swizz]

My updates showed their face at around 5:30 this morning. I am going to wait a day Or so, to install mine.

 

[Swizz]

I am curious to know who installed their security updates straight from WU in one go? And who used WSUS Offline Update.

 

[Anak]

I saw mine 'bout noon yesterday, I'll wait until this weekend to do 'em.

Check back when you get notified there's been a post, you should have some answers by this weekend.

 

[LevelBest]

LevelBest, force a check for updates and see if yours show up:
View attachment 392675

It's been talked about here before that Microsoft has a deployment schedule for updates, I'm not sure how the UK fits in that schedule.

Hi Anak

That worked a treat - they showed up in a few minutes. The dilemma now is whether to install or not. I think I'll wait to the weekend.

LevelBest

 

[jc836]

All arrived AFTER I reset and updated the Updater overnight. Once again troubled by the endless search issue until the fix items were reinstalled. What is odd is that the problem only affected my desktop machines (custom built) and not the Dell and Lenovo laptops - go figure.

 

[feetand nches]

Anak QUOTE: Three for me, (nothing office related):

Me too

 

[Canuck or Die]

So, are these fine to install?

 

[Anak]

Yes.... and, no.

I've done the .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 for x64 (KB3188740), and the, Windows Malicious Software Removal Tool x64 - October 2016 (KB890830), but when I came to the main October, 2016 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3185330) I hesitated.

Do you notice the 5330 at the end of the security roll-up? That KB number is/was one of the win10 prerequisites and that got me to look into that 119.4MB package, it also has KB2952664 another prerequisite so I and other windows users don't know if we're heading back to a rehash of the "Get Windows 10" days of just a few months ago. If you click on the that 2664 link it will take you to a microsoft page that is titled "Compatibility update for keeping Windows up-to-date in Windows 7", seems rather innocuous doesn't it? I wonder what ThrashZone and brds7t7 think of 5330.

Here's a list from Ghacks of whats in the 5330 roll-up: Microsoft Security Bulletins October 2016

Related:
From Krebs on Security look in the comments section below, there's problems with 5330 replacing and breaking the Intel Realtek sound drivers, this could be a deal breaker for me because that's what I have, Realtek sound.

For Users there's a chance of breaking the SCOM console but only if you have it installed, there is a hotfix.

Well Thrash has been having luck so far with 5330

I guess I'll bite the bullet and finally install 5330 but it won't be until later this evening, I'll be sure to create my own restore point, and if that doesn't work I have backups of my system. I still have GWX control panel installed and I wonder if it will balk at the 5330 install, only time will tell. I'll post back on how it went.

Oh, I've already hidden the October, 2016 Preview of Monthly Quality Rollup for Windows 7 for x64-based Systems (KB3192403) until I know more about it; How can it be a preview if it showed up after the first set?

 

[ThrashZone]

Hi,
Yea the preview thing is weird
You have to say yes please give me a preview update :sarc: off

 

[Anak]

Okay, I've installed KB3185330 and I still have system and program sounds maybe that problem with the Realtek sound drivers only applies to newer versions of the driver(s) or maybe the newer ones aren't signed properly; We bought our machine back in 2011.

• The install took 7", 4 to D/L, 2 to install, and 1 for the restart back to the desktop.

• The GWX monitor shows nothing related to win10.

I looked into that October, 2016 Preview(KB3192403) and the more I looked the more my head hurt. It directs you to Windows 7 SP1 and Windows Server 2008 R2 SP1 update history and look at the Oct. 18th dropdown.

October 18, 2016—KB3192403 (Preview of Monthly Rollup) This update includes improvements and fixes that were a part of Monthly Rollup KB3185330 (released October 11, 2016). This update also includes these new quality improvements and is a preview of the next Monthly Rollup update:

• Addressed issue with revised daylight saving time.
• Addressed issue that prevents pushed-printer connections and printer connections from trusted servers from being installed in Point and Print scenarios after installing MS16-087.
• Added a new Root Certificate type needed to support Catalog V2 for Windows 7 Embedded systems.
• Improved support to specify proxy and enable upload of telemetry and download of settings in an authenticated proxy environment.

For a complete list of affected files, see KB3192403.

I might need the update for the DST issue but I'm not sure about the others, if I install it does it:

• Just fix the DST issue and the others lie in wait in case I need to push my printer,

• I don't have an embedded system,

• And I don't run a proxy or,

• Since I don't have anything dealing with the last three (they sound more like they're server related) they don't get installed??

I don't know and about then is when I started getting my skull pain. :banghead:

 

[ThrashZone]

Hi,
My Acer I have no idea what actually came installed as a sound driver originally
I show the generic Microsoft sound drive 6.1.7601.17514
That and NVidia audio driver

My asus has realtek but I've never manually updated it 6/2/2015 6.0.1.7525

 

[Brds7t7]

I haven't looked into these Preview rollups yet, will probably just ignore those to be honest. To me, they just seem like betas of recommended updates to come next month.
Suppose it's like the previous model of releasing updates as Optional, get some uses to install and then a few weeks later they change to recommended.

Haven't fully decided what I'm going to do with updates going forward yet. Will most likely just go down the "security-only" rollup route. A lot of the updates released for 7 over the past year (not including the 10 updates) seem to be more aimed at Windows Server.

I noticed they finally changed the description of KB2952664. About time too, as the previous description seemed misleading.

 

[ThrashZone]

Hi,
Yea still not needing that one

This update performs diagnostics on the Windows systems that participate in the Windows Customer Experience Improvement Program. The diagnostics evaluate compatibility on the Windows ecosystem and help Microsoft to ensure application and device compatibility for all updates to Windows. There is no GWX or upgrade functionality contained in this update.