Should I Do March Update?

[michael diemer]

I have been reading about the March updates, both the roll-up as well as the security only, and I just can't figure out what to do. In the past, I did security only. But last month I did the roll-up, and it was fine. I figured with the meltdown and specter issues, maybe I should do that. This month, I don't know what to do. The info here is confusing; others seem at a loss about this as well. Any ideas?

 

[Snick]

Hi Michael,

Personally, I install quality roll-ups, security roll-ups, cumulative, etc. I don't install Silverlight updates, which is pretty much defunct. I also regularly back-up my computers (system image) to an external hard drive. If you install a botched win update, which M$ manages to issue all to often, you can re-image with your backup and your good to go.

Why wouldn't you install those updates, telemetry?, security?

 

[JoWazzoo]

You forgot Borking?

 

[Snick]

So I did, must be all-nighter cramming for CompTIA Certs.
Being 65 doesn't help either.

 

[michael diemer]

Usually, I have been installing the security only, waiting a couple weeks or so to see what issues people are having. Usually there is lots of discussion about that. but this time there is very little. Coupled with the added concerns over meltdown/specter, I have held off.

Yes, I have been distrustful of Microsoft after the W10 forced updates. That's why I've been doing security only. But last month I decided to go with the rollup, out of concern about the above malware. I figured it's best to go with the full program at this point. I just haven't seen the usual amount of discussion about it. That can mean two things: there is no problem, people are updating fine. Or, people are confused and are waiting, as I have been.

 

[Snick]

I haven't experienced any issue with March 2018 Rollup however:



There are some reports about problems introduced in the March 2018 patch rollups from Microsoft. I’m still gathering info but this is what I’ve seen so far:

1. Windows 7 and Windows 2008 R2 Virtual Machines, using the vmxnet3 virtual network card, may have their interfaces reset / lose IP addresses / need to be reconfigured. Likely caused by kb4088878.
2. May also be occurring on older physical workstations (see Reddit thread – HP 8100, 8200, 8300; Dell Optiplex 9020, nothing we use that I found).
3. SMB servers may leak memory
4. STOP error may occur on 32-bit Win7/Win2008 with Physical Address Extension (PAE) mode disabled
5. Word may crash, have slow performance, or be unable to open a document by double-clicking the file.
6. To enable mitigations for CredSSP fixes, additional steps are required. See https://support.microsoft.com/en-us/help/4093492/credssp-updates-for-cve-2018-0886-march-13-2018111 for information on Group Policy settings.

Microsoft has downgraded the Windows 7 rollup to “Important”, so it’s not being delivered automatically through Windows Update but is still available via the Update Catalog. That’s usually an indication that they’re preparing to withdraw the update.
https://support.microsoft.com/en-us/help/4088878/windows-7-update-kb4088878118
https://social.technet.microsoft.com/Forums/en-US/ae0d91d5-6c82-4cc5-b60a-8bdfa0bddbad/march-2018-windows-update-removes-virtual-network-adapter-creates-new-default-one?forum=winserversecurity66
https://support.microsoft.com/en-us/help/3125574/convenience-rollup-update-for-windows-7-sp1-and-windows-server-2008-r265

 

[michael diemer]

Thanks Snick, that is very helpful. I'm going to do the Security Only, and wait to see what comes out next.

 

[Snick]

Glad to be able to help!

 

[erpster4]

I haven't experienced any issue with March 2018 Rollup however:



There are some reports about problems introduced in the March 2018 patch rollups from Microsoft. I’m still gathering info but this is what I’ve seen so far:

1. Windows 7 and Windows 2008 R2 Virtual Machines, using the vmxnet3 virtual network card, may have their interfaces reset / lose IP addresses / need to be reconfigured. Likely caused by kb4088878.
2. May also be occurring on older physical workstations (see Reddit thread – HP 8100, 8200, 8300; Dell Optiplex 9020, nothing we use that I found).
3. SMB servers may leak memory
4. STOP error may occur on 32-bit Win7/Win2008 with Physical Address Extension (PAE) mode disabled
5. Word may crash, have slow performance, or be unable to open a document by double-clicking the file.
6. To enable mitigations for CredSSP fixes, additional steps are required. See https://support.microsoft.com/en-us/help/4093492/credssp-updates-for-cve-2018-0886-march-13-2018111 for information on Group Policy settings.

Microsoft has downgraded the Windows 7 rollup to “Important”, so it’s not being delivered automatically through Windows Update but is still available via the Update Catalog. That’s usually an indication that they’re preparing to withdraw the update.
https://support.microsoft.com/en-us/help/4088878/windows-7-update-kb4088878118
https://social.technet.microsoft.com/Forums/en-US/ae0d91d5-6c82-4cc5-b60a-8bdfa0bddbad/march-2018-windows-update-removes-virtual-network-adapter-creates-new-default-one?forum=winserversecurity66
https://support.microsoft.com/en-us/help/3125574/convenience-rollup-update-for-windows-7-sp1-and-windows-server-2008-r265

you missed one more "issue" or problem, Snick about KB4088875 that Microsoft mentioned:

A Stop error occurs on computers that don't support Streaming Single Instructions Multiple Data (SIMD) Extensions 2 (SSE2).

oooh, those using 32bit Win7 on non-SSE2 processors (ex. AMD Athlon XP, Intel Pentium 3, etc.), the KB4088875 update will crash or cause BSODs during bootup. Those using these old CPUs should definitely avoid installing this update until Microsoft provides a fix for this.