Rules of the Road for Safe Patching
Total Page:16
File Type:pdf, Size:1020Kb
Rules of the road for safe patching Monthly security patches ship on the second Tuesday of each month (Patch Tuesday). For all versions of Windows, defer them for at least 15 days. That should give Microsoft time to identify and fix any significant oopses. The exception is the rare urgent threat — in which case, we'll tell you to install an update sooner than later. (Check out our AskWoody.com posts on the days following Patch Tuesday.) Another exception: Security patches may also contain nonsecurity fixes. In some cases, you might want to install a security update sooner when it includes a feature fix you really need. Microsoft also sends out preview updates, typically on the third Tuesday of each month. They are completely optional, and we recommend skipping them. We will list them in the next Patch Watch column following their release because Microsoft typically doesn't label them as previews (bad dog!). Updates can be deferred on Window 10 Pro and above. If you're running Win10 Home, we recommend upgrading to Pro. Ensure that Windows 7's patch-update setting are set to download or check for updates, but don't automatically install them. It's your best defense against problematic patches. Other rules Never install hardware drivers -- unless you get them from the computer's manufacturer Never install an update to a newer version of .NET. Let your applications set the .NET versions they need If you are offered .NET 4.8, skip it. For business, I recommend being on 1903 at this time and deferring 1909 Version 2004 Sheet updated: 7/14/2020 >>>> Should be installed as of June 30, 2020 for business patchers Known issues page: https://docs.microsoft.com/en-us/windows/release-information/status-windows- Notes: 1) Test on your network, install as you see fit. The printing issues are no longe 2) If you do not see deferral options, you may need to use group policy editor t See: https://www.thewindowsclub.com/set-period-defer-upgrades-updates 3) Set quality update to defer for at least 15 days. PATCH RELEASE STATUS SPECIAL NOTES DESCRIPTION NUMBER DATE 4566785 7/14/2020 Defer Servicing-stack update 4565503 7/14/2020 Defer Cumulative update 4565627 7/14/2020 Defer .Net Framework security update >>>> 4560366 6/9/2020 Install Servicing-stack update >>>> 4557957 6/9/2020 Install Cumulative update >>>> 4567523 6/16/2020 Optional Cumulative update >>>> 4561600 6/9/2020 Install Adobe Flash Player 4557968 5/12/2020 Install Servicing-stack update Slow- & release- 4556803 5/12/2020 Install Cumulative update preview rings 4552925 5/12/2020 Install .Net Framework security update -10-1903 er present. o defer quality updates s-windows-10 INSTALL NOTES CHANGES Installs first Potential printing problems MS Update Catalog only Install if needed to restore printing Installs first Version 1909 Sheet updated: 7/14/2020 >>>> Should be installed as of June 30, 2020 for business patchers Known issues page: https://docs.microsoft.com/en-us/windows/release-information/status-windows-10-1903 Notes: 1) Test on your network, install as you see fit. The printing issues are no longer present. 2) If you do not see deferral options, you may need to use group policy editor to defer quality updates See: https://www.thewindowsclub.com/set-period-defer-upgrades-updates-windows-10 3) Set quality update to defer for at least 15 days. PATCH RELEASE STATUS SPECIAL NOTES DESCRIPTION INSTALL NOTES CHANGES NUMBER DATE 4565554 7/14/2020 Defer Servicing-stack update 4565483 7/14/2020 Defer Cumulative update 4565633 7/14/2020 Defer Cumulative .Net Framework 3.5 and 4.8 >>>> 4560959 6/9/2020 Install Servicing-stack update Installs first >>>> 4560960 6/9/2020 Install Cumulative update Potential printing problems >>>> 4567512 6/16/2020 Optional Cumulative update MS Update Catalog only Install if needed to restore printing >>>> 4561600 6/9/2020 Install Adobe Flash Player 4556799 5/12/2020 Install Cumulative update 4552931 5/12/2020 Install Cumulative .Net Framework 3.5 and 4.8 4550945 4/21/2020 Optional Preview cumulative update Best to skip 4552152 4/14/2020 Install Servicing-stack update Installs first 4549951 4/14/2020 Install Cumulative update Still tracking printing issues see post 4541335 3/24/2020 Optional Preview cumulative update Best to skip 4541338 3/10/2020 Install Servicing-stack update Installs first 4551762 3/12/2020 Install Cumulative update Replaces KB 4540673 4535996 2/27/2020 Optional Preview cumulative update Some issues reported 4537759 2/11/2020 Install Adobe Flash Player 4538674 2/11/2020 Install Servicing-stack update Installs first 4532693 2/11/2020 Install Cumulative update I did not personally see issues with missing profiles 4534132 2/11/2020 Install Cumulative .NET Framework No new security content 4532695 1/28/2020 Optional Preview cumulative update Best to skip 4528759 1/14/2020 Install Servicing stack update Installs first 4528760 1/14/2020 Install Cumulative update 4532938 1/14/2020 Install Cumulative Update for .NET 3.5/4.8 4530684 12/10/2019 Install Cumulative update 4533002 12/10/2019 Install Cumulative Update for .NET 3.5/4.8 4524570 11/12/2019 Install Cumulative update Has an enablement package (more info) 4522742 10/24/2019 Optional Preview update patch for .NET 4.8 Version 1903 Sheet updated: 7/14/2020 >>>> Should be installed as of June 30, 2020 for business patchers Known issues page: https://docs.microsoft.com/en-us/windows/release-information/status-windows-10-1903 Notes: 1) Test on your network, install as you see fit. The printing issues are no longer present. 2) If you do not see deferral options, you may need to use group policy editor to defer quality updates See: https://www.thewindowsclub.com/set-period-defer-upgrades-updates-windows-10 3) Set quality update to defer for at least 15 days. PATCH RELEASE STATUS SPECIAL NOTES DESCRIPTION INSTALL NOTES CHANGES NUMBER DATE 4565554 7/14/2020 Defer Servicing-stack update 4565483 7/14/2020 Defer Cumulative update 4565633 7/14/2020 Defer Cumulative .Net Framework 3.5 and 4.8 >>>> 4560959 6/9/2020 Install Servicing-stack update Installs first >>>> 4560960 6/9/2020 Install Cumulative update Potential printing problems >>>> 4567512 6/16/2020 Optional Cumulative update MS Update Catalog only Install if needed to restore printing >>>> 4561600 6/9/2020 Install Adobe Flash Player 4556799 5/12/2020 Install Cumulative update 4552931 5/12/2020 Install Cumulative .Net Framework 3.5 and 4.8 4550945 4/21/2020 Optional Preview cumulative update Best to skip 4552152 4/14/2020 Install Servicing-stack update Installs first 4549951 4/14/2020 Install Cumulative update Still tracking printing issues: see post 4541335 3/24/2020 Optional Preview cumulative update Best to skip 4541338 3/10/2020 Install Servicing-stack update Installs first 4551762 3/12/2020 Install Cumulative update Replaces KB 4540673 4535996 2/27/2020 Optional Preview cumulative update Best to skip 4537759 2/11/2020 Install Adobe Flash Player 4538674 2/11/2020 Install Servicing-stack update Installs first 4532693 2/11/2020 Install Cumulative update I did not see issues with missing profiles 4534132 2/11/2020 Install Cumulative .NET Framework No new security content 4524244 2/11/2020 RECALLED Security update (boot manager threat) Askwoody.com copyright 2019 Version 1903 Sheet updated: 7/14/2020 >>>> Should be installed as of June 30, 2020 for business patchers Known issues page: https://docs.microsoft.com/en-us/windows/release-information/status-windows-10-1903 Notes: 1) Test on your network, install as you see fit. The printing issues are no longer present. 2) If you do not see deferral options, you may need to use group policy editor to defer quality updates See: https://www.thewindowsclub.com/set-period-defer-upgrades-updates-windows-10 3) Set quality update to defer for at least 15 days. PATCH RELEASE STATUS SPECIAL NOTES DESCRIPTION INSTALL NOTES CHANGES NUMBER DATE 4532695 1/28/2020 Optional Preview cumulative update 4528759 1/14/2020 Install Servicing stack update Installs first 4528760 1/14/2020 Install Cumulative update 4532938 1/14/2020 Install Cumulative Update for .NET 3.5/4.8 4530684 12/10/2019 Install Cumulative update 4533002 12/10/2019 Install Cumulative Update for .NET 3.5/ 4.8 4524569 11/12/2019 Install Servicing stack update Installs first 4524570 11/12/2019 Install Cumulative update Needs KIB 4524569 4522741 10/24/2019 Optional Preview update patch for .NET 4.8 4522355 10/24/2019 Optional Preview update 4521863 10/8/2019 Install Servicing stack update Installs first 4517389 10/8/2019 Install Cumulative update Needs KB 4521863 4524100 10/8/2019 Install Cumulative update for .NET 3.5 and 4.8 4524147 10/3/2019 Defer Special update Cumulative update Still has printing issues 4515871 9/26/2019 Defer Cumulative update for .NET 3.5 and 4.8 4522738 9/26/2019 Defer Cumulative update for .NET 3.5 and 4.8 Installation not 4517211 9/26/2019 Optional Preview update Not in WSUS Includes IE out-of-band fix recommended 4520390 9/26/2019 Defer Servicing stack update 4522016 9/23/2019 PASS Out-of-band IE patch Cumulative update MS Update Catalog only Askwoody.com copyright 2019 Version 1903 Sheet updated: 7/14/2020 >>>> Should be installed as of June 30, 2020 for business patchers Known issues page: https://docs.microsoft.com/en-us/windows/release-information/status-windows-10-1903 Notes: 1) Test on your network, install as you see fit. The printing issues are no longer present. 2) If you do not see deferral options, you may need to use group policy editor to defer quality updates See: https://www.thewindowsclub.com/set-period-defer-upgrades-updates-windows-10 3) Set quality update to defer for at least 15 days.