TweakHound

Computer stuff...

Windows

Patch Tuesday

By 2 Comments

Windows 10
1909 is out. What’s new in Windows 10, version 1909
See: How to get the Windows 10 November 2019 Update
More at the bottom of this post.
1903 – November 12, 2019—KB4524570 (OS Build 18362.476 and 18363.476)
“Updates to improve security when using Internet Explorer and Microsoft Edge.”
1809 – November 12, 2019—KB4523205 (OS Build 17763.864)
Updates to improve security when using Internet Explorer and Microsoft Edge.
Updates to improve security when using external devices (such as game controllers, printers, and web cameras) and input devices such as a mouse, keyboard, or stylus.
Updates to improve security when using Microsoft Office products.
1803 – End of Life

Windows 8.1
November 12, 2019—KB4525250 (Security-only update)
Includes 3 security updates.
November 12, 2019—KB4525243 (Monthly Rollup)
Includes 3 security updates and 4 fixes.

Windows 7
November 12, 2019—KB4525233 (Security-only update)
Includes 3 security updates.
November 12, 2019—KB4525235 (Monthly Rollup)
Includes 3 security updates and 2 fixes.

Nvidia Geforce Game Ready WHQL Driver 441.20
Download | Release Notes

What’s new for Windows 10, version 1909 and Windows 10, version 1903 release notes
Windows 10, versions 1903 and 1909 share a common core operating system and an identical set of system files. As a result, the new features in Windows 10, version 1909 were included in the recent monthly quality update for Windows 10, version 1903 (released October 8, 2019), but are currently in a dormant state. These new features will remain dormant until they are turned on using an enablement package, which is a small, quick-to-install “master switch” that simply activates the Windows 10, version 1909 features.
To reflect this change, the release notes for Windows 10, version 1903 and Windows 10, version 1909 will share an update history page. Each release page will contain a list of addressed issues for both 1903 and 1909 versions. Note that the 1909 version will always contain the fixes for 1903; however, 1903 will not contain the fixes for 1909. This page will provide you with the build numbers for both 1909 and 1903 versions so that it will be easier for support to assist you if you encounter issues.

Feature Update via Windows 10, version 1909 Enablement Package
Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. Therefore, the new features in Windows 10, version 1909 were included in the latest monthly quality update for Windows 10, version 1903 (released October 8, 2019), but are in an inactive and dormant state. These new features will remain dormant until they are turned on through the “enablement package,” a small, quick-to-install “master switch” that activates the Windows 10, version 1909 features.
The enablement package is a great option for installing a scoped feature update like Windows 10, version 1909 as it enables an update from version 1903 to version 1909 with a single restart, reducing update downtime. This enables devices to take advantage of new features now. For version 1903 devices that receive updates directly from Windows Update, devices automatically get the enablement package by installing the feature update to Windows 10, version 1909.
If a device is updating from Windows 10, version 1809 or an earlier version, this feature update enablement package cannot be manually installed. Instead, it is bundled and automatically included with the feature update to Windows 10, version 1909. Note the installation time is not reduced in this scenario.

Win10 KB4523786 – Uninstall It

By 1 Comment

Cumulative update for Autopilot in Windows 10 version 1903: October 22, 2019 was erroneously offered to all 1903 PC’s.
The folks over at AskWoody have been all over this:
First “The Patch Lady” wondered, “On a standalone PC that’s never seen Windows autopilot I am getting KB4523786 pushed out if I click on check for updates. And I have never installed autopilot here. (proving once again NEVER ever click on check for updates).”
Speculation and answers came in the comments on that post.
The following day a Microsoft Employee posted this: “A Windows Autopilot update, which was targeted as part of the out of box experience for new devices, was incorrectly offered to customers running Windows Home edition during regular scheduled Windows update scan. Once we became aware of the issue, we stopped distribution of the update. No action is required on your part.”
That is bullsquat. If you’re on 1903 and you checked for updates on Patch Tuesday then Microsoft installed or altered 90-ish files on your PC. Uninstall it.
Control Panel > Add Remove Programs > View Installed Updates > find KB4523786 and double-click it.
or you can run this from an Admin Command Prompt:
wusa.exe /kb:4523786 /uninstall /quiet /norestart
See: Microsoft pushes, then yanks, rogue kinda-security patch KB 4523786, ostensibly for Autopilot

Patch Tuesday

By 6 Comments

Windows 10
1903 – October 8, 2019—KB4517389 (OS Build 18362.418)
1809 – October 8, 2019—KB4519338 (OS Build 17763.805)
Highlights
Updates to improve security when using Internet Explorer and Microsoft Edge.
Updates for verifying user names and passwords.
Updates for storing and managing files.

Improvements and fixes
This security update includes quality improvements. Key changes include:
Addresses an issue in security bulletin CVE-2019-1318 that may cause client or server computers that don’t support Extended Master Secret (EMS) RFC 7627 to have increased connection latency and CPU utilization. This issue occurs while performing full Transport Layer Security (TLS) handshakes from devices that don’t support EMS, especially on servers. EMS support has been available for all the supported versions of Windows since calendar year 2015 and is being incrementally enforced by the installation of the October 8, 2019 and later monthly updates.
Addresses an issue with applications and printer drivers that utilize the Windows JavaScript engine (jscript.dll) for processing print jobs.
Security updates to Windows Shell, Internet Explorer, Microsoft Edge, Windows App Platform and Frameworks, Windows Cryptography, Windows Authentication, Windows Storage and Filesystems, Windows Kernel, Microsoft Scripting Engine, and Windows Server.

Windows 8.1
October 8, 2019—KB4520005 (Monthly Rollup)
This security update includes improvements and fixes that were a part of update KB4516041 (released September 24, 2019) and addresses the following issues:
Addresses an issue with applications and printer drivers that utilize the Windows JavaScript engine (jscript.dll) for processing print jobs.
Security updates to Windows Cryptography, Windows Authentication, Windows Kernel, Windows Storage and Filesystems, Microsoft JET Database Engine, Internet Information Services, the Microsoft Scripting Engine, and Windows Server.

October 8, 2019—KB4519990 (Security-only update)
This security update includes quality improvements. Key changes include:
Security updates to Windows Cryptography, Windows Authentication, Windows Kernel, Windows Storage and Filesystems, Microsoft JET Database Engine, Internet Information Services, and Windows Server.

Windows 7
October 8, 2019—KB4519976 (Monthly Rollup)
This security update includes improvements and fixes that were a part of update KB4516048 (released September 24, 2019) and addresses the following issues:
Addresses an issue that may fail to disable VBScript in Internet Explorer by default after installing KB4507437 (Preview of Monthly Rollup) or KB4511872 (Internet Explorer Cumulative Update) and later.
Addresses an issue with applications and printer drivers that utilize the Windows JavaScript engine (jscript.dll) for processing print jobs.
Security updates to Windows Authentication, Microsoft JET Database Engine, Windows Kernel, Internet Information Services, the Microsoft Scripting Engine, and Windows Server.

October 8, 2019—KB4520003 (Security-only update)
This security update includes quality improvements. Key changes include:
Addresses an issue in security bulletin CVE-2019-1318 that may cause client or server computers that don’t support Extended Master Secret (EMS) RFC 7627 to have increased connection latency and CPU utilization. This issue occurs while performing full Transport Layer Security (TLS) handshakes from devices that don’t support EMS, especially on servers. EMS support has been available for all the supported versions of Windows since calendar year 2015 and is being incrementally enforced by the installation of the October 8, 2019 and later monthly updates.
Security updates to Windows Authentication, Microsoft JET Database Engine, Windows Kernel, Internet Information Services, and Windows Server.