Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Another botched Black Tuesday

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Open Discussions

This thread has been marked as locked.
mogs Another botched Black Tuesday
Expert Contributor 10th Oct, 2013 23:02
Ranking: 2265
Posts: 6,266
User Since: 22nd Apr, 2009
System Score: 100%
Location: UK

OCTOBER 10, 2013
Another botched Black Tuesday: KB 2878890 patch brings back two-year-old KB 951847 -- repeatedly
Microsoft's four-month body count: 23 bad patches. It's past time for Microsoft to improve the quality of its Automatic Updates
By Woody Leonhard | InfoWorldFollow @woodyleonhard

Another Black Tuesday, another botched patch. Applying this week's KB 2878890 patch on some Windows XP and Server 2003 SP2 machines causes a two-year-old .Net Framework roll-up patch, KB 951847, to resurface. Windows Update not only prompts WinXP/Server 2003 users to (re)install the big, old .Net patch, it keeps pestering over and over again to (re)install it, even if the WU install logs say it's been installed. Fortunately, there's a fix.

Although we don't yet know the details -- and Microsoft hasn't acknowledged, much less fixed, the problem -- there's a steady stream of complaints, comments, and questions about the botched patch on Microsoft's Answers forum.

The problem seems to affect older WinXP/Server 2003 installations, likely those with older versions of .Net Framework installed.

Advice from the forum mods (who haven't received definitive guidance from Microsoft yet) is that turning off KB 951847 -- unchecking the box on the Windows Update list -- is a prudent way to get rid of the annoyance.

Forum poster MarkDoody reports:

I am having the same problem with update KB951847 showing up on MS Update then giving Error Code 0x80246008 when I run the update on .Net 3.5 SP1. I ran MS Fixit, then used Cleanuptool to remove all components of .Net and reinstalled .Net 1.1 and .Net 3.5 SP1 from MS downloads, but the problem recurs. Add/remove programs shows .Net 1.1, 2.0SP2, 3.0SP2 and 3.5SP1 as installed but update keeps trying to re-install 3.5SP1 and failing.

The irony is that according to forum guru/moderator/MVP PA Bear, the recurring KB 951847 is an optional, nonsecurity patch, even though it's offered as an Important update. Nothing like getting stung repeatedly by a misguided unimportant patch.

Read more here :-
http://www.infoworld.com/t/microsoft-windows/anoth...

--

Doug_Ivison RE: Another botched Black Tuesday
Member 11th Oct, 2013 19:12
Score: 0
Posts: 1
User Since: 11th Oct 2013
System Score: N/A
Location: US
The main link to this on answers.microsoft.com seems to be:
http://answers.microsoft.com/en-us/windows/forum/w...

This has been recreated at Microsoft, and an engineer has started working on it, (according to Susan's comment on page 4).


(Remember to click "me too" at the top, so they get a sense of how many people this is impacting... and can prioritize it appropriately.)
Was this reply relevant?
+0
-0
mogs RE: Another botched Black Tuesday
Expert Contributor 12th Oct, 2013 10:42
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
October 12th, 2013, 06:15 GMT · By Bogdan Popa
Microsoft Confirms KB2862330 Windows 7 Update Problems

As I’ve reported to you this week just after Microsoft launched the Patch Tuesday updates, one of the bulletins delivered to Windows 7 computers fails to install and causes more trouble to users.

Microsoft has finally confirmed that a number of issues might indeed occur after installing the update, including two consecutive system reboots on Windows 7 computers.

Redmond hasn’t yet provided an easy to apply workaround for this bug, but after digging for a while through it support posts, we’ve found a small statement that could come in handy to affected users:

“To resolve this issue, we recommend that you apply any updates that require dual restarts by using the usual Software Updates feature of Configuration Manager instead of using task sequences.”

Unfortunately, more and more users confirm the issue, so until Microsoft rolls out an official fix, make sure to drop us a line in case you find a workaround.

http://news.softpedia.com/news/Microsoft-Confirms-...

--
Was this reply relevant?
+0
-0
mogs RE: Another botched Black Tuesday
Expert Contributor 15th Oct, 2013 08:58
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
October 15th, 2013, 05:31 GMT · By Bogdan Popa
Microsoft “Still Working” on KB2862330 Windows 7 Update Fix

More and more users confirm issues with the KB2862330 Windows 7 update, as the bulletin apparently fails to install on lots of computers, but Microsoft remains pretty much tight-lipped on this subject.

Ben Herila, Microsoft product manager, has confirmed through a small post that Redmond is still working to find the cause of the issues, explaining that a free-of-charge support incident is available to anyone willing to help the team deal with the problem.

“We can offer anyone who has this issue and is willing to go through troubleshooting a free-of-charge support incident and Support will work with you 1-1 to get your computer(s) back into a working state. The teams who released this update do know that there may be a problem and are doing additional testing to identify the root cause of the issue that folks are experiencing,” he wrote.

At this point, the patch is still being delivered via Windows Update, which means that in most cases, the bulletin is expected to install just fine.

http://news.softpedia.com/news/Microsoft-Still-Wor...

--
Was this reply relevant?
+0
-0
mogs RE: Another botched Black Tuesday
Expert Contributor 17th Oct, 2013 10:24
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
October 17th, 2013, 07:59 GMT · By Bogdan Popa
KB2862330 Windows XP Update Locked in Installation Loop

I’ve already reported to you several times that one of the updates released this Patch Tuesday causes problems to Windows 7 users, but it turns out that more Windows versions are actually affected.

According to postings on Microsoft’s Community support forums, the KB2862330 update is locked in an installation loop on a number of computers.

“I am running Windows XP Home Edition Service Pack 3. I am getting the same 'Windows Security Update for Windows XP (KB2862330)' every time I l start up, even though it appears to have downloaded successfully and shows up on the list of updates as having been installed 7 days ago!” one user explained.

Unfortunately, Microsoft hasn’t provided any details regarding a possible workaround for this, but the company said earlier this week that it was looking into the matter to determine what went wrong with the update.

http://news.softpedia.com/news/KB2862330-Windows-X...

--
Was this reply relevant?
+0
-0
mogs RE: Another botched Black Tuesday
Expert Contributor 18th Oct, 2013 16:46
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
October 18th, 2013, 13:28 GMT · By Bogdan Popa
Microsoft Fixes KB951847 Botched Windows Update

Microsoft’s MS13-08 bulletin released on Patch Tuesday broke down .NET Framework on some computers, but it seems like the company has finally found the root of the issue and managed to fix it.

Reports are now indicating that Redmond is shipping a new version of the patch via Windows Update, but some users are still complaining that problems persist even after deploying the new release.

According to Microsoft, users are strongly recommended to try deploying the update, as the issues are only experienced on specific configurations.

Here’s what Vivek Mishra of Microsoft said in a short post on the company’s community forums:

“Note that the update within MS13-082 does not directly have any issue, which is contributing to this reoffer – it is merely exposing a detection limitation/issue in the older update (KB951847). Customers are still advised to continue installing the bulletin MS13-082.”

http://news.softpedia.com/news/Microsoft-Fixes-KB9...

--
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer