Windows Update revisions KB4090450, KB4088875, KB4088878, KB4088881

[German]On April 4, 2018 Microsoft has revised the updates KB4090450, KB4088875, KB4088878, KB408888881 for Windows. I collected some details, and there are other details about Windows bugs.

German blog reader Sebastian noticed that the updates are offered again at WSUS, so he left a comment.

WSUS today announced that KB4088875, KB4088878 and KB408888881 have been revised.

But nothing has changed in the KB article? Bugs still present.

Who has the latest information?

I then checked the Microsoft Update Catalog and found the Windows Update KB4090450 with release date April 4, 2018. 

The updates are described in the following KB articles at Microsoft, and the revision date has been adjusted. I once compared my old descriptions with the current KB articles on the updates as well as old versions by wayback machine. The following seems to have changed – hope I haven't overlooked anything.

Update KB4090450 for Windows Server 2008

Update KB4090450 (Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008: March 13, 2018) article has been revised on April 3, 2018.

I haven't found any details of what has been revised here. However, since this is a Spectre V2 patch, it could be that the microcode has been updated for additional CPUs.   

Update KB4088875 for Windows 7/Server 2008 R2

Update KB4088875 is the March 13, 2018 (Monthly Rollup) for Windows 7 SP1 and Windows Server 2008 R2 SP1. The kb article has been revised on April 5, 2018. They added the following text:

Important Please apply KB4100480 immediately after applying this update. KB4100480 resolves an elevation of privilege vulnerability in the Windows Kernel for the 64-Bit (x64) version of Windows. This vulnerability is documented in CVE-2018-1038.

And there is an extension within the known issues section:

After you install this update, you may receive a Stop error message that resembles the following when you log off the computer:

SESSION_HAS_VALID_POOL_ON_EXIT (ab)

To solve this issue, install update KB4099467.

Update KB4088878 for Windows 7/Server 2008 R2

Update KB4088878 is the March 13, 2018 (Security-only update) for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1. It contains also:

Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows, except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.

and the kb article has been revised on April 5, 2018. Microsoft added the section dealing with the SESSION_HAS_VALID_POOL_ON_EXIT bug (see previous section above). Maybe some micro codes has been updated.

Update KB4088881 foür Windows 7/Server 2008 R2

Update KB4088881 is the March 23, 2018 (Preview of Monthly Rollup) for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1. The kb article has been revised on April 5, 2018 – Microsoft added.

Important Please apply KB4100480 immediately after applying this update. KB4100480 resolves an elevation of privilege vulnerability in the Windows Kernel for the 64-Bit (x64) version of Windows. This vulnerability is documented in CVE-2018-1038.

Addendum to Update KB4088883

Another small addendum to update KB408888883 for Windows 8.1/Windows Server 2012/R2 (from 03/21/2018). The preview rollup update is described in the blog post Updates for Windows 8.1/Windows Server 2012/R2 (03/21/2018). Askwoody reports here that the update can trigger the BlueScreen 0x00000000C4.

askwoody.com also has this article mentions also some update revisions.

The Very Last …

Just stumbled uppon this tweet from Alex Ionescu, that mentions a bug on all Windows versions causing a blue screen (BSOD).

Six months ago I submitted an unprivileged local DoS (BSOD) in all versions of Windows. It was closed as "Won't fix" and marked that it would be looked into for vNext. I kept the tweetable PoC to myself. The next release is RTM and still has the bug. The fix is a one line change.

— Alex Ionescu (@aionescu) 4. April 2018

Dedicated to all happy Windows 10 users upgrading to Windows 10 Spring Creators Update, V1803: Glad, the bug is still there.

BTW: The name Windows 10 Spring Creators Update is confirmed (see this tweet).

Similar articles:
Windows 7: Preview Rollup Update KB4088881 (03/23/2018)
Security Updates for Windows 7/8.1 (March 13, 2018)
Patchday: Windows 10 Updates (March 13, 2018)
Microsoft Office Patchday (March 13, 2018)
Network issues with Updates KB4088875 / KB4088878
Updates for Windows 8.1/Windows Server 2012/R2 (03/21/2018)
Windows 10 Updates March 22, 2018
Internet Explorer Update KB4096040 (March 23, 2018)