[German]Various security updates for Windows Server 2012/R2 (1st ESU year) were published on April 9, 2024. Support for Windows 7 SP1 and Windows Server 2008 R2 expired in January 2024. However, updates for Windows Embedded Standard 7 can be downloaded from the Microsoft Update Catalog. Here is an overview of these updates for Windows Server 2012/R2 and Windows Embedded Standard 7.
Advertising
Preliminary remarks on the update installation
Please note the information on the installation sequence for Windows Server that Microsoft provides in the KB articles. Windows 7 (dropped out of support in January 2020) and Windows 8.1 in January 2023. ESU support ended in January 2024, but Windows 7 systems can be provided with security updates via Embedded Updates. Windows Server 2012/R2 dropped out of support in October 2023 and will only receive updates with an ESU license. If you are still using Windows 8.1, you can install the Server 2012 R2 updates with ESUBypass (see).
Updates for Windows Server 2012 R2
A rollup (for systems with an ESU license) has been released for Windows Server 2012 /R2. The update history for Windows 8.1 and Windows Server 2012 R2 can be found on this Microsoft page.
KB5036960 (Monthly Rollup) for Windows Server 2012 R2
Update KB5036960 (Monthly Rollup for Windows Server 2012 R2) contains improvements and fixes, and eliminates various vulnerabilities that are not specified. It says about the improvements:
- Daylight saving time (DST) changes for Samoa 2021, Kazakhstan 2024, and Palestine Authority 2024. For more information about DST changes, see the Daylight Saving Time & Time Zone Blog.
- Implements Phase 3 of DCOM hardening as described in KB5004442 by removing the users ability to disable changes through the registry.
This update is automatically downloaded and installed by Windows Update in Windows Server 2012 R2, but is also available in the Microsoft Update Catalog and via WSUS. Details on fixes and any known problems in connection with the update are listed in the support article.
There is no security-only update for Windows Server 2012 R2.
Updates for Windows Server 2012
A rollup update for Windows Server 2012 and Windows Embedded 8 Standard has been released for systems with an ESU license. The update history for Windows 8.1 and Windows Server 2012 R2 can be found on this Microsoft page.
KB5036969 (Monthly Rollup) for Windows Server 2012
Update KB5036969 (Monthly Rollup for Windows Server 2012, Windows Embedded 8 Standard) contains improvements and fixes as well as security patches. This update is available in the Microsoft Update Catalog and via WSUS. For a manual installation, the latest Servicing Stack Update (SSU) must be installed beforehand – although this SSU can no longer be uninstalled. Problems in connection with the update are listed in the KB article.
Advertising
There is no security-only update for Windows Server 2012.
Updates for Windows Windows 7
For Windows Server 2008 R2 SP1 with ESU and Windows 7, the last official updates for systems with an ESU license (1st, 2nd, 3rd and 4th year complete) were made available in January 2024. The update history for Windows 7 can be found on this Microsoft page. However, updates for April 2024 for Windows Embedded Standard 7 are available in the Microsoft Update Catalog, which can be installed even though the ESU period should actually have expired. To search, enter "2024-04 Embedded standard 7". Furthermore, ACROS Security offers micropatches for protection until 2025 (see https://borncity.com/win/2023/01/07/0patch-secures-microsoft-edge-for-windows-7-server-2008-2012-r2-until-jan-2025/).
Similar article:
Office Updates (April 2, 2024)
Microsoft Security Update Summary (April 9, 2024)
Patchday: Windows 10-Updates (April 9, 2024)
Patchday: Windows 11/Server 2022-Updates (April 9, 2024)
Windows Server 2012 / R2 and Windows 7 (April 9, 2024)
Microsoft Office Updates (April 9, 2024)
Advertising