[German]Various security updates for Windows Server 2012/R2 (1st ESU year) were published on November 12. Support for Windows Server 2008 R2 expired in January 2024. Here is an overview of these updates for Windows Server 2012 and Windows Server 2012 R2.
Advertising
Preliminary remarks on the update installation
Windows Server 2012/R2 will no longer be supported in October 2023 and will only receive updates with an ESU license. Please note the information on the installation sequence for Windows Server that Microsoft provides in the KB articles.
Updates for Windows Server 2012 R2
A rollup (for systems with an ESU license) has been released for Windows Server 2012 /R2. The update history for Windows 8.1 and Windows Server 2012 R2 can be found on this Microsoft page.
KB5046682 (Monthly Rollup) for Windows Server 2012 R2
Update KB5046682 (Monthly Rollup for Windows Server 2012 R2)contains improvements and fixes, and eliminates various vulnerabilities that are not specified. It says about the improvements:
[Virtual Machine] Fixed: A virtual switch might trigger consistent crashes and you receive a stop error on a blue screen. This issue might occur when load balancing and failover (LBFO) teaming with two virtual switches in a virtual machine (VM) are used. In this case, one virtual switch contains a single root I/O virtualization (SR-IOV) interface.
This update is automatically downloaded and installed by Windows Update in Windows Server 2012 R2, but is also available in the Microsoft Update Catalog and via WSUS. The installation of this Enhanced Security Update (ESU) may fail on an Azure Arc-enabled device running Windows Server 2012 R2. Details on fixes and any known issues related to the update are listed in the support article.
There is no security-only update for Windows Server 2012 R2.
Updates for Windows Server 2012
A rollup update for Windows Server 2012 and Windows Embedded 8 Standard has been released for systems with an ESU license. The update history for Windows 8.1 and Windows Server 2012 R2 can be found on this Microsoft page.
Advertising
KB5046697 (Monthly Rollup) for Windows Server 2012
Update KB5046697 (Monthly Rollup for Windows Server 2012, Windows Embedded 8 Standard) contains improvements and fixes as well as security patches (see also the update for Windows Server 2012 R2). A known problem with virtual machines has also been fixed.
This update is available in the Microsoft Update Catalog and via WSUS. For a manual installation, the latest Servicing Stack Update (SSU) must be installed beforehand – although this SSU can no longer be uninstalled. Problems in connection with the update are listed in the KB article.
There is no security-only update for Windows Server 2012.
Updates for Windows Server 2008/R2 and Windows 7
For Windows Server 2008 R2 SP1 with ESU and Windows 7, the last official updates for systems with an ESU license (1st, 2nd, 3rd and 4th year complete) were made available in January 2024. I have not yet found any updates for Windows Embedded Standard 7 in the Microsoft Update Catalog (when searching for "2024-11 Embedded standard 7" ). However, ACROS Security offers micropatches for protection until 2025 (see 0patch secures Microsoft Edge for Windows 7/Server 2008/2012/R2 until Jan. 2025).
However, there seems to be an update KB5046705 for Windows Server 2008 R2 – Tenable has published this post with information on what problems are to be fixed. German blog reader Bolko mentions the following updates here:
- KB5046705 (security-only, Windows Server 2008 R2)
- KB5046687 (Rollup, Windows Server 2008 R2)
Bolko writes that these updates will destroy all older legacy browsers (Chrome 109, Edge 109, Firefox ESR 115, Opera 95). All programs that use the "Chromium Embedded Framework" (CEF) no longer work, according to Bolko. This forum post also mentions the problem.
Similar articles:
Microsoft Security Update Summary (November 12, 2024)
Patchday: Windows 10/Server Updates (November 12, 2024)
Patchday: Windows 11/Server 2022 Updates (November 12, 2024)
Patchday: Windows Server 2012 / R2 and Windows 7 (November 12, 2024)
Patchday: Microsoft Office Updates (November 12, 2024)
Advertising
0patch for Windows 7 will at this moment be provided until January 2026. It has been extended for (at least) a year. See https://0patch.zendesk.com/hc/en-us/articles/360009437380-How-long-do-you-plan-to-provide-Windows-7-and-Windows-Server-2008-R2-Micropatches where 2025 has been striked out and 2026 was added.