{"id":3258,"date":"2017-07-12T22:30:00","date_gmt":"2017-07-12T20:30:00","guid":{"rendered":"http:\/\/borncity.com\/win\/?p=3258"},"modified":"2024-10-05T23:11:42","modified_gmt":"2024-10-05T21:11:42","slug":"botched-updates-kb4025252-and-kb4025336-july-2017-woodyleonhard","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2017\/07\/12\/botched-updates-kb4025252-and-kb4025336-july-2017-woodyleonhard\/","title":{"rendered":"Botched Updates KB4025252 and KB4025336 (July 2017)"},"content":{"rendered":"<p><img decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" src=\"http:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Stop.jpg\" align=\"left\" \/>Microsoft has released on July 11, 2017 two botched updates KB4025252 and KB4025336 for Internet Explorer and Windows 8.1. Here's what's wrong with these updates. Addendum: It seems that an update revision fixed some install issues.<\/p>\n<p><!--more--><\/p>\n<h2>The IE patch desaster<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/ssl-vg03.met.vgwort.de\/na\/195264fe82454672b5c47036687e2d63\" alt=\"\" width=\"1\" height=\"1\" \/>User how installed June security updates KB4021558 or KB4022719 or KB4022725 etc. run into printing issues in Internet Explorer 11. I mentioned it within my blog post <a href=\"https:\/\/borncity.com\/win\/2017\/06\/19\/june-2017-patches-causing-internet-explorer-11-printing-issues\/\">June 2017 Patches causing Internet Explorer 11 printing issues<\/a>.<\/p>\n<p>Microsoft issued Update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4032782\/a-blank-page-or-404-error-prints-when-you-try-to-print-a-frame-in-inte\" target=\"_blank\" rel=\"noopener\">KB4032782<\/a> to fix this error (see <a href=\"https:\/\/borncity.com\/win\/2017\/06\/29\/ie11-printing-issues-in-windows-are-fixed-june-2017\/\">IE11 printing issues in Windows are fixed (June 2017)<\/a>). But users are reporting crashes of Internet Explorer 11 during visiting several web sites.<\/p>\n<h2>A fix for Internet Explorer 11 crashes (July 2017)<\/h2>\n<p>On July 11, 2017 Microsoft released another fix for Internet Explorer that shall fix the crashes during visiting complex web sites.<\/p>\n<ul>\n<li>In Windows 7 SP1 (and corresponding Server variants) Rollup Update KB4025341 fixes the crashing issue.<\/li>\n<li>In Windows 8.1 (and corresponding Server variants) Rollup Update KB4025336 fixes the crashing issue<\/li>\n<li>For Windows 10 and Windows Server 2017 cumulative updates KB4025342, KB4025339, KB4025344, and KB4025338 contains the fix.<\/li>\n<\/ul>\n<p>I've mentioned these updates within my blog post <a href=\"https:\/\/borncity.com\/win\/2017\/07\/12\/microsoft-july-2017-patch-day\/\" target=\"_blank\" rel=\"noopener\">Microsoft July 2017 patch day<\/a>.<\/p>\n<h2>Update KB4025252 reinstalling multiple time<\/h2>\n<p>Microsoft has also released cumulative update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4025252\/cumulative-security-update-for-internet-explorer-july-11-2017\" target=\"_blank\" rel=\"noopener\">KB4025252<\/a> for Internet Explorer. This update is helpful for admins installing security-only Rollup updates for Windows 7 SP1 or Windows 8.1 and the corresponding Server variants. But it seems that this patch is botched, many users are reporting issues (at least with WSUS).<\/p>\n<ul>\n<li>I received the first information as a <a href=\"http:\/\/www.borncity.com\/blog\/2017\/07\/11\/sicherheitsupdates-juli-2017-kurzbersicht\/#comment-46212\" target=\"_blank\" rel=\"noopener\">comment<\/a> within my German blog. Users reporting, that update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4025252\/cumulative-security-update-for-internet-explorer-july-11-2017\" target=\"_blank\" rel=\"noopener\">KB4025252<\/a> is offered multiple times for installing in WSUS.<\/li>\n<li>Also <a href=\"https:\/\/borncity.com\/win\/2017\/07\/12\/microsoft-july-2017-patch-day\/#comment-1442\">this comment<\/a> within my Englisch blog mentions the update loop for this package.<\/li>\n<li>At reddit.com a user created <a href=\"https:\/\/www.reddit.com\/r\/sysadmin\/comments\/6mthym\/windows_update_kb4025252_seems_to_borked_for_win7\/\" target=\"_blank\" rel=\"noopener\">this thread<\/a> reporting the same issue.<\/li>\n<li>And within <a href=\"https:\/\/web.archive.org\/web\/20230316045238\/https:\/\/social.technet.microsoft.com\/Forums\/windows\/en-US\/3c713cd6-87ba-4908-bc06-fef248dcbd26\/kb4025252-security-update-for-internet-explorer-11-install-multiple-times?forum=w7itprosecurity\" target=\"_blank\" rel=\"noopener\">this technet forum thread<\/a>, many users are confirming, that update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4025252\/cumulative-security-update-for-internet-explorer-july-11-2017\" target=\"_blank\" rel=\"noopener\">KB4025252<\/a> is offered multiple times for installing in WSUS or via SCCM.<\/li>\n<\/ul>\n<p>German blog reader Marco R. informed me via e-mail, that update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4025252\/cumulative-security-update-for-internet-explorer-july-11-2017\" target=\"_blank\" rel=\"noopener\">KB4025252<\/a> is offered also several times via SCCM. While SCCM says, the update install fails \u2026<\/p>\n<p><a href=\"http:\/\/i.imgur.com\/se1OOOD.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" title=\"Update-Fehler KB4025252\" src=\"http:\/\/i.imgur.com\/se1OOOD.jpg\" alt=\"Update-Fehler KB4025252\" width=\"649\" height=\"260\" \/><\/a><br \/>\n(Click to resize)<\/p>\n<p>\u2026 the Windows event manager says, the update is installed successful.<\/p>\n<p><a href=\"http:\/\/i.imgur.com\/r3NrqHw.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" title=\"Update-Fehler KB4025252\" src=\"http:\/\/i.imgur.com\/r3NrqHw.jpg\" alt=\"Update-Fehler KB4025252\" width=\"624\" height=\"475\" \/><\/a><br \/>\n(Click to resize)<\/p>\n<p>The only workaround: Hide or block this update in WSUS or SCCM and wait, until Microsoft delivers the next fix.<\/p>\n<h2>Revised update KB4025252 fixes WSUS issue<\/h2>\n<p>Some German blog readers <a href=\"http:\/\/www.borncity.com\/blog\/2017\/07\/12\/installationsprobleme-mit-updates-kb4025252-und-kb4025336\/#comment-46272\" target=\"_blank\" rel=\"noopener\">mentioned<\/a>\u00a0Microsoft has released revision 210 of\u00a0update KB4025252 on July 12, 2017 for WSUS and SCCM. Further comments posted within my German blog are saying, that multiple installs an clients via WSUS has been fixed.<\/p>\n<blockquote><p>But Microsoft hasn't updated the KB article yet.<\/p><\/blockquote>\n<p>I also contacted blog reader Marco R., wo has send me the SCCM screenshots above. He wrote back that the revised update is offered on SCCM, bit there are still install errrors (see screenshot below).<\/p>\n<p><a href=\"http:\/\/i.imgur.com\/v7ieLWm.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"\" src=\"http:\/\/i.imgur.com\/v7ieLWm.jpg\" width=\"629\" height=\"58\" \/><\/a>(Click to resize)<\/p>\n<p>Macro tries to verify it again, but till yet it seems that it hasn't been fixed for SCCM.<\/p>\n<h2>Update KB4025336 blocks WSUS connections in clients<\/h2>\n<p>German blog reader JohnRipper points within <a href=\"http:\/\/www.borncity.com\/blog\/2017\/07\/11\/sicherheitsupdates-juli-2017-kurzbersicht\/#comment-46248\" target=\"_blank\" rel=\"noopener\">this comment<\/a> to another issue. Update <a href=\"https:\/\/support.microsoft.com\/kb\/4025336\" target=\"_blank\" rel=\"noopener\">KB4025336<\/a> (Monthly Rollup f\u00fcr Windows 8.1\/Windows Server 2012 R2) blocks the clients connection to WSUS. The clients reporting error 0x80244008 during update search. This error code stands for (see <a href=\"https:\/\/borncity.com\/win\/2016\/11\/29\/windows-how-to-decode-update-0x8024-errors\/\">Windows: How to decode update 0x8024\u2026. errors<\/a>):<\/p>\n<blockquote><p>WU_E_PT_SOAPCLIENT_PARSEFAULT &#8211; 0x80244008 &#8211; (16392) &#8211; <i>Same as SOAPCLIENT_PARSEFAULT_ERROR &#8211; SOAP client failed to parse a SOAP fault.<\/i><\/p><\/blockquote>\n<p>Also in Technet forum <a href=\"https:\/\/social.technet.microsoft.com\/Forums\/windowsserver\/en-US\/fbf4912e-5d1f-4168-832d-31102c2b0d16\/clients-failing-to-connect-to-wsus-80244008?forum=winserverwsus\" target=\"_blank\" rel=\"noopener\">this thread<\/a> discussing the same issue. If you wondering about KB4022720 mentioned within this thread: It's the Preview of the Monthly Rollups. In other words: Microsoft was aware about this issue since end of June 2017, but they decided to ship the botched update on July 11, 2017.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft has released on July 11, 2017 two botched updates KB4025252 and KB4025336 for Internet Explorer and Windows 8.1. Here's what's wrong with these updates. Addendum: It seems that an update revision fixed some install issues.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[872,463,22,2],"tags":[42,166,935,936,570,195,569],"class_list":["post-3258","post","type-post","status-publish","format-standard","hentry","category-browser","category-issue","category-update","category-windows","tag-internet-explorer","tag-issues","tag-kb4025252","tag-kb4025336","tag-sccm","tag-update","tag-wsus"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/3258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=3258"}],"version-history":[{"count":1,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/3258\/revisions"}],"predecessor-version":[{"id":35972,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/3258\/revisions\/35972"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=3258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=3258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=3258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}