{"id":6755,"date":"2018-08-28T17:04:39","date_gmt":"2018-08-28T15:04:39","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=6755"},"modified":"2024-10-01T15:19:26","modified_gmt":"2024-10-01T13:19:26","slug":"will-microsoft-pulls-july-august-2018-microcode-updates","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2018\/08\/28\/will-microsoft-pulls-july-august-2018-microcode-updates\/","title":{"rendered":"Will Microsoft pull July\/August 2018 Microcode updates?"},"content":{"rendered":"

[German<\/a>]Does Microsoft withdraw or replace Intel Microcode updates for Windows released in July\/August 2018? Here are a few things I've compiled with the request for feedback, maybe there is an explanation.<\/p>\n

<\/p>\n

Chaos at the July\/August Microcode Updates<\/h2>\n

\"\"First some background information on the topic. In August 2018 Microsoft released Intel microcode updates Spectre and Spectre-like vulnerabilities (Foreshadow, L1TF) for Windows. I had written about about these updates provided for Windows 10 within my blog post Intel Microcode Updates KB4346084, KB4346085, KB4346086, KB4346087, KB4346088 (August 20\/21, 2018)<\/a>. For Windows 7 SP1 and Windows 8.1 and the server counterparts, the updates are listed in the blog post Patchday: Updates for Windows 7\/8.1\/Server (August 14, 2018)<\/a>. Also in July 2018 Microsoft has released such updates.<\/p>\n

After publishing the German edition of the Windows 10 blog article linked above I got feedback from reader's that also the Intel Microcode Update KB4100347 is offered again on their machines (had already been released in the previous months). And some users are reporting, that this Intel microcode update has been offered on systems with AMD CPUs.<\/p>\n

Then I got hints that the Intel Microcode Update KB4100347 probably causes boot issues on some Windows 10 machines. I collected the information within the blog post Microsoft: Issues with Updates KB4456688\/KB4100347?<\/a> – and added more information today. There's something in stock.<\/p>\n

Registry entries incorrectly documented?<\/h3>\n

Furthermore, German blog reader Karl Wester-Ebbinghaus informed me in a comment to that the registry entries, which are necessary to activate the Spectre patches, are incorrectly documented by Microsoft. I added this within my blog post Security Advisory-Update ADV180018<\/a> and informed Microsoft employee Michael Niehaus via Twitter – let's see what happens.<\/p>\n

Overall, I'd say there's some chaos right now. It reminds me of the first Intel microcode updates Microsoft released for Spectre and Meltdown in early January 2018. These had to be pulled shortly afterwards.<\/p>\n

Are updates revised\/blocked in WSUS?<\/h2>\n

At least under WSUS something strange thins are happening at the moment – the updates seem to be withdrawn or revised. Today I received two reader mails (thanks to Axel and Markus for the hints) on that topic.<\/p>\n

WSUS: Microcode updates set to rejected<\/h3>\n

The first information by Swiss blog reader Markus B. refers to an observation under WSUS. Markus wrote:<\/p>\n

On the WSUS tonight the microcode updates from last week were set to rejected.<\/p><\/blockquote>\n

\"Rejected<\/a>
\n(Click to zoom<\/a>)<\/p>\n

Do you have any other reports?<\/p>\n

I noticed it while viewing the mails from WSUS.<\/p><\/blockquote>\n

Then Markus sent me the following text excerpts of the updated WSUS update notification.<\/p>\n

New Update Alert<\/p>\n

The following 15 new updates have been synchronized to WUS-V301 since Monday, August 27, 2018 22:36 (GMT).<\/p>\n

Critical and Security Updates<\/p>\n

No new critical or security updates were synchronized.<\/p>\n

Other Updates<\/p>\n

Definition update for Windows Defender Antivirus \u2013 KB2267602 (Definition 1.275.237.0)<\/p>\n

To resolve problems in Windows, install this update. For a complete list of the fixes in this update, see the corresponding Microsoft Knowledge Base article for more information. After you install this component, you may need to restart your computer.<\/p>\n

2018-07 Update for Windows 10 Version 1507 for x86-based systems (KB4091666)<\/p>\n

2018-07 Update for Windows Server 2016 for x64-based systems (KB4091664)<\/p>\n

2018-07 Update for Windows 10 Version 1803 for x86-based systems (KB4100347)<\/p>\n

2018-07 Update for Windows 10 Version 1607 for x86-based systems (KB4091664)<\/p>\n

2018-07 Update f\u00fcr Windows 10 Version 1607 f\u00fcr x64-basierte Systeme (KB4091664)<\/p>\n

Definitionsupdate f\u00fcr Windows Defender Antivirus \u2013 KB2267602 (Definition 1.275.263.0)<\/p>\n

2018-07 Update for Windows 10 Version 1507 for x64-based systems (KB4091666)<\/p>\n

\u2026.<\/p><\/blockquote>\n

The above messages also include Intel Microcode updates (e.g. for July 2018), which I have discussed in the articles linked below.<\/p>\n

Second mail about microcode updates<\/h3>\n

Also German blog-reader Axel H. has contacted me twice by e-mail today. He wrote me this:<\/p>\n

Hello G\u00fcnter,<\/p>\n

in July\/August several microcode updates from Microsoft appeared in WSUS, some with known numbers.<\/p>\n

According to the description they are from July, but I could swear I didn't receive them until August…<\/p>\n

These are the ones:
\n– 2018-07 Update for Windows 10 Version 1607 for x86-based Systems (KB4091664)
\n– 2018-07 Update for Windows 10 Version 1607 for x64-based Systems (KB4091664)
\n– 2018-07 Update for Windows 10 Version 1703 for x86-based Systems (KB4091663)
\n– 2018-07 Update for Windows 10 Version 1703 for x64-based Systems (KB4091663)
\n– 2018-07 Update for Windows 10 Version 1709 for x64-based Systems (KB4090007)
\n– 2018-07 Update for Windows 10 Version 1709 for x86-based Systems (KB4090007)
\n– 2018-07 Update for Windows 10 Version 1803 for x64-based Systems (KB4100347)
\n– 2018-07 Update for Windows 10 Version 1803 for x86-based Systems (KB4100347)<\/p>\n

Somehow I had a bad feeling and haven't released it yet. Today they were suddenly no longer in the list of not yet released updates. Since I didn't declined it must have been Microsoft.<\/p><\/blockquote>\n

As I understand it, this is exactly what blog reader Markus told me above. Axel continued:<\/p>\n

At least I found out that KB4091664 has been replaced by KB4346087.<\/p>\n

Source: https:\/\/social.technet.microsoft.com\/Forums\/windowsserver\/en-US\/4db3848d-ba93-4338-aafa-16ea65d48305\/kb4091664?forum=winserverTS<\/a><\/p>\n

I have found an article written by you that deals with the new updates, but not that it will replace others.<\/p><\/blockquote>\n

I have not yet researched whether any KB article in English contains a revision. Actually, it is Microsoft's task to document all this in a timely manner. Axel told me in another mail an additional observation:<\/p>\n

I don't have the new, so replacing updates in WSUS. At least not yet.<\/p><\/blockquote>\n

These are the information I collected from my blog posts and received from my two blog readers. Perhaps one of you has made similar observations and can confirm that. Or you know sources at Microsoft where microcode update revisions are documented. At the moment I can only classify it as a 'bit of chaos in the microcode updates'. Or how do you see it?<\/p>\n

Addendum: Same questions at askwoody.com<\/h3>\n

Seems to be an incident, seconds after I published the above article, Susan Bradley posted this article<\/a> on askwoody.com with some additional information. It seems that Microsoft withdraw several updates.<\/p>\n

Similar articles
\n<\/strong>Foreshadow (L1TF) Intel CPU vulnerabilities
\nPatchday: Updates for Windows 7\/8.1\/Server (August 14, 2018)<\/a>
\nMicrosoft: Issues with Updates KB4456688\/KB4100347?<\/a>
\nSecurity Advisory-Update ADV180018<\/a>
\nTrend Micro WFBS: issues with update KB4100347<\/a>
\nIntel Microcode Updates KB4100347, KB4090007 (July 2018)<\/a>
\nWindows 10 V1803: Microcode update KB4100347 (05\/15\/2018)<\/a>
\nIntel Microcode Updates KB4346084, KB4346085, KB4346086, KB4346087, KB4346088 (August 20\/21, 2018)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Does Microsoft withdraw or replace Intel Microcode updates for Windows released in July\/August 2018? Here are a few things I've compiled with the request for feedback, maybe there is an explanation.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[463,580,2],"tags":[69,195,194],"class_list":["post-6755","post","type-post","status-publish","format-standard","hentry","category-issue","category-security","category-windows","tag-security","tag-update","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/6755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=6755"}],"version-history":[{"count":2,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/6755\/revisions"}],"predecessor-version":[{"id":35163,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/6755\/revisions\/35163"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=6755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=6755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=6755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}