It is the second Tuesday of the month, which means that it is time for Patch Tuesday updates. As usual, all supported versions of Windows receive updates on Patch Tuesday, which include all Windows 10 versions other than version 1511, Windows 8.1, and only the users of Windows 7 that have opted to receive the Extended Security Updates (ESUs).
As usual, these updates are split into two sets – a monthly rollup and a security-only update. While the monthly rollup can be installed via Windows Update, the security-only update must be installed manually.
For Windows 8.1 and Windows Server 2012 R2, the monthly rollup is labeled KB4586845 and can be manually downloaded from the Update Catalog here. Below are the improvements and fixed made this month:
- Corrects the DST start date for the Fiji Islands to December 20, 2020.
- Allows administrators to enable "Save target as" through Group Policy for users in Microsoft Edge IE mode.
- Addresses an issue in which LDAP sessions authenticated and sealed with a SASL method are reported incorrectly in Events 2889 in the Directory Services Eventlog from source Microsoft-Windows-ActiveDirectory_DomainService as unsecure sessions.
- Security updates to Windows Graphics, Windows Silicon Platform, Windows Authentication, Windows Core Networking, Windows Peripherals, Windows Network Security and Containers, Windows Hybrid Storage Services, Windows Remote Desktop, and Microsoft Scripting Engine.
However, there is also one known issue that users must be aware of:
|
Symptom |
Workaround |
|---|---|
|
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege. |
Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release. |
The security-only update is called KB4586823 and can only be installed manually from here. The two fixes in this update are the same as the first and last points in the monthly rollup, and this update shares the single known issue with the one mentioned in the monthly rollup.
As for Windows 7, these updates will only be available to businesses that have opted to pay for extended security updates since this version of the OS reached the end of support officially in January 2020. Eligible users will receive monthly rollup KB4586827, which can be manually downloaded from here. The update includes the following fixes:
- Corrects the DST start date for the Fiji Islands to December 20, 2020.
- Security updates to Windows Graphics, Windows Silicon Platform, Windows Authentication, Windows Core Networking, Windows Peripherals, Windows Network Security and Containers, Windows Hybrid Storage Services, and Windows Remote Desktop.
This update also has a couple of known issues which are mentioned below:
|
Symptom |
Workaround |
|---|---|
|
After installing this update and restarting your device, you might receive the error, “Failure to configure Windows updates. Reverting Changes. Do not turn off your computer,” and the update might show as Failed in Update History. |
This is expected in the following circumstances: If you are installing this update on a device that is running an edition that is not supported for ESU. For a complete list of which editions are supported, see KB4497181. If you do not have an ESU MAK add-on key installed and activated. If you have purchased an ESU key and have encountered this issue, please verify you have applied all prerequisites and that your key is activated. For information on activation, please see this blog post. For information on the prerequisites, see the "How to get this update" section of this article. |
|
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege. |
Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release. |
The security-only update is termed KB4586805 and can be downloaded manually from here. The changes are identical to the monthly rollup and also shares its known issues with the rollup.
Another point to note for Windows 10 users is that version 1809 reaches the end of support today for Home and Pro users, which means that users of those SKUs will receive their last cumulative update today.
