locked
KB4096040 still offered by WSUS RRS feed

  • Question

  • In two different networks I see same issue.

    Cumulative security update for Internet Explorer 11 - KB4096040 (published 23 mar 2018) still offered by WSUS on Win7 SP1 x86 computers with installed rollups 2018-04 (KB4093118), 2018-05 (KB4103718) and  2018-06 (KB4284826). On this computers 2018_03 rollup was not installed. MS revoke 2018-03 rollup, and some computers did not have time to install it.

    Computers with rollup 2018-03 (KB4088875) installed - don't want KB4096040

    But march 2018 cumulative update for IE must be replaced by next monthly rollups?


    Wednesday, June 27, 2018 4:06 PM

All replies

  • Hi Katbert,
     
    Thanks for your information.
    Based on my research, march 2018 cumulative update for IE must be replaced by next monthly rollups. Because cumulative update is an update which includes previously released updates, it's like more than one simple update bundled together.

    The figures would be more helpful:

    For more details, we may refer to the catalog:
    https://www.catalog.update.microsoft.com/Home.aspx

    Therefore, if the computers need to be installed by rollup 2018-03 (KB4088875) for Internet Explorer 11, the computers would not contain the monthly quality rollup updates for IE11 after March. We could also install the last updates of IE11 for these computers.

    Hope this helps and if there is any question, feel free to contact me.

    Best regards,
    Johnson


    ======================

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Edited by Johnson ZDH Thursday, June 28, 2018 2:33 AM
    Thursday, June 28, 2018 2:31 AM
  • 2018-06 monthy rollup replace 2018-05 monthly rollup:

    https://www.catalog.update.microsoft.com/search.aspx?q=4284826

    2018-05 monthly rollup replace2018-04 monthly rollup:

    https://www.catalog.update.microsoft.com/search.aspx?q=4103718

    Each monthly rollup replace previous monthly rollup, which include IE cunulative update.

    Computers with skipped 2018-03 monthly rollup, but with successfully installed 2018-04, 2018-05 and 2018-06 - don't want 2018-03 rollup (it's normal) but still wants march KB4096040 (it's NOT normal).

    I think, something wrong in WSUS detection rules.



    • Edited by katbert Thursday, June 28, 2018 10:58 AM
    Thursday, June 28, 2018 8:26 AM
  • Hi,

    Based on the question, to solve the problem, I also do the test in my own lab. The condition is same with you. 

    Therefore, I check the detailed information about the KB4096040. It says that the fixes included in "Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB4096040)" are also included in "2018-03 Preview of Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4088881)". Their relationship looks like as below:

    "Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB4096040)"  is not replaced by "2018-03 Preview of Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4088881)". When the computer install updates of 2018-04 (KB4093118), 2018-05 (KB4103718) and  2018-06 (KB4284826), it can still install KB4096040.

    For more details, we may refer to the following links:
    http://support.microsoft.com/kb/4096040

    Hope this helps and if there is any question, feel free to contact me.

    Best regards,
    Johnson

    =====================
    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, June 29, 2018 6:01 AM
  • June cumulative update for IE KB4230450 - must replace KB4096040

    https://www.catalog.update.microsoft.com/Search.aspx?q=KB4096040

    June cumulative update for IE KB4230450 is included in June rollup for Windows 7 (KB4284826)

    So, KB4096040 is replaced by June rollup for Windows 7 (KB4284826)

    But it's NOT work

    Friday, June 29, 2018 8:33 AM
  • Hi Katbert,

    Thanks for your reply.

    According to the research, we need to find the relationship for updates package.

    KB4096040 is replaced by KB4230450:

    KB4230450 is not replaced by June rollup for Windows 7 (KB4284826):


    Moreover, the Microsoft said:

    For more details, please refer to the link:
    http://support.microsoft.com/kb/4230450

    Therefore,  the relationship between "Cumulative Security Update for Internet Explorer 11 for Windows 7(KB4230450)" and "2018-06 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4284826)" also looks like as below:

    Hope this helps and if there is any question, feel free to contact me.

    Best regards,
    Johnson
    =====================
    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Friday, June 29, 2018 9:26 AM
  • If

    The fixes that are included in this Security Update for Internet Explorer (KB 4230450) are also included in the June 2018 Security Monthly Quality Rollup. 
    
    Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are in this update

    this means - June Secuirty monthly quality update includes June cumulative IE update

    Friday, June 29, 2018 1:31 PM
  • Hi,

    According to our discussion, I do lots of research and discuss with my colleagues for this issue. We think the relationship is like as below:


    In addition, there is no article to prove that KB4230450 is included in KB4284826. If the relationship is seemed as you said, then the updates KB4230450 cannot be installed after installing the updates KB4284826.

    My suggestion is that you should install the updates KB4230450 in case of some security issues.

    Hope this helps and if there is any question, feel free to contact me.

    Best regards,
    Johnson

    =====================
    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
    Monday, July 2, 2018 3:17 AM
  • Every month I approve on WSUS only one update for Windows 7 - Security Monthly Quality Rollup

    And after client computers reboots, and report status to WSUS - another updates of current month (Cumulative security update for Internet Explorer and Security-only update) not offered by WSUS

    So, every month Security Monthly Quality Rollup replace Cumulative security update for Internet Explorer and Security-only update

    https://support.microsoft.com/en-us/help/4230450/cumulative-security-update-for-internet-explorer

    This Security Update for Internet Explorer is not applicable for installation on a computer on which the Security Monthly Quality Rollup or the Preview of Monthly Quality Rollup from June 2018 (or a later month) is already installed. This is because those updates contain all the fixes that are in this Security Update for Internet Explorer.

    So, Security Monthly Quality Rollup INCLUDES Cumulative security update for Internet Explorer

    • Edited by katbert Tuesday, July 3, 2018 12:07 PM
    Tuesday, July 3, 2018 11:51 AM
  • Hi, 

    In my own lab, I cannot install KB4096040 after installing the update KB4230450. (KB4230450 replace KB4096040)

    However, in my another win7, when I install the KB4284826 (2018-06 Security Monthly Quality Rollup), then I cannot install KB4230450 (2018-03 Security Update for Internet Explorer), but still install KB4096040 (2018-03 Security Update for Internet Explorer).



    In addition, 

    Therefore, I think there may some logic problem here for these updates.

    I recommend to install the last update, and ignore the KB4096040.

    Hope it helps.

    Best regards,
    Johnson

    =====================
    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, July 6, 2018 10:57 AM
  • Therefore, I think there may some logic problem here for these updates.


    I recommend to install the last update, and ignore the KB4096040.

    I ignore KB4096040 since april.

    Maybe someone from WSUS team read this thread - and correct detection rules


    • Edited by katbert Tuesday, July 10, 2018 5:17 AM
    Tuesday, July 10, 2018 5:17 AM