Answered by:
Visual Studio Shell 2010 ENU - Hotfix KB4506161

Question
-
July 2019 Patch come with Visual Studio hotfix KB4506161. My MBSA scan result showed that my server requires this hotfix. I downloaded from Microsoft Catalog server and run the installation, it says: KB4506161 does not apply, or is blocked by another condition on your computer. Please see http://go.microsoft.com/fwlink/?LinkId=225649 for more details.
Other forum mentioned that the program: Visual Studio Shell 2010 ENU is triggering the hotfix. But how do we apply this hotfix?
- Moved by Teige Gao Friday, July 12, 2019 6:26 AM
Thursday, July 11, 2019 3:49 PM
Answers
-
Hi,
According to Microsoft website (https://support.microsoft.com/en-us/help/4506161/security-update-for-information-disclosure-vulnerability-in-vs-2010) this security update applies to Visual Studio 2010 Service Pack 1 except for Visual Studio Isolated and Integrated Shells.
This means if the system only have Visual Studio Isolated and Integrated Shells, this patch is not relavent. (Correct me if i am wrong)
One more issue is for those using Microsoft Baseline Security Analyser with offline wsus cab file to scan your system, it flag that KB4506161 is missing as I guess CAB file will only updated by next month.- Marked as answer by Kitoro Saturday, August 24, 2019 1:51 PM
Thursday, July 25, 2019 1:35 PM
All replies
-
I'm having the exact same problem. That shell is on a bunch of the servers I manage and I can't figure out what the issue is. My guess is Windows update erroneously thinks the patch is needed based on ANY of the VS 2010 components being present. Total guess though since I have yet to find anything in the logs to explain why it is failing.Thursday, July 11, 2019 5:05 PM
-
I am also having this exact same issue and have had it previously. It is because the isolated shell is installed and the patch requires Visual Studio 2010 SP1 installed in order to apply it. We have decided to just go ahead and remove all Visual Studio 2010 isolated shell installs and components however that does not resolve the issue as I feel it would be counterproductive to install Visual Studio 2010 SP1 just to update the isolated shell.Thursday, July 11, 2019 5:45 PM
-
Running into the same thing here. I am simply declining the update in WSUS, typical Microsoft BS, you would think that they actually QA their patches from time to time... Just one more way to help convince management to ditch Microsoft products going forward, expensive, insecure, buggy.
Thursday, July 11, 2019 6:58 PM -
Having the same issue on our systems. Same description. Although we noticed this is MS Bulletin MS000-000 which maybe is some sort of late April Fools joke?!Friday, July 12, 2019 12:04 AM
-
Hi all,
Welcome to the MSDN forum and thanks for your feedback.
According to your description, I found this is a known issue and the VS product team engineers are working on it, please add your comments into this issue and waiting for a moment.
If there have any updates or workarounds comes from the VS product team, I will also add it in here. Sorry for this inconvenience and thanks for your understanding.
Best regards,
Sara
MSDN Community Support Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com
Friday, July 12, 2019 8:38 AM -
Also having this issue. Appears to be in places where the full Visual Studio install isnt around. Just pieces that were installed to support other things like SQL Server. The patch seems to be for the full product. I'm going to decline this one for the time being. as well as KB4506163 which is having same issue.Sunday, July 14, 2019 4:45 PM
-
Sara, any update?Monday, July 15, 2019 2:40 PM
-
Hi Sara,
Any update?
Monday, July 15, 2019 7:01 PM -
Hi Mike,
AFAIK, it caused by a windows update authoring error and the engineer is working on it to get this issue resolved, please be patient for a while, thanks for your understanding.
Best regards,
Sara
MSDN Community Support Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com
Tuesday, July 16, 2019 3:33 AM -
Looks like Security update for the information disclosure vulnerability in Visual Studio 2015 Update 3 (KB4506164) hit the same issue as well. Hope the engineering team could resolve this issue soon. :)
Thanks!
Tuesday, July 16, 2019 4:05 AM -
-
Hello,
we have declined the patch on our wsus
Thursday, July 18, 2019 7:02 AM -
Hi Sara,
Do you have any news regarding this KB?
Tuesday, July 23, 2019 3:12 PM -
Remember you are dealing with Microsoft. They fix things like this at a snails pace.
This is the same grimy company:
https://finance.yahoo.com/news/microsoft-pays-25-million-settle-155419411.html
Tuesday, July 23, 2019 5:15 PM -
Hi Kitoro,
Until now, I have not be notified the fix is completed or not, please go to Windows update and check if there have any new pending updates, once there have and install it to test, sorry for this inconvenience.
Best regards,
Sara
MSDN Community Support Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com
Wednesday, July 24, 2019 2:19 AM -
Hi,
According to Microsoft website (https://support.microsoft.com/en-us/help/4506161/security-update-for-information-disclosure-vulnerability-in-vs-2010) this security update applies to Visual Studio 2010 Service Pack 1 except for Visual Studio Isolated and Integrated Shells.
This means if the system only have Visual Studio Isolated and Integrated Shells, this patch is not relavent. (Correct me if i am wrong)
One more issue is for those using Microsoft Baseline Security Analyser with offline wsus cab file to scan your system, it flag that KB4506161 is missing as I guess CAB file will only updated by next month.- Marked as answer by Kitoro Saturday, August 24, 2019 1:51 PM
Thursday, July 25, 2019 1:35 PM