locked
Failure to install a required security patch to address CVE-2020-1147 - how to diagnose and install it RRS feed

  • Întrebare

  • Our existing SharePoint admins left for another company and two persons who were doing desktop support are filling in for them so they are new at installing patches. I know it is odd, but that is a situation caused due to budget shortfall.

    They could not install the patch to address CVE-2020-1147 and message in log was "Installation Failure: Windows failed to install the following update with error 0x80070661: Security Update for Windows (KB4565579)"

    I saw the information at https://support.microsoft.com/en-us/help/4565579/kb4565579

    They told me the server has March 12, 2019 servicing stack update (SSU) (KB4490628), latest SHA-2 update (KB4474419). They don't know if the servers have Extended Security Updates (ESU) Licensing Preparation Package (KB4538483)
    and are checking on it.

    1. If the servers don't have Extended Security Updates (KB4538483) is there a way to install this security update? We may not have the budget to buy it this year because of low revenue stemming from the pandemic

    2. If the servers absolutely need Extended Security Updates (KB4538483) can that be purchased for 4 servers?

    3. What else needs to be checked to ensure there is no other factor causing the security updates to fail?

    Thanks


    duminică, 6 septembrie 2020 05:41

Toate mesajele

  • Please check this , this could be wrong package ie. 32 bit or not applicable or required .

    https://community.spiceworks.com/topic/620625-error-0x80070661-wrong-cpu-type

    • Propus ca răspuns de Balal Ahmad duminică, 6 septembrie 2020 07:56
    duminică, 6 septembrie 2020 07:56
  • Hi Balal,

    Thanks for the reply.

    The server admin confirmed it is the proper 64 bit package and this patch is needed https://support.microsoft.com/en-us/help/4565579/kb4565579 as it is a security update for CVE-2020-1147 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147

    What else can be tried?

    Thanks

    luni, 7 septembrie 2020 04:14
  • i can see there are some prerequisites before that , can u verify that ?

    they mention to install this update you should have these all.

    • Propus ca răspuns de Balal Ahmad luni, 7 septembrie 2020 05:01
    luni, 7 septembrie 2020 05:00
  • Thanks, all the prerequisites are installed except the Extended Security Updates (ESU) Licensing Preparation Package (KB4538483). The Windows server team did not buy them and now the SharePoint team is wondering what to do.

    Is there any workaround for this?

    I appreciate your help.

    luni, 7 septembrie 2020 19:17