[tbb-bugs] #18935 [Applications/Tor Browser]: MS bugs - Danger! Windows updates break everything on their way!

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 1 20:11:03 UTC 2016


#18935: MS bugs - Danger! Windows updates break everything on their way!
--------------------------------------+---------------------------
 Reporter:  bugzilla                  |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Critical                  |     Resolution:  duplicate
 Keywords:  tbb-crash                 |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+---------------------------

Comment (by bugzilla):

 Well, MS started to fix its bugs in a specific way. It's called Monthly
 update rollup.
 > This update includes quality improvements. No new operating system
 features are being introduced and no new security updates are included.
 It is optional! But
 > We recommend that you apply this update rollup as part of your regular
 maintenance routines.
 It was treated as a joke at first, but it still continues...

 So, the needed updates are:
 [https://support.microsoft.com/kb/3161647 KB3161647 Windows Update Client
 for Windows 7 and Windows Server 2008 R2: June 2016]
 [https://support.microsoft.com/kb/3163644 KB3163644 Microsoft Office 2010
 doesn't start when EMET is enabled in Windows 7 or Windows Server 2008 R2]
 > This issue occurs when the Enhanced Mitigation Experience Toolkit (EMET)
 is enabled and security update 3146706 or convenience rollup update
 3125574 is installed.
 Have you guessed that it's about Windoze (not EMET) bug with EAF? :)
 Don't try to download them because, yes, they are in the first Monthly
 update rollup:
 [https://support.microsoft.com/en-us/kb/3161608 June 2016 update rollup
 for Windows 7 SP1 and Windows Server 2008 R2 SP1]
 But don't try to find it in your Optional updates because update rollups
 are cumulative, and this one was superseded by:
 [https://support.microsoft.com/en-us/kb/3172605 July 2016 update rollup
 for Windows 7 SP1 and Windows Server 2008 R2 SP1]
 But to find out info about it you need https://support.microsoft.com/en-
 us/help/22801/windows-7-and-windows-server-2008-r2-update-history
 And, surprise, update rollups are no longer cumulative, so don't use
 [https://support.microsoft.com/ru-ru/kb/3179573 August 2016 update rollup
 for Windows 7 SP1 and Windows Server 2008 R2 SP1]
 > This update doesn't replace any previously released update.
 Funny? No? Don't worry, welcome Monthly Rollups!
 https://arstechnica.com/business/2016/08/windows-7-8-1-moving-to-windows-
 10s-cumulative-update-model/?comments=1&start=200
 > October 2016's Patch Tuesday will see the release of the first Monthly
 Rollup for Windows 7 and 8.1.
 and, yes,
 > Subsequent months will have new Monthly Rollups, and these will be
 cumulative, incorporating the content of all previous Monthly Rollups.
 but
 > Initially, these Monthly Rollups will only contain new patches released
 from October 2016 onward.
 but
 > Over the next year, Microsoft says that it will extend them to go back
 in time, slowly integrated all the patches released since the last
 "baseline."
 So MS will get you sooner or later ;)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18935#comment:20>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list