Flexis October 2018 Patch Review And Recommendations

Patches Microsoft released in October 2018

KB4462917 – 2018-10 Cumulative Update for Windows Server 2016 for x64-based systems
KB4462926 – 2018-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems
KB4462923 – 2018-10 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems
KB4463097 – 2018-10 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems

Impacted Products:

Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Office and Microsoft Office Services and Web Apps
.NET Core
PowerShell Core
SQL Server Management Studio
Microsoft Exchange Server
Azure IoT Edge

Please note the following information regarding the security updates:

Customers running Windows 7 or Windows Server 2008 R2 need to ensure they have Servicing Stack Update (SSU) 3177467 installed before installing the October 2018 security updates, to avoid a failure to install. See Microsoft Knowledge Base Article 3177467for more information about this SSU.
Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.
Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

Microsoft Security Advisories:

ADV180026 | Microsoft Office Defense in Depth Update

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180026

Known Issues:

KB4459266, KB4462917, KB4462923, KB4092470, KB4461450

KB4459266 Applies to: Exchange Server 2016, Exchange Server 2013

https://support.microsoft.com/en-us/help/4459266/description-of-the-security-update-for-microsoft-exchange-server-2013

Symptoms: When you try to manually install this security update in “normal mode” (not running the update as an administrator) by double-clicking the update file (.msp), some files are not correctly updated. When this issue occurs, you do not receive an error message or any indication that the security update was not correctly installed. Also, Outlook Web Access (OWA) and the Exchange Control Panel (ECP) may stop working. This issue occurs on servers that are using user account control (UAC). The issue occurs because the security update does not correctly stop certain Exchange-related services.

Workaround: To avoid this issue, run the security update in elevated mode, as an administrator. To do this, right-click the update file, and then click Run as administrator.

KB4462917 Applies to: Windows 10, version 1607; Windows Server 2016

https://support.microsoft.com/en-us/help/4462917/windows-10-update-kb4462917

Symptoms: After installing this update, installing Window Server 2019 Key Management Service (KMS) host keys (CSVLK) on Window Server 2016 KMS hosts does not work as expected.

Workaround: Microsoft is working on a resolution and will provide an update in an upcoming release.

KB4462923 Applies to: Applies to: Windows 7 Service Pack 1; Windows Server 2008 R2 Service Pack 1

https://support.microsoft.com/en-us/help/4462923/windows-7-update-kb4462923

Symptoms: After you apply this update, the network interface controller may stop working on some client software configurations. This occurs because of an issue related to a missing file, oem<number>.inf. The exact problematic configurations are currently unknown.

Workaround:

To locate the network device, launch devmgmt.msc. It may appear under Other Devices.
To automatically rediscover the NIC and install drivers, select Scan for Hardware Changes from the Action menu.

Alternatively, install the drivers for the network device by right-clicking the device and choosing Update. Then choose Search automatically for updated driver software or Browse my computer for driver software.