Ruan

In the wake of the recently disclosed Intel Kernel Memory vulnerabilities (Meltdown & Spectre), MS has released out of band updates for most systems. Here's what we got so far for Server 2008. Description of the security update for the ATMFD.dll information disclosure vulnerability in Windows Server 2008: January 3, 2018 https://support.microsoft.com/en-us/help/4056941/security-update-for-vulnerabilities-in-windows-server-2008 http://catalog.update.microsoft.com/v7/site/search.aspx?q=4056941 Description of the security update for the Windows GDI information disclosure vulnerability in Windows Server 2008: January 3, 2018 https://support.microsoft.com/en-us/help/4056944/security-update-for-vulnerabilities-in-windows-server-2008 http://catalog.update.microsoft.com/v7/site/search.aspx?q=4056944 Description of the security update for the Microsoft Color Management information disclosure vulnerability in Windows Server 2008: January 3, 2018 https://support.microsoft.com/en-us/help/4056942/security-update-for-vulnerabilities-in-windows-server-2008 http://catalog.update.microsoft.com/v7/site/search.aspx?q=4056942 Description of the security update for the SMB Server elevation of privilege vulnerability in Windows Server 2008: January 3, 2018 https://support.microsoft.com/en-ie/help/4056759/security-update-for-vulnerabilities-in-windows-server-2008 http://catalog.update.microsoft.com/v7/site/search.aspx?q=4056759 Description of the security update for the elevation of privilege vulnerability in Windows Server 2008: January 3, 2018 https://support.microsoft.com/en-ie/help/4056615/security-update-for-vulnerabilities-in-windows-server-2008 http://catalog.update.microsoft.com/v7/site/search.aspx?q=4056615 Cumulative security update for Internet Explorer: January 3, 2018 https://support.microsoft.com/en-ie/help/4056568/cumulative-security-update-for-internet-explorer https://www.catalog.update.microsoft.com/search.aspx?q=kb4056568 Additional Information: Windows Server Guidance to protect against the speculative execution side-channel vulnerabilities Note that the Windows Server patches are NOT enabled by default. Those of you who want to turn on Meltdown protection have to change the registry. https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution-s Important information regarding the Windows security updates released on January 3, 2018 and anti-virus software https://support.microsoft.com/en-ie/help/4072699/important-information-regarding-the-windows-security-updates-released I'm going to hold off installing these for at least a couple of weeks, just to let the dust settle, and see if any negative reports pop-up online.

Installed December's Security updates. Everything running good, no problems to report. Windows6.0-KB4047170-x86.msu Windows6.0-KB4052303-x86.msu Windows6.0-KB4053473-x86.msu IE9-Windows6.0-KB4052978-x86.msu

Hey, Guys. Not a whole lot this month, it would seem. I'll report back once I have them installed. December 12, 2017 New Security Content: Windows6.0-KB4047170 (Supersedes: MS15-057 KB3033890) Windows6.0-KB4052303 Windows6.0-KB4053473 IE9-Windows6.0-KB4052978 New non-security content: Windows6.0-KB4051956 Time zone and DST changes in Windows for Northern Cyprus, Sudan, and Tonga Monday, November 27, 2017 New non-security content: Windows6.0-4049068 Time zone changes in Windows for Fiji Changes to existing nonsecurity content: 2017-11 Quality Rollup for .NET Framework 2.0 on Windows Server 2008 (KB4049019) Metadata has changed. Binaries have not changed. This update does not have to be reinstalled.

Just a quick follow up on how things went. Windows6.0-KB4046184 Windows6.0-KB4047211 Windows6.0-KB4048968 Windows6.0-KB4048970 Windows6.0-KB4049164 Windows6.0-KB4050795 IE9-Windows6.0-KB4047206 Windows6.0-KB4019276 Smooth install of the above updates, no noticeable problems so far.

Hey, Guys. Tuesday, November 14, 2017 Updates. New Security Content: Windows6.0-KB4046184 Windows6.0-KB4047211 (Supersedes: KB4042067) Windows6.0-KB4048968 (Supersedes: KB4042122) Windows6.0-KB4048970 (Supersedes: KB4042120) Windows6.0-KB4049164 Windows6.0-KB4050795 (Supersedes: KB4042007) IE9-Windows6.0-KB4047206 (Supersedes: KB4040685) New non-security content: Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2 Windows6.0-KB4019276 (Supersedes: KB4019276) Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 (KB4049019) 4041778 Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and .NET Framework 4.6 for Windows Server 2008 SP2 (KB 4041778) 4040977 Security and Quality Rollup for .NET Framework 4.5.2 for Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2 (KB 4040977) 4040978 Security and Quality Rollup for .NET Framework 2.0 SP2 for Windows Server 2008 SP2 (KB 4040978) Update replacement information This update replaces updates 4043768 and 4042201. Changes to existing nonsecurity content: KB4035176 Improvements and Fixes to Universal C Runtime in Windows Metadata has changed. Binaries have not changed. This update does not have to be reinstalled. Think I got them all, will report back how things went after I install them later.

There also seems to be a Security Update (KB4042050) available. Ref; https://support.microsoft.com/en-us/help/894199/software-update-services-and-windows-server-update-services-changes-in https://www.ghacks.net/2017/10/10/microsoft-security-updates-october-2017-release/ Just installed the 12 updates below, no problems so far: Windows6.0-KB4041671-x86.msu Windows6.0-KB4041944-x86.msu Windows6.0-KB4041995-x86.msu Windows6.0-KB4042007-x86.msu Windows6.0-KB4042050-x86.msu Windows6.0-KB4042067-x86.msu Windows6.0-KB4042120-x86.msu Windows6.0-KB4042121-x86.msu Windows6.0-KB4042122-x86.msu Windows6.0-KB4042123-x86.msu Windows6.0-KB4042723-x86.msu IE9-Windows6.0-KB4040685-x86.msu -Ruan

That's good news, thanks. Sorry for my even later response . My old BC account details are long gone, I just re-registered though, and posted a link to your tutorial. I'm sure it'll be well appreciated . Worked perfect for me, btw . --------------- Anyone else notice there was a KB4034786 originally listed in the Security update deployment information for August 8th, which disappeared less than 24 hrs later? MS must have pulled it for some reason or other, it can still be seen in Google cache.

Thanks VistaLover for saving to webarchive, makes it handy for sharing with others. Bookmarked for future ref. And thank you too, for the welcome , I hope to make the most of what time is left here.

Thanks for the heads up, 11ryanc, much appreciated. BleepingComputer's quite a nice community, used to contribute there fairly regular some years back. They certainly don't seem to have any problem with the Vista EOL Update thread over there, but sadly it looks like the OP may have abandoned it. Not sure how BleepingComputer compares to MSFN though, as I (very unfortunately) am new here.

Excellent post, VistaLover! Really appreciate it, especially the Reg Edits, never would have known about them. Going to implement this in a few days time. Page saved. Many thanks, Ruan.

Hi burd, thanks for replying . That's really great news, I'll keep my eyes peeled over at Vistax64 forums.

Hi Everyone, Was just registering to thank all the contributors of this great thread for the time and effort they had put in to building such a valuable resource, when I noticed the sad news that MSFN is to close shortly . I found my way here a couple of weeks ago from a mention by JodyT in a similar thread over at Bleeping Computer, and was enjoying reading the wealth of info on the forums here. Seems like a nice community, I would've liked to have got to spend more time here. If its okay, i have a couple of questions: @ All: It would be such a shame for this thread to disappear, do you have any plans to continue it elsewhere? @ greenhillmaniac: Thank you so much for uploading everything to MEGA. Any plans to keep updating the repository for the foreseeable future? Warmest regards, Ruan.