Quantcast
Channel: Ivanti User Community : All Content - Patch Manager
Viewing all articles
Browse latest Browse all 1121

Current definitions in Patch and Compliance referencing Support for the Intel 'Meltdown' Security Vulnerability

$
0
0

For the latest information regarding the Meltdown and Spectre vulnerabilities see this article: A comprehensive guide to the Meltdown and Spectre vulnerabilities

 

Affected patches:

Vulnerability

KB

Product

Type

MS18-01-2K8_INTL

KB4056615
KB4056759
KB4056941
KB4056942
KB4056944

Windows Server 2008

Security Updates

MS18-01-IE_INTL

KB4056568

Internet Explorer

Security Update

MS18-01-MR7_INTLKB4056894Windows 7, Server 2008 R2Monthly Rollup
MS18-01-MR8_INTLKB4056896Windows Server 2012Monthly Rollup

MS18-01-SO7_INTL

KB4056897

Windows 7, Server 2008 R2

Security Only

MS18-01-SO8_INTL

KB4056899

Windows Server 2012

Security Only

MS18-01-SO81_INTL

KB4056898

Windows 8.1, Server 2012 R2

Security Only

MS18-01-SQL_INTL

KB4052987
KB4057118
KB4057119
KB4057122

SQL Server 2016, 2017

Security Updates

MS18-01-W10_INTL

KB4056888
KB4056890
KB4056891
KB4056892
KB4056893

Windows 10

Cumulative Update and Delta Update

 

 

How to Scan and/or Repair against a custom group

 

Additional Information

 

Due to to possible BSOD issues that may occur when installing this update on system with out of date AV software, we will be adding a detection prerequisite as Windows Update does:

Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat"

Value="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD”

 

If key does not exist you will be offered the detection only version of this patch.

 

This means that the associated patch for a system will not be remediated unless the Registry key is present. This mirrors how the patches are handled by Microsoft. Full details regarding the offering of the patch, and options if the Registry key is missing, are located in the Microsoft article here: https://support.microsoft.com/en-us/help/4072699/important-information-regarding-the-windows-security-updates-released

 

An Example of the detection only definition being returned will contain "DETECT" in the definition name and under Patch Required it will say: No repair action specified There is also no patch information provided

NoRegKeyHighlighted.PNG

An Example of the definition where the regkey is detected and you will be able to remediate

PatchRequired.PNG

 

Support for the Intel 'Meltdown' security vulnerability KB4058702

Important information on detection logic for the Intel 'Meltdown' security vulnerability


Viewing all articles
Browse latest Browse all 1121

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>