Windows Update - Patch Tuesday Critical - CVE-2020-0601

[AdvancedSetup]

If you normally postpone the normal Patch Tuesdays from Microsoft you may want to update this one

A Very Important Patch Tuesday
https://www.nsa.gov/News-Features/News-Stories/Article-View/Article/2056772/a-very-important-patch-tuesday/

National Security Agency|Cybersecurity Advisory
Patch Critical Cryptographic Vulnerability in Microsoft Windows Clients and Servers
https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF

Krebs On Security - 14 Jan 2020
Patch Tuesday, January 2020 Edition
https://krebsonsecurity.com/2020/01/patch-tuesday-january-2020-edition/

Microsoft's January 2020 Patch Tuesday Fixes 49 Vulnerabilities
https://www.bleepingcomputer.com/news/microsoft/microsofts-january-2020-patch-tuesday-fixes-49-vulnerabilities/

 

[CommGuy]

Which KB update covers this patch?  I've looked at what I received on Tue and I didn't see any reference to the CVE 2020-0601 (or anything that did referred to the crypto module that's impacted).  I did receive the MSRT on 1/15 along with a security update for Excel and Office.  Thank you!

[1PW]

50 minutes ago, CommGuy said:

Which KB update covers this patch?

Hello @CommGuy:

If your computer's Windows 10 OS was previously updated to 1903/1909, as it should, then KB4528760 installed the fix.

HTH

[BillH99999]

Do you know if these updates are metered out?  I'm on Win 10 1909 and Windows Update says I am up to date and this KB has not been installed on my system.

Bill

[Porthos]

1 minute ago, BillH99999 said:

Do you know if these updates are metered out?  I'm on Win 10 1909 and Windows Update says I am up to date and this KB has not been installed on my system.

Bill

This was the normal patch Tuesday Culminate update. It should have already either been installed or waiting.  You should show 18363.592

 

[AdvancedSetup]

If you type in Winver in search and run that then the Dialog box for About Windows will show up as Porthos has shown and as shown below. Mine now matches that version too

 

[BillH99999]

Strange.  I'm on 1909 but Windows Update says I'm up to date.

Bill

[AdvancedSetup]

I'm not certain why that is unless there is some other update that is being rolled out on a metered pace. @Maurice Naggar may know more about it as he does a lot of Windows Support on the Microsoft site as well

 

[deucy14]

BillH99999........Everything you narrated I experienced too except I am build 1903, but they have the same common core operating system.  The only step you did not state is to click on View Update History.

View Update History      You see it on the screen print you provided.  KB4528760 was not there last night for me; only the December update that I downloaded about 2 a.m. EST this morning.   I checked tonight 7:15 pm and still everything looked the same for me until I clicked on View Update History. 

[AdvancedSetup]

Well the critical update was just from a few days ago. If your last update was from December then somehow you did not get the update on 01/14/2020 it sounds like.

 

[BillH99999]

Here is what my update history shows.  I am still showing up to date when I run Windows Update.

My wife's laptop is also on Windows 10 1909 and she is also showing as up to date even though she doesn' t have Tuesday's updates.

Bill

 

Edited January 17, 2020 by BillH99999

[Maurice Naggar]

@AdvancedSetup    I am really not up-to-date on the current outstanding "holdups" ......but I recall there had been recent ( last fall to November or so) advice for users whose pc's had either Avast or AVG  antivirus.  For anyone who has those, see about getting the latest from the AV maker

• Avast support KB article
• AVG support KB article

 

To BillH99999   you may consider a manual Windows Update run at the Top of the hour.

If you still dont get the January 2020 cumulative update, then you may pull it down  ( save first then run) from the MS Download Catalog

http://www.catalog.update.microsoft.com/Search.aspx?q=KB4528760

Just be careful to pick the one for your Build  And for the bit-ness of your Windows   ( ie,    x86 for 32-bit,  x64 for 64-bit,  ARM64 for ARM system)

 

For Deucy14,  if yours is still on Build 1903 .... then

Do a new Windows Update manual run  at the top of the hour  so that hopefully you get offered the build 1909

[deucy14]

1 hour ago, AdvancedSetup said:

Well the critical update was just from a few days ago. If your last update was from December then somehow you did not get the update on 01/14/2020 it sounds like.

 

On the early morning of Jan 16, I discovered the supposed automatic update that was to be received---the December one--had not  been received.  Neither had the subject patch that is the current subject. I manually downloaded the December update.  I waited through the same day for the patch to automatically come in, which it did that night.

[BillH99999]

59 minutes ago, Maurice Naggar said:

To BillH99999   you may consider a manual Windows Update run at the Top of the hour.

If you still dont get the January 2020 cumulative update, then you may pull it down  ( save first then run) from the MS Download Catalog

http://www.catalog.update.microsoft.com/Search.aspx?q=KB4528760

Just be careful to pick the one for your Build  And for the bit-ness of your Windows   ( ie,    x86 for 32-bit,  x64 for 64-bit,  ARM64 for ARM system)

 

@Maurice Naggar

I ran manual updates at least 5 or 6 times yesterday and again 5 or 6 times today.  Same thing... it says my system is up to date (and also my wife's).  This despite the fact that we are obviously not up to date. 

If it continues like this tomorrow, I"ll download and install the update.  Thanks for the link.

Bill 

[Firefox]

I may try your link as well  @Maurice Naggar

I have ran check for updates several times (it actually installed some today) but my version number is still Build 18362.592

[Porthos]

59 minutes ago, Firefox said:

but my version number is still Build 18362.592

592 is the current CU for Jan.

[BillH99999]

@Porthos

Now I'm confused.  My wife is on 1903, not 1909.  Her build shows as 18362.592.  However, she does not have KB4528760 installed.  

So 18362.592 does not mean that this fix is installed.  Right?

Bill

[Porthos]

2 minutes ago, BillH99999 said:

So 18362.592 does not mean that this fix is installed.  Right?

Yes. 1903 and 1909 have the same exact updates and KB numbers.

[Porthos]

[BillH99999]

@Porthos

OK... Just to clarify because I am still confused.  

What confused me is that she is on Build 18382.592 but she still doesn't have KB4528760 installed.  So she needs to install it.  It seemed like you were saying that to be on Build 18392.592 you first had to install KB4528760.

Bill

Edited January 17, 2020 by BillH99999

[BillH99999]

@Porthos

On a related note.  Do you know why she would still be on 1903 while I got updated to 1909 back in December?

Bill

[Porthos]

7 minutes ago, BillH99999 said:

@Porthos

On a related note.  Do you know why she would still be on 1903 while I got updated to 1909 back in December?

Bill

First 1909 was optional. Second, I remoted in to 2 computers today expecting to run the update to 1909 and neither of them had the prompt shown below like it should of had. I am speculating since 2004 is around the corner MS is pulling back the optional 1909 as to not have them run too close together.

Edited January 17, 2020 by Porthos

[BillH99999]

@Porthos

I meant to ask a question in post #20 and failed to do so.

Build  18382.592 does not imply that you have update KB4528760 installed... correct?  That is how it appears to me.

Thanks for the explanation on 1909.

Bill

Edited January 17, 2020 by BillH99999

[Porthos]

 

9 minutes ago, BillH99999 said:

Build  18382.592 does not imply that you have update KB4528760 installed... correct?  That is how it appears to me.

592 is the result of KB4528760 being installed.

https://www.tenforums.com/windows-10-news/148445-kb4528760-cu-win-10-v1903-build-18362-592-v1909-build-18363-592-a.html

[BillH99999]

@Porthos

Then how can my wife be on 592 but she doesn't have KB4528760 installed?  See screenshot in reply #20.

And here is her winver...

Bill

Edited January 17, 2020 by BillH99999