4078130: Update to disable mitigation against Spectre, Variant 2 - Windows Server 2008/ Windows 7 / Windows Server 2008 R2 / Windows Server 2012 / Windows 8.1 / Windows Server 2012 R2 / Windows 10 / Windows Server 2016 - KB4078130

Usage and Config Patch
1

Has anyone deployed KB4078130? even on test devices?
1st of all, it does not appear as relevant on any of our devices - found the issue in the relevance:

(exists value "FeatureSettingsOverride" whose (it as integer = 0) of it AND exists value "FeatureSettingsOverrideMask" whose (it as integer = 3) of it) of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" of registry

Once we copy the task and change the relavance as below, it appears relevant:

(exists value "FeatureSettingsOverride" whose (it as integer = 0) of it AND exists value "FeatureSettingsOverrideMask" whose (it as integer = 3) of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" of registry

We have deployed it on test devices and the status is Completed with Exit Code 10, no entries in Control Panel, it only changes ā€œFeatureSettingsOverrideā€ to 1.
We have also manually ran the exe and it only changes "FeatureSettingsOverride " to 1.

In the Ms Update Catalog it mentioned that ā€œThis software update can be removed via Add or Remove Programs in Control Panel.ā€ so that would mean that it was not successfully installed on our devices.

Anyone had a similar/different result?
Thank you!

2

I let development know about this, however, you should open a case so that it can be officially tracked.

https://www.ibm.com/support/home/

1 Like
3

Both of those relevance statements have issues, primarily the exists should not be within the () like that because it causes problems like this.

The keys should be correct that you changed, but only if it is rewritten.

The better form is like: exists plurals whose(exists it) of plurals

While this will always have problems: (exists it) of anything

It should be like this:

exists keys "Memory Management" whose(exists value "FeatureSettingsOverride" whose (it as integer = 0) of it AND exists value "FeatureSettingsOverrideMask" whose (it as integer = 3) of it) of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of registry

This would be another option:

exists (exists value "FeatureSettingsOverride" whose (it as integer = 0) of it AND exists value "FeatureSettingsOverrideMask" whose (it as integer = 3) of it) whose(it) of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" of registry