Content Release: ESU Patching Add-on for Windows 2008 - April 2020 Security Updates

Release Announcements Patch (Release Announcements)
1

Content in the ESU Patching Add-on for Windows 2008 site has been added:
MS20-APR: Servicing stack update for Windows Server 2008 SP2 - Windows Server 2008 SP2 - KB4550737 (x64)
MS20-APR: Servicing stack update for Windows Server 2008 SP2 - Windows Server 2008 SP2 - KB4550737
MS20-APR: Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1 - Windows Server 2008 R2 SP1 - KB4550738 (x64)
MS20-APR: Cumulative security update for Internet Explorer - Windows Server 2008 R2 SP1 - IE 11 - KB4550905 (x64)
MS20-APR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4550905 (x64)
MS20-APR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4550905
MS20-APR: Cumulative security update for Internet Explorer - Windows Server 2008 R2 SP1 - IE 11 - KB4550905 (x64) (Unentitled)
MS20-APR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4550905 (x64) (Unentitled)
MS20-APR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4550905 (Unentitled)
MS20-APR: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB4550951 (x64)
MS20-APR: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB4550951
MS20-APR: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB4550951 (x64) (Unentitled)
MS20-APR: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB4550951 (Unentitled)
MS20-APR: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB4550957 (x64)
MS20-APR: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB4550957
MS20-APR: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB4550957 (x64) (Unentitled)
MS20-APR: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB4550957 (Unentitled)
MS20-APR: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 R2 SP1 - KB4550964 (x64)
MS20-APR: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 R2 SP1 - KB4550964 (x64) (Unentitled)
MS20-APR: Security Only Quality Update - Security Only - Windows Server 2008 R2 SP1 - KB4550965 (x64)
MS20-APR: Security Only Quality Update - Security Only - Windows Server 2008 R2 SP1 - KB4550965 (x64) (Unentitled)

Content in the ESU Patching Add-on for Windows 2008 site has been superseded:
MS20-MAR: Cumulative security update for Internet Explorer - Windows Server 2008 R2 SP1 - IE 11 - KB4540671 (x64) (Superseded)
MS20-MAR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4540671 (x64) (Superseded)
MS20-MAR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4540671 (Superseded)
MS20-MAR: Cumulative security update for Internet Explorer - Windows Server 2008 R2 SP1 - IE 11 - KB4540671 (x64) (Unentitled) (Superseded)
MS20-MAR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4540671 (x64) (Unentitled) (Superseded)
MS20-MAR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4540671 (Unentitled) (Superseded)
MS20-MAR: KB4540688 (Monthly Rollup) - Monthly Rollup - Windows Server 2008 R2 SP1 - KB4540688 (x64) (Superseded)
MS20-MAR: KB4540688 (Monthly Rollup) - Monthly Rollup - Windows Server 2008 R2 SP1 - KB4540688 (x64) (Unentitled) (Superseded)
MS20-MAR: KB4541506 (Monthly Rollup) - Monthly Rollup - Windows Server 2008 SP2 - KB4541506 (x64) (Superseded)
MS20-MAR: KB4541506 (Monthly Rollup) - Monthly Rollup - Windows Server 2008 SP2 - KB4541506 (Superseded)
MS20-MAR: KB4541506 (Monthly Rollup) - Monthly Rollup - Windows Server 2008 SP2 - KB4541506 (x64) (Unentitled) (Superseded)
MS20-MAR: KB4541506 (Monthly Rollup) - Monthly Rollup - Windows Server 2008 SP2 - KB4541506 (Unentitled) (Superseded)
MS20-MAR: Servicing Stack Update for Windows Server 2008 R2 - Windows Server 2008 R2 SP1 - KB4550735 (x64) (Superseded)
MS20-MAR: Servicing Stack Update for Windows Server 2008 - Windows Server 2008 SP2 - KB4550736 (x64) (Superseded)
MS20-MAR: Servicing Stack Update for Windows Server 2008 - Windows Server 2008 SP2 - KB4550736 (Superseded)

Content in the ESU Patching Add-on for Windows 2008 site has been updated:
The ā€˜pending restartā€™ Relevance in all ESU fixlets has been updated to recognize the _BESClient_WindowsOS_BypassPendingRestartRelevance client setting.

Reason for Update:
Microsoft released Extended Support Updates for Windows 2008 on April 14th Patch Tuesday.
All Windows patch fixlets that include ā€˜pending restartā€™ Relevance now recognize the _BESClient_WindowsOS_BypassPendingRestartRelevance client setting.

Actions to Take:
Sync any baselines you may have created with the superseded or modified content.

Published site version:
ESU Patching Add-on for Windows 2008, version 12

Additional links:
None

Application Engineering Team
BigFix

2

There are few fixlets under ESU Patching Add-on for Windows 2008 site which doesnt have action script.

Any pointers on how to patch system for below fixlets

MS20-FEB: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB4537822 (Unentitled)
MS20-FEB: Extended Security Updates (ESU) Licensing Preparation Package for Windows Server 2008 SP2 - Windows Server 2008 SP2 - KB4538484
MS20-MAR: KB4541504 (Security-only update) - Security Only - Windows Server 2008 SP2 - KB4541504 (Unentitled)
MS20-APR: Servicing stack update for Windows Server 2008 SP2 - Windows Server 2008 SP2 - KB4550737
MS20-APR: Cumulative security update for Internet Explorer - Windows Server 2008 SP2 - IE 9 - KB4550905 (Unentitled)
MS20-APR: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB4550951 (Unentitled)
MS20-APR: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB4550957 (Unentitled)

3

You donā€™t. Those are audit only fixlets. You canā€™t patch a system with ESU updates unless it is entitled for ESU.
The fixlets with Unentitled in the name have a check to see if the endpoint has an ESU MAK key installed.

If your endpoints have an ESU MAK key, then you would use the corresponding fixlet without ā€œUnentitledā€ in the name.

1 Like
4

Thanks for the reply. is there any documentation which is present for this ?

5

Here is the user guide for the ESU addon:

https://help.hcltechsw.com/bigfix/9.5/patch/Patch/Patch_ESU/c_introduction.html

1 Like
6

This topic was automatically closed after 30 days. New replies are no longer allowed.