Content Release: ESU Patching Add-on for Windows 2008 published 2022-11-09

Content in the ESU Patching Add-on for Windows 2008 site has been added:
MS22-NOV: Cumulative Security Update for Internet Explorer 11 - Windows Server 2008 R2 - IE 11 - KB5019958 (x64)
MS22-NOV: Cumulative Security Update for Internet Explorer 11 - Windows Server 2008 R2 - IE 11 - KB5019958 (x64) (Unentitled)
MS22-NOV: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 R2 - KB5020000 (x64)
MS22-NOV: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 R2 - KB5020000 (x64) (Unentitled)
MS22-NOV: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB5020005
MS22-NOV: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB5020005 (x64)
MS22-NOV: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB5020005 (Unentitled)
MS22-NOV: Security Only Quality Update - Security Only - Windows Server 2008 SP2 - KB5020005 (x64) (Unentitled)
MS22-NOV: Security Only Quality Update - Security Only - Windows Server 2008 R2 - KB5020013 (x64)
MS22-NOV: Security Only Quality Update - Security Only - Windows Server 2008 R2 - KB5020013 (x64) (Unentitled)
MS22-NOV: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5020019
MS22-NOV: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5020019 (x64)
MS22-NOV: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5020019 (Unentitled)
MS22-NOV: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5020019 (x64) (Unentitled)
MS22-NOV: Security Only Quality Update - Windows Server 2008 R2 - .NET Framework 4.8 - KB5020609 (x64)
MS22-NOV: Security Only Quality Update - Windows Server 2008 R2 - .NET Framework 4.8 - KB5020609 (x64) (Unentitled)
MS22-NOV: Security Only Quality Update - Windows Server 2008 R2 - .NET Framework 4.6/4.7 - KB5020612 (x64)
MS22-NOV: Security Only Quality Update - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020612
MS22-NOV: Security Only Quality Update - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020612 (x64)
MS22-NOV: Security Only Quality Update - Windows Server 2008 R2 - .NET Framework 4.6/4.7 - KB5020612 (x64) (Unentitled)
MS22-NOV: Security Only Quality Update - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020612 (Unentitled)
MS22-NOV: Security Only Quality Update - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020612 (x64) (Unentitled)
MS22-NOV: Security and Quality Rollup - Windows Server 2008 R2 - .NET Framework 4.8 - KB5020621 (x64)
MS22-NOV: Security and Quality Rollup - Windows Server 2008 R2 - .NET Framework 4.8 - KB5020621 (x64) (Unentitled)
MS22-NOV: Security and Quality Rollup - Windows Server 2008 R2 - .NET Framework 4.6/4.7 - KB5020630 (x64)
MS22-NOV: Security and Quality Rollup - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020630
MS22-NOV: Security and Quality Rollup - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020630 (x64)
MS22-NOV: Security and Quality Rollup - Windows Server 2008 R2 - .NET Framework 4.6/4.7 - KB5020630 (x64) (Unentitled)
MS22-NOV: Security and Quality Rollup - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020630 (Unentitled)
MS22-NOV: Security and Quality Rollup - Windows Server 2008 SP2 - .NET Framework 4.6 - KB5020630 (x64) (Unentitled)

Content in the ESU Patching Add-on for Windows 2008 site has been superseded:
MS22-OCT: Cumulative Security Update for Internet Explorer 11 - Windows Server 2008 R2 - IE 11 - KB5018413 (x64) (Superseded)
MS22-OCT: Cumulative Security Update for Internet Explorer 11 - Windows Server 2008 R2 - IE 11 - KB5018413 (x64) (Unentitled) (Superseded)
MS22-OCT: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5018450 (Superseded)
MS22-OCT: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5018450 (x64) (Superseded)
MS22-OCT: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5018450 (Unentitled) (Superseded)
MS22-OCT: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 SP2 - KB5018450 (x64) (Unentitled) (Superseded)
MS22-OCT: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 R2 - KB5018454 (x64) (Superseded)
MS22-OCT: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 R2 - KB5018454 (x64) (Unentitled) (Superseded)
5020448: Update for Windows Server 2008 R2 - Windows Server 2008 R2 - KB5020448 (x64) (Superseded)
5020448: Update for Windows Server 2008 R2 - Windows Server 2008 R2 - KB5020448 (x64) (Unentitled) (Superseded)

Reason for Update:
Microsoft released Extended Support Updates for Windows 2008 on November 8th Patch Tuesday.

Actions to Take:
None

Published site version:
ESU Patching Add-on for Windows 2008, version 78

Additional links:
None

Application Engineering Team
BigFix

What about November month normal security patches , why its not there or its delayed pls ?

@vishal do you mean one of these, or is there a KB that’s missing?

Hey Jason, There is a relevance issue with:

MS22-NOV: Security Monthly Quality Rollup - Monthly Rollup - Windows Server 2008 R2 - KB5020000 (x64) ESU Patching Add-on for Windows 2008

All of my ESU 2008 servers are not showing relevant for the NOV rollup this month. I manually downloaded and interactively applied the patch and was successful. I just sent the update to my 2008 servers without relevance and was also successful, but the fixlet relevance needs to be updated…

Thanks!
Scott

Thanks for reporting this, Scott, I’ll make sure the content team checks this.

Confirmed, there’s an issue with the relevance clause that checks whether the monthly rollup is already installed (to suppress the IE and security-only updates, which are included in the monthly rollup). The issue is present in the OS monthly rollup, OS security-only update, and IE update for 2008 R2.

This clause (#5 or #6 depending on the fixlet):
not exists keys (names of values whose ((it >= "7601.26115.1.16") of (following text of last "~" of name of it as version)) of keys "Package_for_RollupFix~31bf3856ad364e35~amd64~~0.0.0.0" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex" of native registry) whose ((it = 96 OR it = 112) of (value "CurrentState" of it as integer)) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry

…should be this instead (note the 7601.26221.1.11 version change):
not exists keys (names of values whose ((it >= "7601.26221.1.11") of (following text of last "~" of name of it as version)) of keys "Package_for_RollupFix~31bf3856ad364e35~amd64~~0.0.0.0" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageIndex" of native registry) whose ((it = 96 OR it = 112) of (value "CurrentState" of it as integer)) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" of native registry

An update will be published today to correct that relevance. If you need an immediate fix, you can work around it by making a custom copy of those R2 fixlets and updating or removing that relevance clause.

This topic was automatically closed after 30 days. New replies are no longer allowed.