Content Release: Patches for Windows published 2022-11-18

Content in the Patches for Windows site has been modified

New:

*Major [ID:502165601] 5021656: Cumulative Update for Microsoft server operating system version 21H2 - Windows Server 2022 - KB5021656 (x64)
*Major [ID:502165503] 5021655: Cumulative Update for Windows Server 2019 - Windows Server 2019 - KB5021655 (x64)
*Major [ID:502165501] 5021655: Cumulative Update for Windows 10 Version 1809 - Windows 10 Version 1809 LTSC - KB5021655 (x64)
*Major [ID:502165505] 5021655: Cumulative Update for Windows 10 Version 1809 - Windows 10 Version 1809 LTSC - KB5021655
*Major [ID:502165403] 5021654: Cumulative Update for Windows Server 2016 - Windows Server 2016 - KB5021654 (x64)
*Major [ID:502165401] 5021654: Cumulative Update for Windows 10 Version 1607 - Windows 10 Version 1607 LTSB - KB5021654 (x64)
*Major [ID:502165405] 5021654: Cumulative Update for Windows 10 Version 1607 - Windows 10 Version 1607 LTSB - KB5021654
*Major [ID:502165303] 5021653: Update for Windows Server 2012 R2 - Windows Server 2012 R2 - KB5021653 (x64)
*Major [ID:502165301] 5021653: Update for Windows 8.1 - Windows 8.1 - KB5021653 (x64)
*Major [ID:502165305] 5021653: Update for Windows 8.1 - Windows 8.1 - KB5021653
*Major [ID:502165201] 5021652: Update for Windows Server 2012 - Windows Server 2012 - KB5021652 (x64)

Reason for Update:

  • New updates from Microsoft

Actions to Take:

  • None

Published site version:
Site Name: Patches for Windows
Version: 4099

Additional links:

Application Engineering Team
HCL BigFix

1 Like

Team, have been waiting for the updates but not yet received. Need them a bit urgently. How long should we wait for distribution to occur?

You should try to force a gather since the updates are out already (2 hours ago). By default, the root server gathers once every 24 hours. From your console go to the Patches for Windows external site and force a gather of new content by clicking the Gather button on the right hand side of the screen.

I’d post a screenshot but I don’t have a server handy right now…

Yes, I’ve done 2 gather updates to no avail.

I’ve got the same issue here. Clicking the “Gather” button doesn’t seem to do anything.

I opened a critical ticket with them. Awaiting their initial contact now.

When I have a look at the gather status page (https://bigfix-server:52311/cgi-bin/bfenterprise/BESGatherMirrorNew.exe) I see this:

Id: 3 Date: Fri, 18 Nov 2022 19:46:49 +0000
Url: http://sync.bigfix.com/cgi-bin/bfgather/bessecurity
Error Message: 3: class ZlibError

If I refresh the page, the timestamp on that error changes to the current time.

Any idea what this means and how to fix it?

Let me look into this. Hang tight.

If you look in the GatherDB.log located in .\Program Files (x86)\BigFix Enterprise\BES Server\GatherDBData are you seeing this at all after forcing the gather?

Fri, 18 Nov 2022 15:09:16 -0500 – Beginning DB import of version 4099 of site Enterprise Security

This indicates it is starting. It takes a while for this site to import. Still waiting on mine as I just started it.

Nope.

The last “Beginning DB import” message I see was from yesterday about 4:30 PM. I’ve tried restarting the BESGather service and even rebooting the server. No dice.

However, my DSA server has already imported version 4099 of site Enterprise Security. It’s the primary server that’s a problem (of course :roll_eyes:).

I’m not seeing the same error (zLib) on my server’s BES Gather page). Are there any other sites with issues on that page?

I’m looking for other cases with the zLIb error but not seeing anything so far.

There are no other sites on that page that show a zLib error.

I’ve noticed that if I click the “gather” button in the console, then go over to that page and refresh the block for bessecurity moves from the “Failed” section down to the “In Process” section but after a few seconds goes back to the “Failed” section.

Hmmmm. Can you take a look at your besrelay.log (BES Server folder on root server) and see if there are any HTTP errors?

Ah, yes. First these:

Fri, 18 Nov 2022 11:28:33 -0600 - 4892 - 3: GetURL failure on http://sync.bigfix.com/cgi-bin/bfgather/bessecurity?Time=1668792472: HTTP Error 28: Timeout was reached
Fri, 18 Nov 2022 11:37:21 -0600 - 2572 - 3: GetURL failure on http://sync.bigfix.com/bfsites/bessecurity_4099/__fullsite: HTTP Error 28: Timeout was reached

Then a whole bunch of these:
Fri, 18 Nov 2022 11:39:24 -0600 - 4048 - 3: class ZlibError

If I go to those URLs from a web browser on the BES server they both work…

Ok. I’d need to dig more into this to be certain (I will) but at the surface it sounds like there is just a bit of a traffic jam going on with the sync servers. There has been a fair amount of content released over the past 24 hours in just that site.

About those zLib errors. I found several cases where customers had gather issues and found those same entries.

To figure out exactly what is triggering them, you can enable debug/verbose logging for the root server using the task named “Enable Server verbose log” in the BES Support site. I’d let that run for a few hours at most and then disable it with the “WARNING: Server verbose log is enabled” task in the same site.

Then open a support case and refer them to this forum thread and post those logs. Even if the patch site does gather later on - I suspect you might have some other issue that needs looking into.

Done and done.

@ACollazo did you get any resolution to your issue?

Hi Mike,

Yes I did. Actually, when the tech called me, the auto-update had just finished. Footnote: my app server was acting a bit weird, so I performed maintenance (clean up old records then ran audit trail clean up) followed by a reboot.

Sorry for the delay bud. Immersed in patch hell… lol