KB5012170 - weirdness

So, this month we see:

2022-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5016622)
2022-08 Security Update for Windows Server 2016 for x64-based Systems (KB5012170)

2022-08 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5016623)
2022-08 Security Update for Windows Server 2019 for x64-based Systems (KB5012170)

2022-08 Cumulative Update for Microsoft server operating system version 21H2 - Windows Server 2022 - KB5016627 (x64)
2022-08 Security Update for Windows Server 2022 - Windows Server 2022 - KB5012170 (x64)

Does anyone know why MS decided to do this? 2016 and up are supposed to be cumulative.

I do see KB5012170 is relevant for a lot of OS’s too as seen here,
https://catalog.update.microsoft.com/Search.aspx?q=KB5012170

Yes, that was my impression as well - that all updates should be Cumulative-only for Server 2019 and higher.

I haven’t seen an MS Blog on this one, but noting from the KB article that KB5012170 is an update to UEFI Firmware for extensible-firmware systems; I’m curious whether that’s why they drew the distinction.

I wish I knew why they didn’t just put this in with the cumulative. I think it has to have a clean boot before running it and no outstanding pending reboots.

You meant 2016 right?

It’s been a while since I used 2016, but it had monthly standalone “Security-Only” updates as an cumulative…didn’t it?

2012r2 was the last that I know of that produced a monthly security only. 2016 AFAIK was the first to do the cumulative approach.

I think it has to have a clean boot before running it and no outstanding pending reboots.

Is this documented anywhere? I checked the KB and could not find any info about it needing a reboot before it is applied.