[German]On May 12, 2020, Microsoft released various (security) updates for Windows 7 SP1 (ESU) and further updates for Windows 8.1 and the corresponding server versions. Here is an overview of these updates.
Updates for Windows 7/Windows Server 2008 R2
A rollup and a security-only update have been released for Windows 7 SP1 and Windows Server 2008 R2 SP1. However, these updates are now only available for systems with ESU licenses. The update history for Windows 7 can be found on this Microsoft page. Installation requires installed SHA2 support for successful installation of the security updates.
Starting January 15, 2020, Windows 7 will display a full-screen notification of the end of support in Starter, Home Basic, Home Premium, Professional (without ESU license) and Ultimate. This must then be closed by the user.
As of January 14, 2020, Windows 7 SP1 and Windows Server 2008 R2 SP1 have reached the end of support and will only receive paid security updates under the ESU program. ESU license holders should visit the Message Center for details.
Microsoft last updated the Techcommunity article on the ESU program on February 11, 2020. Please refer to the notes on requirements (SSU, SHA-2). Additionally, for ESU systems, you must manually install the KB4538483 update from the Update Catalog. Furthermore, the update KB4538483 was released in May 2020 (see Windows 7 ESU Update KB4538483 (5.5.2020)).
Because the updates are provided in the Microsoft Update Catalog, do not attempt to install them on systems that do not have an ESU license. The installation fails and a rollback occurs. But what works: Use the BypassESU method described in the links at the end of this article (see Windows 7: Forcing February 2020 Security Updates – Part 1). This night blog readers has confirmed to me that the May updates could be installed with it.
Also note the discussion here (German). When trying to install the .NET framework update KB4556399, some users get the error code 643.
KB4556836 (Monthly Rollup) for Windows 7/Windows Server 2008 R2
Update KB4556836 (Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1) contains (besides the security fixes from last month) improvements and bug fixes and addresses the following:
- Addresses an issue that prevents certain apps from installing if they are published using a Group Policy Object.
- Addresses an issue that causes Windows to incorrectly report the connection state of a network interface. The issue might cause software that queries the media connection state to receive a result of "Unknown" from a network interface after installing Windows updates released after February 11, 2020. This issue has been observed in the Network Access Manager component of the Cisco AnyConnect Secure Mobility Client.
- Updates the 2020 start date for daylight saving time (DST) in the Kingdom of Morocco. For more information, see KB4557900.
- Security updates to Internet Explorer, the Microsoft Scripting Engine, Windows App Platform and Frameworks, Windows Apps, Windows Input and Composition, Windows Kernel, Internet Information Services, Windows Network Security and Containers, Windows Active Directory, the Microsoft JET Database Engine, and Windows Storage and Filesystems.
Compared to the previous months, nothing has changed for ESU systems. This update is automatically downloaded and installed by Windows Update. The package is also available through the Microsoft Update Catalog and is distributed via WSUS. Details about the requirements and known issues can be found in the KB article. There you will also find information about which SSUs are required and what known issues (rollback of the update without an ESU license) are included with the update.
KB4556843 (Security Only) for Windows 7/Windows Server 2008 R2
Update KB4556843 (Security-only update) is available for Windows 7 SP1 and Windows Server 2008 R2 SP1 with ESU license. The update addresses the following issues.
- Updates the 2020 start date for daylight saving time (DST) in the Kingdom of Morocco. For more information, see KB4557900.
- Security updates to Windows App Platform and Frameworks, Windows Apps, Windows Input and Composition, Windows Kernel, Internet Information Services, Windows Network Security and Containers, Windows Active Directory, the Microsoft JET Database Engine, and Windows Storage and Filesystems.
The update is available via WSUS or in the Microsoft Update Catalog. To install the update, you must meet the prerequisites listed in the KB article and in the Rollup Update above. In addition, the security update KB4556798 for IE should also be installed.
Servicing Stack Update KB4555449
On May 12, 2020, the Servicing Stack Update KB4555449 for
Updates for Windows 8.1/Windows Server 2012 R2
For Windows 8.1 and Windows Server 2012 R2 a rollup and a security-only update have been released. The update history for Windows 8.1 can be found on this Microsoft page.
KB4556846 (Monthly Rollup) for Windows 8.1/Server 2012 R2
Update KB4556846 (Monthly Rollup for Windows 8.1 and Windows Server 2012 R2) contains improvements and fixes, and addresses the following items.
- Updates the 2020 start date for daylight saving time (DST) in the Kingdom of Morocco. For more information, see KB4557900.
- Addresses an issue that causes offline file syncing to stop responding or fail in mobsyc.exe.
- Security updates to Internet Explorer, the Microsoft Scripting Engine, Windows App Platform and Frameworks, Windows Input and Composition, Windows Media, Windows Kernel, Windows Core Networking, Internet Information Services, Windows Network Security and Containers, Windows Active Directory, the Microsoft JET Database Engine, and Windows Storage and Filesystems.
This update is automatically downloaded and installed by Windows Update, but is also available in the Microsoft Update Catalog and via WSUS. In case of a manual installation, the latest Servicing Stack Update (SSU KB454072 from March) must be installed before. There are no known issues with this update.
KB4556853 (Security-only update) for Windows 8.1/Server 2012 R2
Update KB4556853 (Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2) addresses the following items.
- Updates the 2020 start date for daylight saving time (DST) in the Kingdom of Morocco. For more information, see KB4557900.
- Security updates to Windows App Platform and Frameworks, Windows Input and Composition, Windows Media, Windows Kernel, Windows Core Networking, Internet Information Services, Windows Network Security and Containers, Windows Active Directory, the Microsoft JET Database Engine, and Windows Storage and Filesystems.
The update is available via WSUS or in the Microsoft Update Catalog. Details about the update are described in the KB article. In case of a manual installation the latest Servicing Stack Update (SSU) must be installed before. In addition, the security update KB4556798 for IE should also be installed.
Similar articles:
Microsoft Office Patchday (May 5, 2020)
Microsoft Security Update Summary (May 12, 2020)
Patchday: Windows 10 Updates (May 12, 2020)
Patchday: Updates for Windows 7/8.1/Server (May 12, 2020)
Wow! Windows 7 get extended support until January 2023
Windows 7: Free Extended Update Support and usage
Windows 7 Extended Security Updates (ESU) requirements
Windows 7 Extended Security Update (ESU) program available
Windows 7 Extended Security Updates (ESU) program, price and source for SMEs
Windows 7: Buy and manage ESU licenses – Part 1
Windows 7: Preparing for ESU and license activation – Part 2
Windows 7: ESU Activation inEnterprise Environment – Part 3
Windows 7: ESU questions and more answers – Part 4
Windows 7/Server 2008/R2: 0patch delivers security patches after support ends
Project: Windows 7/Server 2008/R2 Life Extension & 0patch one month trial
Windows 7: Forcing February 2020 Security Updates – Part 1
Windows 7: Securing with the 0patch solution – Part 2
