Patchday: Windows 8.1/Server 2012-Updates (August 10, 2021)

Windows[German]As of August 10, Microsoft has released various updates for Windows 8.1. However, these security updates are also available for Windows Server 2012 R2. Here is some information about the Monthly Rollup and Security only updates for this operating system.

Updates for Windows 8.1 und Windows Server 2012 R2

For Windows 8.1 und Windows Server 2012 R2 a rollup and a security-only update have been released. The update history for Windows 8.1 and Windows Server 2012 R2 can be found on this Microsoft page

As of July 2020, all Windows updates disable the RemoteFX vGPU feature due to vulnerability  CVE-2020-1036 (see also KB4570006). After installing this update, attempts to start virtual machines (VM) with RemoteFX vGPU enabled will fail. In addition, Adobe's Flash Player support expired on December 31, 2020, and Flash will no longer be supported as of January 12, 2021.

KB5005076 (Monthly Rollup) for Windows 8.1/Server 2012 R2

Update KB5005076 (Monthly Rollup for Windows 8.1 and Windows Server 2012 R2) contains improvements and fixes, and addresses the following issues.

  • Changes the default privilege requirement for installing drivers when using Point and Print. After installing this update, you must have administrative privileges to install drivers. If you use Point and Print, see KB5005652, Point and Print Default Behavior Change, and CVE-2021-34481 for more information.
  • Addresses an issue in which Smart Card Authentication (PIV) fails on non-RFC compliant printers and scanners requiring smartcard authentication. For more information, see KB5005391.
  • This update also contains miscellaneous security improvements to internal OS functionality.

This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog and via WSUS. If installing manually, the latest Servicing Stack Update (SSU KB5001403) must be installed beforehand – although this SSU cannot be uninstalled.

Microsoft is aware of the following issue related to the update: Certain operations, such as renaming, that you perform for files or folders on a Cluster Shared Volume (CSV) may fail with the error "STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)". This occurs when you perform the operation on a CSV owner node from a process that does not have administrator privileges. The KB article suggests a workaround to fix this. In addition, there is another issue with the Elastic File System (EFS) API (as with all Windows updates). Details can be found in the KB article.

KB5005106 (Security-only update) for Windows 8.1/Server 2012 R2

Update KB5005106 (Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2) addresses the following items.

  • Changes the default privilege requirement for installing drivers when using Point and Print. After installing this update, you must have administrative privileges to install drivers. If you use Point and Print, see KB5005652, Point and Print Default Behavior Change, and CVE-2021-34481 for more information.
  • Addresses an issue in which Smart Card Authentication (PIV) fails on non-RFC compliant printers and scanners requiring smartcard authentication. For more information, see KB5005391.
  • This update also contains miscellaneous security improvements to internal OS functionality.

The update is distributed via WSUS (but not via Windows Update) or is available from the Microsoft Update Catalog. In case of a manual installation, the latest Servicing Stack Update (SSU) KB5001403. In addition, the Internet Explorer 11 security update KB5005036  from August 2021 should be installed (support for IE 11 is now ending).

Similar article:
Microsoft Office Patchday (August 3, 2021)
Microsoft Security Update Summary (August 10, 2021)
Patchday: Windows 10-Updates (August 10, 2021)
Patchday: Updates for Windows 7/Server 2008 R2 (August 10, 2021)
Patchday: Windows 8.1/Server 2012-Updates (August 10, 2021)

This entry was posted in Security, Update, Windows and tagged , , , , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *