Windows 10: March 2018 Windows security update – Expanding efforts to protect

Page 1 of 2 12 LastLast

  1. Posts : 30,725
    64-bit Windows 10 Pro build 17713
       13 Mar 2018 #1

    March 2018 Windows security update – Expanding efforts to protect


    Earlier this month I shared news on Microsoft’s continuing efforts to help protect our customers against the Spectre and Meltdown hardware-based vulnerabilities. Today, we are announcing the expansion of devices covered by Windows security updates by removing the anti-virus compatibility check for Windows 10 devices, expanding the availability of Intel microcode updates in the Microsoft Catalog, and adding coverage for x86 editions of Windows 7 and Windows 8.1.

    Expanding availability of Windows security updates based on broad anti-virus compatibility

    Our recent work with our anti-virus (AV) partners on compatibility with Windows updates has now reached a sustained level of broad ecosystem compatibility. As we’ve previously detailed, some AV products had created compatibility issues with the Windows security updates, by making unsupported calls into the kernel memory, which required us to make AV compatibility checks to manage this risk. Based on our analysis of available data, we are now lifting the AV compatibility check for the March Windows security updates for supported Windows 10 devices via Windows Update. This change will expand the breadth of Windows 10 devices offered cumulative Windows security updates, including software protections for Spectre and Meltdown. We continue to require that AV software is compatible and in cases where there are known issues of AV driver compatibility, we will block those devices from receiving Windows updates to avoid any issues. I’ll share more details in the weeks ahead on AV compatibility for older versions of Windows, as we further our goal of broad ecosystem compatibility. We recommend customers check with their AV provider on compatibility of their installed AV software product.

    Expanding the coverage of needed updates to address Spectre and Meltdown vulnerabilities

    Today, we are also significantly expanding the Intel validated microcode updates we are making available via the Microsoft Catalog. The expanded set of Intel microcode updates covers a broad set of the latest generation Intel platforms including Skylake, Kaby Lake, and Coffee Lake devices, and is available for Windows 10 version 1709. We will continue to broaden the number of Intel microcode updates available via the catalog as they become available to Microsoft from Intel. A full list of available Intel microcode updates by Window 10 version can be found in KB4093836. We continue to partner closely with chipset and device makers as they offer more vulnerability mitigations.

    We are also adding to the breadth of Windows updates to help protect against these vulnerabilities. Today, we are adding software coverage for the Meltdown vulnerability for x86 editions of Windows 7 and Windows 8.1 and we continue to work to provide updates for additional supported versions of Windows. You can find more information and a table of updated Windows editions in our Windows customer guidance article.

    Staying up to date

    As always, we emphasize the importance of installing the latest Windows updates when prompted on your device, so you are on the most secure version of Windows 10, which is version 1709 (Fall Creators Update). As a reminder, Windows 10 version 1607 (Anniversary Update) will reach end of service and receive its final security update on April 10, 2018. If you see a reminder that the latest version is ready to install, we recommend you follow the steps to pick a time that works best for you or update immediately. If you have not received an update offer on an older version of Windows 10, you can always choose to install the Fall Creators Update from the Software Download Site. Servicing timelines for each version of Windows 10 are shared on the Windows Lifecycle Fact Sheet.

    1 Windows 7 version SP1

    2 Customers should check with their CPU (chipset) and device manufacturers on availabilityof applicable firmware security updates for their specific device, including Intel’s Microcode Revision Guidance.



    Source: March 2018 Windows security update - Expanding our efforts to protect customers - Windows Experience Blog
    Last edited by Brink; 13 Mar 2018 at 14:44.
      My ComputersSystem Spec


  2. Posts : 3,376
    3-Win-7Prox64 2-Win10Prox64
       13 Mar 2018 #1

    Hi,
    Did I miss a windows 71 ?
      My ComputersSystem Spec


  3. Posts : 378
    Windows 10 Home April 2018 Update 64-bit
       13 Mar 2018 #2

    ThrashZone said: View Post
    Hi,
    Did I miss a windows 71 ?
    Maybe it's Windows 7.1, aka Service Pack 1?
      My ComputerSystem Spec


  4. Posts : 3,376
    3-Win-7Prox64 2-Win10Prox64
       13 Mar 2018 #3

    Hi,
    Just a typo
      My ComputersSystem Spec

  5.    14 Mar 2018 #4

    How long to wait for Ivy Bridge (i5-3570K) I wonder?
      My ComputersSystem Spec

  6.    14 Mar 2018 #5

    i also have an ivy bridge 3550, will we see it for us though?
      My ComputerSystem Spec

  7.    14 Mar 2018 #6

    Hi,

    Post #491's attachment shows a listing with all the current cpu's Intel's working on:


    Windows Client Guidance against speculative execution vulnerabilities


    Cheers,
      My ComputersSystem Spec

  8.    16 Mar 2018 #7

    Steve C said: View Post
    How long to wait for Ivy Bridge (i5-3570K) I wonder?
    dwarfer66 said: View Post
    i also have an ivy bridge 3550, will we see it for us though?

    Microcode updates for Sandy Bridge, Ivy Bridge, Haswell, and Broadwell processors are actually available on the Intel website, but only the instructions for installing the updates on Linux are provided.

    https://downloadcenter.intel.com/dow...le?product=873
      My ComputerSystem Spec


  9. Posts : 69
    Win10 Pro x64 / WinServer 2016 Essentials
       16 Mar 2018 #8

    Ground Sloth said: View Post
    Microcode updates for Sandy Bridge, Ivy Bridge, Haswell, and Broadwell processors are actually available on the Intel website, but only the instructions for installing the updates on Linux are provided.

    https://downloadcenter.intel.com/dow...le?product=873
    Exactly, and I am waiting for INTEL still to incorporate into their own! BIOS for Intel DZ77RE-75K mobo with i7-3770K or Microsoft to include into KB4090007. Let's see where this ludicrous "Ping Pong" will end up ...
      My ComputerSystem Spec

  10.    16 Mar 2018 #9

    Hi,

    MS will likely add it to the KB containing the MCU's but if you can't wait you can use VMWare's driver to load it for you in Windows:

    https://labs.vmware.com/flings/vmwar...-update-driver

    Cheers,
      My ComputersSystem Spec


 
Page 1 of 2 12 LastLast

Related Threads
https://mediastream.microsoft.com/events/2018/1803/WindowsDevelopers/player/WindowsDevelopers.html Source: Windows Developer Day Returns on March 7th! - Windows Developer Blog
Source: March 2018 Non-Security Office Update Release Office Updates
Source: The Xbox Spring Update Begins Rolling Out to Insiders Today - Xbox Wire See also: New Xbox One Preview Alpha System Update (1804.180227-1801) - Mar. 1 Xbox - Windows 10 Forums 969337774619860992
Source: February 2018 Non-Security Office Update Release Office Updates
Source: https://blogs.technet.microsoft.com/office_sustained_engineering/2017/03/07/march-2017-non-security-office-update-release/
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:45.
Find Us