Cumulative Update KB4093105 Windows 10 v1709 Build 16299.402 - Apr. 23

VBF said:

So MY comments in 68-70 refer to 1709 and, I think, in that context they're still valid - would you agree @Bree ?

It works both ways in 1709. Your method requires no further intervention though (like clicking the 'download' button) and is probably quicker, the download button can take a while to appear.

I'm interested in seeing what gets downloaded over a metered connection that MS deem as '...required for the smooth running of windows' so I keep metered connection on. So far the only updates to bypass 'metering' seem to be Flash updates and Antimalware Platform updates. Cumulative updates will wait for approval.

To everyone, very good news. If you haven't read this article yet, now is the time:
https://www.ghacks.net/2018/04/25/wi...ao0cqqj%2e28k8

or:

KB4091663 Intel microcode updates for Windows 10 v1703
Windows 10 Microcode updates KB4090007, KB4091663, KB4091664 and KB4091666.
I have just run the update for my CPUID: 306C3 from the Microsoft update catalog and the winner is:



You will find all the info needed in the link above from ghacks.net

Is this only for Intel? I'm on AMD on this machine and my FCU Lappy.

Lenovo is Intel, though.

IronZorg89 said:

Thanks for the heads-up. I was so glad that I finally got this MC update after waiting for so long that I didn't take time to check tenforum's index tutorial. I just wanted to share my findings.

Woo-Hoo!!!!!:):):)



Just to confirm what it says in the linked thread

KB4090007 Intel microcode Cumulative Update for Windows 10 v1709 - Page 17 - Windows 10 Forums

"it's an optional update. Upgrading Windows gives you a new 'Software Distribution' folder. You will ALWAYS have to reapply the patch every time there is a feature update. That's why the BIOS method is preferable, it works regardless of OS."

Do we all agree with that?

VBF said:

"it's an optional update. Upgrading Windows gives you a new 'Software Distribution' folder. You will ALWAYS have to reapply the patch every time there is a feature update. That's why the BIOS method is preferable, it works regardless of OS."Do we all agree with that?

Exactly as it says: "That's why the BIOS method is preferable, it works regardless of OS.".
The MS microcode will load upon startup and will be cleared on shutdown. And of course the microcode patch needs to be reapplied on every feature update.
To make a long story short, please check your Manufacturer's site for a BIOS update, to get rid of this thing :)

However, my Tosh Laptop with the Sandy Bridge CPU ID 206A7 is still vulnerable even after the MCU



But according to the Intel Master List it should have been fixed



Can anyone shed any light on that please

VBF said:

But according to the Intel Master List it should have been fixed



Can anyone shed any light on that please

Without being an Intel employee and not the expert on that, I believe that "Production" means that the update has been released to manufacturers so they can update their BIOS. So if the manufacturer has not implemented it yet, you have to wait... (for instance hp completed their implementation for all CPUs they use, a couple of days ago!!!)

ddelo said:

Without being an Intel employee and not the expert on that, I believe that "Production" means that the update has been released to manufacturers so they can update their BIOS. So if the manufacturer has not implemented it yet, you have to wait... (for instance hp completed their implementation for all CPUs they use, a couple of days ago!!!)

which would make perfect sense IF the Haswell 306C3 did not have EXACTLY the same status on Intel's list:


But it does and the MCU works for it! THAT'S why I'm confused

Also on my Haswell 306C3 machine InSpectre informs me that:

"This system's hardware has been updated with new features required to allow its operating system to protect against the Spectre vulnerabilities and/or to minimize their impact upon the system's performance. (Protection from the Meltdown vulnerability does not require BIOS or processor updates.)"

But I've done no such thing - the hardware /BIOS hasn't been changed in 2 years....now I'm REALLY confused!!