2016 MS Security Patches not approved by ABB since 2018-11

Gentlemen,

From the System 800xA - Third Party Security Updates Validation Status document (3BSE041902),
We can see that important and Critical delta updates has not been approved since 2018-11. How can we explain our costumers that we for Cyber security reasons need to patch our system, but not these important and critical parts!

Are ABB working on a fix for 800xA so MS-patches again will be accepted?

The current situation is not very pleasant!

Comments (0) New comment

jesperkl Rank: 104

Asked 5 months ago

Answer this question Follow

Answers

I see updates qualified just a few days ago.
Which one(s) are you missing?

Comments (4) New comment

by jesperkl Rank: 104 on 3/28/2019 1:17:44 AM | Like (0) | Report

These KB are not qualified - starting from Nov 18 (I'm suspecting them to be somewhat the same updates just updated each month.)
Why do we have so many not qualied! - This was not the case before nov. 18..

Mar 19 : KB4489882
Feb 19: KB4487026
Jan 19: KB4480961
Dec 18: KB4471321
Nov 18: KB4467691

by Stefan Stromqvist AKS expert

Rank: 1 on 3/28/2019 2:56:25 AM | Like (0) | Report

Cannot answer for individual patches (and only critical and for "the product" concerned patches are covered by the System 800xA MS-patch qualification programme)

Certification takes time (at least one month) so lets check state of 4471321 in the QSU document:

Not approved for 800xA due to potential impact of known issues reported in Microsoft KB
Refer to link 4471321 for known issue details.

So, there is data to be found about these KBs (just not the most recent ones from march...).

Please speak with your regional ABB support staff if you need more advise or clarification about some certain KB

by T.Walker Rank: 2793 on 4/4/2019 10:58:59 PM | Like (0) | Report

I have just posted my own question on the very same issue. See https://forum-controlsystems.abb.com/20207913/What-is-the-latest-ABB-verified-cumulative-security-update-for-Win10-LTSB2016-and-Server-2016-5th-April-2019

For Windows 10 LTSB 2016 clients, the latest cumulative update that was approved is KB4467691 from November 13th 2018.
For Windows Server 2016 servers, the latest cumulative update that was approved is KB4457131 from September 11th 2018.

Thats 5 months and 7 months behind on Windows security patches, respectively.

For the full list of Microsoft's cumulative OS update KBs, see the "Version 1607" table at https://docs.microsoft.com/en-au/windows/windows-10/release-information.

The updates mentioned by Stefan in his original comment above are for Server 2008R2 and Windows 7, or an individual update for a Flash Player issue. They are not relevant to Server 2016 and Win10 LTSB 2016, the approved updates for which jesperkl and I are searching.

I'm starting to get the impression that whoever is performing the 'validation' on these updates sees "Known issues in this update" on the Microsoft KB site, and if there's anything listed, just marks the update as "not approved".

by Stefan Stromqvist AKS expert

Rank: 1 on 4/5/2019 11:39:25 AM | Like (0) | Report

I have forwarded your comments internally. I will update when I have received a response.

Add new comment

Stefan Stromqvist AKS expert

Rank: 1

Answered 5 months ago

Question details

2016 MS Security Patches not approved by ABB since 2018-11

Answers

Other questions needing answers

Related topics

AKS experts