Windows 10: March 2021 CU and Out of Band Fixes that Followed

We did not install the March CU KB5000808 on most machines because of the issues with blue screen crashes and printer problems. An out of band CU KB5001566, not listed as a security update, was released on the 15th. Then another out of band CU 5001648 was released on the 19th. The out of band updates, addressed each of the issues that led us to ignore the original.


Which of the following courses of action should I take to be fully patched?


1. Install the original CU first, and then each of the two out of band patches.

2. Install the original CU first, and then the latest of the two out of band patches.

3. Install the latest out of band patch.


The original update is listed as a security update and the others are not.


Thanks,

Phil

:)

 

KB5000802 CU Windows 10 v2004 build 19041.867 and v20H2 19042.867 Win Update

KB5001567 would hopefully be the anticipated fix for the printer issues, and has also just appeared in the Update Catalog, issue date 15/03/2021.





Release notes have (literally) just appeared...

• https://support.microsoft.com/help/5001567

 

Microsoft March 2021 Security Updates

March 2021 Security Updates

Updates this Month

This release consists of security updates for the following products, features and roles.

• Application Virtualization
• Azure
• Azure DevOps
• Azure Sphere
• Internet Explorer
• Microsoft ActiveX
• Microsoft Exchange Server
• Microsoft Edge (Chromium-based)
• Microsoft Graphics Component
• Microsoft Office
• Microsoft Office Excel
• Microsoft Office PowerPoint
• Microsoft Office SharePoint
• Microsoft Office Visio
• Microsoft Windows Codecs Library
• Power BI
• Role: DNS Server
• Role: Hyper-V
• Visual Studio
• Visual Studio Code
• Windows Admin Center
• Windows Container Execution Agent
• Windows DirectX
• Windows Error Reporting
• Windows Event Tracing
• Windows Extensible Firmware Interface
• Windows Folder Redirection
• Windows Installer
• Windows Media
• Windows Overlay Filter
• Windows Print Spooler Components
• Windows Projected File System Filter Driver
• Windows Registry
• Windows Remote Access API
• Windows Storage Spaces Controller
• Windows Update Assistant
• Windows Update Stack
• Windows UPnP Device Host
• Windows User Profile Service
• Windows WalletService
• Windows Win32K

Relevant Information

• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

Please see the following for more information on the Microsoft Exchange Server Vulnerabilities:

• MSRC Blog
• Hafnium Targeting Exchange
• Microsoft on the Issues
• Exchange Team Blog
• March 8 Exchange Team Blog
• Microsoft Exchange Server Vulnerabilities Mitigations

FAQs, Mitigations, and Workarounds

The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2021-1640
• CVE-2021-24089
• CVE-2021-24104
• CVE-2021-24107
• CVE-2021-24108
• CVE-2021-24110
• CVE-2021-26411
• CVE-2021-26855
• CVE-2021-26857
• CVE-2021-26858
• CVE-2021-26859
• CVE-2021-26867
• CVE-2021-26869
• CVE-2021-26877
• CVE-2021-26884
• CVE-2021-26887
• CVE-2021-26893
• CVE-2021-26894
• CVE-2021-26895
• CVE-2021-26896
• CVE-2021-26897
• CVE-2021-26902
• CVE-2021-27047
• CVE-2021-27048
• CVE-2021-27049
• CVE-2021-27050
• CVE-2021-27051
• CVE-2021-27052
• CVE-2021-27054
• CVE-2021-27055
• CVE-2021-27056
• CVE-2021-27057
• CVE-2021-27058
• CVE-2021-27059
• CVE-2021-27061
• CVE-2021-27062
• CVE-2021-27063
• CVE-2021-27065
• CVE-2021-27067
• CVE-2021-27074
• CVE-2021-27075
• CVE-2021-27076
• CVE-2021-27080
• CVE-2021-27082

Known Issues

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.
For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).
[table][tr]KB Article Applies To [/tr] [tr][td]5000802[/td] [td]Windows 10, Version 2004, Windows Server, Version 2004[/td] [/tr] [tr][td]5000803[/td] [td]Windows 10, Version 1607, Windows Server 2016[/td] [/tr] [tr][td]5000808[/td] [td]Windows 10, Version 1909, Windows Server, Version 1909[/td] [/tr] [tr][td]5000822[/td] [td]Windows 10, Version 1809, Windows Server 2019[/td] [/tr] [tr][td]5000840[/td] [td]Windows Server 2012 (Security-only update)[/td] [/tr] [tr][td]5000841[/td] [td]Windows 7, Windows Server 2008 R2 (Monthly Rollup)[/td] [/tr] [tr][td]5000844[/td] [td]Windows Server 2008 (Monthly Rollup)[/td] [/tr] [tr][td]5000847[/td] [td]Windows Server 2012 (Monthly Rollup)[/td] [/tr] [tr][td]5000848[/td] [td]Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Monthly Rollup)[/td] [/tr] [tr][td]5000851[/td] [td]Windows 7, Windows Server 2008 R2 (Security-only update)[/td] [/tr] [tr][td]5000853[/td] [td]Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Security-only update)[/td] [/tr] [tr][td]5000856[/td] [td]Windows Server 2008 (Security-only update)[/td] [/tr] [tr][td]5000871[/td] [td]Microsoft Exchange Server 2019, 2016 and 2013[/td] [/tr] [tr][td]5000978[/td] [td]Microsoft Exchange Server 2010[/td] [/tr] [/table]

Released: Mar 9, 2021


March 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

New Surface Duo firmware update released - March 18, 2021

Source: https://support.microsoft.com/en-us/...9-32982b5665f1