Microsoft Releases Servicing Stack Updates for All Windows 10 Versions

Posted by & filed under Security Alerts.

Microsoft released quality improvements to the servicing stack for all Windows 10 versions, the component designed to allow users to receive and install Windows updates.

Microsoft states that this critical servicing stack update “addressed an issue in which adding vulnerable boot level components to the Secure Boot disallow list (dbx) may cause the system not to start.”

All Windows 10 customers are advised to first update the Windows 10 servicing stack to the latest version before trying to install the KB4515384 and the KB4512578 cumulative updates.

These CUs were also released today for Windows 10 v1903 and Windows Server v1903, and for Windows 10 v1809, Windows Server v1809, and Windows Server 2019 respectively.

Servicing stack update packages available via Microsoft’s Update Catalog

Installing the servicing stack updates (SSU) ensures that the users’ devices can receive and install Microsoft security fixes with the help of a reliable and robust servicing stack.

Windows 10 users are also urged to update their systems’ servicing stack as soon as possible to avoid potential issues that could appear during the installation process of both feature and quality updates.

Microsoft states in the servicing stack support document that:

Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don’t install the latest servicing stack update, there’s a risk that your device can’t be updated with the latest Microsoft security fixes.

The table embedded below contains all the products for which the servicing stacks have been updated, as well as the related support articles containing links to the Microsoft Update Catalog download pages.

Servicing stack updates
Product Support article
Windows 10 1903 / Windows Server, version 1903 KB4515383
Windows 10 1809 / Windows Server 2019 KB4512577
Windows 10 1803 / Windows Server, version 1803 KB4512576
Windows 10 1709 KB4512575
Windows 10 1703 KB4511839
Windows 10 1607 / Server 2016 KB4512574
Windows 10 1507 KB4512573

Installing servicing stack updates

Servicing stack updates contain “the ‘component-based servicing stack’ (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components,” as explained by Microsoft in the Windows IT Pro Center.

These updates can be installed automatically through Windows Update or using the standalone update packages available for download from the Microsoft Update Catalog website — links available for all Windows 10 versions in the table above.

Windows Server users can also use the Windows Server Update Services (WSUS) to mass deploy the update to all computers on their network.

Servicing stack updates installation notes:

• Servicing stack updates contain the full servicing stack; as a result, typically administrators only need to install the latest servicing stack update for the operating system.
• Installing servicing stack update does not require restarting the device, so installation should not be disruptive.
• Servicing stack update releases are specific to the operating system version (build number), much like quality updates.
• Search to install latest available Servicing stack update for Windows 10.

Windows 10 users who encounter issues while installing the latest updates can follow this guided walk-through for fixing the errors.

Microsoft also published a support document designed to help customers to troubleshoot Windows 10 update problems when dealing with update issues.

The information contained in this website is for general information purposes only. The information is gathered from Bleeping Computer while we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.  Through this website, you are able to link to other websites which are not under the control of CSIRT-CY. We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them. Every effort is made to keep the website up and running smoothly. However, CSIRT-CY takes no responsibility for, and will not be liable for, the website being temporarily unavailable due to technical issues beyond our control.