Windows 10 Servicing Stack Updates Fix Secure Boot Issues

[steven36]

Microsoft released October's servicing stack quality improvements for all Windows 10 versions, the component which allows users to receive and install Windows updates.

 

 

Microsoft says that these critical servicing stack updates (SSUs) address "an issue in which the Secure Boot revocation list (DBX) is not applied when the Secure Boot allow list (DB) update is empty."

 

The updates also improve "the Secure Boot revocation list (DBX) update experience to avoid multiple restarts when you deploy the DBX update on a device where the Credential Guard service is not running."

 

All Windows 10 users are advised to start with the Windows 10 servicing stack update to the latest version before installing the October cumulative updates.

 

Microsoft also released the October 2019 Patch Tuesday security updates, with 1 advisory (Windows 10 Servicing Stack Update) and updates for 59 vulnerabilities. Eight of them were rated by Microsoft as Critical. 

 

The October 2019 Microsoft Office security updates were also released today, bundling a total of 14 security updates and four cumulative updates across seven different products, with nine of them patching remote code execution vulnerabilities.

Servicing stack updates available on the Microsoft Update Catalog

Windows 10 users are urged to update their systems' servicing stack to dodge potential issues that could appear during the installation process of future quality and feature updates.

Microsoft states in the servicing stack support document that:

 

Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don't install the latest servicing stack update, there's a risk that your device can't be updated with the latest Microsoft security fixes.

 

The table below lists all the Windows 10 versions that received a SSU today, as well as the related knowledgebase articles with links to the Microsoft Update Catalog download pages:

 

Servicing stack updates
Product	Support article
Windows 10 1903 / Windows Server, version 1903	KB4521863
Windows 10 1809 / Windows Server 2019	KB4521862
Windows 10 1803 / Windows Server, version 1803	KB4521861
Windows 10 1709	KB4521860
Windows 10 1703	KB4521859
Windows 10 1607 / Server 2016	KB4521858
Windows 10 1507	KB4521856

Servicing stack update install

Servicing stack updates contain "the 'component-based servicing stack' (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components," as stated by Microsoft in the Windows IT Pro Center.

 

SSUs can be installed automatically via the Windows Update or with the help of the standalone update packages that can be downloaded from Microsoft Update Catalog website—links for all Windows 10 versions are available in the table above.

 

Windows Server users can use the Windows Server Update Services (WSUS) to mass deploy SSUs to all computers on their network.

 

Servicing stack updates installation notes:

 

• Servicing stack updates contain the full servicing stack; as a result, typically administrators only need to install the latest servicing stack update for the operating system.
• Installing servicing stack update does not require restarting the device, so installation should not be disruptive.
• Servicing stack update releases are specific to the operating system version (build number), much like quality updates.
• Search to install latest available Servicing stack update for Windows 10.

 

Windows 10 users can go through this guided walk-through or use the info available in this support article to troubleshoot update problems.

 

Source