Servicing stack updates

Applies to

• WindowsВ 10, Windows 8.1, Windows 8, Windows 7

What is a servicing stack update?

Servicing stack updates provide fixes to the servicing stack, the component that installs Windows updates. Additionally, it contains the «component-based servicing stack» (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month.

Why should servicing stack updates be installed and kept up to date?

Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don’t install the latest servicing stack update, there’s a risk that your device can’t be updated with the latest Microsoft security fixes.

When are they released?

Servicing stack update are released depending on new issues or vulnerabilities. In rare occasions a servicing stack update may need to be released on demand to address an issue impacting systems installing the monthly security update. Starting in November 2018 new servicing stack updates will be classified as «Security» with a severity rating of «Critical.»

You can find a list of servicing stack updates at Latest servicing stack updates.

What’s the difference between a servicing stack update and a cumulative update?

Both Windows 10 and Windows Server use the cumulative update mechanism, in which many fixes to improve the quality and security of Windows are packaged into a single update. Each cumulative update includes the changes and fixes from all previous updates.

Servicing stack updates must ship separately from the cumulative updates because they modify the component that installs Windows updates. The servicing stack is released separately because the servicing stack itself requires an update. For example, the cumulative update KB4284880 requires the May 17, 2018 servicing stack update, which includes updates to Windows Update.

Is there any special guidance?

Microsoft recommends you install the latest servicing stack updates for your operating system before installing the latest cumulative update.

Typically, the improvements are reliability and performance improvements that do not require any specific special guidance. If there is any significant impact, it will be present in the release notes.

Installation notes

• Servicing stack updates contain the full servicing stack; as a result, typically administrators only need to install the latest servicing stack update for the operating system.
• Installing servicing stack update does not require restarting the device, so installation should not be disruptive.
• Servicing stack update releases are specific to the operating system version (build number), much like quality updates.
• Search to install latest available Servicing stack update for Windows 10.
• Once a servicing stack update is installed, it cannot be removed or uninstalled from the machine.

Simplifying on-premises deployment of servicing stack updates

With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and later starting with the 2021 2C release, KB4601382.

Servicing stack update for Windows Server 2016 and Windows 10, version 1607: February 12, 2019

Summary

This update makes quality improvements to the servicing stack component that installs Windows updates.

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before you install the latest cumulative update (LCU). Installing servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft security fixes.

How to get this update

Method 1: Windows Update

This update will be downloaded and installed automatically.

Note This update is also available through Windows Server Update Services (WSUS).

Method 2: Microsoft Update Catalog

To get the standalone package for this update, see the Microsoft Update Catalog website.

More information

Prerequisites

There are no prerequisites for installing this update.

Restart information

You do not have to restart the computer after you apply this update.

Update replacement information

This update replaces update 4465659.

References

For more information about servicing stack updates, visit Servicing stack updates.

Learn about the terminology that Microsoft uses to describe software updates.

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Servicing stack update for Windows Server 2016 and Windows 10, version 1607: February 12, 2019

Summary

This update makes quality improvements to the servicing stack component that installs Windows updates.

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before you install the latest cumulative update (LCU). Installing servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft security fixes.

How to get this update

Method 1: Windows Update

This update will be downloaded and installed automatically.

Note This update is also available through Windows Server Update Services (WSUS).

Method 2: Microsoft Update Catalog

To get the standalone package for this update, see the Microsoft Update Catalog website.

More information

Prerequisites

There are no prerequisites for installing this update.

Restart information

You do not have to restart the computer after you apply this update.

Update replacement information

This update replaces update 4465659.

References

For more information about servicing stack updates, visit Servicing stack updates.

Learn about the terminology that Microsoft uses to describe software updates.

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Обновление для Windows Server 2016 и 10 Windows, версия 1607 обслуживания в стеке: 12 февраля 2019 г.

Аннотация

Это обновление улучшает качество обслуживания компонент стека, который устанавливает обновления Windows.

Корпорация Майкрософт рекомендует установить последние обслуживания обновление стека (SSU) для операционной системы перед установкой последней версии накопительного обновления (LCU). Установка обновления стека (SSU) делает наличие устойчивых и надежных стека сопровождения, чтобы устройств можно получить и установить исправления для системы безопасности Microsoft.

Как получить это обновление

Метод 1. Центр обновления Windows

Это обновление будет загружено и установлено автоматически.

Примечание. Это обновление также доступно через cлужбы Windows Server Update Services (WSUS).

Метод 2: Каталог Центра обновления Майкрософт

Получить отдельный пакет для обновления, см. на веб-узел Каталога Центра обновления Майкрософт .

Дополнительная информация

Предварительные условия

Установка этого обновления не требует выполнения предварительных условий.

Необходимость перезагрузки

Необходимо перезагрузить компьютер после установки этого обновления.

Сведения о замене обновлений

Это обновление заменяет обновление 4465659.

Ссылки

Дополнительные сведения об обслуживании стека обновлений посетите служебного стека обновлений.

Дополнительные сведения о терминологии , которую корпорация Майкрософт использует для описания обновлений программного обеспечения.

Сведения о файлеАнглийского языка (США) версия данного обновления программного обеспечения устанавливает файлы, атрибуты которых указаны в приведенных ниже таблицах. Дата и время для файлов указаны в формате UTC. Дата и время для файлов на локальном компьютере отображаются в местном времени с вашим текущим смещением летнего времени (DST). Кроме того, даты и время могут изменяться при выполнении определенных операций с файлами.

Servicing stack update for Windows Server 2016 and Windows 10, version 1607: November 13, 2018

Summary

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption. An attacker with physical access to a powered off system could exploit this vulnerability to gain access to encrypted data.

To exploit the vulnerability, an attacker must gain physical access to the target system prior to the next system reboot.

The security update fixes the vulnerability by ensuring Windows resumes BitLocker Device Encryption.

To learn more about the vulnerability, go to CVE-2018-8566.

How to get this update

Method 1: Windows Update

This update will be downloaded and installed automatically.

Note This update is also available through Windows Server Update Services (WSUS).

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU and applying Microsoft security fixes. For more information, see Servicing stack updates.

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:

More information

Prerequisites

The servicing stack update (SSU) (KB4132216) must be installed before you install this security update.

Restart information

You do not have to restart the computer after you apply this update.

Update replacement information

References

Learn about the terminology that Microsoft uses to describe software updates.

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.