For the second month in a row, McAfee and Sophos are having problems with the Win7/Server 2008 R2 Monthly Rollup and Security-only patches

[Karlston]

After the debacle last month, you’d think that McAfee and Sophos would’ve figured out a way to work with Microsoft’s monthly patches.

 

Not so.

 

Microsoft says that its May 14 Monthly Rollup, KB 4499164 and Security-only patch KB 4499175, are triggering problems anew:

Microsoft and McAfee have identified an issue on devices with McAfee Endpoint Security (ENS) Threat Prevention 10.x or McAfee Host Intrusion Prevention (Host IPS) 8.0 or McAfee VirusScan Enterprise (VSE) 8.8 installed. It may cause the system to have slow startup or become unresponsive at restart after installing this update.

We are presently investigating this issue with McAfee.

Guidance for McAfee customers can be found in the following McAfee support articles:

• McAfee Security (ENS) Threat Prevention 10.x
• McAfee Host Intrusion Prevention (Host IPS) 8.0
• McAfee VirusScan Enterprise (VSE) 8.8

To be clear, this is in addition to the problems we all felt last month. The official Release Information status page says that this particular problem originated on April 9 and has been mitigated. McAfee disagrees: “May 16, 2019 Updated that this issue applies to Windows April 2019 update KBs or later Windows monthly updates.” You can choose which one you believe.

 

Microsoft hasn’t yet admitted to the problems with Sophos, but I assure you they will. Here’s what Sophos says:

We have had an increase in customers reporting that following on from the Microsoft Windows 14th May patches they are experiencing a hang on boot where the machines appear to get stuck on “Configuring 30%”

Initial findings suggest that this relates to the below Microsoft Patches:

May 14, 2019—KB4499164 (Monthly Rollup)
May 14, 2019—KB4499165 KB4499175 (Security-only update) ^*

We have currently only identified the issue on Windows 7 and Windows Server 2008 R2

Applies to the following Sophos product(s) and version(s)
Sophos Endpoint Security and Control
Sophos Central Endpoint Standard/Advanced

Why does this feel like deja vu all over again?

 

Thx Kevin Beaumont @GossiTheDog.

 

Source: For the second month in a row, McAfee and Sophos are having problems with the Win7/Server 2008 R2 Monthly Rollup and Security-only patches (AskWoody)

 

^* Poster's note: Sophos mentions KB4499165 above, but that's the security-only update for 8.1 and  Server 2012 R2, not 7. They mean KB4499175 , the security-only update for 7 SP1 and Server 2008 SP1.