SOLVED

Will non-security patches only appear in the non-security update?

%3CLINGO-SUB%20id%3D%22lingo-sub-67205%22%20slang%3D%22en-US%22%3EWill%20non-security%20patches%20only%20appear%20in%20the%20non-security%20update%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-67205%22%20slang%3D%22en-US%22%3E%3CP%3EAnother%20source%20of%20confusion...%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fwindowsitpro%2F2017%2F04%2F24%2Fnew-update-options-for-windows-10-1703%2F%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EYou%20say%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E...%20we%20will%20routinely%20offer%20one%20(or%20sometimes%20more%20than%20one)%20additional%20update%20each%20month.%20These%20additional%20cumulative%20updates%20will%20contain%20only%20new%20non-security%20updates%2C%20so%20they%20will%20be%20considered%20%E2%80%9CUpdates%E2%80%9D%20in%20WSUS%20and%20Configuration%20Manager%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eand%20the%20graph%20accompanying%20the%20article%20makes%20it%20clear%20that%20these%20new%20non-security%20cumulative%20updates%20will%20not%20include%20security%20patches.%20That's%20all%20well%20and%20good%2C%20unless%20there's%20an%20out-of-band%20security%20emergency.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20the%20converse%20situation%20wasn't%20addressed.%20In%20particular%2C%20do%20you%20anticipate%20relasing%20any%20new%20non-security%20patches%20as%20part%20of%20the%20Patch%20Tuesday%20releases%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20other%20words%2C%20can%20we%20rely%20on%20having%20only%20security%20patches%20on%20Patch%20Tuesday%2C%20and%20non-security%20patches%20through%20the%20rest%20of%20the%20month%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOf%20course%2C%20if%20there's%20an%20emergency%20security%20hotfix%2C%20that%20blows%20a%20hole%20in%20all%20of%20this%2C%20but%20that's%20always%20been%20the%20case.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-67211%22%20slang%3D%22en-US%22%3ERe%3A%20Will%20non-security%20patches%20only%20appear%20in%20the%20non-security%20update%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-67211%22%20slang%3D%22en-US%22%3E%3CP%3EGenerally%2C%20non-security%20fixes%20would%20be%20added%20to%20the%20non-security%20updates%2C%20not%20directly%20in%20the%20Patch%20Tuesday%20updates.%20%26nbsp%3BThere%20are%20occasionally%20exceptions%20to%20that%2C%20e.g.%20more%20critical%20non-security%20updates.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Another source of confusion... You say

 

... we will routinely offer one (or sometimes more than one) additional update each month. These additional cumulative updates will contain only new non-security updates, so they will be considered “Updates” in WSUS and Configuration Manager

 

and the graph accompanying the article makes it clear that these new non-security cumulative updates will not include security patches. That's all well and good, unless there's an out-of-band security emergency.

 

But the converse situation wasn't addressed. In particular, do you anticipate relasing any new non-security patches as part of the Patch Tuesday releases?

 

In other words, can we rely on having only security patches on Patch Tuesday, and non-security patches through the rest of the month? 

 

Of course, if there's an emergency security hotfix, that blows a hole in all of this, but that's always been the case.

 

1 Reply
Highlighted
Best Response confirmed by Woody Leonhard (New Contributor)
Solution

Generally, non-security fixes would be added to the non-security updates, not directly in the Patch Tuesday updates.  There are occasionally exceptions to that, e.g. more critical non-security updates.