Patch Management Solution

View Only

Detection of MSNS23-02-5023363

Johannes Engstle posted Jul 04, 2023 03:03 AM

Hi everyone,

we are seeing some issues with the Software Bulletin MSNS23-02-5023363 and Patch windows10.0-2019-kb5023333-x64-1809.msu.
We have a lot of "Windows Server 2019" devices that try to install KB5023333 but it fails and when we run the patch file manually, the error message is that it´s not applicable.

Based on my brief research, , I found out that this "out-of-band"-patch has already been superseded by cumulative update KB5027536 or KB5022782:
January 31, 2023-KB5023363 Update for .NET Framework 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

I have checked some servers and they have already installed the June Update KB5027536, but still try to install KB5023333 which results in an error.
Is it possible that the detection for KB5023333 does not respect the superdense of KB5027536?

Best Regards

Broadcom Employee Dmitri Gornev posted Jul 04, 2023 11:32 AM

Hi J E,

I cannot reproduce this specific issue but I agree that updates from MSNS23-02-5023363 should be superseded by updates from MS23-02-MRNET-5022782 and/or MS23-06-MRNET-5027536. I brought it to the attention of the content team.

Thank you,
Dmitri.

Johannes Engstle posted Jul 04, 2023 11:37 AM

Hi Dmitri,

thanks for checking, if you need more details from my side, I can open a ticket and provide logs and some screenshots.
Please let me know if this would help.

thanks a lot!

Broadcom Employee Dmitri Gornev posted Jul 04, 2023 01:30 PM

Hi Johannes,

if you could run the DPDTrace tool (with OEM version 9.3.2708 option selected) on endpoint in question this may help the content team to troubleshoot.

Thanks,
Dmitri.

Broadcom Employee Dmitri Gornev posted Jul 12, 2023 01:19 PM

Hi Johaness,

this is now fixed in PMImport 7.3.1295 planned for release today.

MSNS23-02-5023363 is superseded by MS23-02-MRNET-5022782 and MS23-02-MRNET-5022782 in its turn is superseded by MS23-06-MRNET-5027536.

Best regards,
Dmitri.

Johannes Engstle posted Jul 14, 2023 07:56 AM

Hi Dmitri,

thanks for the update.
Is this the expected behavior?

Best Regards
Johannes

Broadcom Employee Dmitri Gornev posted Jul 14, 2023 01:00 PM

Hi Johannes,

normally windows10.0-2019-kb5023333-x64-1809.msu would be detected by superseded on the endpoint side and skipped from installation at all like on my server:

but in your case it's most likely shown as "Installed with errors" because of the previous failed attempts.
May you check its status in C:\Program Files\Altiris\Altiris Agent\Agents\PatchMgmtAgent\InstallLog.csv?

Thanks,
Dmitri.

Johannes Engstle posted Jul 17, 2023 03:11 AM

Hi Dmitri,

I attached the InstallLog.csv to case 33483021.
Thanks a lot in advance

Best Regards
Johannes