CVE 2021-34527 & Windows Server 2019 version 1809 build 17763.2090

Question

Good day all, and thanks for anyone who can offer assistance!

I have an installed Windows Server 2019, version 1809, build 17763.2090 that needs to be patched for Print Nightmare (CVE 2021-34527).

Following guidance contained here: https://support.microsoft.com/en-us/topic/july-6-2021-kb5004947-os-build-17763-2029-out-of-band-71994811-ff08-4abe-8986-8bd3a4201c5d

We have already downloaded, and installed KB5003711 which is required before KB5004947

I have downloaded KB5004947 for Windows Server 2019 from here: https://www.catalog.update.microsoft.com/Search.aspx?q=5004947

When I try to install this update, it tells me this update is not applicable to this computer.

Is there a workaround/solution for this, or am I using the wrong patch? The print spooler must run on this server, it's creating havoc already for being off for a couple of weeks, but that thankfully is mitigated due to Covid lockdown.

Many thanks for any assistance on this!

Answer 1

Since the server is already at July 20, 2021-KB5004308 (OS Build 17763.2090) Preview The "not applicable" is correct. Updates are cumulative so Build 17763.2090 already includes the older July 6, out-of-band patch.
https://support.microsoft.com/en-us/topic/july-20-2021-kb5004308-os-build-17763-2090-preview-4dfbd8fd-ab65-4223-abdc-ee161bfa00cf

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hi,

Per the windows update history for windows server 2019, the KB5004308 is newer than KB5004947, for which clearly stated to fix PrintNightmare issue. Since then, patch KB5004308 is supposed to help to fix previous issues.

As you may know that Cumulative update is an update which includes previously released updates, it's like more than one simple update bundled together.
You could also confirm this via Windows Update catalog by searching dedicated KB number and it will list all the previous KB number under section: Pacakage details-->This update replace following update.

Therefore, we always suggest users to patch the computer or server to the latest if users encountered some issues, which will probably, to a large extent, eliminating some known issues.

----------

If the Answer is helpful, please click Accept Answer and upvote it.

Thanks,
Jenny

Answer 3

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

Thanks to all who posted above, and apologies for the delay in reply.

This is now solved, I had the wrong understanding that update KB5004308 was before KB5004947, and this is clearly not the case.

Appreciate the input and guidance!

Answer 5

Glad to hear, you're welcome.

--please don't forget to upvote and Accept as answer if the reply is helpful--