KB4025252 is offered even though it's already installed

3

3

Windows Update keeps offering KB4025252 (Cumulative security update for Internet Explorer: July 11, 2017) over and over and over again - even though it's already installed.

We've seen this on two PCs so far, both Windows 7 Professional 64-bit.

Looks like we're not the only ones seeing this: https://social.technet.microsoft.com/Forums/windows/en-US/3c713cd6-87ba-4908-bc06-fef248dcbd26/kb4025252-security-update-for-internet-explorer-11-install-multiple-times?forum=w7itprosecurity.

Is there a solution to this, other than waiting for Microsoft to fix yet another botched Windows Update?

Matty Brown

Posted 2017-07-12T10:18:02.620

Reputation: 274

I assume you have restarted? Have you tried to uninstall the patch then reinstall it? – Ramhound – 2017-07-12T11:32:43.153

1We can confirm that restarting did not help in our environment. – Miles Lott – 2017-07-12T11:44:55.630

1Same issue here. Install, repeat, etc. For now we have declined it in WSUS. That should work but I ended up hiding it for now on my machine. – Miles Lott – 2017-07-12T11:35:40.243

According to the KB, "The fixes included in this Security Update for Internet Explorer 4025252 are also included in the July 2017 Security Monthly Quality Rollup. Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are resolved in this update." So, if you have that installed it might be safe to decline this update after all. – Miles Lott – 2017-07-12T12:37:26.827

install the quality rollup, that includes all fixes so here the IE update is not required. – magicandre1981 – 2017-07-12T16:17:37.373

Answers

2

This was a benign bug by Microsoft. Since the changes are already included in the July Security Monthly Quality Rollup (KB4025341), the patch wasn't detecting that the patch was no longer required:

The fixes included in this Security Update for Internet Explorer 4025252 are also included in the July 2017 Security Monthly Quality Rollup. Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are resolved in this update.

Per this forum thread, Microsoft released an updated version of the patch via WSUS if you want to perform a manual synchronization. Otherwise, you'll pick it up on your next scheduled sync.

I tested it myself, and it's no longer showing up on my PC as a necessary patch.

RickP

Posted 2017-07-12T10:18:02.620

Reputation: 36

Good spot. I'll check this out at work tomorrow. – Matty Brown – 2017-07-12T22:53:36.867

WSUS downloaded the revised update, KB4025252 last night. Problem solved :). – Matty Brown – 2017-07-13T07:49:31.193

Asked: 2017-07-12T10:18:02.620

Viewed: 5 368 times

Active: 2017-07-12T21:46:35.833