I have not had that problem on our servers, but on windows 7 and 10 computers rollups will not install from windows update. I had to download them manually and install them for the nessus reports to come up clean. It was similar issues to what you are having with the same patches you listed.
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of James Anderson Sent: Thursday, December 8, 2016 11:05 AM To: [email protected] Subject: [NTSysADM] Nessus reports outdated version dlls after new WUP Rollups Is anyone else having issues with new server builds and the new rollup patches? I recently built two new 2012 R2 boxes - took them manually through a Windows Update patch cycle. The new rollups amazed me and I only ended up only needing a few cycles to get it fully patched. SCCM shows the server as compliant but when Nessus looks at specific DLLs patched by even patches even earlier this year. MS16-080 for example -- the versions on the files are do not match the KB designation. It's almost like the rollups are hitting some of the major points but not actually updating all the DLLs that the specific KB should. For example -- MS16-080 wants Glcndfilter.dll to be 6.3.9600.18336 but my fully patched from disc to rollup 2012 R2 server has it as 6.3.9600.16408. ________________________________ CONFIDENTIALITY NOTICE: This e-mail and any attachments are confidential. If you are not the intended recipient, you do not have permission to disclose, copy, distribute, or open any attachments. If you have received this e-mail in error, please notify us immediately by returning it to the sender and delete this copy from your system.
