6 replies to this topic

[matrix]

Hi all,

I installed Windows XP Pro SP3 VL MSDN 32-bit.
Installed my hardware drivers and nothing else, no programs at all.
Ran Autopatcher with all modules previously downloaded to check what it would need to install, but i didn't install anything.

Then i ran Windows Update site and installed all updates from there cose i wanted to see what would Autopatcher report, what i had installed and what was left to install so i could compare.

The Critical Updates from Autopatcher, report i still have 5 updates left to install, but they don't show up in Windows Update !!
So my question/doubt is: Should i install those or not ?
If they don't show up, maybe its because it's not necessary ?

The updates are:
KB931906
KB951748
KB950582
Update for Root Certificates (September 2008)
KB953155


From the Recommend Updates and Updated Components sections there are other updates in the same situation but right now i'm more worried about the critical section ones.

Anyone has any idea why they don't show up and if i should or not install them ?

[Cristiano]

rootcert is an error from WU, that currently is offering an old version. the current version is from november, but wu didn't realize that yet

KB931906 is capicom. this one us to be downloaded from wu, then they offered this one at ms download center. you can find more infos for this one in here

KB951748 is about vulnerabilities in DNS. you can find more infos about it in here

i can't believe... i miss KB950582 in my script. i will add this one into my script later. but also, you can find more infos for it in here. i could say to you find more infos into the bulletin, but at least in my language, ms says that this one is only for vista, despide this

KB953155 is about vulnerabilities in Windows Internet Printing Service, that can allow remote code execution. you can find more infos for this one in here

basically, we are more updated that wu is. so, basically, you are safer installing those updates than leaving those behind by thrusting in wu, that is often out of date.

[]s

[matrix]

About the update KB950582 i found out information that i believe makes perfect sense:
http://www.eggheadcafe.com/software/aspnet...d-kb950582.aspx

The relevant part is:
You must install hotfix KB950582 on Vista and W2k8 because exists Important Vulnerability, and on Xp, 2k and 2k3 you install only if you need to implement the KB953252.

But every O.S. has its own download link.
So for XP and 2K, if someone decides to install the KB953252, need to install previously the KB950582.

Edited by matrix, 30 November 2008 - 12:48 PM.

[matrix]

The Root Certificates in Autopatcher is from September, so wich month is the one i installed from WU ?

And KB951748 seems to be important, why isn't listed in WU ?

[Cristiano]

> The Root Certificates in Autopatcher is from September
your version is out of date. please, run apup again in order to download the new version. i've added this one some days ago and according to enu log, this one was updated in 2008-11-19. the version that should be at autopatcher is from november, that is the latest version. the one that you found in wu is from setember

> And KB951748 seems to be important, why isn't listed in WU ?
because wu miss a lot of updates, not just this one. ms does his bulletins, makes public that there's an issue in some service, say that "there's a fix", but doesn't put the fix at wu, leaving you unprotected without even know it, because you may be sure that a lot of lammers read the bulletin and know that there's an issue that they can exploit. if you blame them about that, they will answer you that they make the info public and you could fix the issue by yourself

[]s

[James]

matrix, on Nov 30 2008, 01:03 PM, said:

And KB951748 seems to be important, why isn't listed in WU ?

This update is also known as KB953230, but KB951748 is the "correct" number to use for Windows XP. If this is not listed by WU, that is a WU error, because the update is Critical. In Windows XP Service Pack 3, it replaces/updates 5 files to the following:

Afd.sys	  5.1.2600.5625  138,496  20-Jun-2008
Dnsapi.dll   5.1.2600.5625  147,968  20-Jun-2008
Mswsock.dll  5.1.2600.5625  245,248  20-Jun-2008
Tcpip.sys	5.1.2600.5625  361,600  20-Jun-2008
Tcpip6.sys   5.1.2600.5625  225,856  20-Jun-2008

--

[matrix]

Actually, the Root Certificates that WU installed is from November. I updated Autopatcher and it reported that i have Root Certificates from November.
Thanks Cristiano and James for your help.

Edited by matrix, 03 December 2008 - 04:09 PM.