10 replies to this topic

[MacNala]

I have been testing Autopatcher. I have a WinXP SP3 system installed in a virtual machine (one of many) which runs IE7.
On running Autpatcher with the latest downloaded files a critical update appears to have been missed.
KB938127 still shows up in the virtual machine when tested against Windows Update.

I have seen a number of forum entries which indicated that there was a problem with this before.

Have I missed something?

[_def_x_]

I'm confused by your language, you use the words "missed" and also "still shows up" so I'm not sure exactly the issue
specifically at your end....But yes, KB938127 (MS07-050) was removed on 06/14/09. This update v2 I believe is from August
2008 (originally v1 was posted in 2007) and may have been replace by a Cumulative Security Update.

[Cristiano]

> and may have been replace by a Cumulative Security Update
and it was. this one was released as stand-alone at his time because the cumulative IE update for that month was already done. at the next month or so, it was in the cumulative update for ie6. but it was about one year ago and it is at the latest ie7 cumulative update.

one issue: the updates for IE7 only will be showed after a second run of autopatcher

[]s

[MacNala]

Cristiano, on Jun 24 2009, 01:01 PM, said:

> and may have been replace by a Cumulative Security Update
and it was. this one was released as stand-alone at his time because the cumulative IE update for that month was already done. at the next month or so, it was in the cumulative update for ie6. but it was about one year ago and it is at the latest ie7 cumulative update.

one issue: the updates for IE7 only will be showed after a second run of autopatcher

[]s

Thanks both for the replies.
First: In respect of the word "missed" I mean did I not read or find a report or forum notification that this patch would be available in some other way.
Second: Despite repeated runs of Autopatcher changing all the entries that showed as "Not Installed" to be selected and saving the answer file every time. This patch KB938127 stills shows up as a critical update when Microsoft Update is run against the rebooted virtual PC.

Is there a way I can show you the results of my runs?

Perhaps I am misusing the "save answer file" function assuming that it saves all the earlier inputs used to generate the installation requirements?

[Cristiano]

> s there a way I can show you the results of my runs?
yes, taking a picture of it and uploading it to imageshack or something. but i will investigate this issue later. it will be very intriguing learn that the cumulative update to ie6 has replaced this one and the cumulative update for ie7 don't. but i will have to do some tests later

i'm not fully aware about how the answer file works.

[]s

[_def_x_]

Did you install KB938127 when it was available in the AutoPatcher release - yes/no?

Have you installed the latest Cumulative Security Update for IE7 - yes/no?

It may be a good idea to let us know that you actually (rather than imply) you installed either KB938127 or the Cumulative update!

BTW, from the sounds of it I do think you are misunderstanding the point of the "answer file" but this is for another day.

Followup:
From what I can tell IE7-WindowsXP-KB938127-v2-x86-ENU.exe installs vgx.dll v7.0.6000.20628 and I don't see it in the latest
Cumulative Security Update, there may be a reason for it's absence - I don't know.

Since you are testing in a VM, and it should have no bearing on your system - here's the download link if you want it...
KB938127 v2 IE7 XP x86

Also, I tried to find the security bulletin that replaced this update and could not, I believe I also looked at the last 2 Cumulative
Security Update bulletins and I don't think either replaced KB938127 v2 (MS07-050).

[Cristiano]

well, ie8 (or some of his updates) installs v8.0.6001.18702 for that dll. for IE6, this one is included at sp3. i'm pretty sure that i read in some place that this one was replaced also for ie7, due the cumulative update for ie7 (see the name for tis update: Security Update for Internet Explorer 7 for Windows XP (KB938127)). i've just did an quick search and i didn't found again the source for that info and, in deed, vgx.dll isn't included in the previews cumulative updates for ie7. so, seems the word "Cumulative" has an complete new meaning for MS. the previews included version will be re-added tonight, with the 2 new updates

[]s

[Cristiano]

KB938127 was re-added (only the version for IE7). i'm pretty sure that this one was replaced in a way or another for ie7, but since in a quick search i didn't found where i've read that this one was replaced, i've re-added this one for now. still, as yours can see, there's an newer version for that dll, but it's for ie8. . i know guys, a lot of people don't like ie8. personally, i don't like of IE himself. but this "thing" is integrated to the OS and, even for the N versions of MS OS's, they only remove the IE executable and all the remaining crap is in there. IE is full of holes and, using it or not, you will be vulnerable. so, at least update it, like i do, despite i don't like this one

[]s

[_def_x_]

Should this update be added to the Windows 2000 SP4 release, it seems so?

MS07-050 - See information regarding 2000 SP4/IE6 SP1

KB938127 / 2K SP4 w/ IE6 SP1

[_def_x_]

Cristiano, you need to remove this from the XP x86 script...

Around this date in the script -> #J+ 2009-02-11
PreAction.FolderDelete=autopatcher:\modules\Critical\KB938127_ie7_xp_x86_enu.apm_files

[Cristiano]

Mike, my friend, you just found the reason for a bug that i was overlooking since i've started to update the enu script this is the exact reason why i once argued with James about the usage of PreAction.FolderDelete. this command isn't showed at the log and, when an issue like that happen, you will look like crazy and may overlook this one several times. that is the very reason why i'm choosing those commands
PreAction=rmdir /S /Q
PreAction=move /y
PreAction=del

instead those preactions. those commands are listed at the log

issue fixed

thanks

> be added to the Windows 2000 SP4 release
for sure, if that dll isn't included in any other kb. the most provable place to this one be is the cumulative update for IE6 (KB969897), but at the windows update catalog, it says that KB938127 for win2k was replaced by KB938464, that the WU catalog says nothing about being replaced

by the way, the url for the windows update catalog that i'm talking about is this one

[]s