W2K Hotfix application confusion
From: Cliff Hafen (chafen@ATTBI.COM)
Date: 03/28/03
- Previous message: Russ: "Alert: Microsoft Security Bulletin - MS03-010"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 Mar 2003 15:25:19 -0500 From: Cliff Hafen <chafen@ATTBI.COM> To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
OK, I'm confused, again. I have several W2KSP2 system that have absolutely
necessary hotfixes applied, but not all hotfixes. I want to apply a couple
of new ones, and older ones that I thought should be applied. I made the
lists of who needs what and downloaded them.
Then I discovered 815062 - The Correct File is Not Installed When You Chain
Multiple Hotfixes. I downloaded this, and it is a new qchain.exe. OK.
This led me to 296861 - How to Install Multiple Windows Updates or Hotfixes
with Only One Reboot. Still OK. I though I knew how to do that.
296861 says to use the new qchain.exe for updates produced "before December,
2002." It appears there are two classes of "updates" here. Early ones that
use hotfix.exe followed by qchain.exe, and middle ones that use update.exe
which has bad qchain functionality built in. 296861 says to use the new
qchain with the hotfix-style. OK. It also says the update.exe problem is
fixed for later updates produced "after December, 2002". OK. Just run them
with /z /m switches and it will work.
My question is: What about the middle "updates" that use update.exe with bad
qchain built-in? It looks like they must be run individually with a
reboot? Since each update.exe will play with the Pending File Rename queue,
and might do the wrong thing, running the new qchain.exe after all the
updates cannot fix anything. Or run them in bunches that don't update the
same files. Is this correct? Is this being too paranoid? Am I missing
something?
Thanks for you help,
Cliff
PS: I could not tell when various updates were "produced", so I opened each
of them in winzip and noted the modified date and size of update.exe. From
the start of 2003, update.exe is 411136 bytes. Prior to that, its 409088
bytes. I take that to mean that any update with the 409088 update.exe is
bad. This "before December, 2002," and "after December, 2002," is not very
useful, and leave out updates "produced" in December, 2002, whatever
"produced" means. (The sizes are only for the updates I was interested in;
others might be different.)
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
Delivery co-sponsored by TruSecure Corporation
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
TICSA - Anniversary Special - Limited Time
Become TICSA certified for just $221.25 US when you register before 3/31/03
with PROMO "TS0103" at www.2test.com. NO membership fees, certification
good for 2 years. Price for international delivery just $296.25 US, with
this offer. Offer cannot be combined with any other special and expires
3/31/03. Visit www.trusecure.com/ticsa for full details.
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
- Previous message: Russ: "Alert: Microsoft Security Bulletin - MS03-010"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|