Re: Unannounced revisions to MS patches
From: Free, Bob (RWF4_at_PGE.COM)
Date: 10/28/03
- Previous message: Sym Security: "Re: Norton Internet Security Blocked Sites XSS"
- Maybe in reply to: Joe Dance: "Unannounced revisions to MS patches"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 28 Oct 2003 13:11:03 -0800 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
That used to really bother me too. I would see SUS updates "reissued"
but the actual binaries of the files contained in patches themselves
were unchanged and the SUS clients never reinstalled them.
I saved a post some time ago from Don C at MS in the SUS newsgroup that
adressed it.
"When updates are re-issued (they appear with an "updated" status in the
SUS Approval page) it is usually not because the actual update itself
has been re-issued by MSRC, but rather because the detection criteria
(the "blob" that defines what machines the update is applicable to) has
been changed by the Windows Update Content Management team. Modifying
the detection criteria does NOT change the update itself, and doesn't
cause it to be re-installed if it's already been installed by a client."
http://groups.google.com/groups?selm=OAPDFU80CHA.2552%40TK2MSFTNGP12&oe=
UTF-8&output=gplain
Bob Free
Sr Network Specialist
PG&E Auburn,Ca
---- NTBugtraq subscribers save $103.00 off the TICSA exam by using promo code "NT1003" when registering to take the TICSA exam at www.2test.com. Prove to your employer and peers that you have the knowledge and abilities to be an active stakeholder in today's enterprise security. Become TICSA certified www.trusecure.com/ticsa. Promotion expires 12/31/03 and cannot be used in combination with other offers. ----
- Previous message: Sym Security: "Re: Norton Internet Security Blocked Sites XSS"
- Maybe in reply to: Joe Dance: "Unannounced revisions to MS patches"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]