Re: Microsoft Security Bulletin MS03-049 - Installation problems?

From: Steve Shockley (steve.shockley_at_SHOCKLEY.NET)
Date: 11/14/03

  • Next message: Russ: "Re: Microsoft Security Bulletin MS03-043/049 W2K anomollies" 
    Date:         Thu, 13 Nov 2003 18:01:16 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    More bugs in mssecure.xml:

    MS03-043 for Windows Server 2003, in the XML:
    <Patch PatchName="WindowsServer2003-KB828035-x86-ENU.exe"
    PatchLocationID="2093" SBID="0" SQNumber="828035" NoReboot="1">
    ...
      <Location LocationID="2093"
    Path="http://download.microsoft.com/download/7/2/8/728276AF-582D-4283-8B6C-3
    A9C65F65E32/WindowsServer2003-KB828035-x86-ENU.exe" AbsolutePath=""/>

    This gives a 404.

    From
    http://www.microsoft.com/downloads/details.aspx?FamilyId=1DF106F3-7EC4-4EB0-
    9143-C1E3C9E2F5F8&displaylang=en, the download location is actually:

    http://download.microsoft.com/download/b/b/6/bb6151ee-f888-409c-81e0-60bfb60
    1d8e9/WindowsServer2003-KB828035-x86-ENU.exe

    There's a lot more of those that I still have to slog through, but I'll let
    MS do their own QA. If you're using SUS (as opposed to SMS) it may just be
    failing silently, so you may want to check your logs.

    If Microsoft wants everyone to rely on mssecure.xml, then they had better
    make sure it's right before pusing it out the door. Patches are monthly
    now, they should have had plenty of time.

    -----
    Marcus Ranum's new book "The Myth of Homeland Security" is now out and
    is available from http://www.amazon.com/ranum In this hard-hitting
    review of the homeland security business, Ranum shows us how the problem
    is vastly harder than it's being made to sound, and how special
    interests, *** covering, and bureaucracy are threatening to derail any
    chance of making progress.
    -----

  • Next message: Russ: "Re: Microsoft Security Bulletin MS03-043/049 W2K anomollies"