Re: windows update download order

From: Laura A. Robinson (larobins@bellatlantic.net)
Date: 02/22/02


From: "Laura A. Robinson" <larobins@bellatlantic.net>
To: "Jeff Miller" <jrm.wa@verizon.net>, <focus-ms@securityfocus.com>
Date: Fri, 22 Feb 2002 15:37:32 -0500

Take a look at this presentation from Black Hat New Orleans:

http://www.blackhat.com/presentations/win-usa-02/schultze-winsec02.ppt

Laura
----- Original Message -----
From: "Jeff Miller" <jrm.wa@verizon.net>
To: <focus-ms@securityfocus.com>
Sent: Friday, February 22, 2002 12:40 PM
Subject: RE: windows update download order

> I'm not ENTIRELY sure, but MS's stated service pack philosophy is to
> intelligently apply updates - meaning never overwrite newer patches. I
> assume this extends to WindowsUpdate.
>
> -----Original Message-----
> From: emann@questinc.org [mailto:emann@questinc.org]
> Sent: Thursday, February 21, 2002 7:39 PM
> To: focus-ms@securityfocus.com
> Subject: windows update download order
>
>
> Does the order at which one downloads patches and updated off windows
update
> matter in a similar fashion to it would if you were applying hotfixes
> manually?
>
> The reason I ask is, by default, windows update wants you to d/l critical
> updates first. In the case of tonight, there are critical updates which
are
> older than SRP1 which is also on windows update.
>
> If I d/l critical updates, and reboot, then get the SRP1 off windows
update,
> am I running any risks of having SRP1 overright something that the
> previously downloaded critical update has installed?
>