MS02-050 CAVEAT?

From: B. Goodman (bmgoodman99@99bigfoot.com)
Date: 09/16/02 

From: "B. Goodman" <bmgoodman99@99bigfoot.com>
Date: Mon, 16 Sep 2002 10:28:26 -0400

Has nobody mentioned the caveat on MS02-050, purportedly added to the
bulletin on 9/9? This is part of the revised text:

Caveats:
As discussed in the FAQ, the patch only allows a certificate to have
subordinates if it contains a Basic Constraints field and has the CA value
set to True. One particular digital certificate, which Microsoft owns and
uses to digitally sign hardware device drivers, does not conform to this
requirement. As a result, after the patch has been applied, users who add or
modify hardware on their systems may see warning messages like the one
pictured below, stating that the driver has not passed Windows Logo testing
even though in reality it actually may have. In some cases this situation
could prevent the user from installing the new hardware altogether.

Are people generally applying this patch or waiting for the revised patch?

Relevant Pages
Loading