re: 810030 Microsoft VM Security Update

From: Gary Williams (newsposter@gdwnet.com)
Date: 02/10/03 

From: Gary Williams <newsposter@gdwnet.com>
Date: Mon, 10 Feb 2003 21:43:50 -0000

> -----Original Message-----
> From: David Bailey [mailto:dave@pixel-publishing.co.uk]
> Posted At: 10 February 2003 12:12
> Posted To: security
> Conversation: 810030 Microsoft VM Security Update
> Subject: re: 810030 Microsoft VM Security Update
>
>
>
> >-----Original Message-----
> >
> >>
> >> I wish to install the above update.
> >>
> >> Following the readme instructions I have ascertained I
> >> currently have version 5.00.3167 installed on my system.
> >>
> >> Before I can apply the 810030 patch I must first update
> my
> >> version of the Virtual Machine to 5.00.3805.
> >>
> >> The update read me file tells me I can download this
> from
> >> the Windows Update site, but I have entered the most
> >> obvious search terms and come up with nothing. I also
> >> tried the Microsoft Download Centre and drew a blank.
> >>
> >> Does anyone know where on Microsoft's site I can
> download
> >> this patch, or do I have to update my version of
> Internet
> >> Explorer from version 5 to 5.5 - assuming this contains
> >> the later version of the Virtual Machine.
> >>
> >> All help gratefully appreciated.
> >>
> >
> >http://windowsupdate.microsoft.com and let it scan your
> PC.
> >
> >--
> >Gary Williams
> >newsposter@gdwnet.com
> >Visit http://www.gdwnet.com for IT articles about real-
> world issues.
> >Please keep discussions in the newsgroup.
> >Backup everything before making any changes - Just in
> case!!!
> >Have you looked at http://groups.google.com? - The answer
> you seek is
> >probably there!
> >
> >.
> >I wish to be able to download the update and archive it.
> In any event, whilst windowsupdate will list the 810030
> update in it's list of critical updates, you would be
> attempting to patch an earlier version of the virtual
> machine which the update cannot patch.

The MS02-69 patch is 5.5MB in size. This is not patch it is actually the
full version of the Microsoft Java VM (version 3809 in fact)

> Please follow the security bulletin link in the 'read
> more' pop up window, and you will appreciate what I am
> saying.
>
> Why can't I download the file, the instructions say it is
> available. Things are seldom as simple it seems, as
> Microsoft claim.

Because of legal issues with MS and Sun over Java.

You can download build 5.00.3805 from
http://java-virtual-machine.net/download.html

You should also read the FAQ on this page which contains more
information about the legal and security situation with this package.

Regards, 

-- 
Gary Williams
newsposter@gdwnet.com
Visit http://www.gdwnet.com for IT articles about real-world issues.
Please keep discussions in the newsgroup.
Backup everything before making any changes - Just in case!!!
Have you looked at http://groups.google.com? - The answer you seek is
probably there!