I downloaded the ISO with the security updates from September and saw 2 updates in the Vista folder:

WINDOWS6.0-KB2570947-X64-CUSTOM.MSU

WINDOWS6.0-KB2570947-X64.MSU

What is this CUSTOM file? I saw that it includes Vista Sp1 files. So does this version fixes the security issue for Vista Sp1 which is out of support? If yes, why releasing a security fix for an Os with is out of support?

Good question. Are the contents different if you extract them?

the custom has Vista Sp1 files while the other not. So the CUSTUM version updates Vista Sp1 which is already out of support

Why is such an Update made for a product which is out of support? I'm confused.

Could be a packge intended for Custom Support Agreement (CSA) holders that ended up in the ISO by mistake, I guess.

With this Custom Support Agreement (CSA) you can request updates even if the support for the product ended?

Not in itself, no - it entitles you to support for products no longer in mainstream support.

It also gives the option to purchase an Extended Hotfix Agreement (EHA) which in turn allows you the right to request a hotfix be backported and pay per package (there is no guarantee it will be backported/backportable).

ok, thanks for this very useful information

Hence wondering what's different if you extract both files .

as I already posted the CUSTUM version includes Sp1 files:

GDR: amd64_microsoft-windows-d..nese-eacommonapijpn_31bf3856ad364e35_6.0.6001.18671_none_edc7a2f288b90c67.manifest

LDR: amd64_microsoft-windows-d..nese-eacommonapijpn_31bf3856ad364e35_6.0.6001.22947_none_ee77b509a1b8eab6.manifest

So the update applies to Sp1 systems, too. But Vista Sp1/Server 2008 are out of support starting with 12th July. And this means, no newer updates are released for this unsupported Windows versions. That's why I'm confused.

So noted .