Windows 2K Security Updates

[Bilou_Gateux]

removed

[GreenMachine]

Thanks again, BG!

[Bilou_Gateux]

New release by M$ KB889293 IE6 Cumulative Update

[johnny44]

About KB889293:

This update may not include hotfixes that have been released since the release of MS04-004 or MS04-038. Customers who have received hotfixes from Microsoft or from their support providers since the release of MS04-004 or MS04-038 should not install this update. Instead customers should deploy update 889669.

I'll try and look into KB889669 to see what other updates it replaces. The knowledgebase refers to KB871248 and KB888092 which we already don't install.

Here's the list of file it replaces:

Internet Explorer 6 Service Pack 1 on Windows 2000 and Windows XP (32-bit):

Name Date (UTC) Time (UTC) Version Size

browseui.dll 12-Nov-2004 02:50 6.0.2800.1607 1,017,856

inseng.dll 24-Sep-2004 21:07 6.0.2800.1475 69,632

mshtml.dll 25-Oct-2004 17:40 6.0.2800.1480 2,697,216

shdocvw.dll 24-Nov-2004 00:49 6.0.2800.1611 1,387,520

shlwapi.dll 12-Nov-2004 04:33 6.0.2800.1605 402,432

urlmon.dll 26-Oct-2004 17:52 6.0.2800.1480 451,584

wininet.dll 25-Oct-2004 17:40 6.0.2800.1480 577,024

Just let us know when someone finds out.

[johnny44]

Didn't try the patch with XPCREATE yet, but installed it on my PC and I couldn't open a new window in IE. I tried shift+click and "open in new window" from the right-click menu and each time the actual window would freeze and the new window would never open. tried registering all the DLL's and no luck.

After uninstalling it, everything came back to normal.

[Bilou_Gateux]

MS04-040: Cumulative Security Update for Internet Explorer (889293)

An update rollup is available for Internet Explorer 6 SP1 (889669)

[BaTLeZone]

Looks like IE6.0sp1-KB889293-Windows-2000-XP-x86-ENU.exe would go in to SVC-HF1.

[Bilou_Gateux]

SVC-HF1: Yes, but using the corporate version KB889669 with these switches: /Q /U /O /N /Z

Update rollup 889669 includes the cumulative security fixes that are in security update 889293. Update rollup 889669 also includes Internet Explorer 6 SP1 hotfixes that were released after Microsoft Security Bulletin MS04-004.

But we should remove the ones it replaces... KB873377

An update rollup is available for Microsoft Internet Explorer 6 SP1 (Version 6.00.2800.1106). Update rollup 873377 includes security update 834707 (MS04-038) and Internet Explorer 6 SP1 hotfixes that were created after security update MS04-004.

going to install this hotfix on my running box and come back in 5 minutes if all goes right

Five minutes later: still alive and no small WindowsUpdate icon on system tray

Checks http://windowsupdate.microsoft.com: no critical updates !

Time to build a new 2KCreateCD

Edited January 21, 2005 by Bilou_Gateux

[Strong Bad]

I found this update valuable: KB883114

"STOP 0x0000007B: INACCESSIBLE_BOOT_DEVICE" error message when you use a USB CD-ROM device to install Windows Server 2003 or Windows 2000

SYMPTOMS

When you use a universal serial bus (USB) CD-ROM device to install any of the products in the "Applies to" section of this article, and the BIOS is not enabled for integrated device electronics (IDE) CD-ROM devices, the computer may not start after you install the operating system. You may receive a Stop error message that is similar to the following, where the first parameter varies:

STOP: 0x0000007B (F967963c, c0000034, 0, 0)

INACCESSIBLE_BOOT_DEVICE

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information Windows 2000

Date Time Version Size File name

-----------------------------------------------------------

29-Jul-2004 19:48 5.0.2195.6961 74,192 Scsiport.sys

Download Link:

http://download.microsoft.com/download/b/8...114-x86-ENU.EXE

[Bilou_Gateux]

For More Information

Windows Security Updates Summary for December 2004

ADD SVC-HF1\Windows2000-KB<hotfix_nb>-x86-<language>.exe | MD5 Hash

Windows2000-KB885835-x86-ENU.EXE CACDB9399AB45B9B65ACB0E73D555C37
Windows2000-KB885836-x86-ENU.EXE 7C1157F5670D9FB98BF631F4D0178199
Windows2000-KB873339-x86-ENU.EXE 52B852B439DD55967CA47B3A59C586A1

@Strong Bad

Although it's not a Critical Update related to security and not reported by WindowsUpdate, it may be interesting to slipstream this file to the source CD.

[Hestranho]

To Bilou_Gateux:

Do you keep an updated hotfix list you could post here? You posted one at the begining of the thread but I'm having a bit of trouble keeping up after all the additions and deletions of hotixes you have been posting.

TIA

[Bilou_Gateux]

As the download URL is not available since a long time, the list isn't updated.

But i will try to edit the post, remove all the obsolete infos and update the list in order 2KCreate builders can use it as reference.

I just build a new 2KCreate CD with the last ones and install it on a real box but i forget to include the recommended update for OE KB887797. I will first rebuild a new 2KCreate to check and then update the list...

[GreenMachine]

Right on top again, Bilou! I'll try to test these out ASAP, but that may take a while ...

[Bilou_Gateux]

Problems installing KB887797 over KB823353

Outlook Express for Windows update available

Note Before this update is made available to you on the Windows Update Web site, you must install the update that is described in the following Microsoft Knowledge Base article.

823353 MS04-018: Cumulative security update for Outlook Express

Download details: Cumulative Update for Outlook Express 6 Service Pack 1 (KB887797) Date Published: 12/14/2004

This non-security update helps resolve various issues found in Outlook Express.

IE6.0sp1-KB887797-Windows-2000-XP-x86-ENU.exe

IE6.0sp1-KB887797-Windows-2000-XP-x86-DEU.exe

IE6.0sp1-KB887797-Windows-2000-XP-x86-FRA.exe

Don't works if you copy this update in SVC-HF1.

Need to install it after KB823353 because KB887797 updates 4 files already updated by KB823353. Otherwise, you would have registration errors for 3 dll's: inetcomm.dll ; msoe.dll ; wab32.dll during install.

File Information Details here

MAILNEWS.CAB + WAB32.CAB (from IE6 SP1 package)

inetcomm.dll 6.0.2800.1106
msoe.dll 6.0.2800.1106
wab32.dll 6.0.2800.1106
wabimp.dll 6.0.2800.1106

Temporary solution:

Put KB887797 in SVC-EXE

After XPCreation and before ISO'ing and burning:

1/ edit SVCPACK.INF and add silent switch to Hotfix

KB887797.EXE /Q /U /O /N /Z

2/ copy KB887797.CAT to CDROOT\I386\SVCPACK

[Bilou_Gateux]

Successfully build a 2KCreate CD and install on a real box.

WindowsUpdate gives me 0 critical updates and 3 recommended updates.

But that is what i want because i don't install .NET Framework, Journal Viewer and install DirectX 9.0b (4.09.0000.0902)

Problem with 887797 integration solved ! I will post ASAP how to.