Re: Patches not included in SMS 2003 SP1 software update



> I guess i am wasting time posting my question here. there is absolutely no
> response from anyone.
You might have had a response earlier if you posted to the
sms.softwareupdates newsgroup.

>
> "Peter" wrote:
>
> > I have both normal and extended MBSA installed on my SMS 2003 SP1 server.
> > But the following patches were not included in them. So some of my servers
> > are still vulnerable.
> >
> > 1) Why are they not included in Software updates?
> > 2) How do i include them in my big patch package?
> >
> > Windows installer 3.1

> > 842773
This doesn't look like a security patch to me, so vulnerable isn't
exactly correct. The patch mechanisms only include security patches.
> > 891861
This is an update rollup, which is technically not a security patch,
again no vulnerability if you deployed all real security patches.

> > 897715
The enterprise update scan tool should be able to detect this one,
according to the bulletin's faq.
http://www.microsoft.com/technet/security/bulletin/ms05-030.mspx
Unfortunately it will show up as a seperate security type in the
distribute software updates wizard, and hence cannot be added to the
same patch package you use for normal patches.

I know this probably isn't what you wanted to hear, but at least you
have an answer now.
>

--
Kim Oppalfens
MVP SMS
Computacenter Belgium
.



Relevant Pages

  • RE: IIS on 443 replaced by serv-u
    ... It sounds like your system was compromised before installing the patch. ... More information on creating slip-streamed installs of Windows can ... Download the Security Patch Management Guide: ... It's important to not that not all security patches are offered by the ...
    (microsoft.public.inetserver.iis.security)
  • Re: Use this patch immediately
    ... >> to be posted from microsoft corp. when I attempt to download the patch ... >> to download their latest security patch I get the same message. ... Are these security patches really needed? ... > an email is asking to become another zombie. ...
    (microsoft.public.security.virus)
  • RE: Is VMS losing the Financial Sector, also?
    ... we still have to apply security patches. ... SuSE Linux. ... "Patch Tuesday" is NOT ...
    (comp.os.vms)
  • Timing the Application of Security Patches for Optimal Uptime
    ... Steve Beattie, Seth Arnold, Crispin Cowan, Perry Wagle, and Chris Wright ... Informed Security http://www.informedsecurity.com ... Patch too soon, ... the factors affecting when it is best to apply security patches, ...
    (Bugtraq)
  • VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4
    ... Patch URL: http://www.vmware.com/download/esx/esx-253-200610-patch.html ... Updated package addresses several security issues. ... Common Vulnerabilities and Exposures project assigned ... VMware Security Response Policy ...
    (Bugtraq)