Re: Latest update MS04-40

From: Jim Macklin (p51mustang[threeX12)
Date: 12/02/04


Date: Wed, 1 Dec 2004 21:46:14 -0600

Install SP2 and don't worry about the Dec 1 update, it
doesn't apply to SP2.

"TheBFG" <TheBFG@discussions.microsoft.com> wrote in message
news:66CB10C2-5AB2-4B01-A483-EC3B79D3F37F@microsoft.com...
| As usual I am confused by Microsoft ( surprised?) I have
diligently applied
| all the updates to and including MS04-039
|
| The latest update MS04-40 has been released, so if course
I want to install
| it .
| However...this message is on the bulletin information:
|
| Important: This update may not include hotfixes that have
been released
| since the release of MS04-004 or MS04-038. Customers who
have received
| hotfixes from Microsoft or from their support providers
since the release of
| MS04-004 or MS04-038 should not install this update.
Instead customers should
| deploy update 889669.
|
| Going to the FAQ section it says the following:
| (The following is copied from the bulletin)
| What updates does this release replace?
| This security update replaces previously released security
bulletins for
| Internet Explorer. The most recent security bulletin and
Internet Explorer
| versions that are affected are listed in following table.
|
| Bulletin ID Internet Explorer 6 SP1 (All versions earlier
than Windows
| Server 2003)
| MS04-038
| Replaced
|
| Question:
| I have received a hotfix from Microsoft or my support
provider since the
| release of MS04-004. Is that hotfix included in this
Security Update?
| For Internet Explorer 6 Service Pack 1 for Windows 2000
Service Pack 3,
| Windows 2000 Service Pack 4, Windows XP Service Pack 1,
Windows NT Server 4.0
| Service Pack 6a, Windows NT Server 4.0 Terminal Server
Edition Service Pack
| 6, Windows 98, Windows 98 Second Edition, and Windows Me,
most Internet
| Explorer hotfixes are not included in the MS04-040
security update. When you
| install any of the MS04-040 security updates for Internet
Explorer 6 SP1,
| Internet Explorer hotfixes released since MS04-004 will be
removed if the
| hotfix replaced any of the files listed in the "Security
Update Information"
| section of this bulletin.
|
| Starting with MS04-038, cumulative hotfixes for Internet
Explorer are
| available in a separate update rollup that includes both
cumulative hotfixes
| and the security fixes included in the latest security
update for Internet
| Explorer. For example, update rollup 871260 includes the
cumulative security
| fixes in MS04-038 as well as hotfixes released since
MS04-004. Update rollup
| 889669 includes the cumulative security fixes in MS04-040
as well as hotfixes
| released since MS04-004. For additional information about
hotfixes included
| in update rollup 889669, as well as instructions on how to
obtain and deploy
| the update rollup, contact your Microsoft support provider
or review
| Microsoft Knowledge Base Article 889669.
| ( End of bulletin information)
|
| So......what am I supposed to do? Install the rollup
889669 or the update
| 889293? As I have installed up to MS04-039, which part of
this information
| applies to me? I am using windowsXP SP1
| Thanks for any help you can give.
|
|



Relevant Pages

  • Critical Alert Update - W32.Slammer
    ... PSS Security Response Team Alert - Update: ... SP2, and Microsoft SQL Desktop Engine Version (MSDE) 2000 RTM, Microsoft SQL ... and all applications that install Microsoft SQL Desktop ...
    (microsoft.public.sqlserver.security)
  • Critical Alert Update - W32.Slammer
    ... PSS Security Response Team Alert - Update: ... SP2, and Microsoft SQL Desktop Engine Version (MSDE) 2000 RTM, Microsoft SQL ... and all applications that install Microsoft SQL Desktop ...
    (microsoft.public.security)
  • RE: [Full-Disclosure] FW: Microsoft Security Bulletin MS03-035: Flaw in Microsoft Word Could Enable
    ... receive the same cryptic error message if you try to install SP2 but SP1 ... > should review my security settings. ... Microsoft Word supports the use of macros to allow ... >> has a security model designed to validate whether a macro should be ...
    (Full-Disclosure)
  • Re: Microsoft notice on W32.Slammer
    ... >PSS Security Response Team Alert - New Worm: ... >1434 utilizing a vulnerability that was patched in Microsoft Security ... > Microsoft, however, recommends that customers install the most recent ... >cumulative security patch for Microsoft SQL Server 2000 which is Microsoft ...
    (microsoft.public.sqlserver.security)
  • Re: ?Expired Security Certif for MS Update
    ... MBSA should run fine on a new install. ... faith in the downloads I have, that used the expired certificate to get ... At the risk of sounding like an alien abductee, this security invasion ... Microsoft and signed by a CA that your computer trusts I would not worry ...
    (microsoft.public.windowsxp.security_admin)