Windows Server 2003 SP2
Changelog:
August 15-Added 950974, 951066, 952954, 953838, and 953839. Removed 941202, 950759, and 950760.
July 10-Added 951746 and 951748. Removed 941644 and 941672.
June 27-Added 953235, 951698, 950762, 950760, and 950759. Removed 948881, 947864, 946538, and 941568.
April 18-Added 941693, 945553, 947864, 948590, and 948881. Removed 944533.
March 5-Added 942830, 942831, 944533, 946026, 946538, and 947890. Removed 921503, 926122, and 942615
January 10-Added 941644 and 943485. Removed 917953.
December 16-Added 941568, 941569, 942615, and 944653. Removed 939653.
November 16-Added 943460 and 941672. Removed 935966.
October 10-Added 933729, 939653, and 941202. Removed 937143. Updated Roots Certificate Update.
August 25-Fixed 937413 with correct 937143.
August 14-Added 921503, 936227, 936782, 937413, 938127, and Windows Script 5.7. Removed 933566 and Windows Script 5.6. Also removed 929969 from IE7 list.
July 11-Added 925398, 926122, 933854, 936357, and the Roots Certificate Update. Also added 924667 which was forgotten last month.
June 20-Added 929123, 933566, 935839, and 935840. Removed 931768.
May 11-Added 931768 and 935966. Removed 928090 from IE7 list.
April 14-Added 925902, 932168, 930178, and 931784.
March 17-Initial Release! Added IE7 and patches.

Legend:
Windows
Internet Explorer 6
Internet Explorer 7
**New Update**

April 2007:
925902 - MS07-017: Vulnerabilities in GDI Could Allow Remote Code Execution
932168 - MS07-020: Vulnerability in Microsoft Agent Could Allow Remote Code Execution
930178 - MS07-021: Vulnerabilities in CSRSS Could Allow Remote Code Execution
931784 - MS07-022: Vulnerability in Windows Kernel Could Allow Elevation of Privilege

June 2007:
924667 - MS07-012: Vulnerability in Microsoft Foundation Classes could allow for remote code execution UPDATED JUNE 12, 2007
935840 - MS07-030: Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution
929123 - MS07-034: Cumulative Security Update for Outlook Express and Windows Mail
935839 - MS07-035: Vulnerability in Win 32 API Could Allow Remote Code Execution

July 2007:
925398 - MS06-078: Vulnerability in Windows Media Player 6.4 could allow remote code execution UPDATED JULY 10, 2007
933854 - MS07-040: Description of the security update for the .NET Framework 1.1 for Windows Server 2003: July 10, 2007
936357: A microcode reliability update is available that improves the reliability of systems that use Intel processors

August 2007:
936227 - MS07-042: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
936782 - MS07-047: Vulnerability in Windows Media Player Could Allow Remote Code Execution

October 2007:
933729 - MS07-058: Vulnerability in RPC Could Allow Denial of Service

November 2007:
943460 - MS07-061: Vulnerability in Windows URI Handling Could Allow Remote Code Execution

December 2007:
941569 - MS07-068: Vulnerability in Windows Media file format could allow remote code execution
944275 - MS07-068: Vulnerability in the Windows Media file format could allow remote code execution in Windows Server
944653 - MS07-067: Vulnerability in Macrovision driver could allow local elevation of privilege

January 2008:
943485 – MS08-002: Vulnerability in LSASS Could Allow Local Elevation of Privilege

February 2008:
942831 - MS08-005: Vulnerability in Internet Information Services could allow elevation of privileges
942830 - MS08-006: Vulnerability in Internet Information Services could allow remote code execution
946026 - MS08-007: Vulnerability in WebDAV Mini-Redirector could allow remote code execution
947890 - MS08-008: A vulnerability in OLE Automation could allow remote code execution

April 2008:
945553 - MS08-020: Vulnerability in DNS Client Could Allow Spoofing
948590 - MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution
941693 - MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege

June 2008:
951698 - MS08-033: Vulnerabilities in DirectX Could Allow Remote Code Execution
948745 - MS08-034: Vulnerability in WINS Could Allow Elevation of Privilege
953235 - MS08-035: Vulnerability in Active Directory Could Allow Denial of Service
950762 - MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service

July 2008:
951746 - MS08-037: Description of the security update for DNS in Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server (server-side): July 8, 2008
951748 - MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008

August 2008:
**952954 - MS08-046: Vulnerability in Microsoft Windows Image Color Management System Could Allow Remote Code Execution**
**951066 - MS08-048: Security Update for Outlook Express and Windows Mail**
**950974 - MS08-049: Vulnerabilities in Event System Could Allow Remote Code Execution**
**953839: Cumulative Security Update for ActiveX**

Internet Explorer 6
938127 - MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution
**953838 - MS08-045: Cumulative Security Update for Internet Explorer**
This update replaces previous Cumulative security update for IE 950759
Roots Update direct download link UPDATED September 25 2007!
Windows Script 5.7.0.16535 direct download link

Internet Explorer 7
938127 - MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution
**953838 - MS08-045: Cumulative Security Update for Internet Explorer**
This update replaces previous Cumulative security update for IE 950759
Roots Update direct download link UPDATED September 25 2007!
Windows Script 5.7.0.16535 direct download link

----------------------------------------------------------------------------------------------------------------
Windows Server 2003 SP1
Changelog:
August 15-Added 950974, 951066, 952954, 953838, and 953839. Removed 941202, 950759, and 950760.
July 10-Added 951746 and 951748. Removed 922819, 941644, and 941672.
June 27-Added 953235, 951698, 950762, 950760, 950759, and 950749. Removed 948881, 947864, 946538, and 941568.
April 18-Added 941693, 945553, 947864, and 948881. Removed 938829 and 944533.
March 5-Added 942830, 942831, 944533, 946026, 946538, and 947890. Removed 917537, 921503, 926122, and 942615
January 10-Added 941644 and 943485. Removed 917953. Fixed typos.
December 16-Added 941568, 941569, 942615, and 944653. Removed 904706 and 939653.
November 16-Added 943460 and 941672. Removed 935966.
October 10-Added 933729, 939653, and 941202. Removed 937143. Updated Roots Certificate Update.
August 25-Fixed 937413 with correct 937143.
August 14-Added 921503, 936227, 936782, 937413, 938127, 938829, and Windows Script 5.7. Removed 917734, 924191, 929969, 933566, and Windows Script 5.6.
July 12-Updated 933854 to remove the requirement for a test release.
July 11-Added 926122, 933854, 936357, and the Roots Certificate Update.
June 20-Added 929123, 933566, 935839, and 935840. Removed 917422, 923694, and 931768.
May 11-Added 931768 and 935966. Removed 928090.
April 14-Added 925902, 932168, 930178, and 931784. Removed 896424 and 912919.
February 17-Added 928255, 928843, 926436, 924667, 918118, and 928090. Removed 925454, 921398, and 922616.
January 10-Added 929969. Removed 925486.
December 19-Added 925454 to IE6 updates. Added 926247, 923694, 925398, and 923689. Removed 911567, 920214, and 922760.
November 17-Added 923980, 922760, and 920213. Removed 890046, 924496 and 918899.
October 10-Added 923191, 924191, 923414. Removed 917159.
September 26-Added 925486.
September 13-Added 920685 and 922582. Updated 921883 to version 2. Removed 912818 as it's not a high priority update.
August 9-Added 917422, 918899, 920214, 920670, 920683, 921398, 921883, and 922616. Removed 916281 and 888113.

Legend:
Windows
Internet Explorer 6
Internet Explorer 7
**New Update**

May 2005
898715: An update for Windows Installer 3.1 is available for Windows Server 2003 SP1 and for the 64-bit editions of Windows XP

June 2005
896358 - MS05-026: A vulnerability in HTML Help could allow remote code execution
896428 - MS05-033: Vulnerability in Telnet client could allow information

July 2005
901214 - MS05-036: Vulnerability in Microsoft Color Management Module could allow remote code execution

August 2005
899588 - MS05-039: Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege
893756 - MS05-040: Vulnerability in Telephony service could allow remote code execution
899591 - MS05-041: Vulnerability in Remote Desktop Protocol could allow denial of service
899587 - MS05-042: Vulnerabilities in Kerberos could allow denial of service, information disclosure, and spoofing

October 2005
905414 - MS05-045: Vulnerability in Network Connection Manager Could Allow Denial of Service
899589 - MS05-046: Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution
901017/907245 - MS05-048: Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution
900725 - MS05-049: Vulnerabilities in Windows Shell Could Allow Remote Code Execution
902400 - MS05-051: Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution

December 2005
910437: When Windows Automatic Updates tries to download updates on a Windows Server 2003-based or Windows XP-based computer, an access violation error may occur

January 2006
908519 - MS06-002: Vulnerability in Embedded Web Fonts Could Allow Code Execution

February 2006
911564 - MS06-006: Vulnerability in Windows Media plug-in with non-Microsoft Internet Browsers could allow remote code execution
911927 - MS06-008: Vulnerability in Web Client Service Could Allow Remote Code Execution
901190 - MS06-009: Vulnerability in the Korean Input Method Editor Could Allow Elevation of Privilege

April 2006
911562 - MS06-014: Vulnerability in the Microsoft Data Access Components (MDAC) Function Could Allow Code Execution
908531 - MS06-015: Vulnerability in Windows Explorer Could Allow Remote Code Execution
917627 - MS06-017: Vulnerability in Microsoft FrontPage 2002 Server Extensions could allow cross-site scripting

June 2006
918439 - MS06-022: Vulnerability in ART image rendering could allow remote code execution
911280 - MS06-025: Vulnerability in Routing and Remote Access Could Allow Remote Code Execution
914389 - MS06-030: Vulnerability in Server Message Block Could Allow Elevation of Privilege

July 2006:
914388 - MS06-036: A vulnerability in the DHCP Client Service could allow remote code execution

August 2006:
921883 - MS06-040: Vulnerability in Server service could allow remote code execution VERSION 2 RELEASED SEPTEMBER 12 2006!
920683 - MS06-041: Vulnerability in DNS resolution could allow remote code execution
920670 - MS06-050: Vulnerabilities in Microsoft Windows Hyperlink Object Library could allow remote code execution

September 2006:
920685 - MS06-053: Vulnerability in Indexing Service Could Allow Cross-Site Scripting
922582: Error message when you try to update a Microsoft Windows-based computer: "0x80070002"

October 2006:
923191 - MS06-057: Vulnerability in Windows Explorer Could Allow Remote Execution
923414 - MS06-063: Vulnerability in Server Service Could Allow Denial of Service

November 2006:
923980 - MS06-066: Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution
920213 - MS06-068: Vulnerability in Microsoft Agent Could Allow Remote Code Execution

December 2006:
926247 - MS06-074: Vulnerability in Simple Network Management Protocol (SNMP) could allow remote code execution
925398 - MS06-078: Vulnerability in Windows Media Player 6.4 could allow remote code execution
923689 - MS06-078: Vulnerability in Windows Media Player could allow remote code execution

February 2007:
928255 - MS07-006: Vulnerability in Windows Shell could allow elevation of privilege
928843 - MS07-008: A vulnerability in the HTML Help ActiveX control could allow remote code execution
926436 - MS07-011: Vulnerability in Microsoft OLE Dialog could allow remote code execution
924667 - MS07-012: Vulnerability in Microsoft Foundation Classes could allow for remote code execution
918118 - MS07-013: Vulnerability in Microsoft RichEdit could allow remote code execution

April 2007:
925902 - MS07-017: Vulnerabilities in GDI Could Allow Remote Code Execution
932168 - MS07-020: Vulnerability in Microsoft Agent Could Allow Remote Code Execution
930178 - MS07-021: Vulnerabilities in CSRSS Could Allow Remote Code Execution
931784 - MS07-022: Vulnerability in Windows Kernel Could Allow Elevation of Privilege

June 2007:
935840 - MS07-030: Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution
929123 - MS07-034: Cumulative Security Update for Outlook Express and Windows Mail
935839 - MS07-035: Vulnerability in Win 32 API Could Allow Remote Code Execution

July 2007:
933854 - MS07-040: Description of the security update for the .NET Framework 1.1 for Windows Server 2003: July 10, 2007
936357: A microcode reliability update is available that improves the reliability of systems that use Intel processors

August 2007:
936227 - MS07-042: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
936782 - MS07-047: Vulnerability in Windows Media Player Could Allow Remote Code Execution

October 2007:
933729 - MS07-058: Vulnerability in RPC Could Allow Denial of Service

November 2007:
943460 - MS07-061: Vulnerability in Windows URI Handling Could Allow Remote Code Execution

December 2007:
941568 - MS07-064: Vulnerabilities in DirectX could allow remote code execution
941569 - MS07-068: Vulnerability in Windows Media file format could allow remote code execution
944275 - MS07-068: Vulnerability in the Windows Media file format could allow remote code execution in Windows Server
944653 - MS07-067: Vulnerability in Macrovision driver could allow local elevation of privilege

January 2008:
943485 – MS08-002: Vulnerability in LSASS Could Allow Local Elevation of Privilege

February 2008:
942831 - MS08-005: Vulnerability in Internet Information Services could allow elevation of privileges
942830 - MS08-006: Vulnerability in Internet Information Services could allow remote code execution
946026 - MS08-007: Vulnerability in WebDAV Mini-Redirector could allow remote code execution
947890 - MS08-008: A vulnerability in OLE Automation could allow remote code execution

April 2008:
945553 - MS08-020: Vulnerability in DNS Client Could Allow Spoofing
941693 - MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege

May 2008:
950749 - MS08-028: Vulnerability in the Microsoft Jet Database Engine could allow remote code execution

June 2008:
951698 - MS08-033: Vulnerabilities in DirectX Could Allow Remote Code Execution
948745 - MS08-034: Vulnerability in WINS Could Allow Elevation of Privilege
953235 - MS08-035: Vulnerability in Active Directory Could Allow Denial of Service
950762 - MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service

July 2008:
951746 - MS08-037: Description of the security update for DNS in Windows Server 2008, in Windows Server 2003, and in Windows 2000 Server (server-side): July 8, 2008
951748 - MS08-037: Description of the security update for DNS in Windows Server 2003, in Windows XP, and in Windows 2000 Server (client side): July 8, 2008

August 2008:
**952954 - MS08-046: Vulnerability in Microsoft Windows Image Color Management System Could Allow Remote Code Execution**
**951066 - MS08-048: Security Update for Outlook Express and Windows Mail**
**950974 - MS08-049: Vulnerabilities in Event System Could Allow Remote Code Execution**
**953839: Cumulative Security Update for ActiveX**

Internet Explorer 6
938127 - MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution
**953838 - MS08-045: Cumulative Security Update for Internet Explorer**
This update replaces previous Cumulative security update for IE 950759
Roots Update direct download link UPDATED September 25 2007!
Windows Script 5.7.0.16535 direct download link

Internet Explorer 7
938127 - MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution
**953838 - MS08-045: Cumulative Security Update for Internet Explorer**
This update replaces previous Cumulative security update for IE 950759
Roots Update direct download link UPDATED September 25 2007!
Windows Script 5.7.0.16535 direct download link

--------------------------------------------------------------------------------------------------------------------------------

This list checked as of August 15, 2008. Please report problems with high priority updates ONLY.

the_guy

List updated with August Patches.

the_guy

List updated with September Patches.

the_guy

List updated with 925486.

the_guy

Updated list with October fixes.

the_guy

Updated list with November fixes.

the_guy

Updated list with December fixes.

the_guy

List updated for January 2007 updates.

the_guy

I just did a routine check on my Windows 2003 hotfixes today after downloading the most recent ones, and I realized I was missing whole batches of updates from last year according to Tomcat's update list!! I guess I just got behind on updates for 2003 as I don't normally run HFSLIP on it.

Can someone please verify for me that the following updates do in fact still apply when installing 2003 with Internet Explorer 7? Thanks in advance!

KB908981, KB912818-v3, KB917275, KB917422, KB920670, KB920683, KB921883-v2, KB922819, KB923191, KB923414, KB923689, KB925876, KB929969

They all do. Just make sure to download the correct version of KB929969.

the_guy

List updated with February 2007 updates.

the_guy

List updated with April 2007 fixes.

Also, last month I silently updated to including SP2 fixes. They will be before SP1 fixes.

the_guy

List updated with May 2007 fixes.

the_guy

Update for Windows Server 2003 (KB933612)

Overview
Install this update to resolve an issue where Outlook Express cannot connect to Exchange Server 2007 using SSL over SMTP port 587. After you install this item, you may have to restart your computer.

Update for Windows Server 2003 (KB933061)

Overview
Install this update to improve the reliability of the Windows Management Instrumentation (WMI) repository. After you install this item, you may have to restart your computer.

List updated with June updates.

the_guy

List updated with July 2007 fixes.

the_guy

List updated with August updates.

the_guy

link regarding KB937143 seems not to be working, well at least not for me.
But this one did it for me:
http://www.microsoft.com/downloads/details...;displaylang=en

List updated with October 2007 hotfixes.

the_guy

List updated with November 2007 hotfixes.

the_guy

List updated with December 2007 hotfixes.

the_guy

List updated with January 2008 hotfixes.

the_guy

List updated with February 2008 hotfixes.

the_guy

List updated with April 2008 hotfixes.

the_guy

Sorry about the delay, but the list has been updated.

the_guy

List updated with July 2008 hotfixes.

the_guy

List updated with August 2008 hotfixes.

the_guy

Thread will be unstickied December 1, 2008 unless comprehensive updates are made in the initial post.