General notes
The description of new updates is colored differently.
Updates that are only handled in a test release of HFSLIP are colored differently.
As of version 60129, you can let HFSLIP slipstream a Service Pack into the Windows source you provide in the SOURCE folder. Please read the instructions carefully.
For some components (should you wish to include these), the necessary files are marked.
LegitCheckControl.cab and the new DX9 gaming binaries cabs go in HFCABS; all other updates go in HF.


Note from TommyP
HFSLIP concentrates on critical updates and not optional ones reported by Windows Update.




Windows XP post-SP2 updates and hotfixes
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
2006-11-20:
• removed KB921883 (superseded by KB924270)
2006-11-19:
• added Windows Internet Explorer 7 and Adobe Flash Player 9 for IE
• added KB920213, KB922760, KB923980 and KB924270
• added KB923789 (use when not slipstreaming Adobe Flash Player)
• added optional updates KB920342 and KB914440-v12
• updated MSXML4 and MSXML6
• removed KB885835, KB890046, KB899589, KB913433, KB918899 and KB924496
• Malicious Software Removal Tool was updated to v1.22
• added KB922819, KB923191, KB923414, KB924191 and KB925486
• updated DX9 link (gaming binaries) for October Redist
• removed KB917159, msxml3.msi, msxmlcab.exe, msxml.msi, msxml4 update and msxml6.msi




Current Windows XP SP2 updates

Browsing
• Windows Internet Explorer 7: English / localized versions
• Adobe Flash Player 9 for IE: swflash.cab (direct link)
• MSXML2: msxml2.msi (multilingual) + msxml2sp6-kb887606-x86-enu.exe (language neutral)
• MSXML4: msxml4-KB927978-enu.exe (9 languages)
• MSXML6: msxml6-KB927977-enu-x86.exe (13 languages)

DirectX
• New DX9 gaming binaries from DirectX 9.0c October '06 Redist (55.5MB)
Supported files: *d3dx9*x86.cab, *XACT*x86.cab and *xinput*x86.cab

Windows Media
• Windows Media Player 10
• Windows Media 9/10 Codecs from KB891122 (5.91MB) / from KB900325 Click to view attachment (29.0MB)
Required file: wmfdist95.exe
KB900325 holds the newest version, but it's a larger source.
• HighMAT update for the CD Writing Wizard Click to view attachment (non-WGA: EN / FR)

Other
• Windows Update Agent 2.0 (Windows Update v6; direct link)
• Windows Genuine Advantage (LegitCheckControl.cab; redirect link)
• Malicious Software Removal Tool
• User Profile Hive Cleanup Service Click to view attachment


Current critical Windows XP post-SP2 hotfixes

WindowsInstaller-KB893803-v2-x86.exe Click to view attachment (Windows Installer 3.1 Redistributable)
WindowsMedia-KB911564-x86-ENU.exe (Vulnerability in Windows Media Player plug-in)
WindowsXP-KB873339-x86-ENU.exe (Vulnerability in HyperTerminal)
WindowsXP-KB885626-v2-x86-enu.exe (Systems running Intel Prescott C-0 without BIOS support can hang on SP2 installation)
WindowsXP-KB885836-x86-ENU.exe (Vulnerability in WordPad)
WindowsXP-KB886185-x86-enu.exe (Vulnerability in Windows Firewall)
WindowsXP-KB887472-x86-enu.exe (Vulnerability in Windows Messenger)
WindowsXP-KB888302-x86-ENU.exe (Vulnerability in Windows)
WindowsXP-KB890859-x86-ENU.exe (Vulnerabilities in Windows kernel)
WindowsXP-KB891781-x86-ENU.exe (Vulnerability in DHTML Editing)
WindowsXP-KB893756-x86-ENU.exe (Vulnerability in Telephony service)
WindowsXP-KB896358-x86-ENU.exe (Vulnerability in HTML Help)
WindowsXP-KB896423-x86-ENU.exe (Vulnerability in Print Spooler service)
WindowsXP-KB896424-x86-ENU.exe (Vulnerabilities in graphics rendering engine)
WindowsXP-KB896428-x86-ENU.exe (Vulnerability in Telnet Client)
WindowsXP-KB898461-x86-ENU.exe Click to view attachment (Package Installer 6.1.22.4)
WindowsXP-KB899587-x86-ENU.exe (Vulnerabilities in Kerberos)
WindowsXP-KB899591-x86-ENU.exe (Vulnerability in Remote Desktop protocol)
WindowsXP-KB900725-x86-ENU.exe (Vulnerabilities in Windows Shell)
WindowsXP-KB901017-x86-ENU.exe (Vulnerability in MS Collaboration Data Objects)
WindowsXP-KB901190-x86-ENU.exe (Vulnerability in the Korean IME)
WindowsXP-KB901214-x86-ENU.exe (Vulnerability in MS Color Management Module)
WindowsXP-KB904706-v2-x86-ENU.exe (Vulnerability in DirectShow)
WindowsXP-KB905414-x86-ENU.exe (Vulnerability in Network Connection Manager)
WindowsXP-KB905749-x86-ENU.exe (Vulnerability in Plug and Play)
WindowsXP-KB908519-x86-ENU.exe (Vulnerability in Embedded Web Fonts)
WindowsXP-KB908531-v2-x86-ENU.exe (Vulnerability in Windows Explorer)
WindowsXP-KB910437-x86-ENU.exe (Access Violation error using AU service)
WindowsXP-KB911280-v2-x86-ENU.exe (Vulnerability in Routing and Remote Access)
WindowsXP-KB911562-x86-ENU.exe (Vulnerability in MDAC on WinXP)
WindowsXP-KB911567-x86-ENU.exe (Cumulative security update for MSOE)
WindowsXP-KB911927-x86-ENU.exe (Vulnerability in the Web Client service)
WindowsXP-KB912817-v2-x86-ENU.exe (COM+ Hotfix Rollup Package 13)
WindowsXP-KB912919-x86-ENU.exe (Vulnerability in graphics rendering engine)
WindowsXP-KB913580-x86-ENU.exe (Vulnerability in MS DTC)
WindowsXP-KB914388-x86-ENU.exe (Vulnerability in DHCP Client Service)
WindowsXP-KB914389-x86-ENU.exe (Vulnerability in Server Message Block)
WindowsXP-KB916595-x86-ENU.exe Click to view attachment ("Stop 0x05" and "Stop 0xD1" errors)
WindowsXP-KB917422-x86-ENU.exe (Vulnerability in Windows Kernel)
WindowsXP-KB917537-x86-ENU.exe (Vulnerability in MS IIS using ASP)
WindowsXP-KB917953-x86-ENU.exe (Vulnerability in TCP/IP)
WindowsXP-KB918439-x86-ENU.exe (Vulnerability in ART image rendering)
WindowsXP-KB919007-x86-ENU.exe (Vulnerability in Pragmatic General Multicast)
WindowsXP-KB920213-x86-ENU.exe (Vulnerability in Microsoft Agent)
WindowsXP-KB920214-x86-ENU.exe (Vulnerability in Outlook Express)
WindowsXP-KB920670-x86-ENU.exe (Vulnerabilities in Hyperlink Object Library)
WindowsXP-KB920683-x86-ENU.exe (Vulnerability in DNS Resolution)
WindowsXP-KB920685-x86-ENU.exe (Vulnerability in Indexing Service)
WindowsXP-KB920872-x86-ENU.exe Click to view attachment (Errors playing back audio files)
WindowsXP-KB921398-x86-ENU.exe (Vulnerability in Windows Explorer)
WindowsXP-KB922582-x86-ENU.exe Click to view attachment (Error message "0x80070002")
WindowsXP-KB922616-x86-ENU.exe (Vulnerability in HTML Help)
WindowsXP-KB922819-x86-ENU.exe (Vulnerabilities in TCP/IP IPv6)
WindowsXP-KB923191-x86-ENU.exe (Vulnerability in Windows Explorer)
WindowsXP-KB923414-x86-ENU.exe (Vulnerability in Server Service)
WindowsXP-KB923980-x86-ENU.exe (Vulnerabilities in Client Service for NetWare)
WindowsXP-KB924191-x86-ENU.exe (Vulnerability in MSXML3)
WindowsXP-KB924270-x86-ENU.exe (Vulnerability in Workstation Service)


Current optional Windows XP post-SP2 hotfixes

Windows-KB909520-v1.000-x86-ENU.exe Click to view attachment (MS Base Smart Card...)
WindowsXP-KB896344-v2-x86-ENU.exe Click to view attachment (You cannot transfer files from WinXP SP2 32-bit to WinXP 64-bit)
WindowsXP-KB900485-v2-x86-ENU.exe Click to view attachment ("Stop 0x7E in aec.sys" error message)
WindowsXP-KB904942-v2-x86-ENU.exe Click to view attachment (Issue with MSOE6 when installing MSIE7)
WindowsXP-KB914440-v12-x86-ENU.exe Click to view attachment (Network Diagnostic Tool)
WindowsXP-KB920342-x86-ENU.exe (Peer Name Resolution Protocol 2.0)


Critical updates for MSIE7

(none)


Critical updates for MSIE6

WindowsXP-KB922760-x86-ENU.exe (Cumulative security update for MSIE6)
WindowsXP-KB925486-x86-ENU.exe (Vulnerability in Vector Markup Language)
WindowsXP-Windows2000-Script56-KB917344-x86-enu.exe Click to view attachment (Windows Script 5.6)


Critical update for MSIE6 when NOT slipstreaming the latest Windows Script 5.6

WindowsXP-KB917344-x86-ENU.exe (Vulnerability in MS JScript)


Critical update for WMP when NOT slipstreaming WMP10

WindowsMedia9-KB917734-x86-ENU.exe (Vulnerability in Windows Media Player 9)


Critical update for WMP when slipstreaming WMP10

WindowsMedia10-KB917734-x86-ENU.exe (Vulnerability in Windows Media Player 10)


Critical update for Flash Player 6 when NOT slipstreaming or installing Flash Player 7 or greater

WindowsXP-KB923789-x86-ENU.exe (Vulnerabilities in Flash Player 6)



Dynamic list including KB numbers, MS security bulletin numbers and descriptions

This is really really nice Tomcat !!

Great work - it was nowhere close to this simple when I did this last year

My my, things have truly come a long way with HFSLIP

just a quick question ...
would those with this yellow arrow icon be newly added updates?
thanks!

The hotfixes with the arrow use WGA

thanks much Glowy!Ü
would we have indicators here for new revisions/updates?

@X-factor
Edit your post
@Tomcat76
Really good guide, we all needed this!

2Tomcat76

hi

about WindowsXP-KB885626-v2-x86-enu.exe (Systems running Intel Prescott C-0 without BIOS support can hang on SP2 installation)

it lays on critical Post SP1 hotfixes, but not in SP2 hotfixes
it is not right. with error on update.sys SP2 hangs on machines with celeron D C-0 steppings and old bioses, but on this machines also hangs installation of WinXPSP2 without this hotfix.
because KB885626 hotfix needed also in PostSP2 hotfixes

I'm not Tomcat, but one thing:

KB885626 is not requested by Windows Update. It is not a critical or optional update.

Remember, this list is for updates listed on Windows Update, not all hotfixes released for XP. If it was, this list would be VERY hard for him to maintain.

Is this what you're mentioning, or am I wrong?

this looks good, but it would look better if the critical updates for pre-sp1 (build 0) were also listed.

These lists are for HFSLIP and HFSLIP doesn't support XP Gold. I don't know about TommyP but I don't support service packs that are no longer supported by Microsoft. In the same vein, I'll stop updating my SP1a list and will stop adding "fixes" for SP1a hotfixes on November 14, 2006 (unless MS extend support for SP1a again).

What is SP3's release date ?
If it is after SP1a support is discontinued ?
If so could you please keep your list up-to-date until SP3 is available ?

Thanks a lot.

SP3 should be released in second half of 2007 (if Microsoft stops delaying it!).

That is, of course, after November 14, 2006.

The number of post-SP1 hotfixes is already exceptionally large. Imagine what the list will look like in one and a half year. It's not so much adding of new hotfixes to the list that's going to take the most time, but rather verifying which hotfixes will have become obsolete.

@Super-Magician: I removed your hotfix post as I finally got around to updating the list in the main post; it might've confused people reading this thread in a few months from now.

I've also removed the "taboo posts."



The thing is... When the SP2 system boots up and gets right up to Windows Update, there's no point anymore in listing it on Windows Update, is there?

So the question is... Does it really apply to SP2 when it's slipstreamed, and is "update.sys" updated by a later hotfix?

Tomcat:
885626 is a SP2 update, as it is an SP2 versioned file. It is also not replaced by a later hotfix.

the_guy

Actually...
So you can install it up front. The actual download page doesn't say it's to be used on Windows XP SP2 exclusively either.

I'll add it to the SP2 list too.

I thought it was to be released this year!
Then I fully understand why Tomcat76's not willing to keep the list up-to-date.

about those long delays.

@Tomcat:

why is 833989 for SP1 readded? That update is ONLY for Windows 2000/98/ME/NT4 with IE6 SP1 installed. When it's installed on Windows XP SP1, IE uses the OS version of the component (gdiplus.dll).

the_guy

From http://www.microsoft.com/france/technet/se...e/ms04-028.mspx
But on this page : http://www.microsoft.com/downloads/details...&displaylang=fr you can read :


But it's not finished yet. On the same page, about gdiplus.dll you will find :

But, this update package doesn't include any gdiplus.dll. Only a file called vgx.dll.

HFNetChk complains if this file is not present and hfnetchk's list is from M$.

Lastly if you try to install this update on XP SP1a, you will get an error saying W2K is required.

at least twice!

Camarade_Tux: Based on the info I read, 833989 is not for XP SP1a.

I also read lots of things saying that. But the list HFNetChk uses says it is needed. And this list was made by MS.
In fact it seems like proper SP1a support has already been dropped.

I'll do some tests in my VM. :/

KB833989 (one of the MS04-028 hotfixes) updates VGX.DLL, and HfNetChk wants this file from MS04-028.

Either HfNetChk is wrong or the info on the Download Center site is wrong. Fact is: I don't have a clue...

@Camarade_Tux: If you get errors during install from a source in which KB833989 was slipstreamed I'll remove it from my list ASAP.



EDIT:

If you dissect the relevant Download Center page you'll see that something is wrong there. Snippet:

Affected Software:
Microsoft Windows XP and Microsoft Windows XP Service Pack 1

Non-Affected Software:
Microsoft Windows XP Service Pack 2

So far so good. But now the "components" section:

Affected Components:
Internet Explorer 6 Service Pack 1

Non-Affected Components:
Internet Explorer 5.01 Service Pack 3 on Windows 2000 Service Pack 3
Internet Explorer 5.01 Service Pack 4 on Windows 2000 Service Pack 4
Internet Explorer 5.5 Service Pack 2 on Microsoft Windows Millennium Edition

This means that the IE-version of the hotfix also applies to Windows XP SP1. But on the download page of the IE hotfix itself, Windows XP SP1 is *NOT* listed.

If the IE-hotfix doesn't apply to Windows XP SP1, MS should've added this line under the "Non-Affected Components" section:

Internet Explorer 6 Service Pack 1 on Windows XP Service Pack 1

But it isn't there....

The bulletin states that XP SP1 needs the XP SP1 file. I personally think this is an HFNetChk error. I noticed in HFNetChk that the .xml file is from the shavlik website, not the microsoft website. Try using HFNetChk with the microsoft .xml file.

If this doesn't fix the issue, I can send Tomcat76 with a link to the 883586 update for Windows 2000 SP4/ XP SP1 and XP SP2.

the_guy

I'm not sure whether or not you intended that as a joke... From the KB883586 article page:

APPLIES TO
Microsoft Internet Explorer 2.01

that is a major typo. look at the version of vgx.dll

the_guy

Here is a part of vgx.inf : "DisplayName="Rendu VML (Vector Graphics Rendering)""
The question is : does IE6 on XP need an external file to render VML ?
Or rather : does it even supports SVG ?
Wikipedia claims there is no such support (link)
I found no string containing "SVG" in the registry of a full-SP2 computer and no files named gvx, and clicking on a link to a svg file in IE does not let you "open", you can only "save".
But nLite lets you remove VML Rendering which is the same as SVG.
I think I'll asn nuhi which files are concerned.

'K... I removed it again...

something is wrong with the Dynamic List here... http://users.telenet.be/tc76/winup/_winxp.html (it doesn't show the list)

Which browser? If it's IE, you need at least version 5.5. It should work on version 5.0 too but there might be minor display issues. If you're using IE on Windows XP SP2, make sure Active Scripting is enabled (this is blocked by default).

I don't know the "minimum" browser versions for Opera and Mozilla-based browsers either but everything works as intended in Opera 9 build 8432, Mozilla Seamonkey 1.5 (20060401) and Mozilla Firefox 1.5 (20051111).

I use FF-1503. It's been working before. Only now after the recent updates that it doesn't load properly... at least, in my case... It only loads the page up to.. "Choose your preferred service pack level" and a single check box... nothing follows...

edit: (8:59am) The same with Internet Explorer.. I think it's with the page itself and not on my end because it was showing properly before...

edit: (9:45pm) It's working now. Seems the layout was changed. It looks neat. I think it looks great!

Note to Tomcat76:

For your XP SP1 fixes, MS04-012 (828741) and MS04-024 (839645) are replaced.

the_guy

Which are the replacing hotfixes?

MS04-024 is replaced by MS04-037. MS04-012 is replaced by MS05-051.

Just a quick note, 902400 (MS05-051) is replaced on XP SP1 and XPSP2 by 912817, the COM+ Rollup 13. There is a download page on the download center.

the_guy

OK. You're right. The KB839645 page doesn't say that it replaces KB841356 (which is why I kept it), but now I see the latter only contains an update for shell32.dll for which a newer version exists in the former.

I'll also update my pages to the 13th COM+ Rollup for XP and 2K3.

Thanks.

Some new hotfixes for you Tomcat (for SP2)
917730
918766
919071 (replaces 904706)

the_guy

the_guy: Are these all on WU/MU (i.e. critical or recommended)? When I checked, they weren't there.

no they aren't. I just added them as they are new updates.

@Tomcat: 835409 is included in 912817 (same version number)

the_guy

We could go on with this forever. I prefer not to go too far away from what's reported on WU/MU.

That's nice, but it's only available in English. My list is intended for all users.

Thanks. I'll remove it.

I assume you're not going to add these to your list then. Right? In any case, would you recommend including these?

They aren't harmful as far as I can see and HFSLIP supports them. KB917730 I could recommend... You should decide for yourself if KB918766 is useful. KB919071 is recommendable for English systems.

Are you adding them to your list?

Oh... Was *that* the question?

I'm using XP for video editing only... so no.

Tomcat and everyone: It seems Microsoft is ending support for XP SP1 and SP1a earlier than we thought. Instead of November 14, 2006, support will end on October 10, 2006.

I'm not sure of the exact source, but I first read it here. They provide a link to this page at Microsoft.

You're right. BTW... Support for Win2K SP4 was extended to July 13, 2010 because of this new policy...

Hey Tomcat,

Quick question: will xp sp1 still be supported in hfslip when microsoft ends support for it?

Also, 916595 replaces 887742.

the_guy

As far as I'm concerned, I think HFSlip for XP SP1 should be put into another cmd file. There is no need to keep it in the main code since there shouldn't be any new update.

(and I am still runnning XP SP1)

If it were up to me I'd even strip XPSP1 "fixes" out of HFSLIP but it's TommyP's script so he'll have to answer that question. I won't be adding new fixes/workarounds for XPSP1 myself, though.

Have you noticed that there are now two KB917344? The new Script56 is named WindowsXP-Windows2000-Script56-KB917344-x86-enu.exe.
Which do we need? since only one of them required G.A validation to download! I know that if they both go in only the newer versions will apply, but that doesn't answer the question.

Also, there is a June version of the directx 9.0c Redist

IIRC, someone asked for SP1 fixes to be put into the script. Let's just keep it in, but not do any more updates.

hi Yzöwl!



currently, HFSLIP doesn't support the XACT updates ...
hope this helps somehow ...