[Mim0]

New Security Updates:

· Vulnerability in Local Security Subsystem Authority Service Could Allow Denial of Service (974392): MS09-069
Replaces: None

· Vulnerability on Internet Authentication Service Could Allow Remote Code Execution (974318): MS09-071
Replaces: None

· Cumulative Security Update for Internet Explorer (974455): MS09-072
Replaces: MS09-054

· Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (975539): MS09-073
Replaces: None

· KB955759

· KB970430

· KB971737

· Malicious Software Removal Tool 3.2

My Windows XP SP3 Update List for HFSLIP is updated.

Regards, Mimo

This post has been edited by Mim0: 09 December 2009 - 01:39 AM

[Muppet Hunter]

Just a quick note - IMAPI_XP_SRV2003_x86.exe which is part of KB952011 contains an old version of cdrom.sys.

[Kiki Burgh]

Mim0, on Dec 9 2009, 12:49 AM, said:

New Security Updates:

· Cumulative Security Update for Internet Explorer (974455): MS09-072
Replaces: MS09-054

hi mimo! i think above entry must be: Cumulative Security Update for Internet Explorer 8 for Windows XP (976325) instead ... as MS09-054 points to (974455).

for table 10, Microsoft® Windows® Malicious Software Removal Tool (KB890830) has been updated to windows-kb890830-v3.2.exe.

mimo, would you have an updated link to the KB892130? from what i understand, having LegitCheckControl.cab should not make ie prompt me to install this anymore before downloading genuine updates from ms? could anybody confirm this link to KB892130 as being the latest please ... & lastly, would this (KB892130) work in hf?

cheers!

This post has been edited by Kiki Burgh: 08 December 2009 - 11:54 PM

[-X-]

Mim0, on Dec 8 2009, 11:49 AM, said:

New Security Updates:
...

Adobe Flash got a security update also.


@Kiki Burgh, no, that is not the latest. The latest is v1.9.40.0. I can't recall the MS URL right now. http://go.microsoft....k/?linkid=39204 should be it but is still linking to 1.9.9.1

This post has been edited by -X-: 08 December 2009 - 11:17 PM

[Kiki Burgh]

-X-, on Dec 9 2009, 01:12 PM, said:

@Kiki Burgh, no, that is not the latest. The latest is v1.9.40.0. I can't recall the MS URL right now. http://go.microsoft....k/?linkid=39204 should be it but is still linking to 1.9.9.1

thanks -X-! my apologies for the confusion but i was actually referring to KB892130 ... that was the link i provided (edited my post above so as not to make it misleading). i have checked on the link you provided too which shows FileVersion=1,9,0009,1 ... same as what Mim0 has in the list ... it'd be good to know the new link to the updated file though. cheers!

This post has been edited by Kiki Burgh: 09 December 2009 - 12:16 AM

[Tomalak]

-X-, on Dec 9 2009, 06:12 AM, said:

Adobe Flash got a security update also.

I've uploaded an updated SWFLASH.CAB (version 10.0.42.34) here
SHA1 checksum c0d67df4e53927ecf834ca007816d43a0c62add5
MD5 checksum 07bd474624bfa8e0937dea4eefdf18a8

-X-, on Dec 9 2009, 06:12 AM, said:

@Kiki Burgh, no, that is not the latest. The latest is v1.9.40.0. I can't recall the MS URL right now. http://go.microsoft....k/?linkid=39204 should be it but is still linking to 1.9.9.1

Are you sure there is an updated cab provided by MS? Not a manually reworked one? As far as I know the most recent version of 'legitcheckcontrol.dll' is to be found in KB905474 (Windows Genuine Advantage Notifications, last updated 2009/03/24).

Sorry, but I can only provide the direct link to the German version. Maybe someone can determine the English one (from Windows update log)?
Extracting this file and then using "wganotifypackageinner.exe" (properly renamed to something like "WindowsXP-KB905474-x86-<LNG>.exe") in the HF directory worked for me. hfslip took care of the rest, no MU/WU complaints afterwards...

HTH,
Tomalak

[-X-]

I did a little more testing and also came across and old post of mine. Yes, 1.9.40.0 is the latest and is in the package WindowsXP-KB905474-ENU-x86.exe (extract WindowsXP-KB905474-ENU-x86.exe then extract wganotifypackageinner.exe from the results and you will find legitcheckcontrol.dll v1.9.40.0 ( I don't use notifications...yuk!).

If you go to WU the cab that installs is 1.7.69.2 => windowsxp-kb892130-enu-x86_72e487d115be77f49f64053893a23ecb58bc59cb.exe

If you go to the Genuine page ( http://www.microsoft...ne/default.aspx ) the cab that installs is 1.9.9.1 => /C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab Also at this url: http://go.microsoft....k/?linkid=39204

So I guess you are safe with 1.9.9.1. I think MS might have pulled the 1.9.40.0 due to false positives or they have their head up their butts with all these different versions.

1.5.512.0
WindowsXP-KB892130-ENU-x86.exe
http://download.microsoft.com/download/4/4/5/445c4742-fdfc-4ca4-9819-68f103da7cde/WindowsXP-KB892130-ENU-x86.exe

1.5.512.0
windowsxp-kb892130-enu-x86_7e1189ce89fb0c693cad6432a4c2f982dcea49a0.exe
http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/windowsxp-kb892130-enu-x86_7e1189ce89fb0c693cad6432a4c2f982dcea49a0.exe

1.5.530.0
windowsxp-kb892130-enu-x86_8c36f83d4b58f24121c88186f451b4e87cca5ecf.exe
http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/windowsxp-kb892130-enu-x86_8c36f83d4b58f24121c88186f451b4e87cca5ecf.exe

1.7.36.0
windowsxp-kb892130-enu-x86_330f7620f5b52cdc70c9555786cbe32491eaf8f1.exe
http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/windowsxp-kb892130-enu-x86_330f7620f5b52cdc70c9555786cbe32491eaf8f1.exe

1.7.69.2
windowsxp-kb892130-enu-x86_72e487d115be77f49f64053893a23ecb58bc59cb.exe
http://www.download.windowsupdate.com/msdownload/update/software/crup/2008/04/windowsxp-kb892130-enu-x86_72e487d115be77f49f64053893a23ecb58bc59cb.exe

This post has been edited by -X-: 16 January 2010 - 03:07 AM

[gluon]

In relation to KB955759 (Indeo Codec) and following http://support.microsoft.com/kb/954157 is there a simple way to just unregister/remove the codec? Would an RDV in HFCLEANUP do the trick if I want to remove it?

I don't know if anybody uses the Indeo Codec but I thought it might be a good idea just to remove it altogether since I've never use it (or fail to realise if I ever do). If there is an existing mechanism to remove useless codecs in HFSLIP then please let me know, I'd be interested to use it
Here is what my RDV looks like in case anybody interested.

ir32_32.dl
ir41_32.ax
ir41_qc.dl
ir41_qcx.dl
ir50_32.dl
ir50_qc.dl
ir50_qcx.dl
ivfsrc.ax

[tommyp]

gluon - you'd need a REM for that, not an RDV. The RDV is to remove stuff from cabs. The REM filters stuff out of the i386 and some inf files. You'll also need a RIN that looks like this: mmdriver.inf;x You'll need to find out what other INFs call out the other ax's. You'll need to filter those INFs out with the right RIN callout. Sorry, I don't have a list of that stuff. If you want to start a hfcleanup thread, please do so. This is a WU thread.

[Mim0]

Tomalak, on Dec 9 2009, 11:08 PM, said:

I've uploaded an updated SWFLASH.CAB (version 10.0.42.34) here

I've added the new Flash Player to the Update List, linked to Tomalak's CAB (THX!!!)

Regards, Mimo

[mserbin]

KB976325 replace KB974455

However, when I try to slipstream KB976325 it still shows as needed when doing windows update.

I did remove KB974455 before run HFSLIP so not sure what the problem is.

[Muppet Hunter]

Lilla, on Dec 5 2009, 07:39 AM, said:

<add> 2009-09 MSXML 4.0 SP3 (XML Core Services) Consider: link to article here ...
<add> 2009-11 Update for XML Core Services 4.0 (MSXML 4) SP3 ... KB973685 msxml4-KB973685-enu.exe ...

msxml4-KB973685-enu.exe superseeds the original MSXML 4.0 SP3 release.

[krose]

mserbin, on Dec 10 2009, 02:34 AM, said:

KB976325 replace KB974455

However, when I try to slipstream KB976325 it still shows as needed when doing windows update.

I did remove KB974455 before run HFSLIP so not sure what the problem is.

I had the same problem, and I discovered I had left KB976749 in HF. KB976325 replaces both KB974455 and KB976749. I removed it and reran HFSLIP and it worked fine.

[gluon]

tommyp, on Dec 10 2009, 12:55 PM, said:

gluon - you'd need a REM for that, not an RDV. The RDV is to remove stuff from cabs. The REM filters stuff out of the i386 and some inf files. You'll also need a RIN that looks like this: mmdriver.inf;x You'll need to find out what other INFs call out the other ax's. You'll need to filter those INFs out with the right RIN callout. Sorry, I don't have a list of that stuff. If you want to start a hfcleanup thread, please do so. This is a WU thread.

Thanks for the speedy reply Tommy, yeah this is not the place of discussing hfcleanup. I'll spawn another thread when I giving up figuring out RIN stuff There's plenty of examples already so I just need to try understand what's happening.

[Mim0]

Modifications regarding MSXML4. Also I tested the installation against windows update. Results are listed in table 9.

List is updated.

Regards, Mimo

[Kiki Burgh]

you mean table 7 (instead of table 9)?

btw, table 7 (2009-12-11 portion) shows:

Quote

Removed:
· KB954430 (msxml4-KB954430-enu.exe)
· KB973688 (msxml4-KB973688-enu.exe)
Added:
· KB973688 (msxml4-KB973688-enu.exe)

are these really supposed to be same entries for Removed & Added? cheers!

This post has been edited by Kiki Burgh: 11 December 2009 - 03:41 AM

[Mim0]

Kiki Burgh, on Dec 11 2009, 10:36 AM, said:

you mean table 7 (instead of table 9)?

I mean table 9 wich shows the result of windows update

Kiki Burgh, on Dec 11 2009, 10:36 AM, said:

btw, table 7 (2009-12-11 portion) shows:

Quote

Removed:
· KB954430 (msxml4-KB954430-enu.exe)
· KB973688 (msxml4-KB973688-enu.exe)
Added:
· KB973688 (msxml4-KB973688-enu.exe)

are these really supposed to be same entries for Removed & Added? cheers!

Uuuhhh... shame on me...

CU

PS: List is updated!

This post has been edited by Mim0: 11 December 2009 - 06:29 AM

[Kiki Burgh]

Mim0! posting here results of HFSLIPFC for it covers updates ...

 
[font="Courier New"]Check missing updates for Windows XP SP3:
-----------------------------------------
missing (S): HF\WindowsXP-KB955069-x86-ENU.EXE (MS08-069: XML Core Services (MSX
ML3))
missing (S): HF\WindowsXP-KB954459-x86-ENU.EXE (MS08-069: XML Core Services (MSX
ML6))
missing (O): HF\Windows-EN-US-KB943729.exe (Group Policy Editor)

Check missing updates for IE8:
------------------------------

Check missing updates for WMP11:
--------------------------------

Check missing updates for RDC7:
-------------------------------
missing (S): WindowsXP-KB969084-x86-ENU.exe (Remote Desktop Client 7)[/font] 

haven't KB955069 & KB954459 been replaced by KB973687 as per this post?

as for KB943729, i actually have it in HF ... however, i think there's a mismatch in what the script is looking for: Windows-EN-US-KB943729.exe vs the downloadable file from ms: Windows-KB943729-x86-ENU.exe ... marked the differences in blue

how about KB969084? is this not supposed to be in HFSVCPACK_SW1? if HFSVCPACK_SW1 is not parsed, this update would be reported as missing ... likewise tried to have the script parse HFSVCPACK_SW1 (just as i inquired in the other thread) by adding strings to the default: FOLDERSET=HF\*.*;HFGUIRUNONCE\*.*;HFCABS\*.*;HFSVCPACK_SW1\*.*;HFSVCPACK_SW2\*.* ... with the same result, missing KB969084 ...

btw, i tried setting different values for Remote Desktop Client = under Selected components: via hfslipfc.ini

 
[font="Courier New"]REM ------------------------------------------------
REM Version of Remote Desktop Client
REM
REM Possible values:
REM   6 = Remote Desktop Client 6 (default)
REM   7 = Remote Desktop Client 7
REM ------------------------------------------------
RDC=[/font] 

... used 7 in the 1st run & 6 for the 2nd run with a common result --- advising to

Quote

Check missing updates for RDC7:
-------------------------------
missing (S): WindowsXP-KB969084-x86-ENU.exe (Remote Desktop Client 7)

shouldn't KB969084 apply only to Remote Desktop Client = RD7 please do correct me if i'm mistaken? thanks.

This post has been edited by Kiki Burgh: 11 December 2009 - 11:20 AM

[Mim0]

Quote

haven't KB955069 & KB954459 been replaced by KB973687 as per this post?

I will test it!

Quote

as for KB943729, i actually have it in HF ... however, i think there's a mismatch in what the script is looking for: Windows-EN-US-KB943729.exe vs the downloadable file from ms: Windows-KB943729-x86-ENU.exe ... marked the differences in blue

Funny MS! They changed the name! hrhrhr... Or is this updated? I will put the new file to my list!!! THX for the hint

Quote

how about KB969084? is this not supposed to be in HFSVCPACK_SW1? if HFSVCPACK_SW1 is not parsed, this update would be reported as missing ... likewise tried to have the script parse HFSVCPACK_SW1 (just as i inquired in the other thread) by adding strings to the default: FOLDERSET=HF\*.*;HFGUIRUNONCE\*.*;HFCABS\*.*;HFSVCPACK_SW1\*.*;HFSVCPACK_SW2\*.* ... with the same result, missing KB969084 ...

When checking missing updates the FOLDERSET doesn't matter. I've forgotten to define the path of this RDC7-Update/Installer. The corrected HFSLIPFC is already upped.

Quote

shouldn't KB969084 apply only to Remote Desktop Client = RD7 please do correct me if i'm mistaken? thanks.

This is the update for RDC7. If you define to use RDC6, KB969084 should be reported as wrong update.

This post has been edited by Mim0: 11 December 2009 - 04:22 PM

[Kiki Burgh]

Kiki Burgh, on Dec 12 2009, 12:16 AM, said:

haven't KB955069 & KB954459 been replaced by KB973687 as per this post?

Mim0, on Dec 12 2009, 06:21 AM, said:

I will test it!

looking forward to the results ... could be worth a look as there are actually 2 KB954459s, namely: Security Update for Microsoft XML Core Services 6.0 (KB954459) with msxml6-KB954459-enu-x86.exe dated 2/23/2009 as the downloadable file (this is the 1 i have in HF) while the other on the list being WindowsXP-KB954459-x86-ENU.exe dated 11/10/2008 from Security Update for Windows XP (KB954459) ... yet would it still matter if indeed KB954459's been replaced by KB973687? kindly verify.

Kiki Burgh, on Dec 12 2009, 12:16 AM, said:

... mismatch in what the script is looking for: Windows-EN-US-KB943729.exe vs the downloadable file from ms: Windows-KB943729-x86-ENU.exe ... marked the differences in blue

Mim0, on Dec 12 2009, 06:21 AM, said:

Funny MS! They changed the name! hrhrhr... Or is this updated? I will put the new file to my list!!! THX for the hint

no biggie Mim0!

Mim0, on Dec 12 2009, 06:21 AM, said:

When checking missing updates the FOLDERSET doesn't matter. I've forgotten to define the path of this RDC7-Update/Installer. The corrected HFSLIPFC is already upped.

great ... will run tests & report back
edit: reporting back ... run was better ... other folders parsed (& if there is nothing in a specific folder, no report is logged)

Kiki Burgh, on Dec 12 2009, 12:16 AM, said:

btw, i tried setting different values for Remote Desktop Client = under Selected components: via hfslipfc.ini... used 7 in the 1st run & 6 for the 2nd run with a common result --- advising to

Quote

Check missing updates for RDC7:
-------------------------------
missing (S): WindowsXP-KB969084-x86-ENU.exe (Remote Desktop Client 7)

shouldn't KB969084 apply only to Remote Desktop Client = RD7 please do correct me if i'm mistaken? thanks.

Mim0, on Dec 12 2009, 06:21 AM, said:

This is the update for RDC7. If you define to use RDC6, KB969084 should be reported as wrong update.

even with RDC=7, WindowsXP-KB969084-x86-ENU.exe was still reported as a missing hotfix (have yet to the try the updated script & see if results would be the same)
edit2: all seems to be in place with the recent changelog:

 
REM --------------------------------------------------------------------
REM Updates for Remote Desktop Client 7
REM --------------------------------------------------------------------
+RDC7
[color="#0000FF"]S|HFSVCPACK_SW1\WindowsXP-KB969084-x86-!lang!.exe|Remote Desktop Client 7[/color]
R|HF\WindowsXP-KB925876-x86-!lang!.exe|Remote Desktop Client 6, DO NOT MIX
-

Change Log:

2009-12-11
[color="#0000FF"]- added HF\msxml4-KB973685-!lang!.exe[/color]
- removed wrong entry WindowsXP-KB970653-v3-x86-!lang!.exe (was twice)
- added path to WindowsXP-KB925876-x86-!lang!.exe
[color="#0000FF"]- added path to WindowsXP-KB969084-x86-!lang!.exe[/color]
[color="#0000FF"]- MS changed Windows-!lang2!-KB943729.exe to Windows-KB943729-x86-!lang!.exe
  - Windows-!lang2!-KB943729.exe is obsolete now
  - Windows-KB943729-x86-!lang!.exe is optional now[/color] 

have this for a result:

 
Check missing updates for Windows XP SP3:
-----------------------------------------
missing (S): HF\WindowsXP-KB955069-x86-ENU.EXE (MS08-069: XML Core Services (MSX
ML3))
missing (S): HF\WindowsXP-KB954459-x86-ENU.EXE (MS08-069: XML Core Services (MSX
ML6))

Check missing updates for IE8:
------------------------------

Check missing updates for WMP11:
--------------------------------

Check missing updates for RDC7:
-------------------------------

 

just waiting for xml core svcs updates ... cheers!

This post has been edited by Kiki Burgh: 12 December 2009 - 09:06 PM