WU finds 20 updates post-RVM UpdatePack 2.1.7, yet all show

Questions about Update Pack making? Ask here.
Post Reply
User avatar
kelaniz
Posts: 90
Joined: Mon Feb 05, 2007 3:37 pm
Location: Land of Broken Dreams

WU finds 20 updates post-RVM UpdatePack 2.1.7, yet all show installed OK?!

Post by kelaniz » Tue Mar 20, 2007 2:31 am

Greetings,

I made a build to see what other Post-RVM updates I needed. For testing purposes, it is a plain XP SP2 Corp source with RVM UpdatePack 2.1.7, and IE7 addon and a RUnOnce'd Office 2003. No other changes made, period.

After first boot, WUpdate smacks me with this list of updates:

---downloaded---
KB894542 - Security Update for Publisher 2003
KB905474 - Windows GAV Latest Version
KB907417 - Security Update for Office 2003
KB914455 - Security Update for Office 2003
KB917734 - Security Update - Media Player 9
KB919029 - Security Update for Office 2003
KB920103 - Security Update for Infopath 2003
KB920813 - Security Update for Office 2003
KB923097 - Security Update for Office 2003
KB923689 - Security Update for Windows XP
KB924085 - Security Update for Outlook 2003
KB924424 - Security Update for Office 2003
KB924885 - Update Outlook 2K3 Junk Filter
KB928090 - Cumulative Update IE7 WinXP (RVM 2.1.7)
KB929057 - Security Update for Word 2003
KB929058 - Workbook 2007 Portal Excel 2003
KB929060 - Security Update for PowerPoint 2003
KB929064 - Security Update for Office 2003
KB929969 - Security Update for IE7 for WinXP
KB925251 - Slovenian Currency Euro Update for Office 2003

-
The problem is, they were all (supposedly) integrated into the source, with the exception of KB928090 and KB929969 which is apparently IN RVM 2.1.7.

There may be other hotfixes in the above list that are also in the update pack, I'm not sure. I've learned that when I try to compare two lists of kbxxxxxx entries, I start to get dizzy and go blind after the first 10 or so. :shock:

I used the following command to integrate the XP hotfixes:

Code: Select all

FOR %%f IN (*.exe) DO "%%f" /Integrate:"F:\CORPSP2"
and for the Office hotfixes, I extracted them, then used this command:

Code: Select all

FOR %%f IN (*.msp) DO msiexec /p %%f /a F:\install\Office2k3\pro11.msi SHORTFILENAMES=TRUE /qb

A check of qfecheck and WinUpdatesList shows all of the above (and the rest of the RVM pack) as installed and OK.The file versions match, and the .cat files are still happily sitting on the DVD.

I can see a few of the WinXP hotfixes being broken by the order of integration, or by some change I unknowingly made to the source, but nothing touches the Office source besides the hotfixes, so, I am stumped.

Thx in advance for any random wisdom scattered this way.. :)

-KZ

User avatar
dougiefresh
Posts: 948
Joined: Wed May 11, 2005 5:05 pm
Location: Murfreesboro, Tennessee
Contact:

Re: WU finds 20 updates post-RVM UpdatePack 2.1.7, yet all show installed O

Post by dougiefresh » Tue Mar 20, 2007 5:20 am

These are Office updates. They are NOT going to be integrated into the UpdatePack, ever! Why?
kelaniz wrote:KB894542 - Security Update for Publisher 2003
KB907417 - Security Update for Office 2003
KB914455 - Security Update for Office 2003
KB919029 - Security Update for Office 2003
KB920103 - Security Update for Infopath 2003
KB920813 - Security Update for Office 2003
KB923097 - Security Update for Office 2003
KB923689 - Security Update for Windows XP
KB924085 - Security Update for Outlook 2003
KB924424 - Security Update for Office 2003
KB924885 - Update Outlook 2K3 Junk Filter
KB929057 - Security Update for Word 2003
KB929058 - Workbook 2007 Portal Excel 2003
KB929060 - Security Update for PowerPoint 2003
KB929064 - Security Update for Office 2003
KB925251 - Slovenian Currency Euro Update for Office 2003
Try this link to slipstream updates into Office: http://www.ryanvm.net/forum/viewtopic.php?t=3579

IE7 isn't integrated into the Update Pack, so are you sure you're referencing the correct updates for these?
kelaniz wrote:KB929969 - Security Update for IE7 for WinXP
KB928090 - Cumulative Update IE7 WinXP (RVM 2.1.7)
You can find an updated version of IE7 here: http://www.ryanvm.net/forum/viewtopic.php?t=4289

Update WMP to v10 (http://www.ryanvm.net/forum/viewtopic.php?t=879) or v11 (http://www.ryanvm.net/forum/viewtopic.php?t=4109):
kelaniz wrote:KB917734 - Security Update - Media Player 9
Try this for WGA (http://www.ryanvm.net/forum/viewtopic.php?t=4402)
kelaniz wrote:KB905474- Windows GAV Latest Version


Hope this helps!

Fragbert
Posts: 338
Joined: Tue Jan 24, 2006 10:59 am

Post by Fragbert » Tue Mar 20, 2007 8:55 am

Microsoft Update is retarded in that it does not properly check for slipstreamed office updates. The only way to convince MU that you have indeed properly slipstreamed the office hotfixes is to modify your registry to mimic an office installation updated via MU.

More here: http://www.ryanvm.net/forum/viewtopic.php?t=3579

Although the above slipstreamer has not been updated in a while, you'll get the idea of how to do this yourself.

Best way to set up an up-to-date slipstreamed office 2003:

1) On a test rig or virtualPC, install Office 2003 (w/ SP2 slipstreamed of course) on a bare system,
2) go to MU and manually download the 15 current hotfixes that MU detects you need to install (click "more details" and get the direct download links there),
3) have MU then install the updates, so the registry entries are put in place,
4) Export the entire registry section [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9040110900063D11C8EF10054038389C\Patches] to a .reg file

Now you can slipstream all current office updates into an installation source and your Microsoft Update session should be "clean" provided you apply the reg file after installing office.

One interesting tidbit is that the outlook junk mail filter will still be detected by *Office* update as a required download - only an unattended patching of office with that particular office hotfix will get OU to shut up.

User avatar
kelaniz
Posts: 90
Joined: Mon Feb 05, 2007 3:37 pm
Location: Land of Broken Dreams

Post by kelaniz » Wed Mar 21, 2007 9:15 pm

Fragbert - EXCELLENT info. I do believe you completely explained that problem, and you're right, that problem is extremely retarded. I'll do the update and registry export when I test dougiefresh's suggestions on my next build.

dougiefresh - Thanks for the links and info. This should work. I just added 'em all to my source. (except WMP10, as the server's apparently down for maintenance atm).

I'd been trying to keep my WMP version as low and unobtrusive as possible, since I rarely use it (prefer MPC), and see and hear nothing but horrible things about WMP11. I assume WMP10 is somewhat less awful?

Y'know, It sure is hard to keep track of all these damn packs updates. My "real" source installs the Update pack, and 97 freakin' addon packs! Of those, around 10-15 get updated each week. Even worse, a few vanish, or become obsolete due to someone else creating a newer or better pack.

There's got to be a better way to index those user-contributed packs than a phpBB forum, without subscribing to 100 forum threads and trying to grab update notifications out of the noise. :) Maybe a list like the RyanVM Torrents page with the username of the creator, filename, version and last updated date. That would save so much time, I'd even code it myself and donate it. But I digress..

As for the office updates, I know those aren't in the pack. (Somehow, the line that said something like that has mysteriously vanished from my original post. weird.) And for the record, I don't think they should be in the pack. Just providing the complete list WU was flinging at me :)

The only unanswered questions, then, would be why the 2 updates that are in the 2.1.7 update pack are being added to the WU download list. Remember, qfecheck, WinUpdatesList and a check of the file dates, versions, registry entries, etc.. shows those updates as properly installed, and for lack of a better term, 100% happy. I even did a build with no update pack, and manually installed those updates, just to see if anything was different. If it was, I sure didn't see it. However, I'm thinking the original version IE7 addon I was using probably broke something. I updated that and the WGA_Bare addon, so I'll check it when I do another build after a LONG nap. :)
dougiefresh wrote: IE7 isn't integrated into the Update pack, so are you sure you're referencing the correct updates for these?
Yeah, I am aware of that, and pretty sure. Those two updates (KB929969 and KB928090) *are* IE7-related updates that are in the 2.1.7 Update Pack. The Microsoft info says:

Security Update for Windows Internet Explorer 7 (KB929969)
http://support.microsoft.com/?kbid=929969
Security Update for Windows Internet Explorer 7 (KB928090)
http://support.microsoft.com/?kbid=928090-IE7

And the Update Pack says:

KB928090 - Cumulative security update for Internet Explorer (February, 2007)
KB929969 - Vulnerability in Vector Markup Language could allow remote code execution

So, I assume they're the same updates, unless KB928090 and KB928090-IE7 are two different updates? :)

Anyway, thanks again guys. I'll try this stuff tonight and see what happens...
-KZ

Professional writer/musician/lunatic on closed course. Do not attempt.

User avatar
dougiefresh
Posts: 948
Joined: Wed May 11, 2005 5:05 pm
Location: Murfreesboro, Tennessee
Contact:

Post by dougiefresh » Thu Mar 22, 2007 5:06 am

kelaniz wrote:I'd been trying to keep my WMP version as low and unobtrusive as possible, since I rarely use it (prefer MPC), and see and hear nothing but horrible things about WMP11. I assume WMP10 is somewhat less awful?
I don't like either one. I include WMP11 because I don't want it showing up on WU....
kelaniz wrote:My "real" source installs the Update pack, and 97 freakin' addon packs!
:shock: Man, I thought I had a lot at 16 add-ons!
kelaniz wrote:(Somehow, the line that said something like that has mysteriously vanished from my original post. weird.)
LOL! :lol: I think I may have misunderstood you when you stated in your first post (and I quote): "The problem is, they were all (supposedly) integrated into the source" I assumed that you meant the Update Pack, not Office. I reread the first post again (thoughly) and understand better. Sorry about that!
kelaniz wrote:The only unanswered questions, then, would be why the 2 updates that are in the 2.1.7 update pack are being added to the WU download list.
My guess is that the updates are in the Update Pack. Your original IE7 addon (or another add-on) could be reverting the affected files to a pre-update version, which is why WU prompts for them again.

User avatar
Zacam
Moderator
Posts: 615
Joined: Tue Sep 13, 2005 7:46 pm
Location: Portland, OR

Post by Zacam » Thu Mar 22, 2007 5:43 am

There are rollup updates that depending on which version of IE you have, patch differently if I recall correctly.

May very well be those updates specifically.

So, you integrate with IE6 in place during the RVMUpdatePack integration, but then add IE7 which uses slightly different files from the same update and windows flags it as no longer being present and prompts you to re-install the updates.

I could also be wrong and on serious amounts of sleep deprivation, so who knows. :)

elrico
Posts: 124
Joined: Sun Mar 11, 2007 2:24 pm
Contact:

Post by elrico » Thu Mar 22, 2007 10:03 am

Hi,

For see what update are needed with IE7, i already installed it (no integrate!) on a fresh XP SP2 with no updates installed/integrated, and no update about ie6 in win-update (no cumulative, no vgx)

Well for some reason i'll must re-install ie7 on a fresh XP SP2 if i'm wrong (i tested two month ago) i'll post here.

User avatar
RyanVM
Site Admin
Posts: 5189
Joined: Tue Nov 23, 2004 6:03 pm
Location: Pennsylvania
Contact:

Post by RyanVM » Thu Mar 22, 2007 10:42 am

kelaniz wrote:Security Update for Windows Internet Explorer 7 (KB929969)
http://support.microsoft.com/?kbid=929969
Security Update for Windows Internet Explorer 7 (KB928090)
http://support.microsoft.com/?kbid=928090-IE7

And the Update Pack says:

KB928090 - Cumulative security update for Internet Explorer (February, 2007)
KB929969 - Vulnerability in Vector Markup Language could allow remote code execution
Read the KB articles. Those updates came out for both IE6 and IE7. My pack includes the IE6 versions. If you're installing IE7 after the fact, of course you're going to have to install the IE7 version of those updates.
Get up to $200 off on hosting from the same people who host this website!
http://www.ryanvm.net/forum/viewtopic.php?t=2357

User avatar
kelaniz
Posts: 90
Joined: Mon Feb 05, 2007 3:37 pm
Location: Land of Broken Dreams

Post by kelaniz » Thu Mar 22, 2007 6:08 pm

Well, I'll be...damned. That would explain why one of the hotfixes had -IE7 at the end of the KB#. I figured that was just typical MS redundancy/verbosity :) How SMART of MS to assign the same KB to (technically) 2 different updates.

I do have the IE7 versions, so I'm hoping the old IE7 addon added after the update pack is what was doing it. I'll know here in a few hours.

Gonna try a build now with all the previous info from dougiefresh & fragbert. With that info, and the sexy new 2.1.8 update pack, I think this build will work better. It HAS to. :) I'll reply to the replies a little later. I hear one of the cats yowling at something in the den, and since no one should be in there, I'm thinking that's a sign something interesting is going on. :)
-KZ

Professional writer/musician/lunatic on closed course. Do not attempt.

User avatar
kelaniz
Posts: 90
Joined: Mon Feb 05, 2007 3:37 pm
Location: Land of Broken Dreams

Post by kelaniz » Tue Mar 27, 2007 6:26 pm

Well, finally got around to adding 2.1.8 and trying the suggestions here, and as hoped, MU kept its post-first-boot mouth shut. Same with the MU website. That can only mean it worked perfectly, or screwed Windows up so completely that not even wuauclt.exe can run (as is my usual luck). :)

Seriously though, everything works fine. Now I gotta hurry and get this thing finished before MS dumps another pile of updates on me that I'll feel compelled to include.

Thanks again, frag, dougie, Zacam and elrico for the info. Someone should get that Office update registry tip stickied here and on the MSFN Unattended Office 2k3 page. I did search pretty thoroughly, but I never saw it anywhere else.

KZ
-KZ

Professional writer/musician/lunatic on closed course. Do not attempt.

Post Reply