Hotfix Hunt for Windows XP SP2

ronliang · Post by **ronliang** » Tue Apr 05, 2005 6:42 pm

RyanVM wrote:OK, thanks for letting me know.

And yeah, Ron's sent me a few other KB numbers which don't have articles at the moment. Kind of annoying.

well. i think all the hotfixs i sent you have articles. which ones?
maybe you did not include MSDN articles and TechNet articles?

Post by **RyanVM** » Tue Apr 05, 2005 8:48 pm

ronliang wrote:
RyanVM wrote:OK, thanks for letting me know.

And yeah, Ron's sent me a few other KB numbers which don't have articles at the moment. Kind of annoying.
well. i think all the hotfixs i sent you have articles. which ones?
maybe you did not include MSDN articles and TechNet articles?

KB888133
KB894089

You said right in the email you sent that the KB articles didn't exist...

EDIT: Nevermind, it turned out to be a combination of a typo and a misunderstanding between myself and Ron. Nothing to see here, move along

war59312 · Post by **war59312** » Wed Apr 06, 2005 3:27 am

um yeah

just requeted hehe

got anymore ron?

ronliang · Post by **ronliang** » Tue Apr 12, 2005 1:55 pm

for .net framework
KB887563
Availability of the .NET Framework 1.1 Post-Service Pack 1 rollup package for System.dll

Nazgul · Post by **Nazgul** » Tue Apr 12, 2005 2:45 pm

This moth's batch is out:

MS05-016 Vulnerability in Windows Shell that Could Allow Remote Code Execution (893086)
MS05-017 Vulnerability in Message Queuing Could Allow Code Execution (892944)
MS05-018 Vulnerability in Windows Kernel Could Allow Elevation of Privilege and Denial of Service (890859)
MS05-019 Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066)
MS05-020 Cumulative Security Update for Internet Explorer (890923)
MS05-021 Vulnerability in Exchange Server Could Allow Remote Code Execution (894549)
MS05-022 Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)
MS05-023 Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169)

I posted the entire list, although MS05-017, 021 and 023 aren't really relevant for the pack.

ronliang · Post by **ronliang** » Tue Apr 12, 2005 3:03 pm

Security Update for Windows XP (KB893086)
shell32.dll 6.0.2900.2620
Security Update for Windows XP (KB893066)
tcpip.sys 5.1.2600.2631
Cumulative Security Update for Internet Explorer for Windows

XP Service Pack 2 (KB890923)
browseui.dll 6.0.2900.2627
cdfview.dll 6.0.2900.2627
iepeers.dll 6.0.2900.2627
inseng.dll 6.0.2900.2627
mshtml.dll 6.0.2900.2627
msrating.dll 6.0.2900.2627
shdocvw.dll 6.0.2900.2627
shlwapi.dll 6.0.2900.2627
urlmon.dll 6.0.2900.2627
wininet.dll 6.0.2900.2627
Security Update for Windows XP (KB890859)
authz.dll 5.1.2600.2622
ntkrnlpa.exe 5.1.2600.2622
ntoskrnl.exe 5.1.2600.2622
user32.dll 5.1.2600.2622
win32k.sys 5.1.2600.2622
winsrv.dll 5.1.2600.2622

Post by **RyanVM** » Tue Apr 12, 2005 5:07 pm

oh goodie, win32k.sys is updated with these updates. Gonna be fun to see how they play with Adaware & Spybot.

PsiMoon314 · Post by **PsiMoon314** » Tue Apr 12, 2005 6:27 pm

Hi Ryan,

If it helps any, I have installed the relevent updates here on Windows XP Professional and I have confirmed the new WIN32K.SYS is version 5.1.2600.2622.

I have checked Ad-Aware 1.05 SE Personal and Ad-Aware 1.05 SE Professional and neither of them are showing any issues or problems at the moment. Specifically the custom scanning options are working and not hanging my system.

If you need any further information, please shout.

Kind Regards

Simon

Post by **RyanVM** » Tue Apr 12, 2005 7:22 pm

Great, that'll make life easier

I'll be playing with the new one in VirtualPC before releasing of course too.

EDIT: Though I'm betting it installed the GDR version of the fix, at which point I wouldn't be surprised. I guess that's what I can do if the QFE version is still acting funny.
EDIT2: Interesting. I just confirmed that installing 890859 on a system with 1.2.0 on it copies the QFE files, so the issue does indeed appear to be fixed

PsiMoon314 · Post by **PsiMoon314** » Wed Apr 13, 2005 5:48 am

Hi Ryan,

Sounds good

I would hope that MS would test something as important as an update for WIN32K.SYS before releasing it as part of a public hotfix.

Based on what you have seen, do you intend to include this updated WIN32K.SYS in the next release of the update pack?

Kind Regards

Simon

Post by **RyanVM** » Wed Apr 13, 2005 6:19 am

It's in 1.2.1

ronliang · Post by **ronliang** » Wed Apr 13, 2005 1:56 pm

for .net framework

KB890340
Availability of the .NET Framework 1.1 post-Service Pack 1 hotfix rollup for MsCorLib.dll, MsCorSvr.dll, and MsCorWks.dll
KB892492
FIX: Your ASP.NET application may stop responding when it starts in the .NET Framework 1.1
KB895579
FIX: You receive a "System.NullReferenceException" exception when you merge parent menus and child menus in an MDI form-based application in the .NET Framework 1.1 Service Pack 1

Post by **RyanVM** » Thu Apr 14, 2005 8:16 pm

New since 1.2.1:
Ones I've Already Got
KB885280
KB887710
KB891220
KB893605
KB894069
KB895200
KB895536

Ones I've Got On Request
KB896684

ronliang · Post by **ronliang** » Thu Apr 14, 2005 9:18 pm

oh, RyanVM you got KB896684 rather fast.

new for .net framework then
KB888420
FIX: You receive an "OverflowException" error message when you specify a Content-Length HTTP header that is larger than 2 GB in the .NET Framework 1.1
KB896000
FIX: A managed Windows service process may not correctly receive command-line parameters when it is running on a 64-bit version of Windows that is running the .NET Framework 1.1

Post by **RyanVM** » Thu Apr 14, 2005 9:19 pm

Gotta stay ahead of you, Ron

ronliang · Post by **ronliang** » Thu Apr 14, 2005 9:42 pm

RyanVM wrote:Gotta stay ahead of you, Ron

have you investigate KB812515, the one that seems not for xp but has a newer version of Mscomctl.ocx?
whether or not intend to include it?

This topic seems too long. When will hp38guser open a new topic?

Post by **RyanVM** » Thu Apr 14, 2005 9:45 pm

mscomctl.ocx is not on the XP CD. It's not in the .NET Framework. On top of that, MS says the hotfix is unavailable if you ask for it. In other words, I won't be doing anything with it

Acheron · Post by **Acheron** » Fri Apr 15, 2005 4:21 am

Ryan, when do we see a new .NET framework pack with all hotfixes included?

Post by **RyanVM** » Fri Apr 15, 2005 6:39 am

When I get around to it

. Maybe this weekend.

And I'll create a new thread tonight when I get home from work (or maybe when I'm at work depending on how much work I have to do)

war59312 · Post by **war59312** » Fri Apr 15, 2005 2:06 pm

892492: Your ASP.NET application may stop responding when it starts in the .NET Framework 1.1 (PLEASE NOTE: This hotfix is not available at present.)

Damn!!! Anyone happen to have. I have this damn problem right now.

Acheron · Post by **Acheron** » Sat Apr 16, 2005 5:46 pm

Updated startpost. Please check for missing or superseeded updates.

Update list should be accurate

ronliang · Post by **ronliang** » Sun Apr 17, 2005 9:24 am

for xp:
KB890210
Windows XP client computers send FQDN DHCP option (81) request packets even if DNS dynamic update protocol registration is disabled globally

ronliang · Post by **ronliang** » Sun Apr 17, 2005 9:28 am

for .net framework
KB893360
FIX: Generation 1 garbage collections and generation 2 garbage collections occur much more frequently on computers that have 4 GB or more of physical memory in the .NET Framework 1.1

ronliang · Post by **ronliang** » Tue Apr 19, 2005 8:05 pm

for xp:
KB892050
A USB device that is connected to a USB 2.0 hub is not detected on a Windows XP Service Pack 2-based computer

for .net framework
KB887544
Availability of the .NET Framework 1.1 Post-Service Pack 1 Hotfix Rollup Package for System.Web.dll, Aspnet_isapi.dll, and Aspnet_wp.exe
KB896010
FIX: You receive an unhandled exception in System.Xml.XmlException when you pass a string that contains characters that are not valid across remoting boundaries in the .NET Framework 1.1 SP1
KB887545
Availability of the .NET Framework 1.1 post-Service Pack 1 Hotfix Rollup Package for System.Management.dll

Post by **RyanVM** » Tue Apr 19, 2005 8:08 pm

MS doesn't want to send me KB890210. Anyone else want to try requesting it and see if they have better luck?

tbone2 · Post by **tbone2** » Tue Apr 19, 2005 8:34 pm

try this site RyanVM

http://webhost.bridgew.edu/ylam/catalog/en/

Post by **RyanVM** » Tue Apr 19, 2005 9:22 pm

Interesting site, but everything on there is publicly available.

ViVa · Post by **ViVa** » Tue Apr 19, 2005 10:00 pm

RyanVM wrote:MS doesn't want to send me KB890210. Anyone else want to try requesting it and see if they have better luck?

What is their excuse?

Post by **RyanVM** » Tue Apr 19, 2005 11:16 pm

They want me to contact professional level support for issues with domains.

PsiMoon314 · Post by **PsiMoon314** » Wed Apr 20, 2005 3:47 am

Hi Ryan,

I have requested it for you. I am sure others have as well.

Not sure that this fix looks to be the most useful one which MS has ever releaed though

Kind Regards

Simon

PsiMoon314 · Post by **PsiMoon314** » Wed Apr 20, 2005 5:38 am

Hi Ryan,

It's Arrived. Please seem your PM

Kind Regards

Simon

war59312 · Post by **war59312** » Wed Apr 20, 2005 5:50 pm

KB890210 - Windows XP client computers send FQDN DHCP option (81) request packets even if DNS dynamic update protocol registration is disabled globally
Date Time Version Size File name
----------------------------------------------------------
30-Mar-2005 17:32 5.1.2600.2643 148,480 Dnsapi.dll

ok good its a new one

sure u got it all read ryan

Post by **RyanVM** » Wed Apr 20, 2005 5:55 pm

I've got KB890210. Thanks PsiMoon314

ronliang · Post by **ronliang** » Wed Apr 20, 2005 9:45 pm

for xp:
KB894480
A code 10 error occurs in Device Manager when you restart a Windows XP-based computer that is connected to an external 1394 device
KB894072
MUI language settings do not work correctly in WordPad after you install security update MS04-041 on a Windows XP Service Pack 1-based computer

for .net framework
KB896600
FIX: You may receive an error message when you use the ASP.NET State Server service to store ASP.NET session state in the .NET Framework 1.1

Post by **RyanVM** » Wed Apr 20, 2005 9:50 pm

Thanks as always, Ron

ronliang · Post by **ronliang** » Thu Apr 21, 2005 7:47 pm

for xp:
KB896430
Outlook 2000 may unexpectedly quit when you use the IME to enter Japanese text on a computer that is running Windows XP or Windows 2000
KB892559
Sounds do not play after you resume Windows from hibernation on a computer that is running Windows XP Service Pack 2
(seems old but the file 'Portcls.sys' has been updated)

for .net framework
KB892202
FIX: The WSDL tool cannot successfully generate the proxy when the WSDL file imports multiple schemas that in turn import a common schema in the .NET Framework 1.1 Service Pack 1
KB887543
Availability of the .NET Framework 1.1 Post-Service Pack 1 hotfix rollup package for System.runtime.remoting.dll

Post by **RyanVM** » Thu Apr 21, 2005 7:52 pm

tsk tsk Ron, KB892559 is already in 1.2.1

Post by **RyanVM** » Thu Apr 21, 2005 8:01 pm

I've got KB892050, KB894072, and KB894480 on my hard drive.

ronliang · Post by **ronliang** » Thu Apr 21, 2005 8:03 pm

seems strange here.
Portcls.sys here is 5.1.2600.2637
but in 1.2.1 i find 5.1.2600.2585

Post by **RyanVM** » Thu Apr 21, 2005 8:05 pm

hmm, that is weird. It appears to me that Microsoft actually updated the hotfix with a newer file version.

EDIT: And I actually still have the copy of the hotfix which includes the older build of the file.

ronliang · Post by **ronliang** » Thu Apr 21, 2005 8:07 pm

i think so.
there must be reasons..

Post by **RyanVM** » Thu Apr 21, 2005 8:07 pm

Yeah. I'll be requesting it again

ronliang · Post by **ronliang** » Fri Apr 22, 2005 10:11 pm

for xp:
KB894463
Programs that open multiple files may experience longer delays between each file opening on a Microsoft Windows XP-based computer or on a Microsoft Windows 2000-based computer

for .net framework
KB895474
FIX: Memory and resources are not released when you call the Form.Close method on child MDI forms on a computer that has the .NET Framework 1.1 or the .NET Framework 1.1 with SP1 installed

Nazgul · Post by **Nazgul** » Mon Apr 25, 2005 2:48 am

Found a new one for XP:

KB898060 Network connectivity between clients and servers may not work after the installation of security update MS05-019 or Windows Server 2003 Service Pack 1

ronliang · Post by **ronliang** » Mon Apr 25, 2005 8:53 am

so strange here. It seems i can't get KB898060 by the MS's search engine. Nazgul, how you find this?

Nazgul · Post by **Nazgul** » Mon Apr 25, 2005 1:52 pm

Ronlang, it was posted on a Patch Management mailing list to which I'm subscribed, where people where experiencing the problems mentioned in this KB article after installing MS05-019.

The list can be found at: www.PatchManagement.org

ronliang · Post by **ronliang** » Mon Apr 25, 2005 7:47 pm

for .netframework
KB896246
FIX: An E_POINTER value is returned when you call the Dispose method on an object that was derived from the ServicedComponent class in the .NET Framework 1.1

buletov · Post by **buletov** » Tue Apr 26, 2005 4:32 am

so much KBs...any schedule for 1.2.2? :roll:

Post by **RyanVM** » Tue Apr 26, 2005 6:43 am

Same as always, right after the May round of security updates.

Post by **RyanVM** » Tue Apr 26, 2005 6:50 am

KB892559, KB894463, and KB898060 are on my hard drive. KB896430 is still on request.