full-disclosure - New Round of Critical Updates from Microsoft

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <3FBD9924.4020400@well.com>
From: vimages at well.com (J. Race)
Subject: New Round of Critical Updates from Microsoft

James Patterson Wicks wrote:

> According to the SUS server, there are 21 "updates" to previously
> released patches.  From a fully-patched Windows XP desktop, Windows
> Update and SUS returned 11 critical updates.

First box I tried only had one. An update to MS03-043:

V2.1 November 13, 2003: Bulletin updated to reflect correct file 
versions for Windows XP update.

V2.2 November 14, 2003: Subsequent to the release of this bulletin, it 
was determined that the update for Windows XP did not properly place the 
updated file wkssvc.dll into the %systemroot%\system32\dllcache. This 
problem is unrelated to the security vulnerability discussed in this 
bulletin. Microsoft recommends that customers who have previously 
applied the security update reinstall the latest version to insure that 
their system remains protected in the event that the wkssvc.dll is ever 
deleted or becomes corrupt. More information on this is available in the 
FAQ section of this bulletin. Caveats section has been updated to 
include new information relevant to NT 4.0 clients.

Whoops.

-jim