Every Windows user read this!

[+theblazingangel MVC]

i just came across something interesting. anyone skipping non-critical updates must read this!

- the critical update KB917734 released in june 2006 fixes a critical vulnerability in the windows media player.

- the non-critical update KB921134 released a couple of weeks later fixes a non-critical bug, also in the windows media player.

both updates contain just one updated file. its the same file in both, but different versions.

in the july 2006 xp release im curently putting together, KB921134 fully replaces the KB917734 update because it has a newer copy of the file KB917734 has, and so KB917734 will be removed and KB921134 added.

now, if someone were to use the autopatcher july 2006 release to update a system that KB917734 hadnt been installed on, and they skipped the 'non-critical' KB921134 update, they would be vulnerable to a serious security hole.

so next time anyone decides to skip a non-critical update, think twice!!

[the_guy]

Maybe what you could do was put a star next to the non-critical updates which replace critical ones.

the_guy

[+theblazingangel MVC]

well that would be tricky, id have to go back through all the updates we'd ever included since the last service pack and work it out.

[Mike]

without knowing how ap fully works, could you not tag that one as critical?

[+theblazingangel MVC]

^ well possibly, but then what about all the other times it may have occured, this is the first time ive realised that it happens

[Mike]

^ well possibly, but then what about all the other times it may have occured, this is the first time ive realised that it happens

leave it i guess, i know if i see a bug fixing update for something i use i'll install it, if you go to windows update does it ask to install both? how about installing both in ap? (critical one goes first obviously)

[+theblazingangel MVC]

if you go to windows update does it ask to install both

well thats something that needs to be checked. hopefully the critical one will remain in windows update, and then as long as people check it, it should be okay

[the_guy]

The critical one will remain in WU/MU, at least until a new critical one is released.

Basically, it's happened before and there hasn't been any big worries about it.

the_guy

[+theblazingangel MVC]

ok, cheers (Y)

[The Pink Panther]

I've read this thread and it didn't help my life in any way.

[jimbo11883]

I've read this thread and it didn't help my life in any way.

Me too. :laugh:

[Atasas]

Cheers! heads up on update :)

[John S. Veteran]

title edited, seeing as how it didn't apply to everyone ;)

[xyz123]

Hmmm... M$ works in mysterious ways... :laugh:

Well TNX for the heads-up.

[JRosenfeld]

I have 917734 installed, not 921134. Just checked Microsoft Updates, custom; it does not offer 921134.

Also KB921134 article does say: only install if you have the problem.... So IMO it is not one that should be included in AP, as per previous posts I read you did not include hotfixes that say only install if...

PS I do have WMP10, not sure if that makes a difference.

PPS Just tried installing 921134, but it refuses to do so (not compatible with WMP 10 installed on this computer). My WMP is 10.00.00.4036. I'm in the UK, so it's probably a UK localised version?

The file I downloaded was windowsmedia10-kb921134-x86-intl.exe from the KB article page.

In fact I've seen several posts in other forums saying they could not install it.

So my suggestion is, please include 917734 in AP in the critical list, and if you want, 921134 in the optional list.

Edited July 17, 2006 by JRosenfeld

[PsiMoon314]

Hi,

I have just tested KB921134 on my PC here (Window XP Professional SP2 UK with WMP 10 installed).

If you have either Outlook Express, Explorer or WMP open when it installing this update it will warn you that these applications are open and then wait for them to close.

Alternatively you can let the update install when these applicastions are open and then reboot once it's completed.

I wonder if the unattended installation masks this behavior and prevents successful installation?

At least one install from APXP opens an IE window (Macromedia Shockwave I believe) so this may prevent this update from installing if it installs after Shockwave.

Anyway I had no issues installing this update on my PC here but this was not via APXP.

Kind Regards

Simon