MS05-009 and MS05-022 Security Patch



steve02a
07-09-2005, 11:51 PM
Has anyone noticed a version numbering problem in MS05-022 patch?

If someone is using a patch management system (like SUS or WUS), patch
MS05-009 and MS05-022 for MSN Messenger 6.2 - that patch will always show as
installed (even when it's not).

The reason for this is because before the patch is installed, MSN Messenger
version # is 6.2.0.137 (and the patch makes it goto 6.2.0208). There is a
discrepency in the version numbering

Does anyone know why MS would stray from the version numbering method (4
places vs. 3 places in the version #). This really messes up WUS or SUS when
scanning client machines to see what patches are need and installed.

Fransg [MSFT]
07-09-2005, 11:51 PM
"steve02a" <steve02a@discussions.microsoft.com> wrote in message
news:8EAF6A41-9969-4535-A59A-83AC5D8AE89D@microsoft.com...
> Has anyone noticed a version numbering problem in MS05-022 patch?
>
> If someone is using a patch management system (like SUS or WUS), patch
> MS05-009 and MS05-022 for MSN Messenger 6.2 - that patch will always show
> as
> installed (even when it's not).
>
> The reason for this is because before the patch is installed, MSN
> Messenger
> version # is 6.2.0.137 (and the patch makes it goto 6.2.0208). There is a
> discrepency in the version numbering
>
> Does anyone know why MS would stray from the version numbering method (4
> places vs. 3 places in the version #). This really messes up WUS or SUS
> when
> scanning client machines to see what patches are need and installed.
>

Please have a look at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;896993

the MS05-022 will not be detectect, updated etc by MBSA, SUS WUS etc.

snip:

MS05-022: Windows Update does not update MSN Messenger 6.2. MSN Messenger
will eventually offer you the security update. If you want the security
update earlier, you must visit the following MSN Messenger Download Web site
to obtain the security update:

http://messenger.msn.com/Download/ You can use the Enterprise Update Scan
Tool, also known as the EST, to scan systems that are running MSN
Messenger to see if they are vulnerable. In smaller environments, the
easiest method would be to scan the few computers that may require updates,
verify the versions of these products, and then update the products from
the Microsoft Download Center Web sites that are described in the MS05-022
bulletin.
The Enterprise Update Scan Tool that is dated April 12, 2005 is available
from the Microsoft Download Center.

Thanks,

--
Frans Geurtsen
PSS Security
Microsoft

This posting is provided "AS IS" with no warranties, and confers no rights.


MS05-009 and MS05-022 Security Patch