Why is MS04-012 still not marked "obsolete" for Windows 2000?

[Andreas Eibach]

Hi,

this would interest me a lot. As I simply do not like double work for no
obvious reason, I did a direct comparison of the old patch...

http://www.microsoft.com/technet/security/Bulletin/MS04-012.mspx

and the new patch

http://www.microsoft.com/technet/security/Bulletin/MS05-051.mspx

Clearly Microsoft states in the Security Update Information section that
especially for Win2k, MS05-051 does *NOT* replace the MS04-012 patch.
Yet I think it does.
Please take a look here. There is no file in the "old" patch which has
not been affected (updated or kept, like RPCRT4.DLL).
http://www.bilder-speicher.de/Catlaina507629.vollbild.html

So could anyone tell me why you allegedly still need MS04-012 anyway?

-Andreas

 

[Roger Abell [MVP]]

Good question.
I notice that rpcproxy.dll in included in the older, but not in ms06-051.
Otherwise all binaries in the older are listed for the newer.

Of course, the newer does not support W2k prior to Sp 4, so for
Sp2 and Sp3 the older is not replaced.

Sometime there are are changes, such as to registry settings, but I really
do not know if this is involved here. However, it is curious that the one
file would not have been included if that was all that kept ms06-051
from obsoleting ms04-012