Critical Security Fix Q824146 is on XPEfiles

[Nikolai Vorontsov]

Hi, All!

I've made a runtime patch for the Q824146. A deployed XPe machine could
be updated with it. It's not a DUA script - just files and batch file to
do the update.

P.S. Check the date of the files - MS has been had this fix for 2 weeks
already! And they promising fix for XPe "next week" (C)

WBR,
Nick.

 

[Andy Allred [MS]]

I understand your frustration Nick, we were testing the componentized
version into the evening last night so that we can expedite this to you, so
it should be available sooner than normal. Redistributing a QFE via
xpefiles.com is a really bad idea on several levels, Nick.

I caution our customers to use the appropriate QFE when it's available, this
will also include instructions for updating RTM devices in the field as well
as updating XPe-SP1 devices.

Thanks.
--
Andy

This posting is provided "AS IS" with no warranties, and confers no
rights.
=====================================================

 

[Nikolai Vorontsov]

Hi, Andy!

I understand your frustration Nick, we were testing the componentized
version into the evening last night so that we can expedite this to you, so
it should be available sooner than normal. Redistributing a QFE via
xpefiles.com is a really bad idea on several levels, Nick.

I caution our customers to use the appropriate QFE when it's available, this
will also include instructions for updating RTM devices in the field as well
as updating XPe-SP1 devices.

You have the same files in you QFE - I've just checked this. In the past
the gap between XP and XPe QFE releases was approx 2 weeks. So, what's
wrong if I short cut this time? You told couple of times that XPe is
based on the same binaries as XP - even from this side my patch is
technically correct. And now - you just don't any way to know which
binaries I used - from XP of from XPe QFEs

So, guys, you spent so much time for testing QFEs... If you only spend
10% of it to testing you product (I mean RPC itself) - we have much less
need to change our images / deployed machines and work PCs too.