Cumulative Rollup for XP complete?

[Mark Harr]

I was reveiwing the patches that the new Cumulative Rollup
contains. According to the Windows Catalog site, there
are 21 Critical Patches that are not listed in the Rollup
package.

I can understand that 7 of these are probably newer, as
they have the same or later posted date. But there are 14
Post-SP1 patches with posted dates as far back as 3/25.

So am I to assume that when installing a new XP system, we
need to install XP SP1, the Rollup, then these 21 other
patches not covered?

 

[Roger Abell]

I was reveiwing the patches that the new Cumulative Rollup
contains. According to the Windows Catalog site, there
are 21 Critical Patches that are not listed in the Rollup
package.

I can understand that 7 of these are probably newer, as
they have the same or later posted date. But there are 14
Post-SP1 patches with posted dates as far back as 3/25.

So am I to assume that when installing a new XP system, we
need to install XP SP1, the Rollup, then these 21 other
patches not covered?

No. That is an incorrect assumption.

I have not yet read the released rollup info, but during
its beta it contained 22 previous security bulletin patches
up to ms03-039. When the rollup is installed it will check
for which of the prior independent patches are already
installed and then download the parts that are needed.
The earlier separate patches remain available.

Some of your count of 21 not mentioned as included may
be one that were superceded by later ones, or patches for
other than the XP system proper (Mdac, IE, WMP, etc.)

When installing XP, do so off the network, install Sp1 and
the rollup if you have them local, turn on your firewall and
then connect the network interface and go to Windows
Update to get whatever further patches are available at that
time. Perhaps I should have added install of anti-virus at
some point in that advise, but it is always safer to not have
it running during service installation in case the AV vendor
is not using the newer APIs. Also, be sure to install and
use MBSA as this covers more products than does Windows
Update in its current version.