Security Patches

[Guest]

I applied patches MS03-040 - MS03-047 on my development servers. There are patches prior to MS03-040 that I have not applied. Let's say I apply patch MS03- 020 through MS03-039 - does this mean I will have to reapply MS03-040
- MS03-047?

 

[Torgeir Bakken (MVP)]

I applied patches MS03-040 - MS03-047 on my development servers. There are patches prior to MS03-040 that I have not applied. Let's say I apply patch MS03- 020 through MS03-039 - does this mean I will have to reapply MS03-040
- MS03-047?

Hi

Usually not, but note that the installers of the "Cumulative Patch for Internet Explorer" MS03-015 and MS03-020 has a bug in it, so it will downgrade the files installed by the newer "Cumulative Patch for Internet Explorer"
MS03-032 and MS03-040. So, if you install MS03-020, you would need to reapply MS03-040.

But, as "Cumulative Patch for Internet Explorer" always includes and supersedes previous cumulative patches for IE, as long as MS03-040 is installed, there is no point in installing previous hotfixes MS03-004, MS03-015, MS03-020,
and MS03-032.

For the other hotfixes, this downgrade issue is non-existing.

Also, if you install MS03-039 "Buffer Overrun In RPCSS Service Could Allow Code Execution" (and you should ;-), you don't need to install MS03-026, because MS03-039 supersedes it.