Why is MS04-011 (KB835732) not included in current MS05-05X updates?

[Andreas Eibach]

Is there any technical explanation for the necessity of this "old"
patch?

MS04-011 patches an *extremely* critical security hole, the Sasser worm.
I think Microsoft would not require too much effort to include the
Sasser worm patch into one of the forthcoming MS05-05X or -06X.
The RPC/DCOM exploit patch MS03-039 (824146) is replaced too now, so ...

-Andreas

 

[Daniel Crichton]

Andreas wrote on Tue, 29 Nov 2005 08:58:10 +0100:

Is there any technical explanation for the necessity of this "old"
patch?

MS04-011 patches an *extremely* critical security hole, the Sasser worm.
I think Microsoft would not require too much effort to include the
Sasser worm patch into one of the forthcoming MS05-05X or -06X.
The RPC/DCOM exploit patch MS03-039 (824146) is replaced too now, so ...

It was included in XP Service Pack 2. Any reason why you're not using SP2
already?

Dan

 

[Andreas Eibach]

It was included in XP Service Pack 2. Any reason why you're not using SP2
already?

Now you've caught me. Well I'm on Windows 2000 here, and there was no
specific group I found for Win2K _at first glance_.
But at second glance, I figure I should've posted this in
news://microsoft.public.win2000.security then, oops ...

-Andreas