Microsoft update problem

[ByTeWrangler]

Greeting's

I just got word from a friend of mine that some of the computers in college are showing up "SQL server feature pack"... Normally only things that are installed on the PC get update checks...

Like for example.. I have only installed Word Viewer and Exel Viewer on student PC's to reduce risk to a certain extent..

I just want to know if this new thing being showd up in Microsoft update is okay... Because non of these PC's have SQL installed on them..

I dont have much detail because I'm home right now..

[nihil]

Hi ByTe~ ...........

Got XP SP2 and those readers here, but no such symptoms?

I will have to leave it until tomorrow to try a server with SQL..........

[fourdc]

I noticed that today as well in my home network, 3 XP boxes and 1 2000 laptop.

In the manifest of available updates it said there was (0) available updates for SQL server pak.

None of these systems knowingly had SQL server anything on them.

Another undocumented feature, BONUS !! (bogus?)

[HTRegz]

Hey Hey,

nihil didn't see it but the two of you did... I'm wondering if by chance nihil visited the Windows Update site.... Microsoft Update... (which has been around for a bit now -- Mid-2005 I believe. ) is supposed to encompass updates for Windows (Including: IE, Media Player, etc), Office, Exchange and SQL (all the major products). So for it to say SQL (0) wouldn't be that bad.

WIth Windows Update (besides saying Windows Update or Microsoft Windows Update at the top)... You'll see

Software
Software (optional)
Hardware

With Microsoft Update you'll see "Windows Update" or "Microsoft Windows Update" replaced with "Microsoft Update"... Then you'll see the same list as above on the left hand side. below that you'll see "By Product" in bold... under that you'll have

Office ()
Windows ()
SQL ()

So I just ran it.. and I ran Windows Update yesterday but not Office Update... so I had

Office (9)
Windows (3) (they were listed as optional on Windows update)
SQL (0)

Also... are you positive that none of the servers have SQL (if you saw (0) updates as fourdc did, it's simply bceause of the fact that you were using Microsoft Update and not Windows update most likely)... however if you saw updates... don't forget that SQL 2005 Express and MSDE are both subject to a lot of the same updates as their counterparts (SQL 2005 adn SQL 2000)... so if you just installed an application on some systems that includes either of those products there's a good chance you'd see updates.

Peace,
HT

[ByTeWrangler]

Greeting's

HTRegz thanks a lot for that detailed reply.

I found this on SANS.

We have received reports from our readers that previously Microsoft Update, MBSA 2.0, and ITMU may not indicate the need to install additional package for this security update if you have Microsoft XML Core Services 4.0 SP2 (but MBSA 1.2.1 did). However, it seems that Microsoft has updated the scan files and is now able to detect the need of additional package.

From Microsoft Knowledge Base article number (924191):
If you have multiple versions of the Microsoft XML Parser or Microsoft XML Core Services (MSXML) installed, you may have to install multiple packages for this security update. Additionally, if you install a version of MSXML after you install this security update, you may have to install an additional package for this security update.

One of our reader suspected the MBSA 2.0, Microsoft Update and ITMU are only considering the patch to be applicable if the MSXML4.DLL was installed as part of a MSI package for XML 4.0:

Microsoft's patch detection code for Microsoft Update as of 4 PM ADT 10/13/2006 wasn't detecting MSXML4 SP2 if it was installed via the merge module (i.e. as the result of installing a third party product that redistributed Microsoft's code using the Microsoft-approved method for doing this). Sometime between then and now, Microsoft updated the scan files. In the original scan files (released on Tuesday), Microsoft would only consider the patch applicable if the MSI version of MSXML4 SP2 was installed.

The new scan files work around this - they still detect language-specific variants of the MSI if they are installed (and generate unique UpdateIDs for those variants), but if no MSI is installed it will fallback to the UpdateID that was used in the original scan files if (and only if) the 1033 (i.e. US English) version of the MSI was installed.

In this aspect, it is recommended that you rescan your systems to determine whether you need any additional patch that was not reported earlier.

http://support.microsoft.com/kb/924191
http://support.microsoft.com/kb/925672

[HTRegz]

Originally posted here by ByTeWrangler
Greeting's

HTRegz thanks a lot for that detailed reply.

I found this on SANS.




http://support.microsoft.com/kb/924191
http://support.microsoft.com/kb/925672

I'm kind of confused.. MS06-061 was one of the expected updates... What does this have to do with your SQL issue?

[nihil]

nihil didn't see it but the two of you did... I'm wondering if by chance nihil visited the Windows Update site.... Microsoft Update... (which has been around for a bit now -- Mid-2005 I believe. ) is supposed to encompass updates for Windows (Including: IE, Media Player, etc), Office, Exchange and SQL (all the major products). So for it to say SQL (0) wouldn't be that bad.

Spot on target!



This box is bare XP......................