Question for experts and weird updates

Re: Question for experts and weird updates

Postby hbuhrmester » 28.10.2019, 10:47

caliber wrote:where do the embedded updates (121) come from ?

WSUS Offline Update gets most updates from the WSUS offline scan file wsusscn2.cab. It extracts the first file of the archive, package.xml. This file is basically a list of all known security updates and their relations. (It does not include optional updates.)

caliber wrote:why doesn't the 9.2.5 version download embedded updates ?

WSUS Offline Update uses rules to extract the needed information from the file package.xml. These rules are in the file wsusoffline/xslt/ExtractDownloadLinks-wxp-x86-esn.xsl. This file is different in the versions 9.2.1 and 9.2.5 ESR:

  • In version 9.2.1, the first rule basically says:

    Extract all URLs, which contain 'http://' and '/windowsxp' and '-esn' and '.exe', but not '-custom-' or '/2014/'

  • In version 9.2.5 ESR, the same rule is:

    Extract all URLs, which contain 'http://' and '/windowsxp' and '-esn' and '.exe', but not '-custom-' or '-embedded-'

So, all URLs with '-embedded-' are explicitly excluded in the ESR version, because WSUS Offline Update does not use them.

Version 9.2.1 was released on 2014-05-05. So maybe the first rule worked at the time being.

I don't really know, which updates were available in 2014, but I guess, it was like this: As long as all versions of Windows XP were supported, there was no distinction between "regular" and "embedded" updates. But in 2014, the support for the regular desktop versions ended. The embedded Windows XP POSReady was still supported, and paying customers could still get an extended support. At this point, the distinction between "regular" updates, "embedded" updates and "custom" updates probably started.

caliber wrote:are embedded updates the same as POSReady updates released till April 2019 ?

I think so.

PS

WSUS Offline Update 9.2.5 ESR includes some important updates, which were released as custom updates for Windows XP in 2017 and 2019. These are not in the file wsusscn2.cab, and therefore, they are missing in version 9.2.1. In version 9.2.5, they are statically defined in the file wsusoffline/static/StaticDownloadLinks-wxp-x86-esn.txt.

WannaCry-Patches from 2017
https://support.microsoft.com/en-us/help/4025687/microsoft-security-advisory-4025685-guidance-for-older-platforms

BlueKeep-Patches from 2019
https://arstechnica.com/information-technology/2019/05/microsoft-warns-wormable-windows-bug-could-lead-to-another-wannacry/
https://arstechnica.com/information-technology/2019/05/microsoft-says-its-confident-an-exploit-exists-for-wormable-bluekeep-flaw/
https://support.microsoft.com/en-us/help/4500705/customer-guidance-for-cve-2019-0708

Regards,
hbuhrmester
hbuhrmester
 
Posts: 525
Joined: 11.10.2013, 20:59

Re: Question for experts and weird updates

Postby Dalai » 28.10.2019, 14:47

My guess is that there always have been "custom" updates, which are updates specifically created for certain customers (perhaps solving specific issues only this customer has), probably paid by this customer. Usually these updates are not meant for the general public. But there are exceptions to this, of course, like with the WannaCry updates. MS already had developed these updates, and all they've done is make them available for everyone (the potential of this malware spreading further was apparently high enough).

Regards
Dalai
Dalai
 
Posts: 1041
Joined: 12.07.2016, 21:00

Re: Question for experts and weird updates

Postby caliber » 04.11.2019, 08:24

Cababs wrote:i have not read this topic in detail. but at quick glance it looks like you are using XP MCE.
i dont know if that is fully supported. my xp update iso does contain XP MCE updates which break the automated install of normal XP.

what is your question?


I don't use MCE at all and the WSUS software does not detect the used Windows version either.
my question ??? well I don't know why the WSUS 2014 version is downloading Posready 2019 updates.

After a clean XP installation my left brain tells me I would better use the 9.2.1 ISO however the other brain half tells me the exact opposite because it contains few more updates (except embedded ones)
the solution to this would be the creation of 9.2.6 version that contains 9.2.1 + 9.2.5 additional updates.
caliber
 
Posts: 11
Joined: 14.10.2019, 12:42

Re: Question for experts and weird updates

Postby WSUSUpdateAdmin » 04.11.2019, 16:56

Hi.
caliber wrote:After a clean XP installation [...]

I wonder why you'ld freshly install XP nowadays. :shock:
I haven't done regression tests "from scratch" with the WOU 9.2.x ESR versions for many months now, and I'll completely discontinue these versions at the end of the year at the latest.
XP has gone for more than five years now... :!:

Regards,
T. Wittrock
WSUSUpdateAdmin
Administrator
 
Posts: 2245
Joined: 07.07.2009, 14:38

Re: Question for experts and weird updates

Postby caliber » 06.11.2019, 12:49

WSUSUpdateAdmin wrote:XP has gone for more than five years now... :!:

Regards,
T. Wittrock


XP was well alive until April 2019. it's ok if you want to drop support but do it well forerver 9.2.6 :!:

add this to source code and it's done >>> Extract all URLs, which contain 'http://' and '/windowsxp' and '-esn' and '.exe', but not '-custom-' or '/2014/'
caliber
 
Posts: 11
Joined: 14.10.2019, 12:42

Re: Question for experts and weird updates

Postby caliber » 06.11.2019, 14:31

WSUSUpdateAdmin wrote:I wonder why you'ld freshly install XP nowadays. :shock:

Regards,
T. Wittrock


XP in 2019 :mrgreen: https://www.arte.tv/de/videos/078162-00 ... -akkus-co/

Image
caliber
 
Posts: 11
Joined: 14.10.2019, 12:42

Re: Question for experts and weird updates

Postby WSUSUpdateAdmin » 08.11.2019, 16:12

Hello,

et voilà.

It won't be very useful anyway:
Yesterday I discovered my old XP VM in an archive, reverted it to its "naked" snapshot and ran the WOU patch installation using an old archived ISO image from 2014. 149 updates were installed. Pretty well! :)

Then I reactivated the 9.2 XSLT filters for a 9.2.6 version derived from 9.2.5, ran a download and found 118 new *embedded* files in the client\wxp directory.

In my VM, I went back to "naked" again and ran the patch installation, now using the newly created ISO image, of course.
Thirteen patches were installed. Why only thirteen?

The reason is that these 13 patches are all defined statically by StaticUpdateIds-wxp-x86.txt, so no patch was missed by the Windows Update Agent, not a single one.
It seems that the old XP WUA is not able to deal with recent versions of the catalog file wsusscn2.cab.

Anyway, the requested job is done and the 9.2.x has gone. :mrgreen:

Regards & a nice weekend,
Torsten Wittrock
WSUSUpdateAdmin
Administrator
 
Posts: 2245
Joined: 07.07.2009, 14:38

Re: Question for experts and weird updates

Postby aker » 08.11.2019, 16:14

Or MS removed XP from wsusscn2.cab...
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Question for experts and weird updates

Postby WSUSUpdateAdmin » 08.11.2019, 17:13

No, as a said: Download is still working...
WSUSUpdateAdmin
Administrator
 
Posts: 2245
Joined: 07.07.2009, 14:38

Re: Question for experts and weird updates

Postby caliber » 09.11.2019, 16:34

WSUSUpdateAdmin wrote:Hello,

et voilà.


merci bcp mais 5 msj ont disparu dans la version 9.2.6 :(

WSUSUpdateAdmin wrote:Then I reactivated the 9.2 XSLT filters for a 9.2.6 version derived from 9.2.5, ran a download and found 118 new *embedded* files in the client\wxp directory.

Torsten Wittrock


why missing updates ?

9.2.1 = 297 updates (176 normal + 121 embedded)
9.2.5 = 190 updates
9.2.6 = 306 updates (190 normal + 116 embedded)

Image
caliber
 
Posts: 11
Joined: 14.10.2019, 12:42

PreviousNext

Return to Verschiedenes / Miscellaneous

Who is online

Users browsing this forum: No registered users and 14 guests