Why aren't we getting some important Updates

[Airbot]

Some updates like this IE8 security update that was released the 14th, we're not getting in Windows update. Why?

Shouldn't we at least get important or critical security updates even in the lastest builds? I could see why maybe not other less important updates but critical security ones?

And when I try to install it says it's not applicable to my system but updates like this one should clearly be applicable, no?

Download details: Cumulative Security Update for Internet Explorer 8 in Windows 7 Client Beta (KB963027)
Download details: Cumulative Security Update for Internet Explorer 8 in Windows 7 Client Beta for x64-based Systems (KB963027)

MS09-014: Cumulative security update for Internet Explorer

 

[Orbital Shark]

It could be that the issues these fix are already fixed in later builds. 7000 is still the only 1 (according to M$) that the public have and IE8 on that was too buggy. As far as I can tell build 7057 upwards have the full IE8 and not just the beta that's packed with 7000.

 

[Airbot]

Yes but this update was just released..after the latest leaked build. I don't think it's included in the latest leaked build. I know the leaked builds are unofficial but I think it would be wise to allow us critical security updates as soon as they come out.

 

[Digger]

I got them all Airbot. The IE8, the word, excel and another one ( i forget). The IE8 HAS fixed the darn troubleshoot bug-close out. I havent seen it since i installed the patch. Just didnt think it was going to address my particular problem, but it did. I got these via MS update early yesterday morning edt. of course am still on 7000

 

[Airbot]

That's what I'm getting at Digger..you'll get them in 7000 but not any other unofficial builds. Which still leaves you vulnerable regardless.

 

[Digger]

yea, but can either go with this 2 ways...

1. you already got them in the newer builds, i would say from 68 on up

2. MS doesnt "expect" to have to support a vulnerability in "non MS supported" builds.... they only have to protect their butts to the "public release". A good tort lawyer would love for MS not to release/fix/patch something and hand it out to the necessary "legit" community. That would be negligent lol

I hear your cry tho. But this is where us 7000 users get to stick out our tongues i guess lol

 

[Digger]

are you running office? if so, did you get those updates? i guess not

 

[Orbital Shark]

I'm running office 2007 & had all updates successfully installed. All 180 odd MB of it

 

[mxosder16]

i also recieved all office updates on 7077

 

[Digger]

I'll go out on a limb and say that builds 68 and up were "thought of" when this flaw was fixed, as alot of things were fixed after the 48/57 builds, so i read anyways and come to that conclusion. But just my thought

 

[Orbital Shark]

I still think that the updates relate to issues found only in the BETA version of IE8. Otherwise we would have had them on MU by now. As IE Beta is still being used, MS have to reinforce it with updates. Most of us, on the other hand, are now using the full IE8 which (touch wood) does not have the problems that the BETA does.

IMO anyway

 

[Digger]

I still think that the updates relate to issues found only in the BETA version of IE8. Otherwise we would have had them on MU by now. As IE Beta is still being used, MS have to reinforce it with updates. Most of us, on the other hand, are now using the full IE8 which (touch wood) does not have the problems that the BETA does.

IMO anyway

righty 'O. And also if you recall, the IE8RC1 was released, then also the talk at the same time(two weeks+ ago) about the office updates... seems as tho MS just wanted to correlate all the updates at once, when the fixed the excel problem. I still to this day dont understand why MS didnt direct the public beta users to the RC1 instead of waiting it out 2 weeks ( i guess to test:shock: ) to package a "fix" of IE8 (beta) and the office updates.

 

[Orbital Shark]

Yeah, that sounds like M$ through & through really LOL

 

[win7]

There are only two possiblitys i think, either there is a build/version check, or the updates are included in the build you are using...

I would assume if you get the "not applicable" message from stand alone installer that the update is already present in the build, but i could be mistaken and it could just be doing a version/build check.

I guess the only way to know for sure is to rip apart one of the stand alone installers and look for the version/build check.

 

[Airbot]

yeah, that's a possibility that like Orbital Shark says this update is build 7000 specific and that they just found about the vulnerability so they released it, for 7000. But also, if that was the case, that it's already been fixed and applied in later builds...you'd think they knew about the vulnerability for a while...why wait till now to release it for 7000?

 

[Orbital Shark]

It could be something that surfaced but they've spent so much time trying to get the new builds complete that they forgot about the public beta release LOL

 

[Bateman26]

Since you could not install the ie beta 2 on pre beta of W7
IE8 RTW Will Not Install on Windows 7 Pre-Beta - According to Microsoft - Softpedia

It could be that its a "different" version of IE8 in W7 so that could be the reason that you cant install the updates you have downloaded

 

[Airbot]

That's another good point. That may be the case.

 

[fgdn17]

Some updates like this IE8 security update that was released the 14th, we're not getting in Windows update. Why?

Shouldn't we at least get important or critical security updates even in the lastest builds? I could see why maybe not other less important updates but critical security ones?

And when I try to install it says it's not applicable to my system but updates like this one should clearly be applicable, no?

Download details: Cumulative Security Update for Internet Explorer 8 in Windows 7 Client Beta (KB963027)
Download details: Cumulative Security Update for Internet Explorer 8 in Windows 7 Client Beta for x64-based Systems (KB963027)

MS09-014: Cumulative security update for Internet Explorer

"when I try to install it says it's not applicable to my system but updates like this one should clearly be applicable, no?"

if you read MS09-014 you'll see IE8 is only listed UNDER NON-AFFECTED SOFTWARE...!!! so it's NOT APPLICABLE...!!!

also see:
http://blogs.msdn.com/ie/archive/2009/04/14/ie-april-security-update-now-available.aspx

 

[dmex]

if you read MS09-014 you'll see IE8 is only listed UNDER NON-AFFECTED SOFTWARE...!!! so it's NOT APPLICABLE...!!!

If its not listed under non-affected software how did Windows Update install it on my Windows 7 build?? :sarc:







The More Information link directs to the MS09-014 Bulletin so it clearly affects IE8 and the latest Win7 builds since they are much older than this update.

More information:
Microsoft Security Bulletin MS09-014 - Critical: Cumulative Security Update for Internet Explorer (963027)

Microsoft needs to allow this patch for other leaked Windows 7 builds or it could leave thousands of machines open for attack :shock: