GDI+ Updates

Microsoft has released two GDI updates this year that I know of:
ms08-052 and ms08-021

The ms08-052 security bulletin does not mention replacing any previous
updates. Are both of these updates required for Windows Vista SP1 ?
Or can a person just install the newer ms08-052? Thanks.

MS08-082 == KB938464
MS08-021 == KB948590

The file versions listed in KB948590 are 6.0.1.0 with Gdi32.dll versions of
6.0.6001.18023 and 6.0.6001.22120

The file versions listed in KB938464 are 6.0.1.5 with Gdi32.dll versions of
6.0.6001.18065 and 6.0.6001.22170

Based on this I would assume MS08-082 replaces the previous security
bulletin MS08-021. Is this correct? Will Microsoft add the bulletin
replacement acknowledgment to the MS08-082 security bulletin? Thanks.

Security Update for Windows XP (KB948590)
MSRC Number: MS08-021
MSRC severity: Critical
KB article numbers: 948590
This update has been replaced by the following updates:
Windows XP Service Pack 3 (KB936929)
This update replaces the following updates:
Security Update for Windows XP (KB938829)

Security Update for Windows XP (KB938464)
MSRC Number: MS08-052
MSRC severity: Critical
KB article numbers: 938464
This update has been replaced by the following updates:
n/a
This update replaces the following updates:
n/a

This information was taken from:
http://catalog.update.microsoft.com/v7/site/Home.aspx

--
--------------------------------
TaurArian [MVP] 2005-2009
Update Services
http://taurarian.mvps.org


"moses388" wrote:

> MS08-082 == KB938464
> MS08-021 == KB948590
>
> The file versions listed in KB948590 are 6.0.1.0 with Gdi32.dll versions of
> 6.0.6001.18023 and 6.0.6001.22120
>
> The file versions listed in KB938464 are 6.0.1.5 with Gdi32.dll versions of
> 6.0.6001.18065 and 6.0.6001.22170
>
> Based on this I would assume MS08-082 replaces the previous security
> bulletin MS08-021. Is this correct? Will Microsoft add the bulletin
> replacement acknowledgment to the MS08-082 security bulletin? Thanks.
>

"moses388" <> schrieb:

> MS08-082 == KB938464
> MS08-021 == KB948590
>
> The file versions listed in KB948590 are 6.0.1.0 with Gdi32.dll versions of
> 6.0.6001.18023 and 6.0.6001.22120

True.

> The file versions listed in KB938464 are 6.0.1.5 with Gdi32.dll versions of
> 6.0.6001.18065 and 6.0.6001.22170

Moep! gdiplus.dll != gdi32.dll
It's gdiplus.dll that's coming whith KB938464, not gdi32.dll

Bye,
Freudi

For Windows Vista, does ms08-082 replace ms08-021?

moses388 wrote:

> For Windows Vista, does ms08-082 replace ms08-021?

Probably not, or it would have been documented. (Yes, sometimes they make
mistakes. But I wouldn't bet my computer on it.)

Harry.

moses388 wrote:

> For Windows Vista, does ms08-082 replace ms08-021?

Actually, there is one way you could test this if you wanted; install MS08-082
but not MS08-021 on a test machine, then see whether Windows Update offers
MS08-021 or not. This isn't a perfect method, but if MS08-021 is *not* offered
then at least there is an inconsistency we can query Microsoft about - if this
turns out to be the case, they'd either need to fix the bulletin or the Windows
Update detection logic.

Harry.