Microsoft Quietly Releases Windows 2003 SP2 175
Several readers noted that Microsoft has quietly released 32-bit Windows 2003 Service Pack 2 for download. (The 64-bit edition is still showing as a release candidate on the site.) The installation of SP2 may potentially regress hotfixes that have been deployed previously; Microsoft has released a script to scan for hotfixes that may potentially regress.
Where is XP sp3? (Score:5, Informative)
Re: (Score:3, Informative)
Autopatcher [autopatcher.com] and Offline Updater [heise-security.co.uk]
Both have options for 2000, XP, and 2003 Server
Re:Where is XP sp3? (Score:4, Funny)
Re: (Score:3, Funny)
Re: (Score:2)
But there is a security roll up from (AFAIR) about 6 months ago.
Not exactly recent, but that whacks a log of post-SP4 patches in one go.
Don't overREACT (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Even when it is only called a "rollup package" it would be sooo much more convenient...
A fresh install of Windows XP SP2 now needs about 100 fixes to be installed, of which about 80 are critical security fixes.
When you don't turn off system restore during the install it takes ages...
(I know, because we install systems from the network with unattend.txt rather than using imaging)
XP x64 as well (Score:2, Informative)
Didn't seem to change much, if anything.
Re: (Score:2)
Microsoft is no longer planning to push out anything like Windows XP SP2, where there are vast changes to the OS during a Service Pack. You're actually seeing the ideal case right there, where nothing has gone wrong.
Re: (Score:2)
Re: (Score:2)
Also if you look in Add/Remove Programs (and check Show Updates) you'll see all your hotfixes are gone. Interesting that IE7 is still a seperate installation and wasn't pushed out in this SP. I guess thats because they're only really thinking about 2003 Server. I wonder if IE7 will become irremoveable in x86 XP SP3?
It's a service pack. It's what they should be, *minor
Re: (Score:2)
WPA2 Support (Score:4, Funny)
Re: (Score:2)
Old News? (Score:1)
Re:Old News? (Score:5, Funny)
Comment removed (Score:4, Interesting)
Re: (Score:2, Informative)
He has an update pack to 2007/02/16.
Re: (Score:2)
http://www.vulnerabilityassessment.co.uk/ctupdate
Re: (Score:2)
http://www.autopatcher.com/ [autopatcher.com]
Quietly? (Score:4, Funny)
Quietly releases?
Posting it here certainly made it a lot noisier.
Re: (Score:2)
What made this release so "quiet"? (Score:3, Insightful)
What happened is in the black of night Ballmer, dressed in his ninja outfit, shimmied along the walls of the MS datacenter with a CD with this service pack on. He used his glass-cutters to silently sneak through a window, and snuck up into the vent before guards could see. Using a series of mirrors to deflect the trip-lasers he then lowered himself down from a vent grate, and uploaded the Windows 2003 service pack onto the server.
Why was it released so quietly? Who knows, but I'm sure there's something evil at work here. Thanks to the submitter for pointing out that this release was suspiciously quiet.
ninja Ballmer (Score:3, Funny)
Re:ninja Ballmer (Score:4, Funny)
Re:What made this release so "quiet"? (Score:5, Interesting)
If that isn't a good enough answer, just look at the list of what's new...There's nothing of significant value, and all of the security/bug fixes are already addressed with regular critical updates. Who cares about this update? It's a 'value improvement' update at the very most.
Now for my question...why was this made into a slashdot article? Judging by the number of comments so far, it's clearly not of much interest to anybody...and anybody who's running the os will receive a notification in the next few days anyway.
XP 64 is semi-consumer (Score:2)
Microsoft released a simple, direct service pack today and it works well. It's about time they did that. My only complaint is the size: are there really 350 megabytes of binary diffs to apply?
Re: (Score:2)
My only complaint is the size: are there really 350 megabytes of binary diffs to apply?
The original release of Windows 2003 ? Almost certainly - that was ~3.5 years ago.
Re: (Score:3, Funny)
Perhaps that is why so few people were aware of the update, they don't posess psychic powers.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2, Funny)
What happened is that with the sun high in the sky and the wind at his back, Balmer, dressed in his pirate outfit, sailed his mighty ship through the walls of the MS datacenter with a CD with this service pack on it. He ordered parallel volleys across the bows of the blade servers from both the starboard and port sides of his mighty vessel. And of course, he made the guards walk the plank. After destroying the lasers and the grate with his hook arm, he uploaded the Windows 2003
Re: (Score:2)
Now, where's XP Service Pack 3?? (Score:4, Insightful)
It's nice that Microsoft makes the patches available separately. For those who don't do it, you wouldn't believe how much work it is testing patches and narrowing down which one broke an application. However, I think they should have one monster rollup available at least every few months. Most of that 50 minutes is spent dependency-resolving, isolating and backing up the files that each patch replaces. Doing that once is better than 75 times.
One thing I don't like about MS is that they tend to abandon customers who can't or won't upgrade to the next version of a product. I'd love to be on IE7, but we're stuck on 6 until several dependencies get fixed. I'm not too wild about Vista, but know that we have to go that way in the next year or so just to ensure we get the latest security fixes. Microsoft guarantees they'll backport fixes for a while, but you can bet they're doing all the active research on Vista. I can't agree with people who say they should still support NT, but most of the enterprise-class vendors have a much more lenient upgrade policy. (OpenVMS is at least kind of supported 3 versions back, IIRC.)
Re: (Score:1, Informative)
Re: (Score:2, Funny)
they let you do that at work? in front of each computer?
Re: (Score:2)
One thing I don't like about MS is that they tend to abandon customers who can't or won't upgrade to the next version of a product.
Uh, compared to who ? Apple don't support OS X back more than 2 - 3 years (if that), most Linux distros won't go further back than $CURRENTVERSION-1 (12 months or so).
Microsoft's support lifecycle - 5 years of mainstream support, 10 years of maintenance support - is one of the longer ones in the industry. Not really something they can be criticised particularly harshly abou
Re: (Score:2)
Re: (Score:2)
Oh I think I woudl believe it. Troubleshooting ANY problem on Windows makes me want to tear my hair out. There isn't a whole lot you can do once you've sacrificed your last chicken to the Win32 gods hoping that the next mouse click with be the one that, for no apparent reason, makes things start working again.
-matthew
Re: (Score:2)
That's because you don't know what you're doing. You can set up a RIS server and slipstream the updates into your OS image or use nlite and build a custom install CD with all of the updates already there. Nlite also lets you integrate extra drivers and tweaks tons of settings, it's really nice.
Get it at http://www.nliteos.com/ [nliteos.com]
Re: (Score:2)
I came, I saw, I... WTF????? (Score:5, Funny)
Crap! I run my server on dial up. Guess this is going to be a long night.
Thanks a LOT, /.
qz
Re: (Score:2)
Ya, this is important to people, oh wait, most people would at the very least go to a freaking Hotspot or the library and slam the update on
Re: (Score:2)
Win2k SP4...
On their official page of release dates: http://support.microsoft.com/kb/260910 [microsoft.com]
Windows 2000 Service Pack 4
Release date: June 26, 2003
I would say this was in the range of "some people just had dialups at that time".
Re: (Score:2)
This isn't rocket science, and can be an easy way to ok bandwidth for everyone with costs lower than cable high speed for people depending on your population density.
I was from a rural area that still has limited high speed, but everyone I know that still lives there has pooled together wireless communities, many even making a business out of it.
Sadly
Re: (Score:2)
x64 Bit Version (Score:1, Interesting)
FYI: It may not be showing up on the site, but it's showing up on my wife's computer via Windows Update. (The Windows XP x64 version, at least).
Large patches are needed for some companies (Score:3, Insightful)
Plus, (IMHO of course), it was time for a service pack for Windows 2003 anyway.
Microsoft may have a monopoly in many areas... (Score:2)
Uh uh.
It so happens that Apple released Mac OS X 10.4.9 today, and the updater didn't make a single sound while it was installing it. (Though the hard disk was making all kinds of thrashy sounds, but I don't think they count.)
yep, sure saved me a lot of time. (Score:2)
List of regressed hotfixes (Score:5, Informative)
http://support.microsoft.com/kb/898073 [microsoft.com] = [IE6 crashes on] digest proxy authentication [to https sites] http://support.microsoft.com/kb/918005 [microsoft.com] = Battery power may drain more quickly [after unplugging or undocking] http://support.microsoft.com/kb/918837 [microsoft.com] = power management is turned off [after disabling WakeOnWirelessLAN] http://support.microsoft.com/kb/924078 [microsoft.com] = [error opening] Properties [...] for a network printer on [WinXP] http://support.microsoft.com/kb/924301 [microsoft.com] = AutoComplete feature [broken after following javascript link in IE6] http://support.microsoft.com/kb/925020 [microsoft.com] = [Lockup when using] USB device on a multiprocessor computer http://support.microsoft.com/kb/925240 [microsoft.com] = warning message [...] new password that does not meet the requirements http://support.microsoft.com/kb/925513 [microsoft.com] = Error code Winsock [...] "WSAECONNABORTED (10053)" http://support.microsoft.com/kb/926047 [microsoft.com] = [Misplaced] AutoComplete box [...] in Internet Explorer 6 http://support.microsoft.com/kb/926132 [microsoft.com] = ...WMI does not clear event registrations when the corresponding sink...
http://support.microsoft.com/kb/926754 [microsoft.com] = STOP: 0x000000D1 (parameter1 , 0x00000002, 0x00000000, 0xf27b4e8e)
http://support.microsoft.com/kb/926940 [microsoft.com] = SQL Server 2000 Service Pack 4 stops responding
http://support.microsoft.com/kb/927291 [microsoft.com] = Dfsutil /import" command takes a long time to finish
http://support.microsoft.com/kb/927493 [microsoft.com] = Winsock programs may exhaust the system's non-paged pool
http://support.microsoft.com/kb/929620 [microsoft.com] = increased paging to the hard disk when you run an SAP R/3
These fixes are regressed, but they're not published on the public Knowledge Base:
"919757" "925290" "926305" "926513" "926583" "927197" "927436" "927893" "928194" "929066" "929759" "930620" "933452"
Hooray! (Score:2)
SBS 2003 (Score:2)
Re: (Score:2)
What I find interesting is that there was an update to sp2
listed in the upgrade that I just finished to a 2003 server.
Re: (Score:2, Funny)
I guess that means that the entirety of the release is a HALT instruction?
I'm here all week.
Re: (Score:2)
Re: (Score:3, Informative)
Re: (Score:2)
running the update"?
But the answer is "not nearly often enough".
Re: (Score:2)
Re:This is one of the reasons I prefer Debian. (Score:5, Informative)
Microsoft doesn't prefer it: their corporate customers do, as they have to perform lengthy and expensive tests to confirm all of their mission critical apps work with the SP (imagine doing it after every patch).
Also the GP said that in Linux updates just mean the app is "updated" and there aren't any backwards incompatibilities... Hehe, I'd love to be that naive myself. Just consider however, we don't all run amateur home servers for our php blogs.
Re:This is one of the reasons I prefer Debian. (Score:5, Insightful)
Also you have to balance out the bonus of having the bug/security hole fixed immediately; shouldn't it be done right away to avoid worse problems?
Re:This is one of the reasons I prefer Debian. (Score:5, Insightful)
On the flip side, if I apply W2K_SP2.exe to my server and something breaks I have a much more difficult time identifying the problem and often the best short term course of action is to roll back the entire service pack.
Re: (Score:2, Informative)
Ummm ... yes, but that is you, not a corporate customer.
A few years back I was working for a company developing a large financial platform, and they were testing a few months before getting
Re: (Score:3, Insightful)
Re: (Score:3, Informative)
What you're talking about is simply the wrong perception of a
Re:This is one of the reasons I prefer Debian. (Score:5, Interesting)
The issue with MS products is their downright incestuous relationship with each other. An update to IE can potentially affect Word. A patch for a security bug in IIS can cause SQL server to go wacky. The reason that business prefers Service Packs to patches is because they've learned the hard way that if you change ANYTHING on a Windows box, you have to recertify EVERYTHING.
Re:This is one of the reasons I prefer Debian. (Score:4, Informative)
Windows doesn't have a monolithic kernel like Linux. Are you going to flame now all OS with hybrid kernels and microkernels?
You wouldn't be right anyway, since there are tons of library dependencies in Linux apps where updating a component could cause a chain reaction affecting all libs that use it, the libs that use the libs, and some app that uses the latter libs, you never suspected.
Re: (Score:3, Informative)
Yes.
Still, I have yet to have *any* problem on a security update on Debian "stable" on about six years. How's that possible?
I'll tell you: Microsoft updates are not *security* updates; they overly change the way Windows behaves so it's no wonde
Re: (Score:2)
No, certainly not in the way Windows is.
Review vs. Testing, and more... (Score:2)
Testing, in my opinion, is only for things that you don't have a deterministic way of proving "by construction". For instance, in something as simple as the change noted above regarding /dev/random, this should have been noted just based on documentation alone - no need for testing.
One problem is documentation is either insufficient, inaccurate, or completely missing.
I also would put some of the blame on both system and application developers: this is one of the problems with the shared library concept. M
This problem is not unique to any platform (Score:2)
Re: (Score:2)
It seems like you consider a upgrading the kernel between major versions a minor patch. I don't know where you're getting your information, but the kernel is central to the system. Even minor updates need major testing since it could affect anything on the system.
Aside from that
Re: (Score:2)
What your describing is more along the lines of upgrading from Windows 98 to Windows 2000.
Re: (Score:2)
Re: (Score:2)
Believe it or not but XP is identical to 2k under the skin. Maybe at best a point release like 2.6.19 to 2.6.20.
Funnily enough the NT kernel and the 9x kernel are related. They are brothers.
NT is just a bit older than 9x.
And that's +5 Informative? (Score:4, Insightful)
Actually, I can think of a dozen different ways it would.
You're talking about going from one MAJOR kernel version to a different MAJOR kernel version.
Why would you deploy a MAJOR change on production servers without massive testing?
A "service pack" would be more like lib-foo_2.1.2 going to lib-foo_2.1.3.
Which is different than going to lib-foo_2.2.0.
Which is far different from going to lib-foo_3.0.0.
Which is far different from going to kernel 2.6.x from kernel 2.4.x.
Re: (Score:2)
You're talking about going from one MAJOR kernel version to a different MAJOR kernel version.
Yes, that is what we're talking about.
Why would you deploy a MAJOR change on production servers without massive testing?
That is exactly what the GP said. To paraphrase, "Why would a large corporation roll out an update without thorough testing? They wouldn't. Doing proper, thorough testing costs money, and it saves us money when they only release non-critical updates every so often."
A "service pack" would be more like lib-foo_2.1.2 going to lib-foo_2.1.3.
No, it wouldn't. Perhaps you are accusing the regular Tuesday Updates with Service Packs. While Windows does not have a monolithic kernel, it does have various combinations of files, libraries, and pr
Re: (Score:2)
I have had the same issue, the apache SSL module needs the random stuff from
No "long and extensive testing" needed to figure that out.
And, as other people have mentioned, upgrading 2.4 -> 2.6 is like
Re: (Score:2)
Re: (Score:2, Interesting)
Enterprisey experience speaks rubbish :) (Score:1)
Just because a patch is ready for download, doesn't mean that you have to install it. You can make it your company's policy to update only on the 10th of every month for example.
But if there is a major security flaw for a certain application that you hear of from your security advisor, then on the contrary there are reasons to update right away.
Common sense and experience of many other (including mine) says that small and
Re:This is one of the reasons I prefer Debian. (Score:5, Informative)
Basically, an SP is mainly a a convenient way of getting an outdated system fully patched-up.
Re: (Score:2)
No it won't. The full 350Mb appears on Windows Update even if you're fully patched up.
Re: (Score:3, Informative)
That's not what happens with XP, so I'm guessing that if what you say is true then it's a mistake and not a stupid idea on Microsoft's part.
Re: (Score:2)
I'm waiting for some wit to post links to ZoneAlarm and the like.
Re: (Score:2)
Re: (Score:2, Informative)
Another point to big service packs is that once SP(n) is released, marketing can admit SP(n-1)
is really quite insecure on WIN(r-3) and how WIN(r) is now strongly recommended for your shop
Re: (Score:2)
This also highlights one of the great advantages with open source: free redistribution. The big reasons why debian, ubuntu and other linuxes can do such seamless updates is because of the package managers; because you have one unified system of downloading and installing apps, you can update them without any hassle at all. This wouldn't be possible on windows since the overwhelming majority of apps are not open source, meaning that you can't have a unified repository where you can download them from. That w
Re: (Score:2)
Re: (Score:1)
-uso.
Re: (Score:1)
http://blog.genotrance.com/applications/appsnap/ [genotrance.com]
More at:
http://lifehacker.com/software/downloads/geek-to-l ive--automatically-download-and-install-your-favor ite-software-211373.php [lifehacker.com]
Re: (Score:2)
Package managers are such an ingenious solution to handling software, and it is something that could only have come from the open source world.
Package managers are an ugly hack to work around the two biggest problems in the open source world: fragmentation and instability, both of which lead to dependency hell.
Re: (Score:1)
Re: (Score:2, Funny)
Re: (Score:1)
Re: (Score:2)
Re: (Score:1)
Wow... and here all this time I thought it was PEOPLE displaying them, not the various pathologies displaying themselves....
Re: (Score:1, Offtopic)