RE: Installing patch KB837001 via Windows Update

["Di Prima, Joel" <[EMAIL PROTECTED]>]

Dear Colleague inside the security area,

PROBLEM WITH 1 PATCH:
There have been confirmed reports that the HP-145/MS04-011 patch can cause
certain type of Compaq Proliant hardware to end in a blue screen after
installation.

The reported types of hardware are 6400r and 8500 of the Proliant line
(only).
HP engineers are working with Microsoft to get this sorted (I haven't sleep
yet...).

The error associated with this behavior is: stop 0x1e
(KMODE_EXCEPTION_NOT_HANDLED)
To fix this the server should be started in safe mode and an uninstall of
the patch must be done.
The uninstall should be located at
%Windows%\$NtUninstallKB835732$\spuninst\spuninst.exe

The details around the reported blue screen issues on proliant machines with
smart start drivers loaded - the issue seem to lie in the cpqphp.sys file
(Compaq PCI Hot Plug controller (CPQPHP installed)" or "HP PCI Hot Plug
controller (CPQPHP installed)") rather than in the Microsoft Patch itself. 

Any issues should be brought to the attention of our Microsoft Technical
Account Manager (you can work through it-threat or send a email to directly
to the Engineer at Microsoft [EMAIL PROTECTED]).

Best regards,
Joel D.
Windows Security Officer
Hewlett-Packard (EMEA)

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Michal Wawer
Sent: Saturday, April 17, 2004 11:15 PM
To: Patch Management Mailing List
Subject: Re: Installing patch KB837001 via Windows Update

> I patched a W2K server at work yesterday using Windows Update
> (my personal server under my desk) and the install process hit
> the proxy for three of the four patches applied. I had to log
> into the proxy each time and there was limited network activity
> so I suspect that James is correct, that the install was
> checking a cert or signature before completing it's task.

No. They are express setup/installers (all have the same size,
about 260 kB I think) trying to get proper files depending
of OS in which they were ran.

Regards,
Michal Wawer

---
To unsubscribe send a blank email to
[EMAIL PROTECTED]

Attachment: smime.p7s
Description: S/MIME cryptographic signature

---
To unsubscribe send a blank email to [EMAIL PROTECTED]