Chris Stauffer at myITForum.com

Final info on KB927891(V3) and the WSUS 3.0 client for those using SMS 2003 and ITMU

Ok there have been so many questions about these updates that I decided that I should contact my TAM (Thanks John answers as [JS]). After having a second TAM add his 2 cents (Thanks Scott answers ar [SW]) here is what we came up with.

There seems to be mass confusion on the net because of this update. Apparently there have been issues with SVCHOST toping the CPU at 100%. I have experienced this on my home system and several of my friends and families systems. I have not witnessed it at work and I have not been contacted by any of the agencies for this problem. But I have been contacted by many of them asking what they should do.

Everything I read about the SVCHOST issue says that you need to install KB927891 and the WSUS 3.0 client.

• http://blogs.technet.com/wsus/archive/2007/05/15/srvhost-msi-issue-follow-up.aspx
• http://blogs.technet.com/wsus/archive/2007/05/22/latest-msi-dll-fix-927891-also-available-to-wu-wsus-today.aspx

Can you please clarify a few things:

1. KB927891 patch was release 2 weeks ago. Now it was re-released yesterday.
• http://support.microsoft.com/kb/927891

• What changed?  The update does not correct a security vulnerability, but is instead an update for the error conditions that are described in the actual article.  It appears the previous article did not state all the error conditions that this update actually fixed.  So as you can see the executable did not change since the 7^th, just the verbiage on what it corrected. [JS].

• i. Released 5-7-07 WindowsXP-KB927891-v2-x86-ENU.exe
• ii. Released 5-22-07 WindowsXP-KB927891-v3-x86-ENU.exe

• When I click on the link from the KB article above it gives me this:

• i. Note: as you can see it still has the date of 5-7-07 but it is now version 3

Was

File Name: WindowsXP-KB927891-v2-x86-ENU.exe
Version: 927891
Knowledge Base (KB) Articles: KB927891
Date Published: 2/20/2007

Now

2. Documentation I reviewed also said that we should update all systems with this patch for Windows Update version 3.0:
• http://download.windowsupdate.com/v7/windowsupdate/redist/standalone/WindowsUpdateAgent30-x86.exe

• i. I believe this is the KB that goes with it
• 1. http://support.microsoft.com/kb/936301

• The problem is that we use ITMU for most of our systems. Do we need this update if we only use ITMU RV3? 

• i. I haven't heard anything back on this one just yet. Although all I have read both internally and externally says it should be applied [JS] (copying Scott as he is checking on this as well).

• ii. ITMU uses both windows installer (the component being updated here) and WUA (component being updated later). I do not believe that ITMU RV3 requires different WI or WUA components so I can't find a reason not to apply it. The only docs I see say to update all OS's where Windows Installer is applicable. Even though you use ITMU, it still uses WI and the update agent (which will be updated at a later time). (SW)

Hope this helps someone

Chris Stauffer <><