-
Feb 4th, 2023, 01:59 PM
#1
2 different versions of SP6?
Wanted to make a separate thread for this issue to see if anyone knew about this specifically... there appears to be 2 entirely different versions of SP6:
https://www.microsoft.com/en-us/down...s.aspx?id=7030
https://www.microsoft.com/en-us/down....aspx?id=50722
I extracted the files from the MSIs (7zip can do this), and most of them are in fact different sizes, for example there's an 80 byte difference between the two versions of comctl32.ocx.
What's going on here?
-
Feb 4th, 2023, 02:07 PM
#2
Re: 2 different versions of SP6?
Security updates. The old binaries often contains vulnerabilities which are fixed in the new updates.
-
Feb 4th, 2023, 02:48 PM
#3
Re: 2 different versions of SP6?
The "security rollup" was issued, withdrawn, and reissued multiple times. I don't think they ever ironed out all of the bugs in them, mostly a lot of "off by one" coding errors that broke access to collection properties and truncated text properties.
These were meant to address vulnerabilities that only apply to VBA-hosted and IE-hosted controls invading via the Internet. They don't apply to VB6 programs aside from exceedingly rare ones that download and run arbitrary scripts and also grant scripts access to members of these controls.
This is also a source of typelib compatibility breaks, forcing your programs to be dependent on the broken versions of the controls in the rollup.
We just had a thread on this here for the common control OCXs though the problems are much broader than that. You don't want to install any version of these rollup attempts on a development machine.
It isn't related to SP6. At all.
-
Feb 4th, 2023, 08:14 PM
#4
Hyperactive Member
Re: 2 different versions of SP6?
Originally Posted by dilettante
The "security rollup" was issued, withdrawn, and reissued multiple times. I don't think they ever ironed out all of the bugs in them, mostly a lot of "off by one" coding errors that broke access to collection properties and truncated text properties.
These were meant to address vulnerabilities that only apply to VBA-hosted and IE-hosted controls invading via the Internet. They don't apply to VB6 programs aside from exceedingly rare ones that download and run arbitrary scripts and also grant scripts access to members of these controls.
This is also a source of typelib compatibility breaks, forcing your programs to be dependent on the broken versions of the controls in the rollup.
We just had a thread on this here for the common control OCXs though the problems are much broader than that. You don't want to install any version of these rollup attempts on a development machine.
It isn't related to SP6. At all.
so what version in post #1 would be best to install.
-
Feb 4th, 2023, 10:11 PM
#5
Re: 2 different versions of SP6?
As far as I can tell, neither one.
This seems to be a valid update though: https://www.microsoft.com/en-us/down....aspx?id=10019
-
Feb 5th, 2023, 03:57 AM
#6
Re: 2 different versions of SP6?
This is the SP6 for the IDE, the "good" one: https://web.archive.org/web/20200812...82/Vs6sp6B.exe
This is the only one necessary to install.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|