Security updates in answer file breaks pass 2 offline servicing

FredV said:

When taking the install.wim from the reference system after applying all updates, will it apply the KB5034441 that update WinRe in a fresh install ?

That update is specifically meant to be applied to the Recovery Environment on a running PC, not to a Windows image. WinRE updates to address this should now be included in all the latest updates for the Windows images which means that if you perform a clean install with one of those builds you should no longer need this update.

I'll try to look into this further to confirm this and let you know if I determine anything of interest.

@hsehestedt when tamping with install.wim through dism, do you know if other files outside (the ones in the iso), are tampered too ? If not I would edit the batch for my need in consequence to avoid the copy of all iso files each time.

FredV said:

@hsehestedt when tamping with install.wim through dism, do you know if other files outside (the ones in the iso), are tampered too ? If not I would edit the batch for my need in consequence to avoid the copy of all iso files each time.

Forgive me, Fred. I'm having difficulty understanding what you are asking. Could you clarify your question for me a little bit? Please provide as much specific detail as possible.

Again, my apologies for not understanding.

Don’t worry. I try to rephrase.

When using dism to update or modify .wim files, only files inside those wim images are modified, aren’t they ?

I mean other files in the iso, not inside the wim image, are not tampered by dism commands such as

Code:

DISM /Add-Package […]
DISM /Cleanup-Image […]
and so on

aren’t they ?

FredV said:

Don’t worry. I try to rephrase.

When using dism to update or modify .wim files, only files inside those wim images are modified, aren’t they ?

I mean other files in the iso, not inside the wim image, are not tampered by dism commands such as

Code:

DISM /Add-Package […]
DISM /Cleanup-Image […]
and so on

aren’t they ?

That is correct. DISM will operate only on the mounted image that you specify.

It can be done like this:

Code:

Dism /Mount-Image /ImageFile: ....
DISM /image:D:\mount /Add-Package /Packagepath:....\windows10.0-kb5034232-64_ff4651e9e031bad04f7fa645dc3dee1fe1435f38.cab
Dism /Unmount-Image /MountDir:.... /commit

Just yesterday I updated the Win-Images
WIN 10: Service Pack-Build: 3920
WIN 11: Service Pack-Build: 3364