The two hotfix articles both refer home users to
http://www.microsoft.com/technet/security/bulletin/ms05-jan.mspx and this
says how to get the patches and this is the same as it has been ever since
the launch of Win Me, that is, the Windows Update site.  The same is true
of the two security bulletins: MS05-001 and MS05-002 (both linked from the
KB articles listed below)..

There does however seem to be a problem in that one of the patches
(891711) does not yet seem to be available.

For more details see KB890175 - "MS05-001: Vulnerability in HTML Help
could allow code execution" (http://support.microsoft.com/?kbid=890175).
Note that update 811630 (see KB811630 - "HTML Help Update to Limit
Functionality When It Is Invoked with the window.showHelp( ) Method"
(http://support.microsoft.com/?kbid=811630) should be installed prior to
installing the later 890175 update.

Also KB891711 - "MS05-002: Vulnerability in cursor and icon format
handling could allow remote code execution"
(http://support.microsoft.com/?kbid=891711).

See also "Windows Security Updates Summary for January 2005"
(http://www.microsoft.com/security/bulletins/200501_windows.mspx)