In my Windows update history I find two updates for Root Certificates. One is from November 29, 2002, the other from August 16, 2003. May I assume that your date of 11-25-2003 is a typo?
But indeed, the documentation is scarce, and there is no KB-article mentioned as with other security updates. However, using the procedure outlined by Cursorcowboy (many thanks!) I could download the last update (it clearly doesn't make sense to download an earlier one). Click on 'see also' (when enabled), select OS Windows 98, select advanced options, fill in it should contain the word root, keep all checkboxes checked, click search, and it returns with 1 recommended update. Clicking on that give an 'update for root certicates', 189 kB, posted on august 12, 2003. Then, if I click on the green arrow it lets me specify a download-location and download the file. At which point I stopped, and you probably will continue.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/news/rootcert.asp notes the way Microsoft handles root certicates. For XP there is no more need to use Windows update anymore (it's done automatically behind the screens, like it or not, anybody!), for other OS'es there is. Apparently, no new one was accepted after august 12, 2003.
By the way, I wonder if Bob Proffit's company regulations will find this automatic update acceptable. As it seems it's coupled to the OS, not to IE, a change to Mozilla (like the change from MS Office to Open Office) might not help. But Microsoft isn't clear on that at all. Which leaves me wondering how Mozilla handles new root certicates if Microsoft doesn't do it for them. So one question leads to another.
Hope this helps,
Kees