Patch listing for MS products

[chip33az]

Does anyone know if there is a listing of the various patches for
products, what they are and what they replace (if anything)?

I work for a company that does not use the automatic update and we are
trying to deteremine what patches are out there, and since we are
behind, what patches were overridden by another one.

Thanks for any information.

 

[Guest]

A good place to start is:

http://www.microsoft.com/technet/security/current.aspx

Also, consider using SUS (or forthcoming WSUS) that allows you to setup an
internal security patch management software. It works very well with Win 2000
SP3 / Win XP SP1 and above.

More info:

http://www.microsoft.com/windowsserversystem/sus/default.mspx


Do let us know if this helps. Thanks!

 

[Herb Martin]

A good place to start is:

http://www.microsoft.com/technet/security/current.aspx

Also, consider using SUS (or forthcoming WSUS) that allows you to setup an
internal security patch management software. It works very well with Win 2000
SP3 / Win XP SP1 and above.

More info:

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Also MBSA (Microsoft Baseline Security Analyzer) has
much of this info.

And actually the included (and frequently updated)
MSSecure.XML file has this information within it.
(downloaded as MSSecure.cab).

It isn't perfect, but it is one of the most complete listings.

This file or a similar file is also included in SUS downloads.
(It may not be the same since SUS only supports a subset of
the updates, but this has been increased in each new version.)


It is of course, not particularly convenient to read, as it's
format and structure were designed for automata tools
like MBSA and not for humans but it is in text (XML) and
can be read, or processed.

 

[Roger Abell]

Also, you can visit Windows Update and use the query interface
of the catalog. When at WU click on the link to show more options,
and then select the catalog link that will be shown