locked
Discrepancy between Microsoft Update Catalog and Microsoft Security BulletinSearch? RRS feed

  • Question

  • Dear Members:

    This is in relation to Windows Server 2008 R2 Service Pack-1.

    Microsoft Update Catalog indicates that Patch No. KB2876331 (MS13-089) has been superseded by Patch No.KB2993651 (MS14-045).

    But when we look up the Microsoft Security Bulletin for MS14-045, this makes NO mention of superseding the above patch for MS13-089.

    Even if we look up Microsoft’s BulletinSearch spreadsheet, it makes no mention of MS14-045 superseding the Patch No. KB2876331 (MS13-089).

    Could one you please clarify the above apparent discrepancy?

    Thank you very much for your time and interest.

    With best regards,

    Ganesh


    • Edited by Ganesh Neelakantan Thursday, October 9, 2014 1:59 AM
    • Moved by Amy Wang_ Friday, October 10, 2014 7:45 AM KB related from Security forum
    Thursday, October 9, 2014 1:47 AM

Answers

  • Yes, KB2993651 most definitely supersedes KB2876331 for current operating systems, but not for Windows XP.

    MS13-089 is not fully superseded, because the Window XP patch was not released in MS14-045. So KB2876331 for Windows XP is still a current patch for Windows XP SP3 systems.

    Also note that MS14-045 also contains a new update, KB2976897, which applies only to Windows 7 and newer operating systems (but not Windows Server 2003). So, also, this update impacts whether the bulletin as a whole supersedes another, since this update does not.

    Generally speaking, though, when evaluating supersession, that evaluation should be made on a per-Update basis, not at the higher level of an entire bulletin. Quite often a collection of vulnerabilities covered by a single bulletin may involve different patches for different products. The supersession occurs at the *update* level, not at the bulletin level.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Proposed as answer by antwesor Tuesday, October 14, 2014 2:38 PM
    • Marked as answer by Steven_Lee0510 Thursday, October 23, 2014 3:00 AM
    Monday, October 13, 2014 1:22 PM

All replies

  • Hi Ganesh,

    KB2993651 replaces a lot of updates, but only several updates are mentioned in the Microsoft Security Bulletin.

    Therefore, from my point of view, Microsoft Security Bulletin only shows a summary of the update.

    Best Regards.



    Steven Lee

    TechNet Community Support

    Monday, October 13, 2014 3:10 AM
  • Yes, KB2993651 most definitely supersedes KB2876331 for current operating systems, but not for Windows XP.

    MS13-089 is not fully superseded, because the Window XP patch was not released in MS14-045. So KB2876331 for Windows XP is still a current patch for Windows XP SP3 systems.

    Also note that MS14-045 also contains a new update, KB2976897, which applies only to Windows 7 and newer operating systems (but not Windows Server 2003). So, also, this update impacts whether the bulletin as a whole supersedes another, since this update does not.

    Generally speaking, though, when evaluating supersession, that evaluation should be made on a per-Update basis, not at the higher level of an entire bulletin. Quite often a collection of vulnerabilities covered by a single bulletin may involve different patches for different products. The supersession occurs at the *update* level, not at the bulletin level.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Proposed as answer by antwesor Tuesday, October 14, 2014 2:38 PM
    • Marked as answer by Steven_Lee0510 Thursday, October 23, 2014 3:00 AM
    Monday, October 13, 2014 1:22 PM