You may also want to discuss this in the
microsoft.public.security.baseline_analyzer newsgroup.
The following doesn't provide a number, but helps answer what kinds of
updates MBSA covers...
This is from: http://www.microsoft.com/technet/security/tools/mbsa2/qa.mspx
Q: What kinds of updates will MBSA 2.0 support?
A. Any update published on Microsoft Update as a security update,
update rollup, or service pack can be scanned using MBSA 2.0. These updates
have been defined by Microsoft as follows:
Security update-A broadly released fix for a product-specific
security-related vulnerability. Security vulnerabilities are rated based on
their severity which is indicated in the Microsoft security bulletin as
critical, important, moderate, or low.
Update rollup-A tested, cumulative set of hotfixes, security updates,
critical updates, and updates packaged together for easy deployment. A
rollup generally targets a specific area, such as security, or a component
of a product, such as Internet Information Services (IIS).
Service pack-A tested, cumulative set of all hotfixes, security
updates, critical updates, and updates, as well as additional fixes for
problems found internally since the release of the product. Service packs
may also contain a limited number of customer-requested design changes or
features.
If you have corporate hotfixes installed on the scanned computer,
detection will observe those updates based on file version as determined by
Microsoft. Typically files with a newer than expected version would be
accepted, unless Microsoft had determined that a higher versioned file was
not secure, in which case the update would be offered in the report.
Note: Updates such as the Malicious Software Removal Tool will be
offered by MBSA 2.0 due to their relationship to certain security issues.
This tool has been classified as an update rollup.
--
Matthew Wetmore
Senior Development Lead - Windows Server Update Services (WSUS) UI,
Microsoft Baseline Security Analyzer (MBSA), Management Workload
This posting is provided "As Is" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Michael K" <Michael K[ at ]discussions.microsoft.com> wrote in message
news:1DFDFB91-F763-48A9-B72F-D4E7F456E73D[ at ]microsoft.com...
[Quoted Text] > Anyone know how many additional patches a month WSUS provides versus MBSA
> (even an estimate would be helpful)?
|