Windows security updates explanation

[pierre]

Hello,

I was working on Windows vulnerabilities.

By looking at a security bulletin, I did not understand a column.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-047

See:

What does it mean "Updates replaced", and specifically the huge number "3121918" ? (related with the vulnerability name)

Thanks

[digininja]

Notice the little * at the end of the column name?

 

*The Updates Replaced column shows only the latest update in any chain of superseded updates. For a comprehensive list of updates replaced, go to the Microsoft Update Catalog, search for the update KB number, and then view update details (updates replaced information is provided on the Package Details tab).

 

and the number of the knowledge base ID

[pierre]

Yes but I did not understand " in any chain of superseded updates".

So it can be translate by :

"The security update ID for patching the ms16-047 vulnerability"

[digininja]

This update replaces all these others. I.e. MS16-047 replaces MS16-007.

[pierre]

Ok so for this point above:

This update security that patchs the vulnerability MS16-047 is ID 3149090, and it also patch the vuln MS16-007 (that was originally pactchs with the update security 3121918).

-> So it is recommanded to apply the security update 3149090 to patch both MS16-047 & MS16-007

Is that so ?

[digininja]

It says install MS16-047 as it is a better patch than MS16-007. The MSXX-XXX is the patch, the long numbers are IDs for the knowledge base articles that discuss the issues.

[pierre]

Ah ok, though it was related to any "Microsoft CVE nomenclature".

Indeed, "Microsoft Security Bulletin"

Thanks :)