Microsoft Email Notification and SUS

Hi,

I've noticed that the security email notifications
(http://www.microsoft.com/technet/sec...in/notify.mspx) that
Microsoft send often contain a smaller number of updates than my SUS server
when it synchronises. For instance the following 2 patches were downloaded
by SUS on 10th September but were not mentioned in the Notifcation Email
(there were others as well):

Q324096: Security Update (Windows 2000), 10/09/2004
Download size: 858 KB
This update resolves the "Buffer Overrun in SmartHTML Interpreter Could
Allow Code Execution" vulnerability in Windows 2000. Download now to
eliminate a vulnerability of moderate severity in the Front Page 2000 Server
Extensions for Microsoft Office. Details...
Applies to: Windows 2000 SP2, Windows 2000 SP3

Security Update for Internet Explorer 6 Service Pack 1 (KB833989),
10/09/2004
Download size: 1 MB
A security issue has been identified that could allow an attacker to
compromise a computer running Windows and gain complete control over it. You
can help protect your computer by installing this update from Microsoft.
After you install this item, you may need to restart your computer. Note
that in Control Panel, Add/Remove Programs, this update will appear as
Microsoft VGX 833989. Details...
Applies to: Windows 2000 SP2, Windows 2000 SP3, Windows 2000 SP4

Does anyone know why the emails seem to only contain a small number of
updates?

Thanks - Dave
-----------------

Microsoft frequently releases "revised" updates, without notifying anyone.
Update 324096 is definitely an "old" update, because they don't use those
numbers anymore.

Often, it is only the textual descriptions accompanying a patch that are
actually revised. In other cases, the patch itself is revised and
released, without any fanfare. Kind of makes you wonder...

Joe Dance
University of South Carolina

"Dave Peterson" <> wrote in message
news:%...
> Hi,
>
> I've noticed that the security email notifications
> (http://www.microsoft.com/technet/sec...in/notify.mspx) that
> Microsoft send often contain a smaller number of updates than my SUS
server
> when it synchronises. For instance the following 2 patches were downloaded
> by SUS on 10th September but were not mentioned in the Notifcation Email
> (there were others as well):
>
> Q324096: Security Update (Windows 2000), 10/09/2004
> Download size: 858 KB
> This update resolves the "Buffer Overrun in SmartHTML Interpreter Could
> Allow Code Execution" vulnerability in Windows 2000. Download now to
> eliminate a vulnerability of moderate severity in the Front Page 2000
Server
> Extensions for Microsoft Office. Details...
> Applies to: Windows 2000 SP2, Windows 2000 SP3
>
> Security Update for Internet Explorer 6 Service Pack 1 (KB833989),
> 10/09/2004
> Download size: 1 MB
> A security issue has been identified that could allow an attacker to
> compromise a computer running Windows and gain complete control over it.
You
> can help protect your computer by installing this update from Microsoft.
> After you install this item, you may need to restart your computer. Note
> that in Control Panel, Add/Remove Programs, this update will appear as
> Microsoft VGX 833989. Details...
> Applies to: Windows 2000 SP2, Windows 2000 SP3, Windows 2000 SP4
>
> Does anyone know why the emails seem to only contain a small number of
> updates?
>
> Thanks - Dave
> -----------------
>
>