OVAL Board member Bill Wall of Harris shared the following points with
me (thanks, Bill!), which are worth sharing with the entire Community
Forum.
Thanks,
Tiffany
Microsoft Technical Lead, MITRE's OVAL Team
-------- Original Message --------
Subject: RE: [OVAL-DISCUSSION-LIST] OVAL queries for Microsoft
vulnerabilities
Date: Wed, 26 Mar 2003 09:40:28 -0500
From: "Wall, William (wwall)" <
wwall@...>
To: "'
tab@...'" <
tab@...>
Tiffany,
Yes, Microsoft puts patch information in both places. The \HotFix\ area
has
been the traditional area.
The \Updates\ area also includes patches for DataAccess (MDAC) and
Windows Media
Player. I don't think they
will eventually support one area and not the other. I believe the .inf
file
will always put patch information
in both areas. I believe I have 20 patches installed, and they all have
been
duplicated in both areas.
When Service Pack 4 comes out, the \Windows 2000\SP4\ will probably go
away and
replaced by
\Windows 2000\SP5 for new patches after SP4.
Bill
