search

microsoft / MSRC-Microsoft-Security-Updates-API

Repo with getting started projects for the Microsoft Security Updates API (msrc.microsoft.com/update-guide)
https://msrc.microsoft.com/update-guide
MIT License
366 stars 115 forks source link

No MSXX-XX field in update API #41

Closed CaledoniaProject closed 5 years ago

CaledoniaProject commented 5 years ago

The update API has some glitches but generally works. I can find KB id in it, but no MSXX-XX field in it, e.g MS17-023

screenshot 2019-02-16 at 12 07 20 am

Am I wrong?

CaledoniaProject commented 5 years ago

The old BulletinSearch excel has a MSXX-XX field, was it removed in the API?

craig-martin commented 5 years ago

Correct. The CVRF API only serves updates starting from when the API was released, it does not provide older items.
How valuable is that scenario to you?

craig-martin commented 5 years ago

BTW I'd love to learn more about this:

The update API has some glitches but generally works.

Can you provide detail (or create more issues) for the glitches?

CaledoniaProject commented 5 years ago

Hi @craig-martin, I didn't mean older data.

For example, the corresponding MS_ID of KB4014329 is ms17-023. Although 4014329 is present in 2017-Mar.json, but MS17-023 is not mentioned in it.

CaledoniaProject commented 5 years ago

I have submitted issue for other glitches

craig-martin commented 5 years ago

Got it. I'll get on those.

craig-martin commented 5 years ago

Regarding MS17-023, that is the older format called 'Security Bulletin', it is the last one in fact. After that Microsoft switched to 'Security Updates', which is also when the CVRF API became available. As far as I know we do not create KB articles for security updates anymore, we just link to them for the remediations in a vulnerability.

I think this is expected behavior, unless I'm not understanding the issue.

CaledoniaProject commented 5 years ago

Okay, understood. Closing this issue.