My company uses the Symantec Vulnerability scanning system to scan computers on our network for missing patches and other security holes. The problem is that some of the patches it lists as needed are disabled in Altiris because they have been superseded or revised. I am having a hard time tracking down which patches supersede which. I also have at least one patch listed that references office 2013 service pack 1 and KB2850036.
Example:
Microsoft Office 2013
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition
Download and apply the upgrade from: http://support.microsoft.com/kb/2850036
I don't see this KB article in the altiris console. Can anyone help me understand what is going on and what to do to resolve it? I would have hoped that Symantec's own scanner might tell me how to use Symantec CMS to patch the vulnerabilities but it doesn't.