Current source of MSBulletin not updated anymore by upstream

[rmarsollier]

The xlsx file [1] that currently acts as the source of Microsoft new published advisories is not updated anymore.

This access to new vulnerabilities seems to be deprecated [2].

[1] https://download.microsoft.com/download/6/7/3/673E4349-1CA5-40B9-8879-095C72D5B49D/BulletinSearch.xlsx
[2] https://blogs.technet.microsoft.com/msrc/2016/11/08/furthering-our-commitment-to-security-updates/

[pombredanne]

Looks like everything is going through an API now: https://github.com/Microsoft/MSRC-Microsoft-Security-Updates-API ?
Even the the bulletin page stopped being updated in mid march: https://technet.microsoft.com/en-us/security/bulletins.aspx

[pombredanne]

Another possibility could be scrape systematically all the pages such as https://technet.microsoft.com/en-us/library/security/ms17-023.aspx where ms<year>-<sequential number> is a bulletin

[pombredanne]

Or these pages: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199

[pombredanne]

Or this https://portal.msrc.microsoft.com/en-us/security-guidance that has a small download link .... It might need some serious screen scraping though

[rmarsollier]

Solved by #4