Why do new SUS clients I install get offered multiple IE cumulative patches rather than just the latest one?

Contributed By: Cliff Hobbs [MVP SMS]
This is down to the fact that SUS isn't intelligent enough to realise that one cumulative patch supersedes another. As far as it's concerned all patches (not just IE one's), are individual patches and therefore it doesn't know or care that one patch supersedes another.

The best thing you can do when you approve a new patch is to check that it doesn't supersede a patch you've already approved. If the new patch does replace the old one then make sure you unapprove the old one. If you're not sure then check out the relevant Knowledge Base article relating to the update.