Hello Team, we have windows server ServerA installed with SSRS 2008R2 with out DBengine or any other components. and ServerA is having its reportserver and reportservertempdb databases placed in SERVERB. ServerB is having SQL Server 2008R2 DBEngine installed. we have patched to latest Cumulative updates on ServerB. now there is question from Security team that SSRS is not patched to latest versions on ServerA. we are confused here if Microsoft is releasing patches seperately for SSRS and if yes how we cna apply with out having DB engine installed having only SSRS component on the server.
Microsoft bundle the SQL components in the same patching process. I think I remember seeing seperate downloads for CU's for 2008R2 (but dont quote me). If you run the installer for 2012+ it finds the componets installed on the server and patches where appropriate (see [here] why you should do both). Will often find performance improvements, formating issues etc within the details of the SP/CU. :