October 26, 2009 at 1:47 pm
I read the link below and it looks to me that this latest MS09-062 patch ONLY applies to the SQL2005 Instances that have REPORTING SERVICES installed too, correct?
http://www.microsoft.com/technet/security/Bulletin/MS09-062.mspx
October 28, 2009 at 8:01 am
Is no one applying this patch? I'm just trying to confirm it's for SQL Reporting Services only?
...thanks
October 28, 2009 at 10:51 am
You must apply it, even if you don't have Reporting Services Installed.
Regards.
Jose Santiago Oyervides.
October 28, 2009 at 12:55 pm
Curious, because within this link...
http://www.microsoft.com/technet/security/Bulletin/MS09-062.mspx
...Expand the "Frequently Asked Questions (FAQ) section and you'll find this statement:
If I have an installation of SQL Server, how am I affected?
When SQL Server Reporting Services is installed, the affected installations of SQL Server software may host the RSClientPrint ActiveX control. This ActiveX control distributes a copy of gdiplus.dll containing the affected code. Customers are only impacted when the RSClientPrint ActiveX control is installed on Microsoft Windows 2000 operating systems. If the RSClientPrint ActiveX control is installed on any other operating system, the system version of GDI+ will be used and the corresponding operating system update will protect them.
Customers with affected installations of SQL Server that are installed on Windows 2000 operating systems and have the RSClientPrint ActiveX control should apply the update immediately.
SQL Server Reporting Services is an optional component and must be installed for this security update to apply. Affected installations of SQL Server will only be offered this update if SQL Server Reporting Services is installed.
October 28, 2009 at 1:13 pm
In my case, the update was offered via Microsoft Update, even though I don't use RS in any server.
Before this patch, I had SP3+CU1 installed in all my servers.
I installed this patch in all my servers with no issues.
Regards,
JSO
October 28, 2009 at 1:17 pm
Thanks so much.
October 29, 2009 at 9:06 am
It looks like Windows SUS isn't flagging any of my servers unless they have Reporting Services installed. We don't use Microsoft Update on our servers.
FWIW, the component that's being patched isn't installed unless you installed Reporting Services.
October 29, 2009 at 9:09 am
Thanks chrism, I believe you are correct.
October 29, 2009 at 11:56 am
I have installed MS09-062 on one server (2005 SP4 9.00.4035). It installed and updated all components on server (database engine, SSIS,SSAS,SSRS) but as RS was installed does not answer the OPs original question.
One thing I noticed the hotfix does not appear in add/remove programs, so does not appear to be removable without an uninstall? Interested if you guys can confirm that?
---------------------------------------------------------------------
Viewing 9 posts - 1 through 8 (of 8 total)
You must be logged in to reply to this topic. Login to reply