Patch/Configuration Management, Vulnerability Management

Microsoft pulls Exchange update from December Patch Tuesday release


Microsoft pulled one of its December Patch Tuesday updates on Friday after it disrupted Outlook's ability to connect to Exchange.

The issue was found in Microsoft's Exchange Server 2010 SP3 Update Rollup 8, which was part of the MS14-075 bulletin, according to the company's post on the pulled update. The update was meant to address an ‘important' elevation of privilege vulnerability.

“Users should not proceed with deployments of this update until the new RU8 version is made available,” the post says. “Customers who have already started deployment of RU8 should rollback this update.”

The issue only affects the Exchange Server 2010 SP3 RU8 update and was set to address CVE-2014-6319.

Microsoft said it will, “deliver a revised RU8 package as soon as the issue can be isolated, corrected, and validated.”

MS14-075 was pushed to December's Patch Tuesday after being initially slated for a November release.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.