Patch Management

Microsoft pulls Exchange update from December Patch Tuesday release

December 12, 2014

Microsoft pulled one of its December Patch Tuesday updates on Friday after it disrupted Outlook's ability to connect to Exchange.

The issue was found in Microsoft's Exchange Server 2010 SP3 Update Rollup 8, which was part of the MS14-075 bulletin, according to the company's post on the pulled update. The update was meant to address an ‘important' elevation of privilege vulnerability.

“Users should not proceed with deployments of this update until the new RU8 version is made available,” the post says. “Customers who have already started deployment of RU8 should rollback this update.”

The issue only affects the Exchange Server 2010 SP3 RU8 update and was set to address CVE-2014-6319.

Microsoft said it will, “deliver a revised RU8 package as soon as the issue can be isolated, corrected, and validated.”

MS14-075 was pushed to December's Patch Tuesday after being initially slated for a November release.

prestitial ad