[For Information] - Desktop Support - WSUS Update release for October 2009

To Windows Desktop and Server Administrators

Following testing of Microsoft Windows patches for October from participating system administrators, patches have been approved for distribution from the ID-WSUS server that were described in the IT Service Desk announcement:

[http://servicedesk.unimelb.edu.au/announcements/display_full.php?id=888]

However there are currently issues with the following:

Currently an issue is being observed after applying KB974571 (MS09-056: Vulnerabilities in CryptoAPI could allow spoofing) to LCS/OCS servers, that is causing them to believe that they are running an evaluation version of LCS/OCS and that it has expired.

[http://support.microsoft.com/kb/974571/]

KB975254 (MS09-053 Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution )

You can install the security update on a computer that is not running an affected version of FTP. When you do this, FTP is not installed on the computer. However, if the FTP service is installed on the computer in the future, Windows Update will reoffer the update, and you will have to install the update on the computer.

[http://support.microsoft.com/kb/975254/]

KB973965 (MS09-060: Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office could allow remote code execution)

Microsoft Knowledge Base Article 973965 documents the currently known issues that customers may experience when installing this security update. The article also documents recommended solutions for these issues. When currently known issues and recommended solutions pertain only to specific releases of this software, this article provides links to further articles.

[http://support.microsoft.com/kb/973965]

KB957488 (MS09-062: Vulnerabilities in GDI+ could allow remote code execution)

Microsoft Knowledge Base Article 957488 documents the currently known issues that customers may experience when installing this security update. The article also documents recommended solutions for these issues.

http://support.microsoft.com/kb/957488

ACTION REQUIRED:
================
System administrators and end users should ensure that all Windows OS based computers are up to date either by enabling automatic updates or manually updating affected computers.

Computers which are configured to use the ID-WSUS server for their updates will have the deployment monitored although should administrators notice issues relating to release of Windows Updates through ID-WSUS we request that information be forwarded to either the IT Service Desk via [http://servicedesk.unimelb.edu.au/] or on extension 40888.

Please refer to Wednesday's announcement for full information about the updates to be approved: [http://servicedesk.unimelb.edu.au/announcements/display_full.php?id=916]

announced at 16/10/2009