Patch Management Solution

 View Only
  • 1.  Microsoft Patch Tuesday – August 2014 - MS14-044

    Posted Aug 13, 2014 02:05 PM

     

    Hello All,

    For those of you with SQL 2012  installed in your environment Microsoft have released  MS14-044 Vulnerabilities in SQL Server Could Allow Elevation of Privilege as part of Microsoft Patch Tuesday  for August 2014.   There is known issue with latest PMImport  which is shown when trying to stage the MS14-044. It seem to be failing for KB2977326-x64.exe   from within the download window the url is shown as  http://www.microsoft.com/SQLServer2012-KB2977326-x64.exe  normally the URL start with http://download.microsoft.com not http://www.microsoft.com .

     

    44.GIF

    The good news  we have opened a case and the Developers are aware but it may take a few  days in order to get the download link updated in a future PMImport. 

    Cheers Mark 



  • 2.  RE: Microsoft Patch Tuesday – August 2014 - MS14-044

    Posted Aug 13, 2014 07:44 PM

    Hi ,

    I originally assumed (always a dangerous thing) that I could create a policy  even though only 13 of the 14 updates could be downloaded, however I can’t it fails to create the policy. 

    So the only option until the meta data import is fixed  is to exclude SQL 2012 from the vendor list,  ensure that Delete previously downloaded data for vendors, software and languages that are now excluded  is checked and  then re run the PMimport I could then stage and create a policy.

    Cheers Mark

     



  • 3.  RE: Microsoft Patch Tuesday – August 2014 - MS14-044

    Posted Aug 14, 2014 07:29 AM

     

    Hi, 

     

    I had the same problem with MS14-044, it seems the url for the patch is broken. 

    www.symantec.com/docs/TECH223778

     

    Thks



  • 4.  RE: Microsoft Patch Tuesday – August 2014 - MS14-044

    Posted Aug 15, 2014 05:07 AM

    Hello  All,

    Good news the issue with MS14-044 -  SQL 2012 update is  fixed ,  if you removed the SQL 2012 updates from the Vendor tab on PMImport you will need to change them  back , then run  the   new PMImport,   recreate the MS14-044 package  by right clicking on the package and choosing recreate and all of the four missing SQL updates including the update with the corrupt url  will be  downloaded

    In order to deploy these missing 4  updates  you will need to edit you’re the   MS14-044 policy  and manual add them.  locate the MS14-044  policy click on the Advanced the newly added updates will be in red with and not checked, there are 3 on tab 1 and 1 on tab 2.

     

    120px_MS14-044 fixed.JPG