Hotfix (?) regarding MS09-060

Usage and Config Patch
1

(imported topic written by akummer)

Hi,

Microsoft released also some Hotfixes (they nevertheless called it security fixes):

They are to solve an issue with forms 2.0

Office XP http://www.microsoft.com/downloads/details.aspx?familyid=4974495C-70C5-4C7A-8BD3-56C9505F8283&displaylang=de

Office 2003 http://www.microsoft.com/downloads/details.aspx?FamilyID=f8079643-6e06-48d3-b581-db179e1f18f8&DisplayLang=de

Office 2007 http://www.microsoft.com/downloads/details.aspx?FamilyID=ec802723-f2b2-400a-a24d-8d8d9092f9ea&DisplayLang=de

Will they be provided by Bigfix - because they are directly linked to MS09-060?

Regards

Andreas

2

(imported comment written by BenKus)

I spoke with the Fixlet team and they said they were working on making these… They should have it out by the end of this week…

Ben

3

(imported comment written by akummer)

Thanks Ben!

I sent you the links for the german version but what we primarily need is the English one. Sorry for the confusion.

Here are some more details:

For Office XP:

The “original” Patch is this: http://www.microsoft.com/downloads/details.aspx?FamilyId=04878c2c-eb97-426f-be08-89036a6799db&displaylang=en ; KB 973702 -> targeting Outlook, this is available in Bigfix, Fixlet 906001

The “additional” Patch is this: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=4974495c-70c5-4c7a-8bd3-56c9505f8283 ; KB 974556 -> targeting Office, -> NOT AVAILABLE IN BES

The same for other Office version:

Office/Outlook 2003:

Original: http://www.microsoft.com/downloads/details.aspx?FamilyId=79e2b2e8-d5e8-4014-b489-720af2b5083d&displaylang=en ; KB 973705

Additional: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f8079643-6e06-48d3-b581-db179e1f18f8 ; KB 974554 -> NOT AVAILABLE IN BES

Office/Outlook 2007

Original: http://www.microsoft.com/downloads/details.aspx?FamilyId=d39234a3-c62c-44ba-a626-3179a183ca09&displaylang=en ; KB 972363

Additional: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ec802723-f2b2-400a-a24d-8d8d9092f9ea ; KB 974234 -> NOT AVAILABLE IN BES

Really confusing…

Regards

Andreas

4

(imported comment written by PaulPhillabaum)

In the notes for 09-060, they show this faq…

Why are Knowledge Base articles 974554, 974556, and 974234 not listed in the security bulletin?

These packages do not contain security updates and do not correct any security-related issues.

The fixlet entitled “974234: Security Update for the 2007 Microsoft Office System” is listed as critical. Since it doesn’t contain a security update, could you change the source severity to something other than critical?

5

(imported comment written by jeremylam)

Paul P

In the notes for 09-060, they show this faq…

Why are Knowledge Base articles 974554, 974556, and 974234 not listed in the security bulletin?

These packages do not contain security updates and do not correct any security-related issues.

The fixlet entitled “974234: Security Update for the 2007 Microsoft Office System” is listed as critical. Since it doesn’t contain a security update, could you change the source severity to something other than critical?

You are absolutely correct sir, and those fixlets are being changed to a source severity of to correspond with our other non-security content.