ms08-067

Usage and Config Patch
1

(imported topic written by BenKus)

Microsoft released an out-of-band updated today with the bulletin ID of MS08-067. We are currently working on making the Fixlets and we should have them available soon. As soon as we release the Fixlets, you should see them updated in your Console within an hour and you can deploy them immediately.

We will send an update when they are released.

Ben

2

(imported comment written by jcsUTSW)

Status ??

3

(imported comment written by jeremylam)

We’ve just released all the content for x86-based Windows systems, with more content to come.

4

(imported comment written by jeremylam)

All English content for MS08-067 has now been released.

5

(imported comment written by mcijerry91)

I dont see anything on our BigFix server yet.

Jerry - Verizon.

6

(imported comment written by mcijerry91)

Neverind…I see prior to me posting the timezone was Pacific Time. Once I signed in…I see the times of these posts are 2 hours more current for me.

I would assume we will see something within the hour.

7

(imported comment written by jcsUTSW)

I just pushed the patch via the BF console to a machine to test… The action showed “Pending Restart” but when I did a send refresh on the server and it updated in the console the item does not show as relevant…

Can anyone confirm that you do or do not have to reboot for this to be applied completely?

8

(imported comment written by BenKus)

Hey guys,

Quick update:

At 1:45pm Pacific Time, BigFix has released all the Fixlets for MS08-067 for English OSes (Microsoft released the patches at 11:45pm Pacific Time). The Fixlets should update in all BigFix Servers automatically within 1 hour or you can use “Tools > Manage Sites > Gather All Sites” to force your BigFix Server to update immediately.

All Non-English Fixlet messages are expected to be released before the end of the day.

Ben

9

(imported comment written by BenKus)

Hi everybody,

All non-English Fixlets were released around 6pm Pacific Time. So by now everyone should have all the Fixlets… If people want to post their experiences with the patch, please do… Our tests here went very smoothly…

Ben

10

(imported comment written by SystemAdmin)

Hi Ben,

Are you aware of machine with a higher version of the netapi32.dll on XP machines? The fixlets are showing as relevant on less than 50% of our windows XPSP2 desktop population.

Thanks

Rob

11

(imported comment written by jcsUTSW)

jcsUTSW

I just pushed the patch via the BF console to a machine to test… The action showed “Pending Restart” but when I did a send refresh on the server and it updated in the console the item does not show as relevant…
Can anyone confirm that you do or do not have to reboot for this to be applied completely?

Still looking for an answer here.

Is a system protected when you patch and do not reboot it?

If you patch it and do not reboot it, BigFix shows it as not relevant any longer.

12

(imported comment written by jessewk)

I don’t know about anything about this particular patch, but generally speaking it’s common for the Fixlet relevance to become false after running the patch even when a reboot is still required. Note that the action won’t say ‘completed’ or ‘fixed’ until the issue is fully resolved, including a reboot. However, the Fixlet is no longer relevant before reboot because it doesn’t need to be applied again, even though a reboot may be required to complete the process.