Microsoft this week rereleased three Exchange Server rollup updates to address a problem where digital signatures on certain files expire prematurely.
Microsoft-generated digital certificates in previous rollup updates did not have adequate timestamp attributes. If certificates with expiring timestamps sign rollup updates and binaries, it can cause installation problems down the road.
The three re-releases are as follows:
- Update rollup 4-v2 for Exchange Server 2010 Service Pack 2
- Update rollup 7-v2 for Exchange Server 2010 Service Pack 1
- Update rollup 8-v2 for Exchange Server 2007 Service Pack 3
Exchange admins needn't uninstall the original rollups prior to installing any of the three rereleases. Many Exchange admins apply updates as soon as they hear about them, but others have experienced
That might not be a good idea, because the expiration dates for the original rollups have not been reported, and running them after their certifications have expired can cause serious problems.
"Organizations who are quick to deploy updates may never be affected,” said Steve Goodman, Exchange MVP and technical architect for Phoenix IT group, based in the United Kingdom. "However, for many who only apply updates after testing, wait to hear about potential issues, or only update when there's a security flaw or critical fix, failing to act could bite them at a later date."
Outlook fix also included in rerelease
The Exchange team also took the opportunity to sneak another fix into Exchange 2010 Service Pack 2 Rollup 4. The fix resolves a problem where an email search in online mode in Outlook 2010 or Outlook 2013 only returns a single search result.
"It's interesting that [Microsoft] got this one in here," said Rob Sanfilippo, an analyst with Kirkland, Wash.-based Directions on Microsoft. "It must have been high-priority enough with customers that they wanted to get it in sooner than later."
All three rollup updates are available to download via the Microsoft Download Center.
Let us know what you think about the story; email site editor Matt Gervais.