Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Hello,
Normally, two releases of a SQL security update are released:
- GDR (General Distribution Release)
- QFE (Quick Fix Engineering)
The GDR release must be applied to all the SQL Server instances that keeps the RTM build or for the cases where only a Service Pack was installed.
The QFE release must be applied for the remaining cases. This means that the QFE version needs to be applied on the cases where a hotfix (generic SQL hotfix or a cumulative update) or a previous security update were installed after the initial installation (RTM) or after a Service Pack installation.
You can find all the information about the MS09-062 security update following this link:
Microsoft Security Bulletin MS09-062 - Critical
https://www.microsoft.com/technet/security/bulletin/MS09-062.mspx
Note:
This security update must be applied also on the cases where you have the Reporting Services role installed on a different machine from where you have the Database Engine role installed:
Reporting Services and the MS09-062 GDR (GDI+)
https://blogs.msdn.com/psssql/archive/2009/10/15/reporting-services-and-the-ms09-062-gdr-gdi.aspx
The same is true for the cases you’ve the Visual Studio 2005/2008 installed to create/update a report or a Integration Services package on a different machine:
GDI+ Updated
https://blogs.msdn.com/brianhartman/archive/2009/10/13/gdi-updated-again.aspx
Cheers,