CU 4 for SQL Server 2008 R2 SP1; Update Rollup 6 for Exchange 2007 SP3; January 2012 Security Updates for XPe SP3 and Standard 2009; Dynamics SL SOD Released

Microsoft in the week ended January 29, released a few security updates:First, a Cumulative update package 4 build 10.50.2796.0 for SQL Server 2008 R2 Service Pack 1 -- release contains hotfixes for issues that were fixed after the release of SQL Server 2008 R2 SP1.Important notes about this cumulative update package:"SQL Server 2008 hotfixes are […]

Share online:

Windows Security UpdatesMicrosoft in the week ended January 29, released a few security updates:

First, a Cumulative update package 4 build 10.50.2796.0 for SQL Server 2008 R2 Service Pack 1 -- release contains hotfixes for issues that were fixed after the release of SQL Server 2008 R2 SP1.

Important notes about this cumulative update package:

"SQL Server 2008 hotfixes are now multilingual. Therefore, the cumulative update package is not specific to one language and applies to all supported languages.

One cumulative update package includes all the component packages. However, the cumulative update package updates only those components that are installed on the system," Microsoft stated in Knowledge base article KB2633146.

A supported cumulative update package is now available from Microsoft on request. However, it is intended to correct only the problems that are described in the table below:

VSTS bug number KB article number Description
834628 955850 (http://support.microsoft.com/kb/955850/ ) Error message when you try to use the binaries from the SQL Server System CLR Types package (SQLSysClrTypes.msi): "Unable to load DLL 'SqlServerSpatial.dll': This application has failed to start because the application configuration is incorrect"
765507 970198 (http://support.microsoft.com/kb/970198/ ) FIX: You receive an incorrect result when you run a query that uses the row_number function in SQL Server 2008 or in SQL Server 2008 R2
843693 2159286 (http://support.microsoft.com/kb/2159286/ ) FIX: The Remote Registry service crashes when an application tries to retrieve performance counter data from an instance of SQL Server on another computer
826730 2445812 (http://support.microsoft.com/kb/2445812/ ) FIX: A column that uses the DATETIME data type does not replicate to an Oracle subscriber by using a transactional replication in SQL Server 2008 or in SQL Server 2008 R2
783498 2510788 (http://support.microsoft.com/kb/2510788/ ) FIX: Success message is incorrectly logged when a distributed transaction of an SSIS 2005 package, of an SSIS 2008 package or of an SSIS 2008 R2 package is aborted
799308 2515286 (http://support.microsoft.com/kb/2515286/ ) FIX: "There is no function '{urn:schemas-microsoft-com:xml-sql}:variable()" error for an XQuery query that updates the value of an XML column in SQL Server 2005, in SQL Server 2008 or in SQL Server 2008 R2
818397 2550375 (http://support.microsoft.com/kb/2550375/ ) FIX: Deadlock might occur in sys.dm_database_encryption_keys DMV in SQL Server 2008 R2 when you run log shipping from many databases to one secondary server
738050 2562753 (http://support.microsoft.com/kb/2562753/ ) FIX: Slow performance when an MDX query uses unary operators on parent/child hierarchy members in SSAS 2008 R2 if you define a scope calculation on these members and if the query accesses multiple dates in a time dimension
818842 2567366 (http://support.microsoft.com/kb/2567366/ ) FIX: Slow performance when you restore a database in SQL Server 2008 R2 if CDC is enabled
818849 2580224 (http://support.microsoft.com/kb/2580224/ ) FIX: Incorrect results when you commit the Unpivot transformation to a SSIS package in SSIS 2008 or in SSIS 2008 R2
799296 2583994 (http://support.microsoft.com/kb/2583994/ ) FIX: SSIS Checkpoint restores an incorrect variable value for an Execute SQL Task item of a For Loop Container item in SSIS 2008 or in SSIS 2008 R2 if an SSIS package executes again after it fails or stops
818843 2588506 (http://support.microsoft.com/kb/2588506/ ) FIX: SQLGetDiagRec function does not return errors in SQL Server 2008 or in SQL Server 2008 R2 if more than 2100 query parameters are sent
799325 2588970 (http://support.microsoft.com/kb/2588970/ ) FIX: "Server: Msg 7359" error when you run a distributed query in SQL Server 2008 or in SQL Server 2008 R2 if a schema version is updated more than five times
799293 2591461 (http://support.microsoft.com/kb/2591461/ ) FIX: "Unexpected error from SE OLEDB interface" error when you run a full-text search query in SQL Server 2008 or in SQL Server 2008 R2
818848 2597229 (http://support.microsoft.com/kb/2597229/ ) FIX: Report Builder 3.0 stops responding if SSRS 2008 R2 uses forms authentication
799305 2598903 (http://support.microsoft.com/kb/2598903/ ) FIX: SQL Server Agent job randomly stops when you schedule the job to run past midnight on specific days in SQL Server 2005, in SQL Server 2008 or in SQL Server 2008 R2
829282 2603910 (http://support.microsoft.com/kb/2603910/ ) FIX: Backup fails in SQL Server 2008 or in SQL Server 2008 R2 if you enable change tracking on the database
799312 2606301 (http://support.microsoft.com/kb/2606301/ ) FIX: High memory usage when you run Replication Snapshot Agent in SQL Server 2008 or in SQL Server 2008 R2
791492 2606918 (http://support.microsoft.com/kb/2606918/ ) FIX: NULL value in the Retention column in sysmergepublications table and effects on the metadata cleanup process when you set up a merge replication environment in a republishing topology in SQL Server 2008 R2
818853 2616117 (http://support.microsoft.com/kb/2616117/ ) FIX: Incorrect mail profile is displayed in the Alert System page in SQL Server 2008 R2
798464 2616718 (http://support.microsoft.com/kb/2616718/ ) FIX: Poor performance when you synchronize the data from a SQL Server 2008 R2 publisher to a SQL Server compact 3.5 subscriber
834621 2618676 (http://support.microsoft.com/kb/2618676/ ) FIX: Transaction log backup is created even though the full backup is canceled in SQL Server 2008 or in SQL Server 2008 R2
834618 2618680 (http://support.microsoft.com/kb/2618680/ ) FIX: "Not registered correctly" error when you use a pull subscription and the Replication Interactive Conflict Resolver
805159 2620762 (http://support.microsoft.com/kb/2620762/ ) FIX: Acknowledgement messages are not sent by a SQL Server 2008 R2 Service Broker target
807413 2622668 (http://support.microsoft.com/kb/2622668/ ) FIX: Error message when you delete some records of a table at the publisher if the schema name of the table is not [dbo]
818851, 818852 2622823 (http://support.microsoft.com/kb/2622823/ ) FIX: ghost_record_count values keep increasing in SQL Server 2008 R2
809033 2624272 (http://support.microsoft.com/kb/2624272/ ) FIX: Error 9013 when you try to start the SQL Server services after you apply SQL Server 2008 R2 SP1 for SQL Server 2008 R2
818844 2624527 (http://support.microsoft.com/kb/2624527/ ) FIX: Clustered index is not used in the execution plan in SQL Server 2008 R2 if a query uses two or more partitions
812723 2626637 (http://support.microsoft.com/kb/2626637/ ) FIX: DRILLTHROUGH statement does not work if it is run against some attribute members whose values contain one or more double quotation marks in SSAS 2008 R2
834637 2628126 (http://support.microsoft.com/kb/2628126/ ) FIX: "Fulltext index error during compression or decompression" error when you create a full-text index in SQL Server 2008 or in SQL Server 2008 R2 if the primary key is set to a BIGINT column
815917 2628712 (http://support.microsoft.com/kb/2628712/ ) FIX: An infinite loop occurs in a hierarchy that contains a circular relationship in SQL Server 2008 R2
804578 2629168 (http://support.microsoft.com/kb/2629168/ ) FIX: Internal error when you update a cellset that is returned after you run a query against a perspective in SSAS 2008 R2
817160 2629456 (http://support.microsoft.com/kb/2629456/ ) FIX: Access violation when you insert a record into a new empty partition in SQL Server 2008 or in SQL Server 2008 R2
816667 2632021 (http://support.microsoft.com/kb/2632021/ ) FIX: A SSRS 2008 R2 report that has toggle items is not paginated
821110 2633271 (http://support.microsoft.com/kb/2633271/ ) FIX: SQL Server services cannot be stopped on a computer that has SQL Server 2008 R2 Express Edition installed
822390 2634571 (http://support.microsoft.com/kb/2634571/ ) Improvements for the DBCC CHECKDB command may result in faster performance when you use the PHYSICAL_ONLY option
834649 2635827 (http://support.microsoft.com/kb/2635827/ ) FIX: Access violation when you run a DBCC CHECKDB command against a database that contains a table that has a spatial index in SQL Server 2008 or in SQL Server 2008 R2
827315 2638216 (http://support.microsoft.com/kb/2638216/ ) FIX: Error message when you run a query that uses an MDX reserved keyword as a parameter name in SSAS 2008 R2
834640 2638448 (http://support.microsoft.com/kb/2638448/ ) FIX: Access violation when a query is compiled or recompiled in SQL Server 2008 or in SQL Server 2008 R2
828867 2639301 (http://support.microsoft.com/kb/2639301/ ) FIX: Error message when you review a SSRS 2008 R2 report that has a tablix data region if the region contains some chart or gauge or map items
831931 2641923 (http://support.microsoft.com/kb/2641923/ ) FIX: Incorrect custom color distribution when you use numeric values for the Start Value and the End Value of custom color distribution buckets in SSRS 2008 R2
832040 2641971 (http://support.microsoft.com/kb/2641971/ ) FIX: "Error: Data conversion failed" error when you use multiple characters as the column delimiter in Flat File Connection Manager in SSIS 2008 R2
834705 2643340 (http://support.microsoft.com/kb/2643340/ ) FIX: Action property does not work when you view an SSRS 2008 R2 report in Report Manager
836483 2644396 (http://support.microsoft.com/kb/2644396/ ) FIX: Merge replication changes are missing on a SQL Server Compact subscriber when they subscribe to a partition in SQL Server 2008 R2
835438 2645648 (http://support.microsoft.com/kb/2645648/ ) FIX: Export procedure fails when you export a 64-bit SSRS 2008 R2 report that contains multiple levels of document map to the PDF format
822171 2646224 (http://support.microsoft.com/kb/2646224/ ) FIX: Query plan is displayed as an XML document incorrectly when you set the SHOWPLAN_XML option to ON in SQL Server 2008 R2 SP1
842206 2647120 (http://support.microsoft.com/kb/2647120/ ) FIX: Incorrect page numbers are displayed when you export a SSRS 2008 R2 report into PDF format
844587 2648158 (http://support.microsoft.com/kb/2648158/ ) FIX: "The process could not execute" error message when you set a nonzero value in the MaxCmdsInTran parameter of the Log Reader Agent in SQL Server 2008 R2
845530 2649359 (http://support.microsoft.com/kb/2649359/ ) FIX: An access violation occurs in the "sqlservr!CSbMsgDispatcher::CSbReceivedDialog::AppendMsg" class in SQL Server 2008 R2
836497 2651629 (http://support.microsoft.com/kb/2651629/ ) FIX: Error message when you use DTA to tune one or more queries against a database that contains many objects in SQL Server 2008 R2
834224 2652582 (http://support.microsoft.com/kb/2652582/ ) FIX: "Invalid authorization specification" error message when you run the SQL Server 2008 R2 Analysis Services Deployment Wizard by using the SQL Server Authentication mode
837758 2653893 (http://support.microsoft.com/kb/2653893/ ) FIX: It takes a long time to restore a database in SQL Server 2008 R2
831388 2633151 (http://support.microsoft.com/kb/2633151/ ) The SQL Server database transaction log file does not grow by the configured file growth value

Microsoft's Exchange CXP team released an Update Rollup 6 for Exchange Server 2007 SP3 that contains a number of customer-reported and internally found issues since the release of RU5.

See KB 2608656: Description of Update Rollup 6 for Exchange Server 2007 Service Pack 3' for more details. The following fixes are included in this release:

  • DST Cadence Release for Dec 2011 - Exchange 2007
  • 22656040 An Exchange Server 2007 Client Access server may respond slowly or stop responding when users try to synchronize the Exchange ActiveSync devices with their mailboxes
  • 2498852 "0x80041606" error message when you perform a prefix search by using Outlook in online mode in an Exchange Server 2007 environment
  • 22653334 The reseed process is unsuccessful on the SCR passive node when the circular logging feature is enabled in an Exchange Server 2007 environment
  • 22617784 Journal reports are expired or lost when the Microsoft Exchange Transport service is restarted in an Exchange Server 2007 environment
  • 2289607 The week numbers displayed in OWA do not match the week numbers displayed in Outlook for English users and French users in an Exchange Server 2007 environment

For DST Changes: http://www.microsoft.com/time.

Note for Forefront Protection for Exchange users For those of you running Forefront Protection for Exchange, be sure you perform these important steps from the command line in the Forefront directory before and after this rollup's installation process, the team informed. "Without these steps, Exchange services for Information Store and Transport will not start after you apply this update," adding team said.

Before installing the update, disable ForeFront by using this command: fscutility /disable. After installing the update, re-enable ForeFront by running fscutility /enable.

Also, the January 2012 Security Updates for Windows Embedded Standard 2009 and/or Microsoft Windows XP Embedded with Service Pack 3 are now available and includes:

  • KB2656351 - Vulnerability in .NET Framework Could Allow Elevation of Privilege

The list below applies to XPE SP3 and Standard 2009:

  • KB2584146 - Vulnerability in Windows Could allow Remote Code Execution

  • KB2603381 - Vulnerability in Windows Object Packager Could Allow Remote Code Execution

  • KB2598479 - Vulnerabilities in Windows Media Could Allow Remote Code Execution

  • KB2631813 - Vulnerabilities in Windows Media Could Allow Remote Code Execution

  • KB2585542 - Vulnerability in SSL/TLS Could Allow Information Disclosure

  • KB2646524 - Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege

  • KB2656352 - Vulnerability in .NET Framework Could Allow Elevation of Privilege

  • KB2657424 - Vulnerability in .NET Framework Could Allow Elevation of Privilege

The new updates included in this download can be applied directly to runtime images. "The componentized versions of these update for updating the database will be included in next month's security update release. The database updates incorporate all security updates from prior months for the current year; therefore you do not need to install previous security database updates," informed Embedded team blog.

In other Microsoft news, Microsoft's Dynamics GP made available an updated Statement of Direction on Partnersource.