Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Security patch for Unity server - MS08-067

Microsoft just issued this alert:

Microsoft Security Bulletin MS08-067 - Critical

Vulnerability in Server Service Could Allow Remote Code Execution (958644)

Published: October 23, 2008

According to Cisco the Unity updates wizard is updated on the 2nd Tuesday of each month. Do I have to wait unitl Nov. 11th to get this update or is their a way to get it (a Cisco approved update) sooner??

3 REPLIES
Hall of Fame Super Red

Re: Security patch for Unity server - MS08-067

New Member

Re: Security patch for Unity server - MS08-067

That forum points to the doc that states : "Note: This document does not support Cisco Unity or servers where Cisco Unity is installed." I've got calls into our Cisco Sales Engineers and TAC and no one has been able to yes or no to MS08-067 on Unity.

I have done a little comparison on Microsoft updates on Call Managers vs Microsoft updates on Unity Servers, and it seems that there is a few that are approved for Call Managers that are not for Unity, in the past. Can someone confirm this?

Re: Security patch for Unity server - MS08-067

Hi all -

From the supported policy - "Support Policy for Microsoft Service Packs and Updates

Microsoft provides monthly updates for Windows, Exchange, SQL Server, MSDE, Internet Explorer, and IIS. These updates (known by a variety of names, including security rollup patches, security updates, critical updates, patches, and hot fixes) are limited to changes that fix specific problems. They do not include general defect fixes or new functionality. All of these Microsoft updates are qualified by Cisco from the day that Microsoft releases them. We recommend that you evaluate Microsoft updates in accordance with your server-software-maintenance policy to determine when to update the Cisco Unity server. If your company does not have a policy, we recommend that Microsoft updates be applied to the server as they are released. Cisco TAC provides support for a Cisco Unity system on which such updates have been installed." Link is here - http://www.cisco.com/en/US/docs/voice_ip_comm/unity/7x/support/7xcusupp.html#wp525581

As always, if you have a test lab or environment is which Unity is a server, I definitely recommend testing first.

Ginger

151
Views
4
Helpful
3
Replies