The Exchange Team announced yesterday it has released updates for all editions of Exchange currently under support.
As always, test these updates in a lab first!
It doesn’t have to be anything elaborate. In fact, I do a lot of testing from my own Windows 8.1 laptop where I have Hyper-V installed. Hyper-V comes included with Windows 8. It’s comparable to VMware Workstation in functionality (and I run 3 Exchange Servers from it)
Enough about labs! What are these updates and where can I get them?
The updates are as follows:
Exchange Server 2013 Cumulative Update 7
UM Language Packs for Cumulative Update 7
Exchange Server 2010 SP3 Update Rollup 8 (withdrawn due to a bug)
Exchange Server 2007 SP3 Update Rollup 15
So what’s new?
All these updates are a culmination of bug fixes, security patches, and minor feature tweaks. But the security patches it does include are big.
It includes fixes for MS14-075. This security bulletin identifies that an attacker could conceivably gain elevation of privileges in the Outlook Web App. Not good!
Standalone fixes for MS14-075 have also been released for Exchange 2013 SP1 and 2013 CU6.
[Read more…] about Exchange December 2014 Updates