Microsoft Security Advisory (954474)

Purpose of Advisory: The purpose of this advisory is to inform customers of a non-security related issue that they may experience when attempting to install all updates using System Center Configuration Manager 2007 after the Microsoft security update release of June 10, 2008. This issue is limited to all supported versions of System Center Configuration Manager 2007 environments deploying updates to supported SMS 2003 clients.

This issue is not a security vulnerability in System Center Configuration Manager 2007. However, affected System Center Configuration Manager 2007 environments will be unable to deploy any updates to SMS 2003 clients.

Advisory Status: Microsoft Knowledge Base Article and associated update have been released to address this issue.

Recommendation: Review the referenced Knowledge Base Article and apply the appropriate update.

This advisory discusses the following software.

What is the scope of the advisory?
This advisory and the related Microsoft Knowledge Base Article provide additional information on this issue as first described in the SMS and MOM Blog.

How can I verify if my deployments are impacted by the issue described in this advisory?
System Center Configuration Manager 2007 administrators can identify this issue by reviewing the Wsyncmgr.log on the ConfigMgr 2007 site server for the following entries:

Is this a security vulnerability that requires Microsoft to issue a security update?
No. The inability to install updates from System Center Configuration Manager 2007 to SMS 2003 clients is not a security vulnerability. However, we have confirmed the issue and have released Microsoft Knowledge Base Article 954474 to correct the issue.

What versions of SMS are associated with this advisory?
This issue is limited to all supported versions of System Center Configuration Manager 2007 environments deploying updates to supported versions of SMS 2003 clients.

This is a security advisory about a non-security update. Isn’t that a contradiction?
Security advisories address security changes that may not require a security bulletin but may still affect customer’s overall security. Security advisories are a way for Microsoft to communicate security-related information to customers about issues that may not be classified as vulnerabilities and may not require a security bulletin, or about issues for which no security bulletin has been released. In this case, we are communicating the availability of an update that affects your ability to perform subsequent updates, including security updates. Therefore, this advisory does not address a specific security vulnerability; rather, it addresses your overall security.

Review the Microsoft Knowledge Base Article that is associated with this advisory

We encourage customers to install this update. Customers who are interested in learning more about this update should review Microsoft Knowledge Base Article 954474.