News

News MS13-068: Security updates for Outlook 2007/2010

A security update has been released for both Outlook 2007 and Outlook 2010 to address a vulnerability which could allow remote code execution if a user opens or previews a specially crafted email message.

An attacker who successfully exploited this vulnerability could gain the same user rights as the local user.

The security update addresses the vulnerability by correcting the way that Microsoft Outlook 2007 and Outlook 2010 parse specially crafted S/MIME email messages.

View: More details and download information for KB2825999 (Outlook 2007)
View: More details and download information for KB2794707 (Outlook 2010)
View: Microsoft Security Bulletin MS13-068 – Critical

News Junk E-mail Filter updates for September 2013

New Junk E-mail Filter definitions have been made available for Outlook 2003, Outlook 2007, Outlook 2010 and Outlook 2013.

Download: Update for Microsoft Office Outlook 2003 Junk E-mail Filter (KB2825947)
Download: Update for Microsoft Office Outlook 2007 Junk E-mail Filter (KB2825641)
Download: Update for Microsoft Office Outlook 2010 Junk Email Filter (KB982726)
Download: Update for Microsoft Office Outlook 2013 Junk Email Filter (KB2760587)

If you have Microsoft Update configured to also update other Microsoft applications, then this update will also also be offered via Microsoft Update or has already been updated automatically for you.

News Security Updates v2 for Exchange 2013 CU1 and CU2

News Outlook 2010 Hotfix for August 2013

Hotfix KB2817574 for Outlook 2010
This hotfix contains11 fixes for specific issues and can be applied to either Outlook 2010 with SP1 or SP2. Most notable fixes are;

  • 4 fixes regarding various issues with Online Archive and Retention Policies.
  • Duplicate attachments may show for Sent Items when you use IMAP configured with “download header only”.
  • When you start Outlook 2010 on a computer and then try to set up a new account for the first time, it takes 3-5 minutes to populate your username or email address on the home screen.

View: More details and download information for KB2817574

Obtaining the hotfixes
This is a Hotfix and not a regular update. You can request it via its KB article page.

News Outlook 2013 Update for August 2013

An update has been released for Outlook 2013 and can be downloaded and installed manually, but is also being offered via Microsoft Update.

Update KB2817629 for Outlook 2013
This is a non-security update which has been released without a change log. However, it will fix the issue which got introduced in the July update where Outlook 2013 crashed when you try to select or open an encrypted message.

View: Download information for KB2817629

If you have Microsoft Update configured to also update other Microsoft applications, then this update will also also be offered via Microsoft Update or has already been updated automatically for you.

News Security and Rollups Updates for Exchange 2007, Exchange 2010 and Exchange 2013

Due to the MS13-061 security bulletin, all currently supported versions of Exchange got a Security Update or a Rollup Update which also includes the security update.

Update:
Due to an issue with the installer, the original updates for Exchange 2013 were pulled but are now available again as a v2 release.

If you had already applied the original release to Exchange 2013, there are additional steps which you must take to correct the issue.

The vulnerabilities exist in the WebReady Document Viewing and Data Loss Prevention features of Microsoft Exchange Server. The vulnerabilities could allow remote code execution in the security context of the transcoding service on the Exchange server if a user previews a specially crafted file using Outlook Web App (OWA).

The Rollup Updates also includes a few additional fixes, so make sure you review their corresponding KB article too before applying them.

View: MS13-061 security bulletin
View: Exchange Team Blog Post about these updates
Download: Update Rollup 11 for Exchange Server 2007 Service Pack 3 (KB2873746)
Download: Update Rollup 7 for Exchange Server 2010 Service Pack 2 (KB2874216)
Download: Update Rollup 2 For Exchange 2010 SP3 (KB2866475)
Download: Security Update v2 For Exchange Server 2013 CU1 (KB2874216)
Download: Security Update v2 For Exchange Server 2013 CU2 (KB2874216)

News Outlook 2007 Update for August 2013

An update has been released for Outlook 2007 and can be downloaded and installed manually, but is also being offered via Microsoft Update.

Update KB2768023 for Outlook 2007
This is a non-security update which solves the following issue:

Assume that you connect to some alternative mailboxes, such as auto-mapped mailboxes, modern public folders, and archive mailboxes, on an Outlook 2007 client that is connected to a domain. In this situation, Outlook 2007 only uses the external host name.

View: Download information for KB2768023

If you have Microsoft Update configured to also update other Microsoft applications, then this update will also also be offered via Microsoft Update or has already been updated automatically for you.

News Junk E-mail Filter updates for August 2013

New Junk E-mail Filter definitions have been made available for Outlook 2003, Outlook 2007 and Outlook 2013. Outlook 2010 skips this month.

Download: Update for Microsoft Office Outlook 2003 Junk E-mail Filter (KB2817666)
Download: Update for Microsoft Office Outlook 2007 Junk E-mail Filter (KB2817642)
Download: Update for Microsoft Office Outlook 2013 Junk E-mail Filter (KB2760587)

If you have Microsoft Update configured to also update other Microsoft applications, then this update will also also be offered via Microsoft Update or has already been updated automatically for you.

News Exchange 2013 CU2 v2

Cumulative Update 2 v2 for Exchange 2013 is now available for direct download.

The v2 release fixes an issue with got introduced with the original release of this update when you are in a native Exchange 2013 environment and are using Modern Public Folders. Upon moving a public folder mailbox, the permission structure on some public folders could be lost.

If you had not yet deployed the original release, then you can update your servers as normal. If you had already deployed it, then you need to update it via the command:
setup.exe /m:upgrade /IAcceptExchangeServerLicenseTerms

The new update model of Exchange 2013 not only brings you the regular fixes and improvements but also new features or major changes to existing ones.

For CU2, the highlights are as follows:

  • Per-server database support
  • OWA Redirection
  • High Availability
  • Managed Availability
  • Cmdlet Help
  • OWA Search Improvements
  • Malware Filter Rules

Download: Cumulative Update 2 v2 for Exchange Server 2013 (KB2859928)
View: Release Notes for Exchange 2013 CU2
View: Exchange Blog post about Exchange 2013 CU2
View: Exchange Blog post about Exchange 2013 CU2 Issue
View: Exchange Blog post about Exchange 2013 CU2 v2

News Office 2010 Service Pack 2 released

The second Service Pack for Office 2010 has been released just a little over two years after SP1.

You can install it by using the standalone installer listed below or via Microsoft Update when you have it configured to also check for Office Updates.

Update:
After applying SP2, Outlook 2010 may log multiple Warning events in the Event Viewer.
See: Event ID 27: Calendar property is missing or empty

For instructions about how to create an installation DVD containing Office 2010 with Service Pack 2 slipstreamed into it see: Slipstream Office 2010 setup with SP2

View: Description of Office 2010 SP2

Download: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Download: Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition
Download: Service Pack 2 for Language Pack 2010 (KB2687449) 32-Bit Edition
Download: Service Pack 2 for Language Pack 2010 (KB2687449) 64-Bit Edition
Download: Microsoft Office 2010 Service Pack 2 Changes (Excel sheet)
Download: Microsoft Service Pack Uninstall Tool for Microsoft Office 2010
Download: Office 2010 Policy Templates (SP2 release)
View: All other available Office 2010 SP2 packages