SQL Server 2008 R2, which build includes security update MS12-027?

Question

My servers are currently at SQL Server 2008 R2 SP1 CU3 (10.50.2789).  I would like to update my servers to at least SP2.  More importantly, I'd like to ensure whatever build I update to includes the cricitical security update MS12-027.  Does 2008 R2 SP2 include the security update MS12-027?  I suspect it doesn't since the documentation says it includes SP1 CU1-CU5, and CU5 was released Feb. 20, 2012,  while MS12-027 was released April 10, 2012.  If it doesn't, does SP2 CU1 include security-update MS12-027?  If not, does SP2 CU2?  or SP2 CU3?  How do I find this out??  I don't see anything in the KB articles for the SP2 Cumulative Updates about including the MS12-027 security update?

Any feedback appreciated.

Thanks!

Answer 1

Hello,

The MS12-027 is a fix for an Office component that SQL Server setup installs. It has an impact on SQL Server tools and does not affect the database engine. It should be applied to any SQL Server 2005, 2008 and 2008 R2, but I cannot see it listed as part of any CU or SP. Windows Update should allow you to apply it.

Before applying it, please see the following:

http://social.msdn.microsoft.com/Forums/en-US/sqlsetupandupgrade/thread/7812db28-9553-4cc2-972e-fe1afc3ad570  

Hope this helps.

Regards,

Alberto Morillo
SQLCoffee.com

Answer 2

Hi

you'd want to use MS12-060 as it replaces MS12-027.

This patch is not included in SQL Server 2008 R2 SP2 or other CUs at this stage afaik.