Security Advisor
Microsoft Patch Woes Continue: Lync Security Update Pulled
The pulled item marks the third month in a row in which Microsoft has had to address issues with its monthly security update.
It took one week for Microsoft to finally address an issue with one of its September bulletin items, originally released Sept. 9.
Microsoft yesterday quietly pulled security update 2982385, which related to Bulletin MS14-055, an "important" update for Microsoft Lync. According to the updated bulletin, users were experiencing issues when applying the fix for Microsoft Lync Server 2010.
"Microsoft revised this bulletin to address a known issue that prevented users from successfully installing security update 2982385 for Microsoft Lync Server 2010," wrote Microsoft. "Microsoft is investigating behavior associated with the installation of this update, and will update this bulletin when more information becomes available. As an added precaution, Microsoft has removed the download links to the 2982385 security update."
This marks the third month in a row in which Microsoft has had problems with its security update release. "Not a good trend: MS pulls its September Lync Server 2010 security update from the latest Patch Tuesday bunch," tweeted Redmond columnist and veteran Microsoft reporter Mary Jo Foley earlier today.
In fact, Microsoft's patch woes have also extended past its security items. Last week Microsoft pulled a non-security update for OneDrive due to a file sync problem.
The recent string of flawed updates has many in IT rethinking their approach when it comes to Microsoft's monthly security update. In a story posted last month about the August patch issues, one reader commented that rushing to install the updates as soon as released may not be the best approach. "Probably a good idea to wait a week before deploying any MS patches because of occasional issues like this," wrote reader Adam Akers." Let the dust settle before putting your systems at risk."