[Security Bulletins] MS-062 updated to clarify ConfigMgr 2007 R2 and R3 ARE affected

Microsoft has released version 1.1 of the MS-062 Security Bulletin to make it clearer that ConfigMgr 2007 R2 and R3 ARE affected by this update as I reported in my blog post from yesterday. Here’s the excerpt from the amended FAQ (nothing else has changed) that clarifies things: “Does the vulnerability described in this bulletin affect System Center Configuration Manager 2007 R2 and R3 installations, and Systems Management Server 2003 R2 installations?  Yes. Systems running System Center Configuration Manager 2007 R2 or R3 are affected with the same severity rating as systems running System Center Configuration Manager 2007 Service Pack 2. Systems running Systems Management Server 2003 R2 are affected with the same severity rating as systems running Systems Management Server 2003 Service Pack 3. Customers should apply the appropriate security update package, KB2733631 or KB2721642, for their software. Note System Center Configuration Manager 2007 R2 can be installed on System Center Configuration Manager 2007 Service Pack 1. System Center Configuration Manager 2007 Service Pack 1 is past the end of its support life cycle. Customers need to be at System Center Configuration Manager 2007 Service Pack 2 for the KB2721642 update package to install. Note Systems Management Server 2003 R2 can be installed on Systems Management Server 2003 Service Pack 2. Systems Management Server 2003 Service Pack 2 is past the end of its support life cycle. Customers need to be at Systems Management Server 2003 Service Pack 3 for the KB2733631 update package to install. Which server roles require these updates? Do they need to be installed on Branch Distribution Points?  The KB2733631 update for Systems Management Server 2003 Service Pack 3 and the KB2721642 update for System Center Configuration Manager 2007 Service Pack 2 are server side updates and should be applied to all primary and secondary site servers. These updates do not apply to administrator consoles, clients, or to Branch Distribution Points (BDP).” Hope this clarifies things for everyone.