In the security advisories released on 10/09/2018, CVE-2010-3190 was updated to apply to Exchange Server. This bulletin now applies to all versions and cumulative updates for Exchange Server released...
Updated Jul 01, 2019
Version 2.0
Blog Post
2 MIN READ
MS11-025 required on Exchange Server versions released before October 2018
@CGL, I would recommend you apply the MS11-025 update, then deploy Cumulative Update 11 when it is released.
Hi Brent, thanks for getting back to me. Do you recommend to update from CU2 to CU8 or to CU10? How long until CU11 comes out? Do you have some steps that you might know on how to properly upgrade from Exchange 2016 CU2 to the latest CU release?
- @CGL, given your current condition, I recommend you install .NET 4.7.1 and then immediately upgrade to Cumulative Update 11. Exchange 2013 and later are written to allow in place upgrades from RTM or any cumulative update, to the latest cumulative update for the product version installed. As you can see on previous posts, there are specific releases where we advance the .NET requirement and announce support for a particular version of .NET. The .NET upgrades are highly compatible releases and should not cause you a problem "leapfrogging" from an older unsupported combination to the supported combination of Cumulative Update 11 and .NET 4.7.1.
We are planning to release Cumulative Update 11 within the next week.
- Can I simply upgrade .NET 4.7.1 then upgrade from CU2 to CU8? I could then install this patch or just upgrade from CU8 to CU11?