
<p>Tuesday's release of the Exchange 2010 Service Pack 2 (SP2) Update Rollup 5 v2 was met with a chorus of grumblings.</p><p>IT pros are unhappy with past back-and-forth fixes associated with Microsoft's update rollup releases, judging from the skeptical comments that follow from Microsoft's notification in an Exchange team blog post. The complaints go back to July of 2011, when there was a problem with Update Rollup 4 for Exchange 2010 SP1 that didn't get fixed with a subsequent update release.</p><p>Security Patches and Update RollupsOne point of contention this time is Microsoft's inclusion of a security fix in the update rollup. In addition to a number of functionality fixes in Update Rollup 5 v2 for Exchange 2010 SP2, Microsoft included a security fix that's described by Knowledge Base article "MS12-80." That security bulletin also was included in Microsoft's December security update, which was released on Tuesday.</p><p>"I for one find the product team's decision to fix security vulnerabilities only in Update Rollups completely unacceptable and at odds with many other products in the Microsoft product line," wrote blog reader "Paul Bendall" in the Exchange team blog's comments section. "A security vulnerability should be addressed by a small hotfix that addresses the vulnerability rather than part of a much wider rollup which includes additional functionality and a much broader change to the code base. For those in corporate environments, testing a large rollup is at odds with security patching."</p><p><a href="http://rcpmag.com/articles/2012/12/13/exchange-2010-sp2-update-rollup.aspx">Keep reading...</a></p>