Security Update – MS09-062


Normally, two releases of a SQL security update are released:

  • GDR (General Distribution Release)
  • QFE (Quick Fix Engineering)

The GDR release must be applied to all the SQL Server instances that keeps the RTM build or for the cases where only a Service Pack was installed.

The QFE release must be applied for the remaining cases. This means that the QFE version needs to be applied on the cases where a hotfix (generic SQL hotfix or a cumulative update) or a previous security update were installed after the initial installation (RTM) or after a Service Pack installation.

You can find all the information about the MS09-062 security update following this link:

Microsoft Security Bulletin MS09-062 - Critical


This security update must be applied also on the cases where you have the Reporting Services role installed on a different machine from where you have the Database Engine role installed:

Reporting Services and the MS09-062 GDR (GDI+)

The same is true for the cases you’ve the Visual Studio 2005/2008 installed to create/update a report or a Integration Services package on a different machine:

GDI+ Updated