1 of 1 people found this helpful
If you scan the system with Protect does it show as missing? This would be the easiest way to check.
What happens, if you scan a nice shiny SQL server with the latest Service Pack (ie GDR) and None of the CUs. Shavlik offers you both patches GDR & QFE, Both will install, although if you install QFE you are changing your shiny installation to one with CUs.
If you have a SQL server with CUs installed, it correctly offers you only the QFE version of the security patch.
Here's some updated information about this from our patch content team:
When scanning for MS12-070, Protect will detect both the QFE and GDR branches of the patch as missing for the SQL instance regardless of what the branch is for SQL. Therefore two instances of MS12-070 can show as missing, the only difference is the Qnumber. This is on purpose as Protect currently has issues with detecting the correct Branch of the SQL instance. As a workaround Protect will detect and push both patch branches to the target machine. Ideally the vendor logic of the patch should allow only the correct branch of the patch to install while the other will fail.
This works 90% of the time but there are occasions where the incorrect branch patch will install. This is due to a vendor related logic issue which we have addressed with Microsoft. The vendor has not responded to our case and we have no update on the issue from them. The only workaround would be to uninstall all versions of MS12-070, and then attempt to install each version of the patch until you see a successful install.
The good news is we are actively working on a better method to distinguish between QFE and GDR and hope to have something in place in the near future.
I hope that help give you some better information around this!