THE OFFICIAL BLOG OF THE SBS "DIVA"

Redmond | News: Microsoft's DNS Fix Leads to More Problems:
http://redmondmag.com/news/article.asp?editorialsid=10070

"Tyler Reguly, a security engineer for San Francisco-based nCircle, commented that Microsoft should be more transparent about issues like those outlined in the SBS services blog. Such descriptions went relatively under the radar, and could be considered highly technical, bordering on vague.

"It may take users quite a while to diagnose the problem and then they have to find this specific blog post," he said. "Microsoft should really be doing more to make people aware of the issue. The impact isn't as great as the recent WSUS issue, but this should be handled in the same way that was. It should be given its own KB number and a security advisory should be released, especially given that IPsec is potentially affected."

Security advisories are for security events... exploits in the wild, something MSRC is investigating.. or in the case where WSUS servers were not properly deploying patches, where servers may not properly protect for security issues.

Issues with security patches are ALWAYS typically documented in the "known issues" section.

http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx

When you follow that link to KB953230 at this time ..there honestly isn't a lot of detailed help to specifically to the issue documented in the SBS blog.  It vaguely refers to it, but honestly not well enough.

Bottom line gang.. run a SBS box... watch that SBS Blog. 

http://blogs.technet.com/sbs