SQL 2008 R2 SP2 release to WSUS

Question

Hello,
With the recent release of SQL 2008 R2 SP2 I was curious as to when Microsoft will be pushing it out to WSUS services? I've already done some testing in our environment with a manual download of it, but I was hoping to release it to my production servers
for a upcoming maintenance night through the proper channels in WSUS. I haven't been able to find any further details on the average release to WSUS time-frame, so I was hoping someone here could shed some light on the matter.
Thanks in advance,

Answer 1

Hi everyone, here is the official word on this from Microsoft
Just finished the brainstorm with our security guys and did some internal search, please refer to below details.
Between June 21 2012 and August 14th 2012, the internal servers which sign Microsoft software were misconfigured, as a result the signatures on a significant number of internally and externally distributed software
by Microsoft will expire prematurely on 01/10/2013 .  The result of the signature expiration is that software binaries will be viewed as untrusted, causing them to be invalidated by Microsoft Update, fail installation, and/or detected by 3rd party security
software. This issue is not limited to Windows operating systems nor is it limited to Security Updates; it may have unexpected consequences across all products, as a full listing of affected products is still under investigation.  Depending on how the
different products were signed, there are several expiration “milestones” which will occur between November 2012 and summer 2013.
As a failsafe mitigation, Windows released a bulletin in October as  Microsoft Security Advisory (2749655)
http://technet.microsoft.com/en-us/security/advisory/2749655
This effectively catches the WinVerifyTrust API calls in the operating system and returns success to the calling program (e.g. SQL Server) if a specific faulty certificate is detected.
What SQL Server Products were affected: One of the SQL Server components that was affected was SQL Server 2008 R2 SP2 that was released in July. For this reason, SQL Server 2008 R2 SP2 was scheduled
to be released via WSUS in August but was put on hold when this issue surfaced. During the testing, Other than Untrusted Publisher errors when executing a small number of affected release packages, and CAPI2 Event Log errors on WinVerifyTrust calls, no ‘hard’
SQL Server installation or runtime failures have been identified. For this reason, we are not re-releasing SQL Server 2008 R2 SP2.
SQL Server 2008 R2 SP2 is not being released to Windows update because it is affected by the issue described in the
Microsoft Security Advisory (2749655)
http://technet.microsoft.com/en-us/security/advisory/2749655.
Users are required to get the update via download center.
SP2 is the only update that is affected by this issue and future updates will continue to be made available via WSUS.
In a word, honest speaking, this is a Microsoft product issue, and so I’m afraid manual installation would be the only choice. I will mark this case as non-decrement. Sincerely apologize for the inconvenience for
you.
Thanks, Michael.