I've just read October's security bulletin advance notification, and sql server 2005 is listed under bulletin 13. So look forward for a patch next week. Note: 'SQL Server 2000 Reporting Services Service Pack 2' is also listed http://www.microsoft.com/technet/security/Bulletin/MS09-oct...