A security bulletin for SQL Server has been released on 7/14/2015. This applies to SQL Server 2008, 2008 R2, 2012, and 2014 releases.

You can find the details in the SQL Server Release Services Blog.

Here is my details list for the versions this applies to:

• SQL Server 2008 SP3
• SQL Server 2008 SP4
• SQL Server 2008 R2 SP2
• SQL Server 2008 R2 SP3
• SQL Server 2012 SP1
• SQL Server 2012 SP2
• SQL Server 2014
• SQL Server 2014 SP1

The release applies to Express edition as well.

SQL Server 2005

There is an interesting note for users with SQL Server 2005:

You may be able to install this SQL Server 2008-based security update on a SQL Server 2005-based system on which SQL Server 2008 is not installed. In this scenario, the installation of this security update is not blocked. The security update installs SQL Server 2008 setup files on the system, and the following new program is added to the Add or Remove Programs item in Control Panel: Microsoft SQL Server 2008 Setup Support Files Also, the following new program is added to the Configuration tools list in the Microsoft SQL Server 2008 item on the Start menu:
SQL Server Installation center On these SQL Server 2005-based systems, you can safely uninstall the security update by using the Add or Remove Programs item or the Programs and Features item in Control Panel.