SQL Server 2005 Service Pack 3

Microsoft Finally Releases SQL Server 2005 Service Pack 3

Finally…

As promised, Microsoft has released Service Pack 3 for SQL Server 2005 before the end of the 2008.

The list of bugs that are fixed in SQL Server 2005 Service Pack 3 is available in KB955706.

Otherwise, you can download SQL Server 2005 Service Pack 3 at the Microsoft Download Center, located here.

The service pack can only be used to patch the following SQL Server 2005 Editions:

• Enterprise
• Enterprise Evaluation
• Developer
• Standard
• Workgroup

To patch the SQL Server 2005 Express Edition family you’ll need to download the appropriate version located at http://www.microsoft.com/express/2005/sql/download/default.aspx.

SQL Server 2008 CU 1

Microsoft Released SQL Server 2008 Service Pack 2 Cumulative Update 1

Finally…

SQL Server 2008 Cumulative Update 9 (CU1) is available from Microsoft Help and Support (KB956717).

There are a couple of important fixes included, in particular:

• FIX: When you query through a view that uses the ORDER BY clause in SQL Server 2008, the result is still returned in random order. (KB926292)
• FIX: A MERGE statement may not enforce a foreign key constraint when the statement updates a unique key column that is not part of a clustering key and there is a single row as the update source in SQL Server 2008. (KB956718)
• FIX: In SQL Server 2008, a query returns incorrect results for the DATE data type when you run the query on a partitioned table that uses data compression on only one of the partitions (KB957810)

Since SQL Server 2008 was released to manufacture, Microsoft has released 1 Cumulative Update, fixing around 80 bugs:

 

Cumulative Update	Date	Bugs Fixed
RTM CU1	26-Sep-2008	78

The Cumulative Updates reflect Microsoft’s new Incremental Servicing Model for SQL Server, which aims to release the latest updates for SQL Server using a regular schedule (every 8 weeks).

Otherwise, I maintain an Excel 2007 spreadsheet that contains a list of all bug fixes for analysis:

http://cid-a65be80360df3915.skydrive.live.com/embedrowdetail.aspx/Resources/SQLServer2008.CumulativeUpdates.xlsx

SQL Server 2008 MERGE Hotfix

SQL Server 2008 Critical-on-Demand Hotfix 1750

SQL Server 2008 has seen the release of it’s first hotfix. It relates to the usage of the MERGE statement in the case where the target column of the update has a nonclustered unique index.

 

Microsoft "recommend(s) that you apply this hotfix if you use the MERGE statement to update columns that have nonclustered unique indexes that are referenced by foreign key constraints".

 

For more information: http://support.microsoft.com/kb/956718

 

 

SQL Server 2005 Service Pack 2 CU 9

Microsoft Released SQL Server 2005 Service Pack 2 Cumulative Update 9

SQL Server 2005 Service Pack 2 Cumulative Update 9 (CU9) is available from Microsoft Help and Support.

Since SQL Server 2005 Service Pack 2 Microsoft has released 9 Cumulative Updates, fixing over 580 bugs:

 

Cumulative Update	Date	Bugs Fixed
SP2	05-Mar-2007	152
CU1	03-Apr-2007	29
CU2	14-Jun-2007	81
CU3	11-Aug-2007	53
CU4	02-Oct-2007	53
CU5	09-Dec-2007	61
CU6	09-Feb-2008	38
CU7	10-Apr-2008	39
CU8	16-Jun-2008	44
CU9	19-Aug-2008	37

  

The Cumulative Updates reflect Microsoft’s new Incremental Servicing Model for SQL Server, which aims to release the latest updates for SQL Server using a regular schedule (every 8 weeks).

Otherwise, I maintain an Excel 2007 spreadsheet that contains a list of all bug fixes for analysis:

http://cid-a65be80360df3915.skydrive.live.com/embedrowdetail.aspx/Resources/SQLServer2005.CumulativeUpdates.xlsx

MS08-040 Update

SQL Server Service Pack 2 CU7 (and CU8) Includes the Security Patch

If Cumulative Update 7 (CU7) or Cumulative Update 8 (CU8) has been installed for SQL Server 2005 Service Pack 2 (SP2) then there is no need to apply the patch.

The build for the patch is 9.00.3233.

Since the build for CU7 is 9.00.3239 and cumulative updates are cumulative, both CU7 and CU8 include this security patch.

Microsoft Releases Critical Fix for SQL Server 7.0-2005

MS08-040: Vulnerabilities in Microsoft SQL Server could allow elevation of privilege

Microsoft released a SQL security update today to address four vulnerabilities found in almost all versions of SQL Server including SQL Server 7.0, SQL Server 2000, SQL Server 2005, and the “Windows Internal” database on Windows Server 2003 and Windows Server 2008.

The more serious of the vulnerabilities could allow an attacker to run code and to take complete control of an affected system. An authenticated attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

This release is considered important and should be applied.

The vulnerabilities can be somewhat mitigated if the SQL service is not running as LocalSystem, or Local Adminstrator privileges.

The vulnerabilities are:

• Memory Page Reuse Vulnerability (CVE-2008-0085)
• Convert Buffer Overrun (CVE-2008-0086)
• SQL Server Memory Corruption Vulnerability (CVE-2008-0107)
• SQL Server Buffer Overrun Vulnerability (CVE-2008-0106)

The following TechNet article has more information about the vulnerabilities:

htttp://www.microsoft.com/technet/security/bulletin/MS08-040.mspx

The following KB article has more information about the patch:

http://support.microsoft.com/kb/941203

SQL Server 2005 Service Pack 2 CU 8

Microsoft Released SQL Server 2005 Service Pack 2 Cumulative Update 8

SQL Server 2005 Service Pack 2 Cumulative Update 8 (CU8) is available from Microsoft Help and Support.

Since SQL Server 2005 Service Pack 2 Microsoft has released 8 Cumulative Updates, fixing over 550 bugs:

 

Cumulative Update	Date	Bugs Fixed
SP2	05-Mar-2007	152
CU1	03-Apr-2007	29
CU2	14-Jun-2007	81
CU3	11-Aug-2007	53
CU4	02-Oct-2007	53
CU5	09-Dec-2007	61
CU6	09-Feb-2008	38
CU7	10-Apr-2008	39
CU8	16-Jun-2008	44

The Cumulative Updates reflect Microsoft’s new Incremental Servicing Model for SQL Server, which aims to release the latest updates for SQL Server using a regular schedule (every 8 weeks).

Otherwise, I maintain an Excel 2007 spreadsheet that contains a list of all bug fixes for analysis:

http://cid-a65be80360df3915.skydrive.live.com/embedrowdetail.aspx/Resources/SQLServer2005.CumulativeUpdates.xlsx

SQL Server 2005 Service Pack 3

Microsoft Committed to Release Service Pack 3

Microsoft has committed to release SQL Server 2005 Service Pack 3 (SP3). Finally…

Microsoft plans to deliver SP3 following the release to manufacturing of SQL Server 2008. Microsoft has stated that their "goal is to get SP3 released in the market in CY2008".

Meanwhile Microsoft will still be releasing Cumulative Updates (CU) as part of their Incremental Servicing Model for SQL Server. The next Cumulative Update for SQL Server 2005 Service Pack 2 will be CU8.

SQL Server 2005 Service Pack 2 CU 7

Microsoft Released SQL Server 2005 Service Pack 2 Cumulative update 7

SQL Server 2005 Service Pack 2 Cumulative Update 7 (CU7) is available from Microsoft Help and Support.

Since SQL Server 2005 Service Pack 2 Microsoft has released 7 Cumulative Updates, fixing over 350 bugs:

 

Cumulative Update	Date	Bugs Fixed
SP2	05-Mar-2007	152
CU1	03-Apr-2007	29
CU2	14-Jun-2007	81
CU3	11-Aug-2007	53
CU4	02-Oct-2007	53
CU5	09-Dec-2007	61
CU6	09-Feb-2008	38
CU7	10-Apr-2008	39

The Cumulative Updates reflect Microsoft’s new Incremental Servicing Model for SQL Server, which aims to release the latest updates for SQL Server using a regular schedule (every 8 weeks).

SQL Server 2005 SP2 Cumulative Update 5

Cumulative Update Package 5 for SQL Server 2005 Service Pack 2

Microsoft has announced cumulative update package 5 for SQL Server 2005 Service Pack 2. It "will be released in the December 2007 timeframe".

http://support.microsoft.com/kb/943656