Archive

Archive for the ‘Patches’ Category

SQL Server 2005 Service Pack 3

Microsoft Finally Releases SQL Server 2005 Service Pack 3

Finally…

As promised, Microsoft has released Service Pack 3 for SQL Server 2005 before the end of the 2008.

The list of bugs that are fixed in SQL Server 2005 Service Pack 3 is available in KB955706.

Otherwise, you can download SQL Server 2005 Service Pack 3 at the Microsoft Download Center, located here.

The service pack can only be used to patch the following SQL Server 2005 Editions:

  • Enterprise
  • Enterprise Evaluation
  • Developer
  • Standard
  • Workgroup

To patch the SQL Server 2005 Express Edition family you’ll need to download the appropriate version located at http://www.microsoft.com/express/2005/sql/download/default.aspx.

Categories: Patches

SQL Server 2008 CU 1

Microsoft Released SQL Server 2008 Service Pack 2 Cumulative Update 1

Finally…

SQL Server 2008 Cumulative Update 9 (CU1) is available from Microsoft Help and Support (KB956717).

There are a couple of important fixes included, in particular:

  • FIX: When you query through a view that uses the ORDER BY clause in SQL Server 2008, the result is still returned in random order. (KB926292)
  • FIX: A MERGE statement may not enforce a foreign key constraint when the statement updates a unique key column that is not part of a clustering key and there is a single row as the update source in SQL Server 2008. (KB956718)
  • FIX: In SQL Server 2008, a query returns incorrect results for the DATE data type when you run the query on a partitioned table that uses data compression on only one of the partitions (KB957810)

Since SQL Server 2008 was released to manufacture, Microsoft has released 1 Cumulative Update, fixing around 80 bugs:

 

Cumulative Update Date Bugs Fixed
RTM CU1 26-Sep-2008 78

The Cumulative Updates reflect Microsoft’s new Incremental Servicing Model for SQL Server, which aims to release the latest updates for SQL Server using a regular schedule (every 8 weeks).

Otherwise, I maintain an Excel 2007 spreadsheet that contains a list of all bug fixes for analysis:

http://cid-a65be80360df3915.skydrive.live.com/embedrowdetail.aspx/Resources/SQLServer2008.CumulativeUpdates.xlsx

Categories: Patches

SQL Server 2008 MERGE Hotfix

SQL Server 2008 Critical-on-Demand Hotfix 1750

SQL Server 2008 has seen the release of it’s first hotfix. It relates to the usage of the MERGE statement in the case where the target column of the update has a nonclustered unique index.
 
Microsoft "recommend(s) that you apply this hotfix if you use the MERGE statement to update columns that have nonclustered unique indexes that are referenced by foreign key constraints".
 
 
 
Categories: Patches

SQL Server 2005 Service Pack 2 CU 9

Microsoft Released SQL Server 2005 Service Pack 2 Cumulative Update 9

SQL Server 2005 Service Pack 2 Cumulative Update 9 (CU9) is available from Microsoft Help and Support.

Since SQL Server 2005 Service Pack 2 Microsoft has released 9 Cumulative Updates, fixing over 580 bugs:

 

Cumulative Update

Date

Bugs Fixed

SP2

05-Mar-2007

152

CU1

03-Apr-2007

29

CU2

14-Jun-2007

81

CU3

11-Aug-2007

53

CU4

02-Oct-2007

53

CU5

09-Dec-2007

61

CU6

09-Feb-2008

38

CU7

10-Apr-2008

39

CU8

16-Jun-2008

44

CU9

19-Aug-2008

37
  

The Cumulative Updates reflect Microsoft’s new Incremental Servicing Model for SQL Server, which aims to release the latest updates for SQL Server using a regular schedule (every 8 weeks).

Otherwise, I maintain an Excel 2007 spreadsheet that contains a list of all bug fixes for analysis:

http://cid-a65be80360df3915.skydrive.live.com/embedrowdetail.aspx/Resources/SQLServer2005.CumulativeUpdates.xlsx

Categories: Patches

MS08-040 Update

SQL Server Service Pack 2 CU7 (and CU8) Includes the Security Patch

If Cumulative Update 7 (CU7) or Cumulative Update 8 (CU8) has been installed for SQL Server 2005 Service Pack 2 (SP2) then there is no need to apply the patch.

The build for the patch is 9.00.3233.

Since the build for CU7 is 9.00.3239 and cumulative updates are cumulative, both CU7 and CU8 include this security patch.

Categories: Patches

Microsoft Releases Critical Fix for SQL Server 7.0-2005

MS08-040: Vulnerabilities in Microsoft SQL Server could allow elevation of privilege

Microsoft released a SQL security update today to address four vulnerabilities found in almost all versions of SQL Server including SQL Server 7.0, SQL Server 2000, SQL Server 2005, and the “Windows Internal” database on Windows Server 2003 and Windows Server 2008.

The more serious of the vulnerabilities could allow an attacker to run code and to take complete control of an affected system. An authenticated attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

This release is considered important and should be applied.

The vulnerabilities can be somewhat mitigated if the SQL service is not running as LocalSystem, or Local Adminstrator privileges.

The vulnerabilities are:

  • Memory Page Reuse Vulnerability (CVE-2008-0085)
  • Convert Buffer Overrun (CVE-2008-0086)
  • SQL Server Memory Corruption Vulnerability (CVE-2008-0107)
  • SQL Server Buffer Overrun Vulnerability (CVE-2008-0106)

The following TechNet article has more information about the vulnerabilities:

htttp://www.microsoft.com/technet/security/bulletin/MS08-040.mspx

The following KB article has more information about the patch:

http://support.microsoft.com/kb/941203

Categories: Patches

SQL Server 2005 Service Pack 2 CU 8

Microsoft Released SQL Server 2005 Service Pack 2 Cumulative Update 8

SQL Server 2005 Service Pack 2 Cumulative Update 8 (CU8) is available from Microsoft Help and Support.

Since SQL Server 2005 Service Pack 2 Microsoft has released 8 Cumulative Updates, fixing over 550 bugs:

 

Cumulative Update

Date

Bugs Fixed

SP2

05-Mar-2007

152

CU1

03-Apr-2007

29

CU2

14-Jun-2007

81

CU3

11-Aug-2007

53

CU4

02-Oct-2007

53

CU5

09-Dec-2007

61

CU6

09-Feb-2008

38

CU7

10-Apr-2008

39

CU8

16-Jun-2008

44

The Cumulative Updates reflect Microsoft’s new Incremental Servicing Model for SQL Server, which aims to release the latest updates for SQL Server using a regular schedule (every 8 weeks).

Otherwise, I maintain an Excel 2007 spreadsheet that contains a list of all bug fixes for analysis:

http://cid-a65be80360df3915.skydrive.live.com/embedrowdetail.aspx/Resources/SQLServer2005.CumulativeUpdates.xlsx

Categories: Patches