Cumulative Updates and Security Patches

  • Hello Folks

    I have a requirement to apply the latest patches to our SQL Server environments, from SQL Server 2000 to SQL Server 2014. I have a doubt regarding SQL Server 2005, the latest service pack is SP4, followed by CU3, but there are also several fixes and security patches after CU3, my question is, do I need to install SP4, then CU3 and finally the latest fix/security patch? or just SP4 and then latest fix/ security patch? :doze:

    Thank you for your help!

  • Generally, only applu CUs if you have encountered the issue it resolves, and that is certainly the case for hotfixes.

    So you have two valid choices,

    a) apply SP4 followed by the GDR version of MS12-070

    OR

    b) apply SP4, followed by CU3, then the QFE version of MS12-070

    https://technet.microsoft.com/en-us/library/security/ms12-070.aspx

    it depends on your shops viewpoint on applying CUs

    ---------------------------------------------------------------------

  • Whatever you do, please make sure you apply them in a test environment before installing anything in production.

    The SPs and CUs are not immune from problems. Who can forget the SQL 2000 SP3 and SQL 2014 SP1?

    I once had a SQL 2005 SP4 installation fail. Thanks goodness it was in a test environment.

  • Ed Wagner (12/21/2015)


    Whatever you do, please make sure you apply them in a test environment before installing anything in production.

    The SPs and CUs are not immune from problems. Who can forget the SQL 2000 SP3 and SQL 2014 SP1?

    I once had a SQL 2005 SP4 installation fail. Thanks goodness it was in a test environment.

    Thanks for the advice, actually Infrastructure team will make snapshots of the servers before applying the patches in case something fails.

  • hiram.osiris (12/21/2015)


    Ed Wagner (12/21/2015)


    Whatever you do, please make sure you apply them in a test environment before installing anything in production.

    The SPs and CUs are not immune from problems. Who can forget the SQL 2000 SP3 and SQL 2014 SP1?

    I once had a SQL 2005 SP4 installation fail. Thanks goodness it was in a test environment.

    Thanks for the advice, actually Infrastructure team will make snapshots of the servers before applying the patches in case something fails.

    Also, make sure you have a complete and viable set of full database backups before you begin. Your goal should be to recreate your environment if you need to because of disaster. I know it probably sounds like a lot of work, but it beats downtime in production.

  • hiram.osiris (12/21/2015)


    Hello Folks

    I have a requirement to apply the latest patches to our SQL Server environments, from SQL Server 2000 to SQL Server 2014. I have a doubt regarding SQL Server 2005, the latest service pack is SP4, followed by CU3, but there are also several fixes and security patches after CU3, my question is, do I need to install SP4, then CU3 and finally the latest fix/security patch? or just SP4 and then latest fix/ security patch? :doze:

    Thank you for your help!

    To be honest, there's absolutely no way that I'd install SP4 on 2000 unless you've tested a whole lot to make sure that it's not going to break anything. A lot of folks had to scurry after that one because that's when MS made a whole lot of security changes. While those security changes are certainly worthwhile, you don't want to upgrade and wind up dead in the water. TEST FIRST! Then upgrade once you've shaken the blanket out.

    --Jeff Moden


    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.
    "Change is inevitable... change for the better is not".

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)
    Intro to Tally Tables and Functions

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply