SQL Security Update Confusion

  • I've been reviewing the update levels of our SQL servers using this page as a reference:

    https://support.microsoft.com/en-us/kb/321185

    I see that the latest updates for SQL 2008 & 2008 R2 are not SPs or cumulative updates but Security updates. These are either GDRs (General Distribution Release) or QFEs (Quick Fix Engineering). Both will increase the build number of your installation, but they aren't part of the regular CU sequence. How to bring a system up-to-date seems confusing, but this is what I have gathered. Is all this correct?

    Once you install a Service Pack, you don't need a security GDR or QFI with a lower build number.

    GDRs contain only security fixes, while QFEs contain all fixes since the last Service Pack. If you only want CUs through a level less than current, install the SP, the CU and the GDR. If you want to have the latest, install the latest SP, then the QFI, since it contains all previous CUs.

    Once you install a QFE, you can't install a GDR. You can only install later QFEs (until the next SP).

    Do I have this right?

Viewing 0 posts

You must be logged in to reply to this topic. Login to reply