MS16-136 Update & recommended patch order for SQL Server 2014 SP2 onwards?

• Relinq

  Valued Member

  Points: 53

  More actions

  August 7, 2018 at 8:20 am

  #414833

  Hello Team,

  We currently have several SQL Instances where the current version in use is SQL Server 2014 SP1 CU1
  (yeah they're horribly old, hence my push to get these patched ASAP)

  My plan has been to roll out SP2, followed by --> CU1 through to CU12, (ideally via script somehow).
  However after checking the builds blogspot I noticed there is also CU/GDR Vulnerability Update: MS16-136, before CU1.

  So my question is, Is it recommended\required to install this separately as well?, or has it already been included within one of the newer CU's?
  (I read somewhere that is was included within a newer CU - but I have yet to find any evidence of that)

  Any insight would be much appreciated. Thanks.
  Ian.
  

• Grant Fritchey

  SSC Guru

  Points: 399340

  More actions

  August 8, 2018 at 6:58 am

  #2000784

  The Cumulative Updates are cumulative. So you only need to install the SP2 and the latest CU.

  "The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
  - Theodore Roosevelt

  Author of:
  SQL Server Execution Plans
  SQL Server Query Performance Tuning