• jeremy 60599 (9/11/2013)


    From my perspective, keeping ahead of the patch-cycle has more benefits than just security. It also prevents developers from hard-coding exploits of bugs into their procs/functions/SQL-CLR code.

    That's a useful advantage of staying up to date. However, my experience has been that it's not a big advantage. Most exploitable bugs don't get fixed until a release and a few service packs have followed, so the developers have plenty of time to build them into their code and forget that they will need to change it. That's not just on Microsoft systems, either.

    Tom